{"type": "bundle", "id": "bundle--05037cf0-8734-4535-8dbd-ac0ea66a4aa1", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--f33a4d31-afc3-433c-aa52-2fa537b0c74c", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--ef4ab111-9ecd-4b0e-8371-dd75699cdcb4", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--93f909f6-b212-4822-95da-7c9b87c61950", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e695d173-8761-46e2-ba97-3942ddc0e2c9", "relationship_type": "located-at", "source_ref": "infrastructure--93f909f6-b212-4822-95da-7c9b87c61950", "target_ref": "location--f33a4d31-afc3-433c-aa52-2fa537b0c74c", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--3d63327f-5f6e-4f68-83f6-0e685a7d912a", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c0179cd-6106-469b-bbc4-1f58fe96a983", "relationship_type": "located-at", "source_ref": "infrastructure--3d63327f-5f6e-4f68-83f6-0e685a7d912a", "target_ref": "location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--174d2695-bf12-48be-abe2-df908414c3a6", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--2e935f86-2f16-4087-957a-0568f2447c33", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5421aa3-1606-407d-a473-3edbc4e61c8c", "relationship_type": "located-at", "source_ref": "infrastructure--2e935f86-2f16-4087-957a-0568f2447c33", "target_ref": "location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--3559985c-d817-4b56-bfda-75f75dc1a791", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bac93886-298d-4075-b7e2-7e5887628bfc", "relationship_type": "located-at", "source_ref": "infrastructure--3559985c-d817-4b56-bfda-75f75dc1a791", "target_ref": "location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--21469e18-4bba-40be-9147-213a16600fc0", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738c8108-c03f-44d2-a40e-eb8fd820db8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.10.219.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85b5e9a-726d-40d1-85bf-8477d874e333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.168.220.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6b0943-ea8c-44df-bfff-2698e23e336c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.169.234.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b151f9ae-7cdf-47ed-a0f3-2ff9c077bfa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.193.63.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c685f27-9136-40d2-995c-dd1b66d7738e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.214.214.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fd9d17-1e1b-4677-867d-e0782733dc9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c55553-dc68-4061-a749-53e6274ddaa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6b10bc-c63a-41ff-9f62-ff8014f45779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.230.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6966254a-cba3-4aff-b687-ff0358297675", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.64.207.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8e699b-bea5-4af7-a0b0-0a3afe42e70e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8f1700-8562-4cb2-93d1-7d5cc98b5b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.85.217.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea30d690-7370-415c-bdff-a222a7c12950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.85.218.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc73ff72-38ed-476a-a8ae-066f3c2eda69", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.85.243.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d48e65-97ff-463d-91b5-a17851816217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d88254-aede-42f3-a35e-cc7c6f90a9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2259e2bb-cff9-4e22-9cc5-f7bbf5306d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91efb665-e302-4aa6-891c-e86f8ab921cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deca284e-32ad-4ae3-a7f1-dd364ee82e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e655ffa6-dff2-49be-af4d-de0767116438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e582e015-3176-4faa-84d1-3ce8f037701f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34302aa-8f51-4c68-ac32-9dbc56529144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede672cc-15b1-4449-8dcc-26243d4f12b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6cf04f-eb4e-4216-b32f-855af2169da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9023df53-4345-4b90-8014-3bcadf3d1952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d108a6a-0ba0-4e70-9be9-e0b26ad3ceee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daea939f-b91e-437a-836d-e8a84b596006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b578b8e-42ff-4c4b-a293-e3bedf3cd8c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c69da1-7be6-46aa-b80f-6028e7d9af27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1612c666-1b57-4109-8a45-9501545f3bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6226d017-2440-4c85-9e62-2f499edac0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b37291-c185-4bb7-b190-0434e508ac0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ffc9894-b6e8-4e12-b4e3-ba0e0b79cc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a43a28-95ae-4d76-b6d5-56eae98321c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1644a26-126e-42c2-b3b2-fa0a90eda525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f2f1a7-63b8-44c5-9dbd-5d6c18f12520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f54fc8-3b34-483f-8914-37a14caf7f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555d4371-b883-4500-9ca2-bd03acb80221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9d2952-207d-479a-8af7-8bf5ffc68626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d1d45b-8b35-4a9d-94d1-0e2303cc4220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005613f1-2311-49c5-9e48-1dcadfb1a70c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81929042-1764-4b37-ae33-4b061434db13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cb8c84-419a-4bb4-8a62-515223a5cc81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc0f9c9-af8f-416d-8afd-d731396c08ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d9a0f5-2ccf-4f9e-9bc0-b4acb77ad2af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5d71a8-6416-4b12-911a-71ea360349f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd74fca-f0a2-4792-acc3-65de6737900b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0838d54-c20d-4f65-ae5c-6de2c123dbf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f1c4b0-8a83-449e-90d2-fd53e4155203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca116102-6733-4dab-9b38-1acc8c5f8ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0ac857-9586-4b13-9cf4-99977b931564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d34ff11-c37a-4cfa-a12f-fe7b1434dba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a970b0-9682-4cd6-918a-a344f2bfcdc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9502f144-286b-40d3-8bed-edf1d7347c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80bf7ef-89ec-46ca-bdb1-514cb5cf1972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae45c01-2bb9-4386-9261-9ef4e9cffbe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43194dd6-562c-4521-9711-842d8b262894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ad5238-1bb0-4d1a-9d70-50c1b27f88fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1c3982-5263-47b2-86ef-f886cb55c638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36ebe05-b022-4e92-a58e-37c4d93a4f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad9e54b-f04a-4849-b7ae-9a1ace6e48a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca33bba-a88a-4ee4-8c84-32096ee08078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd2a416c-821e-41ea-bff0-4e0ff86154a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.135.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc4a9a2-6978-4598-8eb9-6d11a2309d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.133.227.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9418f3be-db08-4b1f-b1c4-1da0e70fb391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.227.203.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0279096d-9017-49ea-b71a-c20554a8b1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.249.63.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576172f3-ca9e-4dd2-90e7-ebdb6fe232e6", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.255.163.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22a3fd3-35e1-4477-bfb0-ab890aff230c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.204.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b084c9bf-43c9-4b57-8921-cf278810fea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.34.86.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d99768-3ac4-4aeb-a37f-0ac544d5c8f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f630a4e-5dde-4ecd-a109-40a8b725e764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abb5ab9-2554-4ff6-a798-98452ce671ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbc7a85-1f76-4718-a8a7-3e393a697c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8589646c-2ae3-4be9-adea-8fddb4affba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2906450-5b7e-4937-b1ee-5e83fcaf07e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3f3d74-d410-4b69-9a8c-96562a8ad5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493df506-9036-42fc-af99-7fd2fde7c14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dba121c-d3c0-4d2e-85cc-ee28348b82e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d3a725-677f-4203-903d-885df1a0af0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074e946c-0c64-4e09-90c2-58c2e443f25d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3d974d-4401-45e4-8ec0-15182949efe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f44754a-cf3c-4e69-90e9-decacb6ff6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8a8828-95d3-4b4d-85fd-55716a345ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.117.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542e92a7-1082-44aa-8baa-0111b0df5d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b465781c-ca58-4740-ab74-3539205131e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39310025-60e0-40ff-b0db-b810e8343f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d51ab4-157d-4b0c-81ec-1a59c9ea4b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76ad1ce-cc87-4768-9f3d-7090db800e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4722bd1b-5caa-49eb-aaf7-46206012312a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93a9af7-936b-406d-9947-a3a1fa810546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c7dc33-bff1-491c-84f2-828e5e01c6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385dd1d5-9107-4952-8c79-b568fa18b878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9810e1e2-97ad-460c-ac66-3b17e785676c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29689b7-d2a9-4f6c-8aa9-da0221f30428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be83a61-264e-4aa5-b206-e872f72845d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1895a6-bb42-4373-a579-e3a6f87dc1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.37.35.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b35fc5-0d50-43d5-bb1b-8511b7a09678", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.42.46.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906901d9-e000-424f-83b3-b2a77fd34827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.43.12.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3274c42-ce29-4d94-ae64-db65f8c3b9ca", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.44.10.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176969cd-ee05-41c2-857f-1201a9e27824", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921797a7-95ae-4b70-8ef6-cf5371955364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.67.138.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb552585-976a-479c-9087-ad107f82a035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.68.15.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063f8b40-75c9-4734-a694-1c19df439fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.68.47.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c531fb3-4124-4d7c-95e6-c61066c55143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.89.148.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8daefb63-4bd6-4fb9-974a-06f663e7e610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.200.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d44c667-402e-4dc0-8b51-28f914c4d868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.138.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c62e41a-aa36-4e0a-882d-de9dc96b5b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.200.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecab51e9-b417-4fb1-82f5-6c5723140068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.133.161.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c5a8fb-a175-4d09-b7b6-1ebea92f17b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.165.127.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3caa6d21-6fe2-4dce-ac4c-16f94cf93a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.182.48.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32560c0-36fa-4308-8bbf-6a611c245aca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.182.92.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2dea9f-8b06-4b8e-b4d7-b7279016f673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.210.148.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24aecc2b-7933-4147-b21b-7dc86367b614", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.210.149.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e5436d-53cb-4f75-bdda-f484cd1d4c23", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.210.149.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83692be-e6e9-400a-8152-60f07caa6912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.215.33.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d394d4e2-74a9-40bc-ac15-0bfee31efd32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8a41af-2ab5-49c0-ab94-fa61aba305b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256b043f-d182-4659-89a6-18ce2044df52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ac9995-3a83-40ad-b723-649d73a892b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.223.47.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196132ca-7a03-4d4c-a8b4-ecbaded65af5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.33.68.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd9b522-108d-4833-befe-5953484fecf0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.40.142.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f349dd-d1d0-402b-8e74-50c3601388bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.67.141.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204d53e0-68f6-4ee4-a1a9-4daf69ebdf18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6dda4e-8a29-4fb9-8dcd-a64d2ee6e645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1524ea5d-c996-4c3c-a932-757571e26d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.211.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda18391-cce6-4a48-85ed-7e3fa6f928bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.101.203.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edbc0e7-cbc1-4954-b4ba-3177a03896d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.104.59.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b386095-900e-45ed-b430-a7a5c7259010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.104.73.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d046ea-2d08-4ef1-803b-b9ba7a314b64", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.112.173.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286512f9-52e2-4a68-9d1b-5dcced788e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.112.62.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011fd4c2-c4ca-4a6c-bfb9-1833b7fd0f72", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.117.150.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09677c5-b5b0-4533-9d3c-d265fa5f731f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.28.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92879a74-ec34-449b-943c-ea321a5fb6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.119.17.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b49e4b8-9d0b-4905-87a1-04c4f9f2779c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.204.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03cf67d-d576-4ae7-970d-fed7ca522ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab73e86-9466-4e54-85c3-09369d9513e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.34.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fae42d-77e3-4ae1-bd5b-f11db3092fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.124.139.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad54bef7-0766-4e26-95ee-dadfeee39ebb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.125.154.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1d8218-bdcb-47d3-b054-d0cd4ffbf5ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.129.238.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c824d80-4845-4422-a36c-f509696e6726", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.131.61.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f559ba-803a-40ac-a6e9-299339010d64", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.236.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd42972-4c4c-4186-ae54-78bd0a33269f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.134.154.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d8451d-be23-49ff-bb0e-e156a5838d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.134.2.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7ab968-0082-448d-8971-18ce8abe9a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.137.11.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666a9f33-f67b-40be-8767-fd90d0ebe083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c212b5-e578-4d3d-b7c3-8e675cfac1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b73e3ca-68ef-4f67-8af7-5a16b533c916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.159.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77b19cd-8d40-49bf-94cd-338f08ddfc35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.170.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a32b84-3191-4729-a51b-852913cb065e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8d8604-a5df-4e02-82f7-2fc23fa38096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.28.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10364b67-7f73-426e-95d0-c14e9edbbbcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e167301-60d2-4e2d-bfff-ae52c5bae156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3dd991c-6dae-42b3-b573-f827dbaad173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.68.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33996d47-0f3e-4ec4-bc36-bb864f0f53ec", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a4a2f6-dd05-4efb-a964-9ef425e6dc60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bee9fa5-18a4-44fe-ad29-0f522fa82f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.160.212.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0cfa0b-243f-4d39-b05a-33a4ea27b54d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.165.206.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d03a00d-2c94-4a7a-9b68-f62f543d0642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.166.183.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96319942-f70a-4b8d-9aad-d642f3436263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.167.89.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77f1c06-4836-477c-846d-e7ca99b9effb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.171.69.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2f7638-a59c-40e6-97a1-474ad3713826", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.171.69.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80953d0e-4abf-43df-a448-c9bb7476e0ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.171.69.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60acf340-b4cb-4628-b84e-fc22890a3786", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.171.69.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbba223-1728-407a-a6f7-ebdde8090964", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.171.69.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06524e50-dc02-4d4a-bdfe-c46581ca4bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.171.69.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766222a9-7b75-43cd-ae1f-df639010f603", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.171.69.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954fcca1-e6a5-4742-880b-d3e82f3db133", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.171.69.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b922252b-c456-45a8-b694-7bdbb50e059f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.182.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a018def8-8982-447c-ade7-5d1bcc6d77c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85fae443-85fc-423b-87a5-d7ab1f22f7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2765cba-4e94-45cf-8cd8-3ddde66c422f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.175.51.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2715cb-6bf4-46cc-9be7-178c4f11f131", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d7da31-7786-4b4e-9981-b0939d5d733c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--892899b1-ff3b-4312-ae69-f43e5439c6d0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.180.213.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34676183-2ed6-40d0-8ff4-193066112be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a125f7d-59e7-4980-93ed-d77c049daee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.185.185.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16160609-a1a0-4c93-82cf-3a777430617f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.185.53.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f616f97-e2bf-44ea-a468-4cd698b13085", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.147.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a20798-b262-45b2-8894-5a49e0df4726", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.147.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0131f977-d18a-48c5-9a94-989c19914ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.188.177.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f26d1b1-a9cc-4944-b230-e75cbf8c0b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.190.200.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffa45a8-07a4-4c76-846a-289ca2e7a1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.191.14.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8851d13d-0f52-44f8-ad6e-ebbf125b90e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.106.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9dc450-69d2-4e83-8231-df518786df97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.106.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3771be94-bd90-4a83-82d1-b2b2a6e5fef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.106.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dacae4ed-4fd5-447b-9339-4ce639589e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.107.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5c35b8-8f59-4c60-a782-2fcf590275f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.197.224.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313abe07-6fb6-4e6d-81f7-180df01680cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.200.25.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c38ccaf-5be7-4478-91f8-8f6ba41e09b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d1444d-f0c0-4337-9737-abb57f98bc44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053ea56f-6dfc-4128-b5b7-597fa8bbcfaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1cf04d-0d54-4a32-97a1-992a22abcfa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edff42e8-2ac9-410f-9467-b2203eaebd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5076e16-4f49-4270-af62-7f729ad6c86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97758c2-f2d9-4aa5-8759-8f35c7870fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fba8ca9-3901-4e17-86c3-37eb8bd2708f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.58.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272d6b68-1389-48a4-b15c-d0158b149760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.209.145.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92b5e85-0e6f-42f4-b568-d3976228631e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.21.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3792c745-4fae-43ec-8089-83770cf67740", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.21.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7f5a35-c6e6-47c8-8b1f-194434542b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0e1c2f-07e5-46f7-81e6-2e3dbfbaeb65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.236.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ce956e-cca1-4bac-bbc9-9056c8d2f377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.211.61.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e3a6d4-8507-41a9-a74b-f23385b77346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.214.128.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9e4d23-bfdb-4d8e-809f-bc79c2be5fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa2ba26-0402-4435-8749-1db970ad0d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.219.153.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea5bb95-d982-403f-ab51-90f012346711", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.221.220.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8c3741-a60b-4af9-ab0c-46053e932338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.225.87.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26db6e2-cca8-4f48-baf8-174745d1afd9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.228.144.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e87d25-040a-4c66-9e40-e3f8a883d7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9239f0-ba77-43b1-9752-f6cee5318849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff69a3c-5f72-4577-bef4-bc4b4a3aed14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb1a2c7-bd06-41a4-85c3-c31d7386ba6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb21f2b-8a61-4254-b7a4-7538b6da17df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523f5f53-df9a-4ec7-9a8e-3034a51617fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4dd7e0-aaf8-4b21-a2e5-34a52f2e495c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e428d9-d442-4392-ae28-586d2184f36a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150620e2-ed99-4862-bfa8-b37f057f33a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0ca6eb-952b-41b5-a0fa-aac988d46369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3db639f-2a1a-445a-be5e-54b63e1450d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9371cd-2783-4731-b61d-e16183272629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121ad815-8dbe-4b6e-adc3-e85c050158b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63449030-0a0c-4741-9de8-b33e67f4e81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57972192-6705-447c-adc4-b1554e8c88e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50813ca0-e36c-46b5-af3f-9d4f154421fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea81d17-db1e-4aeb-8ad4-e30bdb6b40b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8944417b-755a-429a-a486-19dec127dbc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0b5c58-ccd9-4a78-b2c2-4487bfc9f4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476c26fc-2970-447f-9f94-59258d6cf2ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8680323e-4f8e-4379-91c8-5ef0b7a3ae2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e19b6d-2e8c-4a03-b0ed-804b0b3fe6b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba04ea40-ed55-429d-a38c-d9696349b770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89685825-b6af-4064-afb7-6db03a5efb40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a7898a-3846-40bb-8a5d-ddbf342eb86f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de658a3-f4e0-41a3-8f6b-a641136c09e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.250.11.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bac1bb2-8f47-4921-a907-ebdb6955a12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.252.90.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72fd814-c293-4216-bbdc-6f189fc8d3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de1cd1f-eaa2-490e-b144-0ddbb1ada1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4833ea-b2e2-4d1b-9fc8-72b0760b7a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8844077-7c60-45d3-9d86-63b45a85f112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.42.30.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9733dcb1-b805-4969-a470-c3eadf12f39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.54.101.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6815c2ac-99a7-404d-bd62-f6d0449bc797", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.56.162.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0765649-5b07-4c29-bcfe-73716cfed155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.57.224.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3925579c-7843-4b0c-9e82-826f85fe270d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.61.44.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25cfd846-493a-48d1-a2d5-67adc0e922b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.69.189.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1647d8-3dcb-4fb1-af80-d87adb81dfbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.70.207.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad6533a-4ee0-4ba9-bc06-9b23dcd0fecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.70.207.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82092b96-69ed-414b-8e40-31ce2354d229", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.74.5.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e31d85a-192b-4031-8a01-006abab83629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.183.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ac05a0-51fe-4a38-9437-0413ac4edf59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3c5179-b7aa-48b1-9cec-7123874bfa5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.76.88.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdeb0a8-7602-486c-8e10-9418a35c6095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d62ed6-e159-4d5d-9d79-368faa78c35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.242.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0a935e-858f-47d9-ab2d-c29629fd7540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.246.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8755e28c-b42d-4d94-8361-34ed57ba9bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.0.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53b5d37-1ff5-4ea6-921e-e6ba68436c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.81.170.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e327c91-cec4-471f-a31c-3cceef4fbd35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.81.237.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca76a68b-b368-4826-b278-e7aa68e14740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.132.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53a3e93-ba1b-497e-91d2-e544f6af795b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.20.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14dbeb93-3f9e-4779-a996-233b99dcced9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.84.56.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26ceaf9-05b6-41aa-b2fe-33f718e40cee", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.86.180.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8e0631-df73-4d27-9f33-8117d660c8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128f470c-06f0-4c5d-91b9-36f570950a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbeaefa9-463b-42f5-bdf6-40ffdd7000c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68848176-cee7-4075-813e-1177900276a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b2beed-8d09-4f1e-b6dd-3d18f0cf334b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aed747f-0936-44f0-98d5-e504cf91e677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d10f375-d348-4206-bfdc-6b59ce1d52b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a857d620-606d-4f25-8bff-e7c7e009e0d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650ac42d-d321-4ac2-bc86-1dd21308363e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.206.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb11ec2-0840-4387-98e3-236489e76a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.77.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdbe8bb-d899-4221-b44c-c48f65d88b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.93.249.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41d1f78-57ad-4833-ab38-5562b3daf0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.94.238.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b428561c-e321-4a39-875b-417e45750e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.95.71.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b7e399-ed14-48bb-8946-93a23b4d7d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.96.16.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6dd8cf0-cec3-4b5c-abdb-78b6d363d27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.140.145.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac1bd71-de2f-468b-8f62-e7dee75ba941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13946441-49d6-44cf-bda8-84637444ed41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70037a15-ccf7-4aa2-8f69-faf953434da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86c3c26-9e62-488b-869d-b8cf0b4314ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1f414e-b566-4eb7-bdfc-bc3246105c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88371ff2-2940-4835-abb6-12d1ac474c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62bd335-d104-4d16-b7df-dcdc0c2f5455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7039e986-70d2-4f6a-a223-a5c7f4648ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569da213-c781-4912-b33d-ccaa7a24d1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d147dd0-ad78-46d9-a283-3fe686787c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e69262-5fca-4352-b3bb-3044db0bb869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ae8274-13cf-4165-9169-1abf7981102e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1eb1a09-27c7-4d04-b9d7-72bc8639d752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e56c10-e828-4f6b-b24e-0bd3e07cc2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ba7f9d-30ef-40e6-a5c0-ce33bb763a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.131.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac79a4ef-32c3-4d3b-bfb0-42fb02e6eaaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.10.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dae3b6c-4abf-4939-9b10-e6272f542a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.135.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae453eb-c455-4316-a506-18340ce7da10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.140.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ead50f1-2061-4c60-86b3-415220b22601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.154.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f313f0-d2f2-492a-8f44-433e7c054cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.9.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6850be42-59d8-4cfb-9bd0-34dcd73a3219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.77.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8cfd12-485c-4066-a819-2773f63b919f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.200.30.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f215dbf-f72d-4d0d-afcb-e3ef3c98cb0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.204.222.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d11665-de1d-4235-a10c-a9a692d973a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f19e7f-79ce-4be2-ad1b-a9774c8142f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.209.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42d0962-43a1-4cfc-99ee-1f2fd9105a6a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.211.74.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ebfd43-1067-48f7-8a3c-1659d5d041d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.164.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26385f0-bf44-4640-abed-c9cd748ade1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.165.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a225470-c768-47bd-bd7c-1090778da66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.224.31.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77580ba-62ad-4334-a0b5-5f20c341d57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.23.13.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a909597b-05f1-442c-a7c5-8f3360bc2c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c1e97b-c911-46f7-bc8b-1fd60a749ee9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.208.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22ce7fc-2459-4630-a645-7730990b6bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.94.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239f41dc-3c7e-4503-8f76-bc7512bfad61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.66.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a827c25-4eae-490d-97cf-ef099891aeb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.83.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce3f6c4-a165-4a51-83c8-c10ea9fccdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.93.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eacc84e-a41b-44f7-9ff1-07c18acf8204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.144.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4ee3d2-e0f0-4555-947c-194038376419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.150.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a870cb24-e671-4e21-8b92-9129f7fb378f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.151.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abde8f51-6799-4218-924d-618fe64f2fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e8d113-fbdb-4c24-9026-8127169d2192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.238.60.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5fb70f-accf-476f-8967-4e473accea05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cbcf8c-ced6-483b-afc1-637b66e1e2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fbf129-344c-4af1-8da0-caf34fcd029f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc420074-9a99-4ae7-92e4-b3933afc1e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.37.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1882bb9d-da4a-47ff-9f59-0bca415d9344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.46.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ac598f-26bc-48cf-bf54-043eac6d7a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.74.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab08c4e-9985-423f-ba7b-49416f752953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.130.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2867e74d-9f05-4ad6-bdba-0916c7c3ced1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.157.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2179700-9bb5-4a34-9d33-0f3095238a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e8d09f-4129-4a05-bc35-e0ade95b8cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.177.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba01d3d-820e-49c1-81a5-465688f477a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.183.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9209e550-cf37-47ad-8605-6b601058fcdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.194.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147eeb76-94fb-4406-9cca-b78dbf78fb53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.210.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac8a0e8-7503-49a3-a0cc-740145a169c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.229.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac684dbc-568a-49d5-826c-ddc1874dec68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.242.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2020cf0e-7514-4edf-9cd3-1e7bbc452e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.76.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1640a2-54fe-440e-bb13-de98df4c76d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.77.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b339c668-94f8-46af-8cf5-7831f39c92b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.95.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69312562-1fb4-442a-910d-7ee64f81c872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18afa19-5d10-4305-a1bb-ae24bef1c48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc79926-944d-4add-bd29-964230a3534f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f30041-4352-431b-904d-f6b2bf7013e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.235.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f6f2fa-14aa-4192-b968-133f750782f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.37.191.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5af5dab-e63a-4aa6-b0f8-cc791d26b6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.55.169.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cabf021-3309-463a-8aff-cd4af82e692e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.186.237.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2e285d-a342-41d2-9c53-23e46c9c0fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.104.170.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b8f17b-8e86-4a75-b18c-215b58e0c11b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.15.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd715815-1ca8-4a2c-8a3c-15c0328d75fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.120.240.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ef6a99-d50c-4360-91cf-883072d99d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.136.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e860404d-90c7-4d46-9a2f-7a425b12abd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.182.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf1e0ac-c063-40cf-9a21-c72f950826ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.45.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305c9e68-7930-43bf-9256-f90521316be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.14.56.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329ac6e1-ea8f-4c6d-98d5-cf21f6eb6e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.202.78.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d372bf-72c3-4ac4-9972-ed48c6fdabfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.54.236.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aeb7864-e52c-4441-9912-3a154a992887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.101.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b471f394-b693-47d6-a986-370de479ec6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.139.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b3736f-ea6f-46f8-9063-bf5939a1e960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.141.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966a385f-4abc-4aa1-8a5f-52636268f3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09099fb-406c-43ed-8a51-56b7256f183f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e9b5c2-7bd0-485b-a80c-f69f705d809b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c238cd-8102-4560-8708-d291fcc66ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a5d6ff-be0c-46e1-844c-c05306528c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763e9fa5-d3bb-4f6c-bead-e7b57059dacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658d445b-bd42-40c8-8dfa-030b0eb28caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f8b86e-212b-44b2-84c1-07e4c332a3bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.16.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73645018-0f19-4a98-89d3-9b8ccf622898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.169.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540f514f-e7f9-498d-b299-47c9d6c0413d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.172.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9643b8-30c0-43cc-a87e-3164a8b52ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb53fd5-ebd1-4332-8632-56911d449c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eead8f1e-abfe-4065-a072-ac61beefda3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596846fc-ac49-48d9-b190-dc97d506dfc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c82ce8c-82e1-4772-a1f1-dab779216514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4501e0-8eba-4fe0-8fbb-84206f29a267", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.227.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb551b2-e635-44c4-9c81-1b1fec60331a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.7.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d05b0f9-18a1-47aa-b947-3452454431d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.70.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dad8cc0-8d37-4c27-8813-7b81fd1aa221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.71.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3ec502-1a8d-4791-90d4-cfef2702856e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.132.88.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0405f267-26ba-49fe-8589-5d9207343cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06758b7e-b062-40b3-adf6-5b62112a7e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6a7395-1c6d-4ef7-bb05-3bc1e14eabea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b0a50d-2edf-419d-b0fb-e700bfab8ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e5ddc7-d998-40f6-b6c6-85358b40db48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc534143-9f8a-4721-a7e7-ed2c7e5b2ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c523ae-8227-4fce-b9ac-074f54cda7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa829503-018f-493a-b0b4-55ab9834de89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dffa4452-3751-4fb2-9048-d686bab40fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d17189e-885a-4c39-bc80-e672a959698c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bc6328-4136-4dcd-a2c7-5ba2ecbe8bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e873af-4314-4f76-9938-9d8f360a25bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbec6d8d-3315-486b-8025-a381117aecb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0792c186-1828-4ba1-ba1f-a52caf619928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4496ece-2261-4ec6-a577-a695fbab683f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21bba19c-b478-4bb6-af9f-f60248389450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6301938e-a950-4a9c-92d9-66bf824febfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c76280-b25f-47d0-9916-50108825869e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f30e4a-1791-409b-b7af-9f8044601570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217a4a1e-652a-49ac-8606-f65dde2ef69b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04bd52b3-7f1e-43f1-85c0-5da115b5f19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b15d26-d8f4-4555-80aa-013699c83a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9964e789-8d4c-404e-b3ee-8f21cf23a845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8196e2b-5e81-452c-a387-fca0ee08c1c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6256b980-3e9e-435d-9992-d08a8a56265c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed17729-759a-4b8b-ad93-eae3de36faaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e94c792-e71c-4767-aed8-684838736c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97da387-235b-4780-9ad8-cf33ebef802b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb2cfb9-fa22-4a15-9501-b54f462b3202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d922b9-6351-4f39-93cc-458b3a0d92a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bd9d4b-a92a-4bce-aed7-08183afeea93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0efd8d2-206a-482e-b518-34355067ac53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f13529-cbd8-4c4b-a838-9003a87495cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84398307-23e8-49dd-b86a-809b708b0003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a70ba5-bf1e-4bc9-958d-0698e215989d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c35472-6db6-43c1-a8f1-97b70c46abf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a42d7f7-8400-43ef-b812-e88323faa597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a818dd-28b3-4261-9d35-040d4b3a4654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e127d0-0497-4100-97bd-6a3a0f0c89c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abccb789-b64c-4095-9f67-e7bf4bb0ee81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3c090e-0590-493d-8fb7-e60f9a6423ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf03a45-b338-4cf9-abbb-00bbc8593577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3202f56-0c53-468d-94c0-2f751fa752df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2feda9-1484-4a04-9f22-7556aea03f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4862ac40-dc34-43c9-9f37-2eb06c5ae556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf547d45-7020-42a7-978a-d0c3edf7d3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0b8b4a-e0ee-4585-8c44-4b45526f3586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13b1c38-9ea1-499b-bfad-cdc76f01e895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba3ec10-70d5-4b7e-9f96-261bb5e644c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec91a9f-776a-4c3c-8392-df46d3b8cd82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce5c1d4-6a31-44fb-8640-9e248ab7ff53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647fdc84-b8d7-4337-95ff-67252d51275e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.152.44.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f4fc9e-8f1f-42c1-8256-74d46d5f7b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.154.132.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5730f1ef-47d9-4356-be63-965787babb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4b02fb-dcb5-4c6d-9364-67b1e63a1e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.247.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b61adbc-94a0-4948-8b8a-24f06b24ca36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.252.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c922d13e-705b-4e4f-b625-78ced58e4ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.88.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3fab99-575e-4154-b63e-942d1598879f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.95.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a54da32-693c-4749-95d6-0c3a513a95dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.155.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c9b129-1ed8-4786-86c7-f5c73291b3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.81.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6118008-a18d-4713-87b4-a66070d5c221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.90.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c3b123-fc05-4685-ab7a-d52e881b2997", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.156.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be705e48-4570-4ade-9bf0-127c06e4f688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.244.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e69208e-ae46-49ca-b245-9f12cc08a9d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.181.228.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc4db9a-4cc0-4c22-8529-bb82f80f2547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.19.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e4fc4a-97a0-453c-a55e-fab8adc14acb", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.20.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407cab9e-8270-4639-a998-34230c7e1856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.147.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5900f9f1-9ce4-4640-85bf-2b1a81766205", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0c801b-6ffd-4b04-90ea-2dc253311957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.22.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4503aad-1242-43a2-8bc5-65bb55d9d8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.61.229.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6325731f-e9ec-4a9c-80ee-823a2eab3c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c39ae47-c12d-4c03-9790-1efe754226ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be286df6-c45f-4214-822c-d6b91fdb3dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0617b2-3317-41fb-83e8-4dd989b1079c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bb0395-5955-45be-af96-4e91024fbebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afeaa288-5e63-40cf-908f-531042de7b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2deb5ec6-8f83-437f-b3ff-569f4fea5d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fafa86-1d40-4cae-b6f7-43101640955e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce958fa7-bddb-4428-b7f0-24e5e3f8306a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27b3a2a-9163-4b4e-afe7-633fe2f90953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b6c9c5-587c-4d86-864e-d62744c76e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e287a6-af65-42a0-8423-759f4182b92c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d08321-dba5-460b-8fde-7a716647e0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb6e29d-6e43-4199-bbae-03e7dd1fad7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf75947-29ca-4b9c-b33b-8abf533285c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3e9390-9088-40af-8135-d713b3890fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817997c2-dbaa-4b97-b389-bc919280f52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a3032c-b056-468d-a79c-6e6a813f9915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c93907b-dcaf-4620-b0cf-d480679abfa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a30858-9429-4a7f-b00c-7771e4358544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32a5a6b-ffbd-4285-b2b0-03ab7e5fb28a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d108f0bf-2775-493e-bdd2-ec7ed5b3b1c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.117.222.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e811f956-005e-4f4e-bf4f-d5bfd2a9f816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.247.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8515838-4054-4f09-ad29-b27d2840b634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.149.107.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5e0b6f-929e-43da-a372-43d182fcc6d6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.98.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175f1402-75f9-4ef2-98ff-551ee6b2022b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.176.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92773f0-b6fe-4f3e-a7b1-f4b3c75e994b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.180.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc57a72-b134-44da-8aa9-2b8f4a8c9689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.206.247.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d18a75-282f-43ee-b4d4-ebf065d8fac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.207.174.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812f1fe1-df97-4610-b7eb-420b60560f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.207.88.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab0eaf8-7dad-4715-a480-bb605a847d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.236.86.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbe2a93-a039-45c9-aea2-8163de1610e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.237.96.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c069661-2a6f-4d06-9cc0-811421908fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.63.134.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9103aad-14b7-4738-8d21-26a8a49e7ed2", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.10.176.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327bf51f-2a78-4926-84f3-bf690351c220", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.13.169.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafbda7f-6c47-4609-b427-d878ae6dc512", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.164.228.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48b066d-c9b7-4c12-8430-e7a9b197a145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.172.132.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49235b85-84be-4608-9789-e63a7b35b0e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.249.202.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404ec330-074b-479d-9305-c0dde701146c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.35.80.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68de820a-1641-4a77-bc37-96b7b2a4317c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.87.158.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28262d97-38e2-410a-b3ae-841b4c39a521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87fab305-135b-4550-8631-fb7ddb5e9d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0511125f-f821-4805-beb9-5f7201eb7b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf8c900-b16b-48eb-8648-f2fffa1b4149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273202a6-c6e3-440b-8aa4-989b4091f7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d432cc9-be76-49fb-8089-731bb73a6666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31206bf9-7ca2-42d5-aa71-9c1f1a49f9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2de329f-f0cc-40e9-8919-37a5665b6103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.119.203.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15d8480-7b60-4745-91a8-e50a7ca4af53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.225.149.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf7844b-7118-47c7-9236-c19eb69c7a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.228.1.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb55310-f87b-466b-9666-c60754d03c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.228.36.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6844b4d-5e65-4b3a-bdc7-b02d5c4bb75a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.228.48.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e1ce3b-5559-480f-81e0-84b176093773", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.229.191.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48f1c36-a761-4c1b-925d-533d018395e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.242.24.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353653c4-3451-489b-996a-bde8f8eba196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.30.86.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d875b31e-8204-40dd-bbe0-7527a872b2bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.49.124.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c9e8b7-7d9a-4061-8253-a3d7ed7f1b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.102.170.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1decee3-aff3-45b1-a0ff-826ab80883ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.102.223.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da511083-607a-408b-8f25-326663359693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.129.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d97d09a-81dc-4ac6-b7cd-259cc17c4c32", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.142.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19092012-8c59-45fa-985d-3ba9bb215d38", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.205.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c6ed88-fbf7-415c-b358-33bd146e72d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.61.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d26596-4f3c-47c4-a436-4a86cc60e113", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.92.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa4112f-c701-4e98-ae6c-2f25b4eceb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.123.17.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558b6513-d4fe-4be6-894f-9b051e309c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.123.59.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3c650e-3852-417e-9b5c-7fb58dcd0146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.124.65.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56da111e-88f2-4990-8f8f-6b9a8684175d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.184.169.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e80121-8cde-4623-91dd-86f7b96eed63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.213.120.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2be16f-6704-4b88-9c6f-74987452986c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.27.178.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49932f7d-cbe5-430d-b966-e8e6b419a339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.212.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539df660-ec7a-427d-8bff-33458fa128b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.214.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede7d630-a1aa-4dd8-85a6-3dea18ff2d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.48.17.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc02b4d-9c1e-454c-85db-90886d257d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.51.27.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438b2ea4-b8eb-4bee-8f60-629dedab4fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.53.69.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb4a0ff-d2a3-4db0-a9a0-ce3221a0dd98", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.81.52.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51feaf65-1c20-4b4c-b515-276e06f1cac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.90.220.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc75e004-1e88-48f0-8085-5bdf124eda87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.93.138.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e6490c-8435-4655-96a6-7dbbd87c3aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a149e9-e6aa-441e-bb38-5a0a99650444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452232a2-43d4-43cb-bd31-66853119d255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d4752f-7a62-42ee-a8db-31e3ff735ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9a548b-b750-42e4-a881-2f8980c355a6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.11.52.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28ae891-5f86-4935-a6b5-e91ba5075391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.128.217.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e868eb78-f7ea-45c2-8f83-4e8d14e6fb61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.131.183.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5a7059-76e0-4b17-9503-d88ca569f374", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.14.240.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90573a7-38f3-432a-8dcc-d825cdf28fc4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.16.199.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66aa2653-bbf6-434e-9c91-9ed3d0c57e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.160.130.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f336bd2f-5a32-4ecd-805d-28025ad661ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.161.144.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2459e233-5e04-4281-a2e1-b5d41f64189a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.161.39.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9176a78e-7c0b-4221-aa1b-8a391d321417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.178.216.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949847c4-84f7-43f8-a3ff-3a8551d49dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.206.159.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d92837-41e1-451d-810e-782880a6d4e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.214.18.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf526e7-deff-453d-b984-a40938a4eaf5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.218.221.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2efd564-f7eb-42d4-b99a-21d5d5169f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.221.79.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aadb6fee-43a2-4116-9f89-480119b42890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.57.186.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e6d66a-7a5e-4068-9116-f9be1e01375c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.62.129.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d7933e-afa0-4e78-832a-eb9054b990c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.111.53.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37218869-438c-4cf1-8bed-0eaf087c8a0a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c219db8c-6b0f-424c-b070-464a413fd0ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2627284-d00d-4853-8533-b31f5b456c04", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8419c4-36ca-4264-8970-84915c46af9d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e169a148-6d93-430b-aa3f-92da18364dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.134.184.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa48fe7-4662-47ba-a4d7-5c8e12e42a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.138.110.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954148c2-f305-4093-9614-289477dcc14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.199.173.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccff881b-7187-4541-9442-a7e2ccd18253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.248.25.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2b72bd-b50d-4fc5-86e1-232d9e0d62ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.12.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5926337d-1938-4ca5-82a3-29b06d72415f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.218.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f18d93-a37c-4de8-a3aa-c5d6fae56afa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.195.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a114f0af-2ca0-46c8-8d0b-86642e2bc328", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.208.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a985b6f8-8cf6-4c1f-90f7-6c9581f88795", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e58b99-07d6-4d1e-9153-dacb6d1d41bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.41.23.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4600212f-8523-4467-99e8-ddaa30e01d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.79.151.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab917c2-bd9b-4f06-adcc-d63e9f3b8e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.80.35.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae525ee8-f5b4-40ab-93f2-12810356c08c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.98.230.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4432a3e-5f16-4f12-b7dc-3cde2e6eae20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.178.75.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4250ce5a-917d-4b26-9264-44ba8ca870f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.113.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57927330-1819-4210-a723-34aebc47f9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.118.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a36c69-b8dd-4b83-927a-22735fb611d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.128.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253f2d5a-9a3b-4c1d-a476-305d030fac7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.139.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b20e17-ee6d-45ab-b643-9cfa78ed0ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.143.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fecee3c-6a6f-4e79-b5cc-07ea1e9e8d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.155.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f046fe4-b92c-436a-90e9-dfab3e5abf0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.170.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8565fe47-db62-4453-89db-66800dac23af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.215.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a6cd84-5397-4813-8389-e0bd562b2c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.244.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7de98c-2c83-4e05-8bf2-b5aa38b2a764", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.255.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afbe6d2-269a-44d1-a643-7ea4d861af5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.36.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7928be54-53a4-41ca-8e59-3b285cad213f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.20.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2cc993-7600-4cbd-969d-87c3efac2494", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.22.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64178a33-7cc9-4221-be71-f57c2a4c3b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.5.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4b223e-3c1f-497e-9f2b-95e0694da64c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.227.26.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f301e69-dbb3-484a-a9d9-f9b9e941f80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8b0ee8-4805-4699-9de1-d48dea5f297e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.42.66.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962be54f-d7a6-4cef-9199-06a1255ce4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.42.79.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46bff3ed-55f4-47b6-a123-1d07ded7ff2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.49.202.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52696ea-adec-466b-95c5-1ce1dc84497e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.59.82.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18179273-fda0-4903-80fc-1d1157d65540", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.68.208.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6857190d-7b95-4a48-8805-025290f99ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.103.230.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4449bb-8543-4e2d-8237-ef695e6686a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.118.4.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15cc342b-4a9a-459d-bfb0-4984f3fc91b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.123.150.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6be87ff-0ad5-4f7c-ba83-ae3f6cc03559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.142.99.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ed6422-d486-49f6-be11-c5d82aaff7dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.167.201.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cefc4b6-ff03-4ce6-9f41-1249190d9a78", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.217.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423927fd-4633-41f0-9e09-041c6d8ded70", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c04590-5e47-4a96-b0d8-385f1815c7ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd7a276-d17f-4c77-8676-8d02b631072e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e638381c-48c8-4734-9388-e70ea718227d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b183b38-b65f-425b-93fe-3120a4b4f11a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916554b3-a9c9-42a4-882b-d125bffb9585", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8fb597-b1af-4ea5-b8b6-4c61a226122f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0787b869-b114-4f97-a2a1-b828f1cca6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.198.232.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64387ed-9b77-41df-9ac6-26b36546965b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.203.164.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca550de-3483-4645-a67a-06c227a45042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.204.175.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b65739-0af1-4cec-80c2-fef751021a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.255.235.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcefd546-0e2e-4a8d-bbea-e3d9c6f6f8a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.49.164.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a52d1ad-be50-4d93-a2b7-b968ba092363", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.53.58.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a543c8-6b9d-4689-b6e9-4a2e28aaa80b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.55.229.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c0dc92-1c3d-4fc5-8be9-f6c202090ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.167.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9310cb9-d43d-4b73-ab8c-8f3f87601d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.217.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c25ccbc-40ff-4a8f-98d6-3edaa3cbe17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.231.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72860c32-359b-4e9a-9809-a088db8e6165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.9.128.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e370071-11ee-453c-8a63-23aec127e18d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.158.156.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cc50bb-08a8-4d95-aa10-ab811c590a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.175.140.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ad2b13-d765-4a28-8b36-1c0c3117c398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.180.211.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a9690d-6cff-49d9-a02c-4d118290ff8a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.187.180.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f22986-ffcb-4095-bd68-c902b4d84542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.187.180.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac99104-a13c-4362-8778-7bb62d05a3f8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.233.205.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a72eb54-f700-4dc3-b576-b6ba9e0d4594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.238.231.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3083ff16-ae2a-47ed-8ba3-8407b342c930", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.245.139.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9225abae-012c-477c-a733-652fe2cd7d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.253.161.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3316c46c-4f55-4bed-989f-0df7eb337744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.45.119.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c060f22-3f94-4d14-8f67-32696dc28ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.47.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abce2fc6-9874-440b-8c49-ca573da4c778", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.55.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f3471d-15b4-4a93-a937-a33b652aeb47", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.63.106.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b3bc93-429f-4efd-8f4e-6fa51a8ed972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.110.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14d5832-33a1-49d2-bfb4-2bf2a29b24a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.215.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e573aec3-a2cd-427a-8698-71c91061757e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.40.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3479a112-3dbd-469d-a52d-eb7af29be554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.79.132.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd372b0-bedb-42a5-b329-2c1dada64989", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.80.219.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3530b348-80b7-4cff-ae6f-c53efd810be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.89.185.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d94cee1-0224-46b3-90d8-29fbf704e921", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.118.80.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42588175-a173-4bee-99ef-18c735dee7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.139.166.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992a6021-bfa3-4b9a-adc5-27628bd39fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.245.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f845e35-d57e-44a0-81c3-2399c162358f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.163.132.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03672e2f-9b9a-42b4-b477-200002777b65", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.185.147.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4400513-7aa9-46d3-a3fc-fd192d36218e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f09ceb-f7eb-4464-b3ad-6dd503b1d0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134d9862-2101-4c9c-b90d-e5fc9346560e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273ef102-bab0-442a-9512-936f226d2c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81ca92b-a380-4874-8a27-038738b46f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eca7ecf-3152-4a5f-9da6-1e25f34ccf8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.38.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5d936a-62c5-4bbd-aa1a-02b0848f5a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.39.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99821b3e-7b40-4394-a3d7-a55ed217deb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adca6a71-8a77-4d41-8503-03eef6538d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d39b281-db7a-4412-87af-172faffa218b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924ce950-1d1f-4885-81ff-e4cb86dba169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b51d3f0-f72e-41f3-9aa7-82c186c164d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a59a82-094d-4963-bb1f-8df75b9b66de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaeb2f11-497f-4cab-a656-9e45e12287b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4fbcf87-d83e-4719-a21d-9d0a710ad5c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007ebc5d-c01d-424e-9d48-86c55ab6a531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b4e94a-7c7f-44a9-914c-093728946218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455ac648-73bd-44f8-b595-4db0fc5c3c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04db8cbd-7ec6-4fbf-830c-48798ed7b200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ae7932-fd7c-4c65-a226-431a69cec9e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fac5e0-d08c-467b-b069-83006f9392f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e41666-b2fd-4a27-81c5-326cac6a7e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984d5c62-fe6b-4ce5-866d-7d95272cb36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79623c0a-af66-44f6-81cb-60f7fe637781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bb071f-6407-4b1c-9ab9-ca3b7e014297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad13786-2fcd-40a3-b529-cc3ee078f00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6121da4a-209a-4276-9097-9dd70391618f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4782baa8-8d97-46f2-a580-ab6b90044959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497c6305-3a06-4fe6-adfd-69858c5ab304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2513c0fe-23e0-4553-8b6a-f24447fe6d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a10e288-3182-4700-8624-93ca8886a4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0606f9e-7dbc-4f1d-ac1a-85239563d1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db93c01-e278-47cf-8e08-8cb31c798c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9b4a6e-bc8c-4c45-97e2-3e119ce374d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.228.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6a2391-66cf-40fc-bdd7-41b58f21d5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.228.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc12096-cdfd-45be-8bf5-1abc00b77232", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.229.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500e179c-d315-4a96-a5fd-d778f40fc257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8e4d4e-6d4a-473a-bc72-0199870ef1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa76a55b-a28f-4df8-8e66-5dc353d59955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9d70d1-0fff-4a93-8cd6-6a5732f6bd7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c4c36b-7995-476b-afb0-da7638db934d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041c53ce-e455-4a2f-bca3-b88c441fcfe1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81f7361-86d8-423a-8bd8-b2049e8d209f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f971f5-1197-4b5b-85da-3c1462c28368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.248.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fae8d15-1943-43f9-9c83-932d8236b703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132ef015-cfe3-4a9c-9e13-2b117e4e1a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd47641d-60a1-4a9f-807e-2e82e9abb74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8345d2-21f0-4ac2-8e14-ac2b6722b838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d4c2b2-54ae-4b6f-a927-86b28a0052bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab98a053-6c84-4b62-a421-a3545a352749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b26b106-9e42-4370-8242-27fe9e970bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5645cea8-2dee-4a5e-91b8-513b8091605a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7683bb3a-43e0-4e2c-b04d-b92782857531", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.56.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af726576-9e34-4cd0-881d-217aacabd85d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.78.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494bb858-91b3-4ff1-a6f1-93e84f50823e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.86.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd02022-3471-4163-8b13-5f0757f5376f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.122.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8c44ff-af3b-44a3-815f-400676ea1096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.25.100.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8d09d1-35b0-42e7-b28b-a3785347f1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.250.39.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8bd2cff-0808-436b-99a5-9135b09e9e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054f0da2-64c7-4383-a776-56007b8f0d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0ecc00-6bf9-4980-847a-55af27933566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4803a23-c6ac-441a-9c43-26d8beed0c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7618b26-3039-4ff5-9fc0-10c4e54b9f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07baa4b8-3cb9-4bae-9da7-fbaf51df6707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b13a8a-5af7-43db-b387-40c99039c7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb69a825-5325-408e-9a12-dbc2fd84a0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb017685-24a9-451a-a57a-d113116b764c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.38.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cadca0-d95b-420d-af5c-7b78903c76f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f9bfd4-1140-49ad-b212-486a369d9613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.41.137.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2006dd-9160-40ff-87c7-4613a8aec852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.69.61.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78cb988c-5529-4b8c-811b-9ef4614c98b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.70.178.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c8b9dc-4ee2-4c47-bc28-5b8078e25eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.156.191.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe42011-95bf-4778-abbd-26673a96690d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.157.76.0']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527d4fbd-9a0f-401a-a3b8-686316fbff2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.243.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5820e52e-55e0-4665-88b7-38396e2573c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.247.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4c1b82-81c7-48b2-8f43-2992b7dc6eec", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.56.209.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f94dfc2-966c-49d7-bd4b-0af49f4a98f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.8.104.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c2e18e-3d3c-43aa-bf7c-9c8b246b3555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.96.223.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64b4bb7-3ce8-4a7a-81aa-282e6860cef9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.98.106.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f1a1e2-45bf-45f8-a569-988c6ff5da12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.68.228.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0844b2d3-77e1-48b9-913d-4834b68f8d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.205.80.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8d59ea-fd90-48f1-b98e-0b922c5acbba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.211.32.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b49e607-f5be-46e5-bda4-a84af42b0edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.240.155.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480ffb0c-ecc6-45c6-9fda-2368f003ce98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.242.147.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bced0b7-02b3-4561-b09d-6d212aa137ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.25.154.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b99ac4-f3d4-4d6c-8188-c92bd3af79df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.26.228.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00e3729-122f-40d7-9aca-89bfd37ef355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.27.133.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca03cbb-5939-4fba-ba63-9418f8380a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.109.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1834788-32f3-4c60-abf4-5e7c7ea57bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.114.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d653c120-2116-4066-b8e4-0825aa817694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.115.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689b3f45-7713-4a6a-bbd6-c2fd73104393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.28.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa3e13a-a4a9-4e98-a581-3e691e461ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.32.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef49199f-c017-49e4-87f0-ee1f1afbfd41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.4.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56836f35-c1d3-40a4-9055-8d27b1ad12a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.59.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc8b1d8-60e1-461f-9b57-9fad39018077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.71.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c3f140-d412-4697-a169-ef1b387c5e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.55.15.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd8b470-0bee-40c5-95f6-daa47d7dd258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.55.59.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735bed6f-0fb2-4473-bb12-1232ec9de944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.76.158.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3664fc3e-4709-43a5-bac6-a8e59505c19d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.78.9.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50cef7d7-7bda-4718-ae50-2ee827e16dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.79.99.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4341fb6-72ab-4d24-b204-cfecdff9f53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.89.66.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23387c28-0d69-4023-9d1a-cc04f435f01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.131.238.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aef96cc-0310-4ecd-9a6d-089b8240854f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.159.177.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6354580-653e-4a8d-8962-64d992588391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.165.61.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feeeb8df-4363-4241-bd4b-53f1b780b291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.165.84.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a56d54e-0370-4b9c-b94a-8ce89042e28a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.28.167.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcba04db-3912-4657-baf2-3c55e3eefd05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.84.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3de245-a31f-490c-9900-d8fdd8417b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.85.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5834c16-f289-455f-abcf-ce6b7008444b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.68.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a097a2-f81f-4610-a04e-17c5f01b03b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.109.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522043a3-ef8b-4c7e-b1fb-c933690f4ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.178.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50953766-66d1-40f9-9328-5b3d931735b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.75.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7227d897-5ef8-47d0-91aa-bb66c6b29809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.58.225.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ab770d-72e0-4f43-8ffa-a94dbe828052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.89.82.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3bb032-1716-46bd-8451-639350d36a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.114.255.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb2c3d6-fbbc-476a-ab2c-353724cc6a11", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.15.139.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480f108c-c4e8-4ebd-af19-54c15ea67cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.191.115.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917d89a1-e584-4964-8ea2-e10a915357ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.199.113.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b68fe0-e918-4269-bc1c-f1090d8cc629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.202.41.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722b2c71-ea53-431e-8091-e16808509692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.227.108.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3bb99b-fd70-4213-9ba2-c4858d660e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.51.196.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e93eec3-705a-4caf-927e-4c5940364d73", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.59.165.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9621a3c2-32fa-4d6e-aafd-c0ce922b49f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b9dc95-f7d3-42eb-8a94-0a2759ad11da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3081eb-f998-488b-891c-5a4e23d5e1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac76184-50f9-402d-8718-468b3c3dd016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4155e8df-417b-4e31-833e-2fc01cc1e981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.31.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbf5086-33f8-47a1-bead-6e84ac6a61e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.159.100.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8d0616-d59f-47df-834e-83876d33c803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.166.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83fc763-13d4-472c-960c-76573d0b64ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.173.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c948c2-a58c-4de5-8c83-0b0ac29b4a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.235.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46774be0-05b7-4da1-8cb5-20e85414c48e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.165.82.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76030bce-828f-4042-b602-c16cc8a7f0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de89a31-9189-49b4-b55e-0890346bc979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1348b44-a425-4c09-be04-3b4d0a224084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904ee84a-ff93-4f61-84d8-cb85413bf8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.179.62.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7128cfa2-091d-4e48-ae07-c4c81e866eea", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.185.222.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2858ad2e-6793-4a06-90da-1d58b471334b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.185.27.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb35b7cb-993c-43bf-a068-4d54d6e07c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.191.145.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8ec514-e1f8-40f6-978c-9baf8632b974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.191.145.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d27e591-176c-41b2-acd9-a04f6d2a310d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.207.35.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764b9d72-0d8a-4bfd-94e0-84ac1b2b0db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.232.129.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe3842e-f4ba-4876-acac-f6498db4c3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c09c0d-2e42-4e9d-9ce8-c516bbe1162a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f59b82-b4e0-4ab6-bc40-3dac8efb9abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887e6a68-7d56-4d4d-8766-3c062cd592ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.85.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2712b2-061b-4428-801c-b6fab8bae623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3f14d5-694a-4e1e-ae05-0234f6ca6c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.240.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ec14fe-8fff-42df-ad01-32ad65bfdb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.57.67.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c0a388-aabc-49ac-89ba-1fe392648ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.196.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d8388f-9f0b-4c26-91b4-41a86d86eedd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.196.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55101d8f-5c1f-4cdf-beeb-3cf05e581848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f947d89-2ea0-4b4a-a8e7-4bdd5f34d8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e74a2b-a1e1-4316-a761-1f310daf5639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc43c917-9095-46ee-9434-13baf2ed2863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbe208e-c8b9-45e5-a999-a01d9c04806f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304d4c16-0afb-46a5-97a0-8ef049a5f417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.209.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d1c959-95b5-45d3-b2da-3ad4aa2e4958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.210.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8666be-55b4-426d-8caf-c451d637426a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f857b2ab-77c3-4c56-b361-4374b681c5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82fbeea9-1941-4dde-b6aa-1d68deac5a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf022be-9137-4ad3-8208-bbd35f8f2c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da25401-f7f1-45f9-8de8-79c6d241d1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.194.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971bf806-0d84-42e7-bade-d76b5c1293d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.194.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbe81a0-21cc-4765-bcaf-22d5d748c69b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.195.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a16b57-5f97-48b4-a837-92a81fc69289", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.200.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b2572f-6724-4162-9ad2-179596d1580b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.225.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751d8fd0-429e-4a36-aae9-9dee121a9194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.160.173.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46bf5f8-1dd4-44c7-8250-51552eb627a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef8b6e9-432d-40cb-83d9-b3ebe96aab1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.132.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9ca9ab-4fb0-4327-b13b-653bc22c33f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.220.236.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6a230a-5fce-41d0-a86c-c1d6ef165633", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.221.140.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0062b6-b946-4aa2-9038-209b4bc67a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.222.28.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408b2bc7-d4d6-487c-a572-4152f6bfd501", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.222.75.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43aaa12c-36c2-4cd1-a4d2-9ae9f9652ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.225.69.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483dc6b1-781e-4f91-8ef4-1c5055213714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.227.31.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5240945d-c098-4e3d-b246-ba9a158b9de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.253.209.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa036cc7-8c68-42a6-8960-e478953e0faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.253.216.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878e4e87-7a91-4122-9ea5-8c4a4e3401c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.31.20.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b674ad5b-561d-4374-82db-f8a98b2c921a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.7.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18aebb3f-bcc8-441f-ac9e-7a348db5a138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.88.113.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58de3bc-2eaa-4ff7-a60c-d13a24de51e8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.124.128.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7ddf25-df23-40af-aba3-2a64e248db8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.124.154.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--badce491-fe47-46d8-b502-fb126f4b8e16", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.132.34.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2350770e-9111-480e-994f-4d6877580e14", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.138.175.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb665d23-f326-4803-955e-63fc3a73be7b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.20.205.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc91cbe-ad4f-4fdc-a38b-db52d9fff476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.209.66.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1506d381-6116-43d2-8b9e-2e50cf2b0339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.209.79.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a03020-db20-4023-875f-fff432b0a8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.227.225.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec48022-9488-4b74-a52a-68bc73527efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.70.223.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3786d8b-c9d5-408b-b2b4-439f5e28b398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.74.27.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dff3a89-6b02-44e2-8f0b-5a96b5449c83", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.88.205.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a1e99a-4361-4d68-9a3b-1b6bd5747b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbf5a38-01bc-462f-a9d4-12516959bf50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc586f4-7309-4815-b7e7-bcb00e7db852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610b1ba7-9eb7-4407-bdf3-7b78f84f6542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.32.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ffa99f-519a-414c-8734-43c4d1e98d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13201e46-2c0c-466f-85df-3f97a77b1eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.38.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b420f8-de36-4afa-b27e-7cf958a9404f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.44.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e44bb6-9ba6-419f-82f3-15c48ad17f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.46.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dfe58ac-2a12-46c2-85a7-ed5315e0f619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.225.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb2fe89-a4d0-4592-ab70-210b889240d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd31612-c858-4758-a86e-1531670cedfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df133c3-654f-489f-b5f9-8a68f20812b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1b8394-14a4-4a6f-bf68-5ef98c8189bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8aa55b-c7c4-432e-afbb-79ffd135ad49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3211e41-4c4b-483b-b6be-4873077ecbab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06de8c2-b7a6-4d01-96f0-bf0ac80f0e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668c75a0-589e-4dbd-af56-62d2b35c1f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9515eb2-ee60-44da-b3d1-f116b07c244c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7263be-67f2-4e52-9dde-2c7f3cdeefd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df099b0-d191-4bf1-ade4-4c30ed588559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe30e70e-b525-4a8c-9ad0-68f882577207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa1dc55-75b2-4773-bcd8-f63c1b1b55f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.173.237.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3f30b2-7423-4c8b-b890-a460f603c4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.158.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba70a31-e541-487a-8212-ccaf9febb96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.255.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2757ea1e-e5c2-4600-96ef-15e1ef6bb916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.8.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4263987b-df67-4792-aeff-177e65d7a490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f687304c-370b-4158-bb34-d865f969ca98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d7dfd6-2676-4f70-b4ef-1ce37e2d216d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.202.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8046647-9df4-478a-9160-8e8b2081cfe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc87169-2cb2-40e2-a0d8-5f41be7b3ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61666116-c116-40cf-b1f4-da673d8e65f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.8.124.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c06cd4-a01b-407e-8ac6-25e321905200", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.50.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7e288f-0db5-4905-b5b2-9dfc2dbbc580", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.204.188.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8422780-795b-40f8-8c85-05c63890f4f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.211.172.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed360bb-06d8-42b9-b770-73d7e0396cc2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.158.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a07faf-c467-4451-a4fe-c1b1b8de7df8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.213.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675fe07e-29d3-47e5-b107-15995a7b68a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.140.137.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f197d0d2-6778-4a03-b32e-8cf2b28f1420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.140.155.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246e21b8-4bfd-4c00-ac9a-679b0632cb1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.140.156.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9410989-4c28-42c0-b76e-3351d40457be", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.201.50.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08aa27d4-95f7-4fdc-9350-0c27240c4d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.250.241.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6046a14-0627-4ab4-9887-451613f001bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ae053e-5995-4f70-8d4e-08dfd58f7885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233e25a4-8747-4837-9aac-bccefc85a37d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.105.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff5acd2-9cf2-479b-bceb-f3c5a049bc66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8633e443-0d79-4200-8162-01e0ea711594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df87f1a2-5547-483c-b5eb-e833a5dfd2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa90d8c-5c12-42db-8491-17606dac68ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e70fd6-9d95-4402-ae0f-254f61c3113c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8a4447-d9d7-41a4-9299-cbae67a5ff6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cf7948-d474-4639-a29a-48c26f746df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b3fdaf-b936-45e3-8a99-b28a843a2a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49d15e8-b16c-40d6-8f13-a1486dc91c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d0385c-87e9-4676-8d01-f94559380cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4618d23f-a5fd-4101-88f0-601f05f9c5ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6383c43d-8c27-48d0-bfa5-a0a2b89bd895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e003105f-8a16-4887-84d4-c6bf75020c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d81600d-4f4b-485b-9433-e1ca61123c47", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.140.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7dbb142-5e36-4285-9c23-c73690012db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269c4dfa-5def-44c0-b0ab-9fcfb86a35e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e7b09f-e262-49e4-aab3-4f830f26bcb4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88cf2147-89ed-412d-b241-294014d72351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd0c277-9ea8-4cd7-be9a-17213da20758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c9f8bb-c2eb-4c33-aa36-95ed6205bf8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c923522d-a66d-4ab6-9a22-69dd3e87e800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.163.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8308d87-805a-451c-9b74-f982e8978cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.200.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cdd5448-52b3-4ab3-b9db-b9941e5ca693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.185.239.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330962f4-394f-45d9-a564-2eaed7d6b011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.209.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fd4fa1-462a-4b06-bd6c-181594c3fd8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.212.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2468ef-aec4-4ad4-8e0f-e4195f8b4c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.55.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163404b2-6335-4b80-9f49-5e7c275026b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.49.181.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18478602-8ac9-4a29-ba77-08978db8678d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.94.18.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd88c8f-5ced-4f3e-9cf5-bd8ba7e4a2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.161.64.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d627c3-58c2-4144-ae1b-32635afb9185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.145.115.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666c9ba7-78ec-49a3-b0d2-e8cd1ed2b491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.18.165.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f776be6-8ee3-4097-a038-591c0d6c1199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.18.220.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4529e385-b12b-4d2e-acbe-8657b7a67143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.18.221.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f39b35-27e6-4796-8459-69610cd2eb72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.50.142.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28cbf861-902f-4700-ad96-6519f780832b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.1.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9666edc1-930c-471d-9951-6d8925d336d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f344f6-4796-4fcb-aea7-a4c5cf1c8b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.30.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22af99ab-ac2f-4eb0-9f7e-ec3ba438a4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.228.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af080a04-b7dd-43d8-b015-5fa418aee715", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.106.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d943774c-aa49-4581-b9c5-e8232be6cb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.146.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30f8f8e-80b1-4375-af80-372efa17d736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.184.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a68f81b-4327-4dab-8f2c-f4f7d8c28767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.227.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75499260-9cc3-42ca-97d4-814239cf31fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.245.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b424232a-4124-400a-a740-b5536740354c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.73.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007c63a8-49de-4a52-9210-4ce5ce3ab445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.73.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4b0d68-0d17-4e7c-aff6-92c7dd152406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6f0165-f7ce-42af-84f6-75d7a6ca888d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0bc2ec-d3b4-4572-8912-b45eb48ac28a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2153d76f-bf89-4ebf-9cf8-b140d1b1a095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0faf8c1d-a7ce-45f4-b169-bd992ddf574a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba44bd1-b572-41d5-b176-ebbf7690dfba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0cfac3-18f8-41dc-9c32-2c4bc9a652b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.132.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84bb4e0c-c832-4001-bd37-51606e8bc3a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.132.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5496d0a6-78f3-422a-9495-6889af98b274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a34155-7289-4ffd-a568-0325d799b922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a42fc4-5a81-4a7d-b4b6-c9cad761b543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f13c38-1118-4645-a618-ff25f602e592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef4abda-9a00-485a-aa3d-11fcfce33ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f1d9b6-42e8-43ae-9491-dd9e7636f3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.97.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e3610a-194c-4539-b649-a4aebbbf4c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.136.19.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0037d99b-c0de-4da2-aaec-1fbf585824c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.181.47.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df2bb8c-53a3-4a21-950d-46a8573e7201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70189a6c-01be-43f4-b888-d1ca8e8688c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8fd8ad-3d87-4f90-979f-f7f040c6476f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e486f4-4ce2-4e5c-94e4-8f9c312ae698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79558d31-d672-41e3-a360-f4cd9ccccaae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210c7114-1650-4c04-a52a-804570c15c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.96.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0211c01-8894-4493-9d4d-376774cc88f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.97.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9721d8-b07b-4d35-a063-5f16b8761deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5423ff45-66f9-444a-bd2a-2bb5faddc6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20907606-7903-470d-a389-19b046270e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d80549-23e5-411a-8a97-c439f3b4d08e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a55d14-42e0-438e-b13e-faeb75665cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f78d02-f837-4fc9-af3a-1b5bba32f1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf19c3d-7e9f-44cd-baca-0149bc457597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86b20f9-39c6-411d-a53e-dbc9da854806", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813e5f34-4ce5-41ec-9eb0-ddf62e385292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ac225d-76ce-4e93-8640-1d36ecf55c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861fc848-bfc2-4d2a-bdb2-56749bc25e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa57bc5-fece-46da-b3f0-535ab12974af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e519abe6-c4f2-4949-a9e0-5565378f1cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94df03e7-cf04-42e3-89a0-603f9eafa76a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1a3c51-54c9-4591-b64c-274e269998e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04585dc1-d1bf-48e4-b2f6-cae127e80cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11726d69-d06d-43a1-a555-69536fc49dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe716ce1-0bab-46eb-934c-74ac01d01b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b02fe1-679d-44ee-a6fd-848a785a3bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086db9d5-3024-4a05-b613-c81b9d5764df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bf5261-4ba7-4387-ab17-f7a819d35a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe54940-c810-417f-bc8b-6c8fc3e81357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073493ed-2ac3-4eae-ae03-966934c176dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d901007e-564f-42ab-8c71-08ac9c255964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177f59ba-ff54-4b64-9196-97c22671f5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6c1549-1b59-435b-aa13-c26897b9bd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c537d87d-bddc-4a23-9c63-84648e1f793f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b613aae-8957-40c1-98c8-396e679bc19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25fe90d-bd69-4f0c-a9a0-c82fd8708ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79266d3d-96f5-4fc8-9a69-18e9dc26aa85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1df018-67aa-4cfb-b61b-a0ab592fae81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91eab096-a936-4edd-ab94-c2fdc72e8c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c789c4-5110-46a5-935f-bb3031b3306f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c037b7-905e-4e67-9f8a-a388c2fcd2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1706a98-6e71-43d0-85fa-2b807cb278bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2d30be-975d-4edf-8e46-0ed6dee00a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968ca341-ba49-4979-b990-37fd12585680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dabf82cd-dbf3-4190-8506-86ac1feb19be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d29546-b7ad-42a5-9695-42775909ad8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e38371-24df-4bb9-a637-2c9efc4e357b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9406cf-d1b6-42cf-b047-f21a9b538e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02598c60-3abf-4b9f-80a4-08c136fd26cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900a0c0f-54e9-4d6b-bde0-3867292699f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bdf40dc-5183-4c29-9471-169767aac638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f31e0ab-8c41-4fdb-84f0-77bbcdd326ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8fe746-9879-4f24-a812-5e69b05949f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c57d49a-4e32-461f-b9e8-93b479277ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39cbc9e4-9d9b-44e1-b26d-c75c75e163e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21dcb0ea-7eb8-49af-9e2c-b360410029ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.109.228.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6b1b53-313f-4295-8089-f3e4a25e3e4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.113.156.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b82d2d0-b1a6-48d6-9665-0acfd5566067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.35.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41bfde3-ca14-478f-a4b1-1d3cebd2c147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.105.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7672250-ca59-44b9-9a8e-216ce95be1b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.167.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6fbeba-7ad8-48a4-88e0-0365e7734da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.170.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f662cb-b61d-4a2f-9cbe-bf3dde6d7126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.223.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d708304-44ce-428e-b024-3de00c322e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.27.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d63751b-1d16-426e-9f48-cb0efcb5ff02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747f093d-74ec-4668-bab3-a5e9da7cf1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.85.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5dcf8f-65de-4efe-8569-8c1ccf514ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.59.54.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1151735-d889-417b-bc5f-9961fbf16a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.118.214.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef52f46-3806-4dcf-a1b0-db205bd54f8c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.186.24.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b283e3f5-33c2-435c-a625-0bb20fc518b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.15.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4065f8-e306-47e6-881e-3e23055ea5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.15.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4f7e3b-92e6-4201-ba55-49aa93e88103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b4aff5-21c6-4491-aa70-f5ac508ac740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.162.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f90cdd-e6ba-4f28-af85-1b3ac3822d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.165.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--febbb2cc-2326-49c7-8a69-5713a7be73cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.184.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86583dfa-ac09-471f-8742-00c1716745a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.185.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c125e4-c7d4-485a-a870-b5be5f63120f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.202.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d465e9-b3e5-4023-acfc-c9fd45fdb7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.67.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bee0e3-1a7f-4c9e-99d2-43ccbc53e4ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9196f0d1-0e41-44f0-a9ed-f55ca8a30d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf965ad-7261-4903-896d-c21706c33626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abeca387-7d76-4bff-b21f-51f3f337edfe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.245.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69827e25-76b9-47de-8324-9b76a627ef9c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.246.253.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507ba5cb-5fee-4206-88d6-c1809b7a935e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.252.34.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7418ae2c-ee5f-4860-8382-82d9a25922a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.103.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03192e92-412c-457d-a458-734283b7da7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.252.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88edce0e-f9a3-4868-8747-23d37459d318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.27.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0830607-05a3-44ff-99cc-d1dbb4c1a06f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.27.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21533f2c-cfc9-4be1-9705-4fbfa70cd85b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.4.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d214b1-ff05-4030-822e-0da8c8bf4e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193c929f-0f26-4800-b543-8aa217e93187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.93.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5640be92-ab62-41d8-9f35-643e4396d586", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.84.64.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9caed8eb-402f-4ef2-b6cb-98d4b9848293", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.46.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b90ee2-46a7-4331-97c1-cfc3ea45a6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8888c6-c7b2-4c64-82ba-5cf4ab25c366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cc4549-170b-48e5-b0a6-9435e17ea91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acbae8fa-7c75-4016-a50e-0146b2f790b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b539d0-4b88-4ac7-9ebe-d044eaf5b7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.116.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee64efb6-48dd-4241-9871-cd4230687ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eff2b63-384d-4248-9530-41ff8b000851", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.119.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d30388-6382-48b3-bc6c-26a884f0bf14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b763e7f-55d2-4a0f-900d-5411003292d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--124ed399-10e5-4f1b-b1e4-9448e67f599a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.78.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090858ad-b497-48a7-ae91-38377bc6149f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.73.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cce554b-0809-4911-892b-9c53bb33faf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.177.206.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc02309f-041d-4b68-8b1d-f9a31c03126b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.180.213.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e28d49-02fb-41af-8d9a-470b9c0229f0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.185.55.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e382c63e-a7dd-4f64-89f3-0a5d520fa4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5b41d9-4ab7-4483-868f-80f2f923b9af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24003444-4d8e-42a7-82dc-50d400efaca4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.198.30.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09951c21-3a30-476d-8212-0119a9afbe88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.104.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4e0a72-df9f-48d8-9ee8-1ca4b0c69748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.11.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f196d2-0ff7-4643-becb-118895be63ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.130.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558a588e-3234-4509-a96c-18a41c9cf978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.147.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c407935-80b5-4ca5-a22d-f6b442b439a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.156.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43607fae-a1ec-4445-ac8b-732f1602ef14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed19e31-bf80-4eaa-b964-7bece2bb1ddb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.34.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53138c78-4cba-4854-a54f-9146161a9685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.37.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31a13b7-6bda-42e7-b3df-cbb971112bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.58.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22ff16e-9ec1-4d1e-b608-5b3609ef189f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.6.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f1aedd-b6a3-434e-9d4b-1ed097a39f05", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.67.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2109e8-72ca-4b79-bade-c6603e6e0cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.77.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba398cc2-d927-461c-b0ae-fa6b766ac0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.216.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7d7793-56f1-47be-90ab-b2a61b4afd73", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.105.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b2d0d7-1d2d-490a-aeac-c97cfcc56637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.107.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc5f719-3938-483a-8398-990367fdb25e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.110.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da8078e-58a9-47ce-b903-9a14d5ab0628", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8834d49-8397-4684-a564-9e5bd9eb9639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7937f0-7960-4fce-998b-41947d8be26e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.121.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce4b826-c4a8-4df6-8a1f-b43be17b8c71", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.127.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e3963f-04d5-45c2-bf15-2f9c2f398807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.9.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fd5ebc-1adc-42bf-a7c4-b12b2fead496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.139.237.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd1518e-036b-4d26-ae59-dc301c0006d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.163.162.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f497b42d-48f9-4cf5-b24c-ae60e8b80cbf", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.186.116.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47fd23ec-4cae-49ff-a170-5893f921159a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.186.252.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40651a58-76fb-433e-9027-43d1fc4155eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.187.131.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1769c1f-1a68-4243-af3b-694f30cf9bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.194.75.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1316a342-eadf-4737-b6d1-38951da079d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.238.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ca28d0-ebf1-44ee-80d3-74c633fef1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.235.99.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fda150-4101-4dd7-b871-ce857f89fcbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.52.46.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cba2f1e-c119-4fd6-b05c-317b15969390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.143.159.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47407db-0f30-4a8d-a23d-1c80e6737bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.206.195.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c7fdb3-8cdd-4a91-a40d-5643ea29e532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.210.9.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96709a63-ac4a-49c3-9863-289df8ae7b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.233.190.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23dca463-50f4-4a53-98c2-11ae6d3dae1d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.246.124.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30135ec-e4c3-44f5-be41-fa2079406d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.255.144.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef2efdd-40f7-4053-aefe-77f932ddd0a4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.94.164.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e881c4-ba5d-4591-99af-f2c6b77b5c4b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.94.79.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d3b2e2-74e3-432a-bc2e-3f98caa17d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a33d309-120c-440b-8ba1-952486ed9301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868a51ca-96b4-4920-9a37-b9d0a1958f48", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e0d853-3296-4619-b043-77ecacf825e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cdc8b2-9549-437f-b508-ee955522864b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a58dc0-e887-4e73-9b04-eec00aa16455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.11.214.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ce0dd2-683c-40dc-bb70-421153a456e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.165.181.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6824094d-3aaa-4700-8618-9ac4bba9e82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.248.151.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c447623-8a4a-4313-b5b5-384e08bca7b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.248.80.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf06fe9-82e8-43c8-8b45-41691f921bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.247.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63be861e-e6e4-4197-9124-2d1972690bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.144.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db59ed5-a00b-40af-850c-0fcec911c756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.146.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36b2a25-ada4-4383-af5b-3bfd8dd8b659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6afeb6b7-c5a3-4413-be63-b5b11355ea9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.241.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83545da3-887d-4ff8-9c90-c31107ca8a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.143.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e74539-94c3-4420-a95f-3da85e03c443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.165.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8908cc7-5c4b-4a85-a42d-0decce36aa45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.152.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdc0394-1e8d-4956-843e-12f947c3afb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.153.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302ce204-1ae9-4ef6-b5ab-c957a2a049de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.187.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf566619-58d2-41ca-b412-ac2c63be9cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.73.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40546d57-7255-40e8-aa01-255e2c4bcdb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.133.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3589740f-9a74-41c4-a349-3c559a37c41c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.165.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27adeb9d-be08-40cd-a02e-a1ec896aeb96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.166.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312f5a14-4a7a-40e8-a84d-dfde55a8d68c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.173.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acabfb02-10db-4547-9ed9-85030c1c495b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09063a82-6451-459e-a998-a73ddc99c877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352a7f53-1a5a-40e9-969e-91df349ec822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2186f851-2029-4c56-8b8b-993645ab9128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf83f609-4f0c-446c-9e6f-dc4b1ba2dc2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccd394a-2f55-4e61-bc48-3465c1716e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879d205c-c0b8-4c99-97f0-9fa758ccae0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7593cd3f-2604-4a1d-8ead-ffc6b0dc4b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7777b9a5-a861-4b2b-ad40-d2ac63a129f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee325d27-9343-4456-a38a-1eb604429a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e363435f-5f53-4079-8dfc-8db96cd60eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb43805c-235f-4bf8-ac96-47ff262961be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f7f355-2244-45d6-b74b-fcc08deef2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8310cc-4223-4a07-af21-8723f882968e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26183a8a-8c65-4ea8-a9a1-2652b3ab9f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a2d1b7-65bc-493b-ba5a-2dfcd19a3693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2648b470-27bf-4e1c-ba51-06d26ec414a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f98e36-a705-453e-867b-f7ed19fe203a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f6cfeb-1c5d-4257-9a0c-ca161d102eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2196117-1f4a-4fe3-9923-cf19ef58fc78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246a4dc8-01b7-436f-b72a-d641377f6acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd5cb70-8e13-46d9-aac2-5e664fea9594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.227.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c499062-44ba-4abf-a518-3fb6c10404f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8929f50-514d-4d69-a18a-2f661711f284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.77.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e002f7-50fb-4848-807c-09c03d4dcda6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.77.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0760fa60-a808-4e0f-a640-712945656d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.124.222.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8651efa3-fc61-4a39-9c02-324b921d9e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.108.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e057aa9-2621-4750-aa99-947ba10d2c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.98.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0637452-cbf0-4de8-92c8-24507c4e5b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.2.91.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72779b1-1a3e-4061-bdff-15680854662a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41c1e14-0959-4be5-be30-ccd8b97d163e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.92.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e702a83e-3767-4020-acf3-15b30e8d7663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.217.74.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8d1230-e516-4ca5-ade2-d5b6715ee12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.184.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09beb6a3-ccf5-458f-917d-62c8d51def49", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.135.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ec2e8f-224e-45a6-8b53-92a01df88f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5432ac-319a-4199-aa27-58c56cadf909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.79.166.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2660fd45-a027-484d-875d-f336b833bfeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.103.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3de04a-7d22-4438-b2ec-e623d94d69c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.121.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ba1617-988b-4b15-b30d-834af69fb935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.71.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfac726-0375-40a6-8785-b6763781e5ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.148.126.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98a46d4-8951-46b6-89b9-f96dc3e513e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.158.30.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0ff1e2-7f72-494e-bcb7-40c839b9059d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.19.208.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7bd73a-4e28-4e41-9dad-20e7b93b09c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bacfd5d-c942-4123-b91d-ca89c6175318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.145.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b7b002-1abc-4ca6-b2c1-0695bd19b58b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.240.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8cf70b3-0f5c-4bec-8699-8d1a495be60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.41.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577ab014-3b68-407a-ad80-a208bf1c4978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.57.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbbd113-427c-4722-a10c-f779d3148936", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.59.32.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3aa4f60-b91b-419f-9524-20b9fdb8f791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f68353-8b74-421f-a917-40fbe3ee2b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a97e28-a34f-48b2-94bf-03175a85ffef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d8148f-c656-46ef-8eff-22e72cc275f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ff7aa2-160f-4c2f-b564-81ed2c796b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccfa26c8-96fb-409a-b258-59684112e9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.139.136.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407e66e9-edf8-4065-9f82-b9722c459ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.131.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4885f6e8-17fa-4810-b343-d332168f6574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.171.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4f822b-54cb-4612-8dfc-f74004822a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.197.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15525d2-ba8d-4f08-b6b6-d1bd9299b856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.241.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6940ae-43b0-4e51-9f85-77858dc2358a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b68579-cbef-4682-9c10-49ef719502aa", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69edbc3-15db-4465-9dd2-c139f15c760b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e062e6ef-1c1e-4482-af7c-e775f6891df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9e7310-99a8-473f-8b46-959e0a80c61c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53652ba-f915-4de3-b84e-477a3c3f5ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4638c47d-cf04-47bf-a411-db06d0adacad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882c008f-15e0-4cf4-b5b2-c60260c104d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9fd00a7-1e71-4362-865d-a8ffbc6e2c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af66aed-ddad-43e4-8f9b-802710c0eea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474acb9c-19a3-40de-ba9b-644564313110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb7e143-f669-4b52-b898-a2f07773cf4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e577c928-b25b-4903-9b16-dc56e2fb606d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5bf15c-7b34-43d5-9a29-32183e3e3fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae4c103-b26b-4e41-bf0e-dd88aa6a557c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43541fb-11b8-4621-99fa-5908d7303042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85fe3c8-617d-4c93-9397-fb1863cb2f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ccfe81-653c-4616-a883-bd210b2b1a03", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fce4f1-a420-45ec-9b33-0d73fe462a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72260f0-c1eb-49f3-9933-948c36b7bca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fba54c6-0261-4209-98cf-c32e7cf788bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d07c63-c264-424e-86d8-0461f8010eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369b535b-c351-44bc-86a7-13437426df6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ebc00e-02b2-499f-ad20-39a2bbcbe98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f750fad7-c857-4e21-b7a4-53f564a907d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0190773-cc6b-48c4-aad1-9016850b5f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fed4553-2859-41c1-b7f9-7311c50f0302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81aada75-4b11-4a44-9858-e7c6d0598460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45b0cdc-571b-41b9-a011-e259886ab1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b4719f-ab79-4983-a87c-70b4d0e3c622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc533f7-7337-4888-8f14-c242f7121fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebd06b0-94a5-48eb-8336-64e465692b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb90cd7-2632-47a3-a62b-d8dec6e33985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ec5491-a64b-4059-be41-c33525281bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e155b8-4016-4ac2-bf86-d18c095ee74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30434e77-c9c3-4e2f-a742-64cfbbf54727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf8c5f3-2a4e-494d-9fb2-63b9518d84b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8be2f5-5ed1-4c5e-9464-41710ab05bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764b150e-12ad-4e3b-9e9f-bae3e8009407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab9ea7e-4b7a-44e3-8342-683baa098216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230d98dc-961d-46d3-b47c-c2939333f459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560d651e-cc27-4388-8eb4-ddfa890c09c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b915a4-f360-47a3-a506-6bf0c47fe070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a0df2f-6d66-4031-9785-f65589bebb30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55bb186d-7c07-45e6-98c0-52ea0e13b051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b485e14d-947d-4e3e-a89d-7940e030d76a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e799c71d-86e0-481e-8723-d9c62d5ea8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1bac81-cad2-4347-8061-07adbeaab3ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6ddf72-5bef-4098-a248-655b1c076989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847f043f-ca12-4262-9dbb-58f38690bd77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2990658e-e19f-4104-bcfb-2645ea5f9be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658a20f2-4b4b-470e-bead-9119105af914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5878820-1e9a-47a6-9436-22e0f27f9d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81f36c2-5486-4708-bd9e-805f45c5e01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960f535d-bfe1-4d71-a01f-70d788af218f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e9e483-6d5a-4178-83a0-b27a70a8fe51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1418ce3-fe84-440c-a807-fad54482ea5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a439925-e381-49af-82a6-227ca4e9a1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0419557d-bfa2-4011-b610-bee4350f94bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a2f53d-dc99-4172-9fae-c584c473ea57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fae5e74-e6de-4600-8c75-ef997cf948bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cd6242-77f6-4229-b059-62c24a3df216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a10c0c-b406-4cde-aae7-a11cc322fadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2be786-5151-4464-9867-a04d704b144a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0420b04f-5f7d-4dbc-914c-21ad03e4a7af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551617d1-8850-4ffc-ac92-c4052c798fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1acb47-df2c-4e10-8ba3-4f05f168da0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af7d1d8-60c0-4ff2-ba02-5ed63e3e40e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ad677a-e5f2-4e46-b478-9d35d9a8db00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d94c87-9cc8-4c45-89c6-2010935a3ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ad7ee1-8122-4cbd-b429-275993143c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346ff9ec-dff5-4546-8087-7815b74efd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027bc561-9b2f-48b2-a755-cd281e048b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6635c473-22ab-46f1-b1c8-808be4eff282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1fb9d3-e20c-463b-8bf0-95386ee20575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fd9aba-7478-457c-9bf2-277ee356d592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59279de5-eb72-4144-9c48-5d6a76d35b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae6600c-43b5-44c7-97d9-98d32ac9f256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de1a1f9-3707-490a-ba51-1f2476bb621e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b317870-0e69-4762-b7b7-ff73f3cceaf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a62dd5a-dcbf-4498-bc1c-9dd9a8a66ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870774c6-7e3f-4d88-8cf5-6f0f4e6efb39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f444ce2-ea46-49ab-96e1-9a99895f8458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f252824-334b-4397-9048-2c12fa38b061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fcc634-136d-4c9b-9bc5-34f324cf715a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad95b15d-43e4-4d83-aeae-0fe715bda542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a64d55-4753-4ba4-802f-c5373d2cb1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2340001e-6afd-4423-aaaf-159c4e61a1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a94b00-2d7f-43e4-9f57-d101a659e8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1dd0e0-bd0e-4ebc-840b-3ab10b301b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99700ef5-6e20-4908-8dfd-026b806c78ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd45e1a9-313f-4d02-a5f2-cc0a982839db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f758c6f6-0cb8-4810-9b8c-47444d253630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c68e3b9-4293-4788-a4ee-8234e3afb800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a4fb42-7511-4f6b-8958-8ba1c991016c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93caf3a-57c7-4014-a3af-21ffb2ca3006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf22b902-e44c-4b53-a2d3-c114e65a2cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244439b7-c007-424d-932e-2697ada4d0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941599a7-8f81-4961-927c-fc69d58aeef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd94042-1e82-4d70-9803-127ae93894ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1a3bc3-a05a-42a8-b346-3ed47d482061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50fbbc7e-84e2-4744-ba82-81e309436c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1a138a-801f-4ee6-94a3-930a6458b777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e4bd21-196c-42ed-baed-82736900c436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f241f9-7243-4adc-8f80-57117203e06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f108a25d-6e62-4dde-9e8b-ec30fc6ed336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6198c668-3e2a-4849-895e-44084a87176e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910c6778-0325-4d67-a146-00d35e516e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69301793-d93c-4bab-9a49-76f9d97099a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfb41fa-b2f9-4b45-9f25-68311de41f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bf719b-fb58-479d-92a4-1f9cc8b477d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c52d5f-0ed1-4f53-99eb-f407a875adb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47169a3-039a-464a-a64a-e2846213a80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8f47d2-efab-44f7-986e-8a28398f1ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490ac637-9659-4cc3-9bd4-cb567413d8da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c7b626-6d34-4a90-9eb7-148b00c4c94b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89e13ae-5de5-4a82-a3a6-711d9957c011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5549c8cd-8436-4aac-b30b-e5c608aaf91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e263dc-f610-48c1-a8d1-777cebb9d39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07ae77c-598b-48fc-9354-7b6ef5e14a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027daf29-dacb-4535-a4e5-a5fe01c8ef82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36696c31-935f-4625-817c-6ab01b318dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885642bc-a6c1-4675-aa7c-faeb408ce160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3cedfd-af20-440e-9aa5-3547523011ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338f1f9b-5344-4397-8b16-a9e9bd644964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9b4f65-06e8-47c7-9d7b-c83793be3389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1535b2c2-12e6-49df-9da2-3239854f12bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e26e4c-bfc0-438f-89ef-75484fc769f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee27fc9-e19d-4cc8-b856-e0f70f36f67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b6fe4b-94df-489a-882a-342ed77373a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf59977-bef4-435b-ab4f-937b5c938bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d89bf7-dbf5-4fab-812f-75413067c04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299b374c-83e0-4182-8dff-2ee43c4ac036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09e4c0e-94d7-4b10-a2dc-8393207f9535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2942f8db-9851-4e89-aa71-d86a11154a55", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b760de-648f-406e-9693-5ea088d7d5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf38b469-00c8-462f-b942-74deac850559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ab74c3-5482-4170-ba6f-22ba7e5766e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d347c1-e3d9-415e-88c4-0ae815e729f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b85ce2e-41e4-498c-81fe-6386a11e7c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50276501-6233-47d0-babf-4a9c9fbe3f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f46d97-ba7c-4290-b9fa-67c8d5943966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba64af3-52c2-4e0e-a507-90dcc608300e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0fcec51-178b-4819-be30-4d83b20e35d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee5c0cb-ada8-4616-b3d4-fefc84963f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bbfd51-0690-43ae-9736-7d26a0b46495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00be4abe-8989-4494-abee-f5f80d54d6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a048af49-234a-44d4-85b5-71602ac71a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410ed5bf-372d-46c0-955d-548902335ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796f22bc-b16c-442a-b06b-7f214a61fea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9382a47f-4db6-4ec5-8804-12ec8511ecb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692089cd-124e-4e2d-8997-4aa216cb6c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9422ba70-b73d-4241-82f2-b621b5fb3cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d94dd1-dd88-4d8c-b4f5-976391593a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3578b24-eea8-4a8c-80b3-6ed9548b32b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f5f984-67c4-4154-9a80-cef5ec7c89db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e475f365-7d35-4ad2-b863-bdcff685c447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4223af5-0996-4068-aa19-66c93b9e378d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ee31b9-c097-4a07-bf4d-7d2cbccf693f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abcd108-2005-42c7-bd85-b1edad8107e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0480b946-8ef4-4fd5-9759-33563fa1855d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a0fc83-93a6-48de-8a31-8a3254ee8611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355bb660-0248-4bda-9943-b02d478b8828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186eb1aa-5dce-4524-8f5e-4d491f130b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19282ab0-955c-4086-b5d2-478adcff8d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e9c01e-51c1-40e7-9519-724a66752215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3c41a9-397f-4bb1-bedc-e97ee8f25b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a6a247-0a45-4f73-bae6-7d9a9c2c4592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5734a2fe-1cee-4d1a-b8c2-e5291d601849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbf50e8-73f6-40be-a80e-a09531027607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800f412d-9584-4e32-8fe8-23800c83e14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3250c58-b4b3-4718-a0be-4888e2814df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840349c0-1110-4d81-a219-66b1b0f64245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc42bac7-d411-4588-aaf8-6eea2b99a6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1156419b-5a70-4338-8ec8-6fec7c1a339a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033d7ff4-638f-4447-821d-af81cfae71ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92142b58-79db-4c24-ac2d-eba1edbb7cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fcb35d1-3185-4b70-ba19-afb2a31cec76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ad2719-3e39-44ac-bcbf-dbe7d80d2f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0428c8de-bed9-47a0-bb51-6561f97be245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd0fe55-ae41-48a1-904b-789b1e85d9db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ba3c91-d1ec-4c13-aa18-ef2d3c033fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e314b6-77b0-481c-b26f-4b6510193622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8719457-df98-4096-b131-0ccb10aa6a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8eeb66-5791-4a36-a31f-e2a2b0e0bb4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fc0aa7-46da-4b18-b546-4738e0f45faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e45d29-3423-4c21-93dc-d2ad09fa53e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e127a46-acf7-4dc2-98ad-3076fd717ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af6ca1b-41a1-430a-a328-10c1cc46c08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d60c09-ed9c-44f8-bc89-719c62eb1033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007d9c4f-11fc-46a9-894c-e01488511457", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbf2b22-afb0-4b81-89bd-97cd8f545d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22a5ba0-49f0-4c6b-8704-ffb13865f634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2fbeb3-7f5d-430c-b962-67d5a0f962f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537777b4-ac48-40a4-8602-cbfa5be83667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60a4ca3-5959-4dbe-aff2-c2e380c531a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d45697-21a0-4252-8ac8-c5e32513985e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58549cf8-0a17-4330-adba-29c3d1cbc686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a836621-b887-4c43-8b4d-e4fb55217755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2c4579-7b0b-4034-8622-5c1d80502126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2285357c-f720-4fbb-b98d-4a909ccd218d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a739b2-89f0-473c-930b-e300cac8f1ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829d65eb-ba1d-4028-a26b-00d585d67685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baef765c-d5c6-4856-a988-8e31009f214d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c503794-8f2f-4d70-b5a9-8279d588f533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7049e6b9-b473-4fc2-a598-7c834f11b37d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b813d59-72b8-4430-b59b-a67b672a0181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f70d78b-861f-477c-b6a2-0c8163118d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0409550-724f-4b7f-8a18-74b273aff17d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04221c8-01fa-404c-aff7-8fdf12e79ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe2f5b0-a865-49c2-a791-dc955528dfc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29330583-21fc-4636-917f-a1e9cb56ff60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fe4662-71a1-4e0d-880e-e02de29f949c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d29be3-d77a-429b-8bd1-97bc09b6613a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69ab761-1ff1-425d-87b7-970ab7889d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68ee276-b910-485f-8db3-c26a256f1d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.0']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8015a501-4f06-4598-8cb5-d9e07f935c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1edc3f3-1d62-4a22-a257-916788276cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2147436-df26-4194-8c11-d5f4331be005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39477ffb-2d89-49ad-a1c5-3409619d77c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92c6e49-05f3-4257-965d-2c699f0be238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa35966a-6369-40ff-bcb6-abf56ea9d8bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39f500c-fde7-438f-b7aa-f0854c88b255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cab0f24-03b1-4f16-b228-953d9f43369d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8825150-c110-4e35-a539-b4c4d76067cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b332b6c-9cb5-455f-8aa4-2c855c00dfb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cefcfb-fd05-41d9-8b1e-ae1077088cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb7f91c-d145-4e93-bba9-72bf2ec516cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c728e403-b72c-43cd-beac-e52959f3fe61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e4008d-b68a-4c67-a61c-aa8d90c609e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5e2f69-6fc0-48c2-a01d-32681b6e514d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82ee0dc-a691-4577-9bec-6112ee134a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f5ddd0-7ac2-4b00-ac83-c95f0dfbf0e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e844fe-9353-4796-a354-feb876f12a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f25e96-0951-4bb9-8859-974bc18e994c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c6854f-116a-4a7a-b5d5-8fc48c84e917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa9e484-acc8-461c-806f-321ca6c32af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03181a0-fd0d-4783-a141-e18473b5fb8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357d64d2-6092-418f-bdb0-3eeb4653741c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4bd8f1-cfab-4314-bef1-12d2679b7669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d497c0-5f14-46c8-ad73-49e4e7dfc614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6e1530-8c49-48c2-8154-92fc3b99c1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbccbb39-b942-44d4-a530-49ce3cb294ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae5d046-2aea-4253-8c9b-87cb9e5b9319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae23d2bc-a07e-498c-a09b-4e6a6b8cc006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd37983-a26b-42ba-83a9-3c6327536491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f58156-7517-4249-bf0f-fd66df548d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5320328-0c2a-445e-b623-f30dad461ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9154926b-639c-4d87-af65-c2ee5d29731b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a973672f-bc88-4ad4-99d5-600e7d17dd09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33bd149-ccd7-4c8c-8a87-7cdec29e1ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2efb22-d910-4e50-aaf0-7d97bd3779e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f2e560-3462-4702-bcce-ec20a6c19452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a78aea-6f38-4574-a8a7-87bf76530a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e459b9-423c-4c1b-bf69-26cbee846bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da009971-52e6-48dd-a418-94ad1176f8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879468bf-7eca-45d9-8153-f28d66b2ddf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e25eeaa-d375-45bd-8a34-38fce6ba1e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8d8452-5c86-4baa-8eee-b2a5206e3562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7023e688-2609-4383-9de0-4b413accf844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def5a990-4c8a-45c4-a1d2-88d81cd93998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bacc1e9d-9621-421e-8d67-abb8244cba65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439fb09a-2ed7-49c8-b5e9-88dfe0f27dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd35094e-1db4-49d3-a374-4db9d295eb59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beadafd3-1211-41c4-8890-5b0484244418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45102c86-3da4-43d9-92af-42333b1149ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be994eae-124a-4f9b-98a8-9e6b950d3028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e78899-b37d-4fef-bd67-c7533d8fd140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066db160-c15a-4950-9baa-467e8108e4c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428264b0-73d7-4455-be76-ea8b60c4a7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dcd6155-aabf-46b5-90fb-a45882d61d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b495e219-759a-43be-8515-15bf924dfeb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c176ff7d-284f-4355-9dd8-9ca7d98eaa92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d117566b-0cad-47fc-b5a9-44658f064ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7646d63a-1555-4c99-90d1-10362b43f4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03804f47-40c5-41e7-9365-333fb59a7754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc70ade9-8685-405a-8f6a-f831d12b347a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96079646-4fa8-4798-9a01-4aa68527ff9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b4edaa-3424-4308-90b0-c96bb66c51a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf914b44-294a-48f7-b238-3e91c1c894d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669571b6-4bce-4e33-a41a-b5cd7560e7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5794254-e13c-4212-9caa-876d6087ba4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2699cec9-9356-4cf0-9b5d-6d996e254d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66df3fa-0b56-4809-a14f-74d961694525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fb1160-6996-4d05-a780-ebd41683fafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15220b8-6ce4-4d6b-9759-374f5b21ca71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98f4525-3746-4735-b3e4-4caae42e97d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c35246-26e1-4b51-91ec-4cd2d3f7ab3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20973359-4e35-429b-9228-99e6fb7fb6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de09ba0e-1cff-4def-b9dd-d1c20120f347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e30f45-6e57-4424-bd76-c1c849b97438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2add71-4b5b-43ca-ac2f-b2c1ad179d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2233ebb9-c860-4092-a810-0dd8f863a2ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708ce9ef-e7cd-4adc-ad7e-81fdada08adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775ab141-f342-4c82-a7cd-ceda01841ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571ce7c3-22f5-4ef6-a618-597fc6a022e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d2a6f7-1603-425e-ac08-58a84bc47b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98203ce-924b-4cb0-80a2-29e5e20c0198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414b1f3e-c74a-4dd4-b335-bd6b864270dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff9ad12-96ed-4fd7-a7a0-c700ed7d6a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67670db1-e297-4760-a6b3-95b442c45338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc1c1c7-6c63-4730-8aad-35bc862c13f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81ec5db-04eb-4c56-8d45-8841f7960297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ab199a-4a00-4bf8-ae23-3119d369109f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be6af56-3eca-4e97-94e3-e8f732a3dbe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20bc98a0-00eb-4361-a68c-e2f7c6f3c7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44cee309-cc16-4c91-a02c-2282943a69ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222804db-b68a-4b9a-b2ea-7b40f51c699e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c036eeee-7858-4c4b-8b2e-de1343c92423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f070b9-2d27-407e-b441-171fcfb8f60b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be6709f-1e56-41b6-a0ae-b3064570afbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fc4aee-ce25-46b2-8db9-a7d6576620b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03d1f26-3467-496d-94a0-8a9b45da412c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be1328b-65f4-4db2-9238-1fe09366f4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ecfe1d-df1c-4019-b2a4-9bc83204aa7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce8b81d-73fa-45a5-9305-8e7fb5a37235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b512f90c-0d56-4acd-8c2c-f706e8239a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745dbb38-9fd6-4f2b-862f-179c9387010d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efccea20-b6be-4e34-a128-2f3054f94396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad77377e-c8b3-4675-81da-7f35688fb9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aad9f6f-6c97-47d1-8180-d46fcdf8acc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6fed4fe-feef-4994-86e9-ba97cc8739ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c279def1-1a65-4521-b0ff-9d46a85af7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e1f918-a950-44fb-ae20-8319ce85d114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93d3d9f-185b-49d8-870b-7186fff6de91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd63699f-bdbb-44d3-aadc-d79507be5895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98dc6634-f4d1-4c6a-bd89-00bd2e2e818a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d850d60a-3586-441a-856a-a86c7f15cda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064675c4-2fa1-4ac4-aba4-cfb352514e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f15c48-88e8-4431-8df9-829126156da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0bdf93-e82f-4dd9-bd64-213d5381698c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf946721-45dd-4bfe-8202-775d468f5069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e7a90b-bff1-4482-8d45-4af8a3a051d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37df4d2-2bb6-4e7d-bda7-32373c3da2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886a9577-b937-4253-be90-40d988d1b9be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f150ac-79d3-44e7-8395-ce389903b6ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7158e4ae-e29b-4eb6-947a-518fcbce662f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cab5d92-7b65-424e-8528-3c146f9f6a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1feba48-446a-4659-8ec6-3d26566e238f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fce9480-0f59-4f72-84e1-7a02b0daeec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e672eb2-39a8-4154-9f1c-983c74e79c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3eb1a20-8c2e-4340-91e4-0b8bd9e20b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1314b3-ad73-4880-a86b-13aedd1b8987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad7e6bf-90e3-4055-99f2-c011a0791c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71d44bf-2e5a-4ff4-a397-441686bf3776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a121d04a-96a7-4492-9445-3e1cc51a4921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859f91b7-c428-4857-bf60-756e2f8fce08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f4f181-a13c-4b39-b77f-68988dabcb50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd6aaa8-e936-400c-9c8a-14bc4aa906b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2b0845-3350-4a4c-b1fe-3acef86d25ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29012148-f072-407a-a264-f760e6c5fb71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7254ab-77f3-435d-bcb8-aad519f20bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225e0fd4-e57e-46e3-b86a-e268673af795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2d5a35-bb1d-4f44-9e6b-b956133e35d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c265fc-e9b7-4376-b506-d03ce9f8e959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1de312f-3bf2-443e-89a3-94be67c15b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c264a55-e906-4a65-a1e6-e58d8edcaaed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcd5234-39af-43dc-aa76-5443ad28610f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068be326-eec5-4ea9-b0e9-d25667786e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace31402-e8cc-4867-8f55-e8288c0d131a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbb2463-f00a-4183-b157-d2d1b1b1b748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f46c61-9834-45ca-8f74-efbbc2ea4778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848e62fd-bd48-4e8c-93ad-d2630f8fdcb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a710e58-224c-4597-a605-4000344d4ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cc3171-a6e3-44b0-9784-9f3da8509060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.255']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e867b0b6-c8a5-485b-8086-c656d7d060bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47ee336-7e92-4ae6-ab06-69d8fa5e3b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0245d5d6-bdfa-4de4-a4ec-1277fd95f4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c3c1d2-26cb-4d52-b3c1-57a393fa9ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2557957-39e2-4afb-928d-daa10d7f0066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f90a2bc-b7d6-4003-850e-653ef726a432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579fb8c5-c622-424e-9231-64a929808ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bca8ac0-f3e2-43bf-a782-09253a641eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a443888-7c98-4d8d-bc48-f5774c37830b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829d35e8-ec89-4f51-a635-9d4caadd2bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f935e8bd-116c-4222-b963-cf9805bfc6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069ad771-f346-4209-a271-b5a6606cdf56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b0779f-b37f-42ae-9474-a6310828d978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c861dd-78a6-43a2-8941-14193372fba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272c5fd7-65f2-41e1-9f06-e2a4db619c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74cc2eb-9fb9-4dbd-8a6e-0cac54535a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc59273-4e27-447e-baf2-32f5a8ebfe29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb5e454-18eb-4ddd-99e0-e985b4bae1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98fc5ca1-1a18-42a6-a336-a62ed65dfe14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a95b5da-215f-40ba-a61a-b8d323f606e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cfe2bd4-511e-4e1a-af29-7b7f31a71785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcd5486-4c0b-49a3-be99-3ded61647197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2894867-d7ef-47ea-8db4-505ae2d49238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d3bc73-842a-47b1-b88f-b17d565099a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0395e712-4a29-4f1c-9049-f960f20a10e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149f8d7d-43d1-4f94-9db6-30ff5432861d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf448c5-fd38-44a9-a52b-3fa6d2c6ff6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b633ba5f-5604-469b-b820-5e5a6d8640c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d113b0cf-d597-4523-8ad7-962173ff8196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777649c1-a51e-4f24-b728-5b552c35ff07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386b791d-06ce-4dd7-8105-b07b07fe65e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d21e4e-bfdc-448f-addf-0fd2560fd560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acbe61b9-c833-44f1-8fd2-a329782585ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9880d226-c5a0-4a55-9622-537c1bc9caa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6202ef4-ce34-4780-8abe-fa0e242b5d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5cac97-7fc6-40c0-92a3-148d7297cf49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c991653-2ee6-4215-8d2a-5fce9fbf8733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f732801d-467c-48ad-aa9e-b672d64fc44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b278f234-c6a0-4af3-bf82-e4e74b7a4a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402d562f-df17-4c1c-a136-d4bad9ae9aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aaa2404-883e-4eb4-89dd-fcca3695008a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f635251e-f782-4b18-a9d8-47f6f516f05e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa10f65-becd-42fb-9f10-df3cd1cfbd8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa2c86a-dc7f-4f53-8cb1-ab24d953fa17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4872056-be4f-4432-9fca-861c1bc0ba6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3768a788-b782-4d18-9dca-7b5a07d4b226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1950c41e-1e26-4863-bae4-77de172640a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622fd7b8-9db5-4986-92c2-905bc7c5b678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b98c58-a0f5-4155-91e8-f2038b7c4c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d269676-85d8-4090-a104-149e03d0d9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7dad380-fb01-4345-850f-49e516148a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bdb822-5531-4927-b887-62b80c3bca35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d34a4e-7789-4b0f-8719-211385ce80b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62db377c-ebad-4ab1-90e4-77b69300f242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5061b1b-43ed-4385-895a-b7415ff4afb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4052be-574f-4ed3-89a3-149ef045ca74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79566c76-ea34-4be8-a0c1-8de5c1e57599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff7c910-be37-489f-bdcb-751baf4600d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7557b0-e4a4-4477-8e51-0cf15a704f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48ccc1f-4161-4f97-b733-55438f17ebef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d797e882-0de3-4e18-af26-549cb56bb8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc9b8fc-b0ec-4ab8-b4ea-db8ef5756d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360f3773-ef86-4afe-a3b7-c9dd539f0739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d122ea93-5c1d-4a02-8308-dad6b4dacbc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a9989d-a82c-4be0-99c5-96b5bc0792e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9928283f-f0be-4f2d-adc5-77e78e6a4ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.197.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594c2315-0863-45dd-8ad8-e37b73b2aa80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.199.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a2d279-35ee-49ed-8a68-9fbb6dfff0d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.211.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8122f4-d12b-4a98-b29e-b5350586cb4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5a5077-55b2-4a72-aadd-b79398eddc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.183.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abafe6d-2ae2-4438-bf90-412e45b810bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.183.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8dd879-cc14-490a-a065-d060778ffac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.160.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690bb53b-b63c-4fd4-ab98-8f77ee04c8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.190.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d74a7de-5959-44c7-a261-183c89a03a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbf5a0e-8362-42c1-b01d-8d57ad730325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.116.84.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a586c3f-0964-432e-a311-9d391a3a489c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8b6894-6e73-4cde-a5ae-319c0a5c894e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1175982-aee7-4a06-8f47-064b3e80c7db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d2edba-81bb-48a9-b508-d1f360d025fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e371570-483d-4567-bc04-e36c9a3fc3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57c84da-8aa7-4e6f-99b8-e3350b45538f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bc32bc-d41f-4924-a2d8-f9686bac5edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727ccc8b-e767-43fd-999a-b29a6fe19530", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.66.132.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c7dab7-1cdc-4740-82ff-7c25b3c985fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.130.165.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72b8d4a-daf8-4bcf-bd8c-2ead74147be1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.34.48.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ddff0f-7cfc-4fb7-9ccf-a43589a71d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.88.80.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64e14e5-cf49-461f-8be2-7ac5c97df5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.156.110.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688e5974-b258-48e2-b307-0cbab4c641b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.156.234.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989449dd-55de-45e7-89ff-e14d8f5aa125", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.165.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9173c243-f381-41d8-a45f-e5d842ef842e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.18.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf7ac9e-01f0-49ce-8cb1-be6695139089", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.184.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1dec58d-5ea7-4c92-a1ee-62b0ecdc270e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.233.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0a0112-25cf-4424-9f56-69b7d9fdf057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.244.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b916a9-af29-497b-a6ef-78cf8c23d799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.57.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937c9049-4cda-4c56-94be-e08db0d610cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.114.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3264d2a-26ba-48db-9f35-9e876be10883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.162.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5ae739-a19e-4931-b530-37501dbfb5c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.169.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1b549b-b1f0-4584-96fb-3a9a051c747f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a05a15f-c057-417f-9e8f-5c4be13dcbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5602c498-ea34-45fa-be63-2ca38b94d301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591ada3c-9147-4d71-ac76-d1167120c830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90919bc-092b-4698-bade-32c9e6ab82b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ccdb7b9-f1fb-496d-b4b2-87707c56f3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae2f7f7-2906-413f-adc0-8a54d498601d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ffc92ee-f1d0-49a8-bfe8-138b6d0bf677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f525dcb3-18cf-4fbf-bf37-0e1af699f31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba9c4a5-3289-47df-a28d-718018b4b1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef65dd4-bdb1-4f2a-aa71-060da46b6638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca06a660-b58c-4788-b2ac-d53a57580f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6d052d-9656-4875-99ad-ad91236b57bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e816355-d996-4583-a00d-9ee5d34f4f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057f8632-289d-4bf8-9af5-0b05a3a96d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b11d594-7ebc-4e54-89bd-fbdc09661b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4233e463-ecab-4a8b-92e2-05a921576af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728cd5e1-06be-46ec-9a7d-770c040f28eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c20854-c227-4815-965f-dfc599baa261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58b3c96-3f36-43f9-a657-135dcad6a9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8283701d-537e-4ac3-8273-fcad0748bc99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06bd290-c989-468e-a695-ee78967649d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f760774c-c616-409c-a7ad-61f8b7733c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f3a1b5-5a19-42cc-923c-d850f474f81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48de6b69-63d9-4c7f-8125-038861e364ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d334ad5b-73f6-4d4e-909b-74b4f207faed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8695da6e-3cb0-4c41-964c-4a4b7c8d739f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db25ad36-e6f4-4fa4-b303-18854b6bad30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81e39ce-5833-472e-8a66-305fb1622a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b6446c-d832-44e3-b271-b58c765eb419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415c695b-ec3c-47d2-8c0d-b8bd4af0d99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ffd2edf-d8b2-422e-832a-dcb5799790d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9924e708-60ea-43b9-8b5b-6534819293c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c36ed1-6cb6-4e15-b0db-1a3d0e5af5ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8109df98-6442-4527-bd4b-6ae78a8d906f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b890ea-5928-45c3-b584-57cd89ce3c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9625d89f-90ff-4882-9c90-687ac68cc336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7672812-1243-466f-8cb2-3b59581df940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f32cb5-4213-4b4f-814e-867b4e38218f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd195fa-204f-477b-b40e-121bc2e5c298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28beb4d7-3897-4a9b-b947-b00463859475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8a746c-bab2-4c52-ad05-5787a44c3f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0ce165-1f14-4aff-90ef-856c68e7123f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a111c77-5625-4655-b426-6e5028d55833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b34e8a-1736-4d91-b078-faf3a150b2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c777224-1b35-4bb3-be4b-e88b4ef34b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4d072a-2928-4fbe-9d79-5f8c24e6e4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdd6a19-3927-4c30-9d36-05e13f942461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14cb712-ad2c-421e-b6c4-a4f05acc4e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfdb9b3-d1aa-47a4-bb53-0bd62a971650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922aff65-a189-4841-bd45-1e58392599c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0147679c-2da9-44b5-a0e1-7b28c2e765ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498b5ef4-f234-4e4d-85ed-7e9f438832ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b652a6-02ef-4e10-bbc0-90a6d1edfa80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e706178-2a98-4b8c-92ab-2f44f266e3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf11faa0-4420-4458-9d55-64cc52f82243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8678a76c-5786-469b-acf5-851e4febcbaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410d0f1a-6c9f-4b7f-8bc2-63cba22752ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9139923-f5c1-4de4-928e-8f944a0558bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5844359-50a4-417e-92ec-92bf7af86448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85c08ed-40fc-45f4-8037-51e04b3af79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf60861d-1bdf-47ba-abca-e3f59412b047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9bc2f7-005b-45a4-b5a0-9c57c90f0ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c042474b-5338-4c20-a6a9-d93042cef6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17238bb9-7d3f-4109-8567-a4893a2a55cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204c25d7-f8d6-4969-a8c9-495ee1b004fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549c44d0-4bb2-4434-832b-c5053ec176c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46be945-3213-47ed-9505-ab1832dd52eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.197.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81121d9-e414-4dd9-9be3-d219645350d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.136.181.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9f738a-595b-4927-a046-672f22e1643c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.158.80.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac6aab7-6493-4726-9b40-cae70ce17e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.169.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d317ea-266f-49dd-af20-34b566739fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.169.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc51b86-253e-4246-a79b-13bb39b63b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.233.150.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1419ca9-a756-48c3-bc2d-572f11b148d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.53.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9768b461-0319-4f1f-9b86-d4f861285006", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.242.191.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ca6f09-d66a-43f3-b3d9-35716e9ec812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.233.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebeb13f0-f17d-4207-8aba-75603a6778b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.80.77.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebbd2ed-f6d0-4728-9b51-662b00ecb5ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.0.95.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19254ed7-15d2-4417-8e06-342af22b52f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.136.188.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d07628d-8d10-4570-a2b6-dc18a18e8e74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.163.110.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48cf5fc-9a7e-4668-aec0-b14b1c05fb32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b212d51e-fcc3-4953-a985-142edfe86a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dee53f4-b865-44f3-9780-6d798d9b370d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc0ad79-8104-43cc-9647-bc82f6083012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f01ba1d-11de-4e45-976d-a11dcdd5edf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8283a1-c536-4d5a-872b-77c3fd6e0c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc3b82a-7e52-49ca-ba52-ffe6bc931014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b52996-ef12-4ea2-aa90-9214394241ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7f46fa-020c-439c-b84d-ab485609d6b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22cf8050-8c84-4fd9-9eac-90db0a7c01d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5336d533-9249-4148-897f-dc0e88df0a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.138.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b296029-0200-4248-9bee-2a1375a940b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5939ae7-6dab-4610-9149-71d7d22ba63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfc51d4-331e-4055-a8e2-c8d82f1d954a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a03af89-032f-4c84-8136-2f01a8224b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68dded42-214d-42bc-83a6-6ea89290cf64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4b0e47-73ed-40b7-a5b6-e565179543b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a167f0-ecd9-45cc-9180-820e206764e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036bd420-d340-45be-8df2-0ece8d1d11c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145c6dbd-be71-4f9e-959a-a5dfe2c21329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de1f57f-34e9-4fbd-96b7-84618a1d5642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d03e17-2ad4-488e-ae4a-f7e7554a0bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4b403d-a7f6-498a-bfa4-8fa656e97ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f299c7-e85e-4795-af01-8a4d34c80f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77985da-472e-43cf-849f-0f5f43d27084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d152d1-a45d-4211-8715-74b14e2dea77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10b7ec2-75bb-406f-aa63-a53ad4513dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513e2aba-c66c-4622-b5f7-1c9dbb706dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.145.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9141c7d-c43b-432c-9a6a-4f9dd611a49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac42215-459b-42c3-b0d5-d104770cc90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff691c68-9776-4839-8bcb-bf00649d8823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7d9ff0-6590-4663-81df-ce51d3322017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a8d606-5420-478d-b897-72d6f433a12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e935c1-2187-42fd-b53b-94213b7d571b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e91200-33fd-4200-828e-a583f737ad0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ecbac7-03e1-437e-8b83-053aff8d42d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c07f2da-912b-457f-87be-27d121d01dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbbc34b-570f-469b-a1ee-bb1f4f21eb4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74d8e16-d9d1-4e48-bdbe-eb4ce5c62530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3de5a9b-23e3-4817-8b1d-482495a0c67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194b69ce-ed53-4815-bcb3-e9bccbf57b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f030adb-2606-4251-a994-e49a2c6b4be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01e738f-e395-426a-b855-636b2ee5cbd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849d9da4-3fe8-4b41-861d-0677fa283021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0355be27-e759-4ede-bfc4-4b7761d753a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8702b2-714b-47e4-972a-aca247b932c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bcc6d8-7c4b-477a-bca0-ccb40e97c8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858be74a-a289-4340-8025-c1c0523ea607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b21254d-5ce4-47c3-a5ef-13416b370a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25597f51-1f51-48e2-bde6-49b4e449cee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.172.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815e72d9-c124-4f18-9882-13421773b5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209c1ff5-8a3e-4441-903c-a5877774e2fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e460a862-4669-4cce-bab3-fb0dab49625b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339a4b05-1f36-46c5-a9fb-a2116abfd8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e576bbf-b573-4959-a23f-9955416a8dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7b31a3-b4db-424d-8b22-2f26af26d247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff172f89-b332-4f69-89b5-f7234a3ed5c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786b0026-3ca4-4745-9092-f461ecb86890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5789dae1-ba85-4533-8684-a71a03546785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752b8747-86d3-451f-ab69-dbbd0c2d3f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2fea1a-182d-4d14-ba79-c79e71ced300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bceb42b1-d4e2-4f4f-a459-63f165ae50ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51b1c94-92ee-470e-8404-387bce9047c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a107f6e0-318f-47a8-892b-d765808db06a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8e443f-b87f-4676-a207-9692deffb60b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.189.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727f891b-5840-4edf-bd83-b895a266938c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.191.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe48688-42a8-47f4-adf0-0bbc385ce3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.191.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d95830-34f3-41de-9fdd-2b25bf5445d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3236c3-6446-4582-881f-7b2f95cef4ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be840eb9-eb98-46ab-8ef0-ea6a26b97c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0073ce6-dd79-4da8-a18c-5c320dc21f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb311fd-6429-4208-b0d1-edfb0173b1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e649b26b-7ce8-46b3-8688-fb6c7793aa1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c14a2ad-99fb-407e-aec4-ca0aa9921069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2005f52-f2df-47fb-b9db-e0156dba0991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc2bd03-7773-4128-9203-7a514288f558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b46664-f3c3-4ea0-836f-a80dd556e994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b5569c-c37b-4c8f-a943-38dbce930a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bbb854-79eb-41c9-a397-c00516539558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523c9b23-69b4-4f05-8400-a83d29036ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b4b5b1-213e-4ff4-a81a-ad6205e6dcc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70cde57d-584a-48cb-9310-3a6c1879ee77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ff53bf-af29-4639-be39-9bfb41ea967b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be2b4ac-6882-4cd1-acd2-ae84c2d865b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--debeff97-d1bd-44d7-8ed4-dbd88b0b3b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d558e8a6-749a-45da-86d3-fae1a7928a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb1c0e9-5ca9-41e1-b180-24e39c49b6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f213815d-8250-4d23-9827-be39aae7d293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212b443c-4c1d-4f02-9c5f-b2d40175491e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3653fca-c483-4218-a969-3c0bff2a33cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74338c6-fd15-4711-b393-1af740e6f356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec8173d-1051-4376-bc9e-f413f1d5839f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbabff32-0764-4a9a-9405-321ef3be42fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1854be9-298c-4db4-a00a-33db5bbfe14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa891e5-68fe-4694-96c5-d6e3f0a0ad2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c48b8f-c95e-4612-8131-4b5703bc9f81", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7737095d-7308-445d-805a-5943ea89a330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8625c0f3-adf3-44af-8986-751bc970a532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d7d147-edeb-4035-8513-372f889b0042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc105a0-e35b-4fd4-9079-32f9b97f42b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9908f83-9899-43d3-941e-1546fd5b83e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ecc588-26cd-4e59-a7b4-a46e6fc69f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ec21a3-065d-4877-aede-a65249a58dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e2c10a-cef5-42dd-918d-978a2366487e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a24819a-c2a4-48e6-be8e-517b277a43bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.223.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33357010-24d7-434e-b036-e56045bdafdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0280dd-d893-4734-8522-559b0fefb202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5bbce8-79a9-4980-a80f-1be5a3b52e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe7a007-d2a3-4dcf-be54-f9625a810000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500f2dd5-646a-4730-bd22-5c73edbbb7ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9345e968-7e2a-4936-8861-683a7e6e430c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41db4e4c-c06a-4e47-a3ff-b764ed608b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462cf2c3-ef44-49ce-af5b-4152dad78796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0477cba0-7f22-455e-8329-bf0aeab540cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f61d573-382b-4717-aabe-cb7eda7c8d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0b1f36-7fe0-44a8-a189-968a62da8e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a7c1c7-1685-44a5-b44f-31e171912d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff067f2e-1d81-470d-bd4a-932e9cc7df8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e5af4c-48b7-47b2-b216-e6d9a468c36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb643226-761e-4994-9370-8a0fed9f15c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814d923e-beaa-497d-a600-257f051dbee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32485b51-1bce-4371-9d8f-a39dee9fd5ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8edda7-82fa-4d21-a6bb-7a421a374600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd354ed-d277-434d-9c48-9a84dde8cfd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf61aba8-de18-461a-b149-f8d744342a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306821ab-ff42-4c0d-852b-907ec40ffacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ac20e1-5f5d-499b-a30b-23e4c7826b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05750073-f743-4577-b058-2b49b9f8fa5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102e52c4-87dc-449b-86f6-701f099d1ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96313ba7-ae2f-44ff-9f2b-a612f7f561c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d306508-4b10-4f2d-9d4d-ff291df6868b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301dc1a7-a08f-4d13-9dda-acf289ab2ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2cd3ac-092d-4e79-b040-6ea2f19ef51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491cdb41-26e6-4304-854a-97eb1315b92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee9c58b-dc8c-44ea-9b59-fde155bbee08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b24cab-7610-4ef9-9b7e-97ad610a185a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6cf898-d739-4bdf-a1a1-01a0f2d1dd43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ac7e91-4bb4-4711-b53d-cddd4ede75f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bdc4fb4-fa2f-4bc1-bb97-f2a55b4bdbda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.250.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7cf0153-6d74-455d-aac5-a7ed899824c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.250.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc2d81f-b0ee-4339-98e4-ea3343a77051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28538a8d-4bea-4179-aab4-302d9aaa4d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788d0465-d77a-494b-bae2-d6ab6f542c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.255.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9f8b32-e53b-4f5a-9dc8-a5a2b1651825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.136.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebaed5a4-6e6b-4247-9ab6-8889d4021cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.228.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34b261f-6d06-4864-b97a-86733922c8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.140.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1a0357-d7a9-4b43-9ef1-e26191b9bf90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.141.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14feeb2c-d461-4b42-9b70-5bbd11066d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.143.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05457bfd-58f1-4723-b5e7-1b464ba38617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0f2639-cdf6-4f29-932b-ffd12bb6c485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f66978-2662-4ecf-87f2-f6fec8b4be1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3fd44d-5242-460b-9c0c-5d60e7bec716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.0.126.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7736182d-b3f0-4e77-b100-7b317660086c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.127.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e02973-2a21-48a7-9ee0-d5a862bddca1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.34.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f99a48e-1d34-496c-94f9-5c50609d1c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.52.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4675caf-50f6-4124-819b-f72b67cc56fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.75.251.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c254d9-f7fe-495f-acee-bddfcd6c4c02", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.75.83.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9289ac0f-4a0d-4842-b735-978d083c187a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.75.91.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b631e1-6708-477b-9ff8-a4e894976473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b58e617-d065-492a-95b6-47e9b33494eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.12.36.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a672a8-e3ca-41ce-8dce-31bf308fecc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.125.186.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9321d23b-6220-49fd-9d41-5bba66aa661b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.14.23.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ca3f68-1cec-481f-a1b4-63eab16ffeb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fdd99f-2383-4e3b-9e43-74835c96511a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.119.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f705221f-c4e6-4992-ba3c-b625a771a21d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.146.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2775b897-8105-4085-81d7-c35088cc033f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.196.79.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd720da-8a5a-44dd-8f73-b8ec7273f6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.56.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1794ca-89b4-4547-8cea-aa5a25b872f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be99de56-1b77-452e-8218-ddd6d34a2357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f87529-3e95-4c9d-9350-fc7868dc5536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c729b7-5c8a-4098-ac36-ead249b9be70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc93717-127b-4462-90a5-52c596666d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d41af96-37a9-401f-be3e-953934d2c371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14600395-bf21-43cd-9971-72f5079ab766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396aa626-b2e9-4c27-8fd6-26c5c0d9f962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1157ba8a-5436-49fc-9340-f6e0563b9a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b396a1-b0f1-4b8c-8ae7-a6bd92834cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c612fca8-6e6d-47a9-b00f-0bb93d9deb1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f81d04f-f702-4172-afb6-6dec13ed0f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b359230-f21d-4fee-adb1-c0606e63fd8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.69.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9abe04-60c3-4169-a6e6-82d47a470d64", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.69.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5101873-cbca-4451-86dc-4e2a41041a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.209.132.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447c1f27-07ac-4dd4-97eb-8f420f87c5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.209.4.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad70b4b-24fd-4fba-958e-1c8809fae609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.43.52.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3ca667-53be-418f-baee-7897ed696ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.70.82.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d725e5-baf9-425f-adb9-b136d5b001e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.72.195.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b93eae8-945f-4da2-b423-998c1c7152b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.72.201.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8798f139-a999-4a78-b8b1-40c4be9affda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.12.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f0fe0d-8e58-4220-96e5-dd5510f60af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0359e5ad-b516-401a-a279-694cf5c58e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77beea4-4a2a-4403-9ba4-cb405b7b4529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84932fcd-d96b-4f0d-b125-651869455aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a5d3c7-dba2-4bac-8ad3-e7658a1b9bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084a8900-6657-49d0-ab32-5fc2cbd865dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd800e9-99d5-465c-8fc4-31570bbd996f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c80cc33-4828-4905-804c-df18ef717d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c17803f-19d3-4069-94b9-034484aeb667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d0fda1-b3e2-49fe-9df0-9501b9e35292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fd991d-5a93-481e-801a-433afddc4316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de08ca66-44eb-41c5-a70d-a2faaf280811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e73984-ed42-4088-9014-5e1463fd275d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6309da44-ea21-4f73-b703-0eca64c7c128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e58d9f2-7f28-4e23-8372-1b58d94ffbcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5797a4b-062d-4470-b8c8-94fdfd8e81a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee50b32-c107-4298-9788-87940a626e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f302b5-9a83-4cd6-8aa2-4a72fa6f0db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a9b638-3841-49fd-a583-1e463ca362e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47928f0e-15af-4819-ba26-bb98ddc9e770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5801eb98-aee1-418a-ac08-dc9855ddb57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72648cad-b08a-4f67-9f9c-4f01740efcad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12d0f86-40de-468d-a8bf-ebea4e76df06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270bd66e-6b6f-4b9b-b2e6-1720032e5141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b114540-30b9-481c-b1c6-091335d57dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d557649-3dc9-47c7-aa7e-ed24ea6d764a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6cc7184-7ade-40ef-a736-489d2d44d7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05ae839-9b5b-4e85-9ddd-065bb717bcbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08229095-0fad-487e-a530-027fc1929189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f61424-43d4-4d19-bd0d-b16ea0ca0634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dff1db1-6057-4c38-a22c-a1a088c4e5de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54631e03-01e3-48c9-be30-fe76e86ec98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e384386-08e1-4489-a146-60bd2507a4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57666542-147e-4f51-8a7e-2938367040f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048e70da-d98d-4397-8e57-18e21720408f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b78daad-f91a-4681-9d78-132cb760dbfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f40715e-7f83-4c55-9439-62b02867c81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7e862e-f732-4ec9-a1c4-8a4e24f3017a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4512443d-46cb-4f31-a69c-1c2465637a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0632bbc-7302-445c-8707-7be8d9ea419d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76e86d9-3fbf-4eca-a774-c4912accccc1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.92.23.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70256165-54c5-4a47-9e83-0b79a9efdfcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.13.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd6a553-2b71-47d0-af66-67ce557166dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.2.215.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ee4168-f01e-4e50-a6a9-98113b5d286f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.146.60.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149008d4-260a-4f20-94c2-0c37a3c077a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.200.121.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829c2c93-97e5-4646-b7b7-799d1d0371aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba6f98f-4d7f-46bb-b08b-e0ab9e786c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece1d861-6e7f-40fa-8d0e-f980955c8c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.237.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1085d662-e3f5-4bf1-b314-765f8d9bbff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.16.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539e6a10-18f2-4fde-b6d5-777981b09d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.21.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2b9039-bea3-4fb6-8445-60b75fde954c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.232.100.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9a68f4-2dde-4edc-af7c-6c78c0636736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.41.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca5a5df-4a8d-48e2-9606-17a265201ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.244.28.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94dfb0e1-681d-437f-b095-52f727053b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.38.51.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b0bbd3-01e6-4ff1-a142-f783d5cd4277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d35a37-6a45-4a75-9255-bb7206318f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e7e709-562f-4a53-9020-7a67facf372e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.52.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6b71db-6566-432f-af63-5c2e6c667346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.143.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e43376e-aef2-43c0-ac6d-d1e211cd137c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.161.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1f2766-a0a4-493c-885b-aa43a3d42c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.167.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0eb2d2-482a-4516-a060-24fd461cac7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.18.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c70028-c7a3-4efe-a515-ff6bd92a24e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.205.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b509ec-edee-4fb4-9131-b7828ff327ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.56.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2500ed8c-93b9-40b0-92c3-777f662d955b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.98.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3c3418-eca6-419d-9177-4858fc7acc16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.173.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbdb6fd4-bd8c-47fc-a85c-38b71dab8e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.177.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be34fafb-c21c-4c3b-b5ec-5fad6f121ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.33.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b20f72e-ee6a-434a-8994-6ec057b6ef28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.4.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831e8819-181d-4e32-92be-96fed02a5120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.46.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e97f2a-7a02-4ce0-8851-837a81a24e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.96.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fcf33c-9868-49db-a789-8037aa15f0e7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.66.219.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a7b131-6080-4389-9c05-eccabd672484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.66.25.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ccdaea-638b-49f0-873c-ec1b9f3457f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.21.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59288293-72c2-4264-9f54-7a95be82e67b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166c5b96-dd54-4b95-97fd-5fb9d9f8d180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.86.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfa8eeb-ad63-4ea1-a7a9-bc86ae11d2d5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.201.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c306d5-390e-4473-b7fe-0ac5d03f5112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.227.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d152e2d-f426-4452-ba8d-de37bc09978c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.208.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1051bc49-c326-4393-8b43-3bf6a2b53217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.208.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b35967d-245e-4578-94d8-ddb105ee67e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.26.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c112178c-98c2-4b65-80bb-a932ef001bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.13.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7324862e-3d89-4429-a6f9-c4424e66ceee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.15.0']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed758f57-5dca-43ae-b567-0487a7e9317f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.22.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24132524-e3bf-4e62-9841-9a7e9adbff51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.44.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f95a009-e8b2-4ad3-b16d-f9194ceaa667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.58.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318a0e03-51d3-4bdf-a980-becca48bb08e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.64.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d4969b-ca39-4165-8bef-57a0582abaa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.78.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5d6c4e-54d2-4d1d-ac3c-5d87cde7aa43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.0.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b34483-5a72-4226-be1e-434ee0365ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.129.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d89b99-8c02-4c4a-b9b1-b6d96ecf713a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.238.255']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6503446c-7580-4985-817f-fc4d66394f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.31.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebdde35-a393-446a-9cbd-0ea483481d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.237.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0f9041-28e9-46ea-a76a-cdd709386708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.1.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e639c549-64f0-4dd9-a693-3dea1ee027a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.100.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1660acf1-9e78-4c8d-b53d-243f01c2d76a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.135.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3622d5dc-5bbe-4a3e-9d10-204e05ae4da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.140.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffb2e63-1de7-42ca-a087-bfd8a7d235eb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.172.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62876460-c1c3-459f-a275-f42e7a120ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.198.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5954e0-4495-41c9-8249-90279973a288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.30.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f28575-a747-4f4f-b196-0939807518c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac74fd9-a7b9-4b94-8c38-4a7d75869909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa65e4f-d46c-45dc-85b8-6848b5b3a0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd8566a-533e-4c61-aabd-2f81240c8125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2c5321-735c-47c0-9392-06288703e112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5165c9b8-a022-4338-a64a-24a5e0a1a318", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d090513-d0f9-4b2d-a6bd-e9cf1ad7ccac", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4da4ee8-254e-42cf-b3fb-fbdd4f97fd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae7b664-09ee-467b-86bd-76b05c805098", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b581c0f-cdf1-4877-a8fd-d53def64717d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f1b88a-58a7-4887-9eba-eee0d74e3124", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.174.129.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b5ccf3-18d6-4602-952e-c12a81ce2175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.244.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087a0ae0-2e2c-4acf-821b-1354c8d10498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.29.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc158dbb-e3fb-4f32-924d-4b614455f9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.87.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22cf0b5-4aba-4c72-9c92-5a22f52910ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.22.160.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728184f4-6416-4007-ae81-4f99331b7ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.238.24.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efdd7559-9c74-4031-8884-b86e6b41debf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.251.185.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f64305-cbb7-48d5-b98d-b3e5efcf37ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.251.197.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c59fc02-3385-4eb9-87f4-3d0c727e90a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.251.202.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c263c4-cc62-4fe7-9f1b-9903ae49213d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.108.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c456db-e9f4-47b9-bd38-006c65b5979a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286419d7-a1a0-4a1d-92f0-8703ddbe3758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277047e5-f655-438e-8ce4-deb32ddfe5cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1723a92-2c74-4799-97d7-771cded740b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7345be71-e701-4e18-8484-9414b095cc4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35332a02-2f1f-47ea-9eab-4f7aa15d8d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ee7dc1-5421-4a80-b9be-7ff4643150f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8143ea8a-0b60-40ba-bfdf-137b522a00c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e0ca47-30ad-4cba-b91b-c26054ad7595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c947ca30-b6c6-431f-bbfd-95d2609096b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f42ebb3-4a1a-494b-82af-02cea920f210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980f3706-6653-4b97-8dcb-75641a54d171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abfb158-6e36-490a-9d5c-88698cf045f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e29c89c-bab5-4c16-9664-fcb4320b17c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02d7fcc-b2ee-401d-9e24-ed130cdb9c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039fc47a-734f-458b-8ce0-3fa4681b654a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf76351-5584-408e-9b5b-3de5eaadc29f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653a1f9f-fbc7-4fc2-b953-fb76d7787b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945aa7ec-a107-49e0-904c-b1a6c5f40345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.52.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85a7429-5af2-4cd8-b472-9802c4df8dd1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.230.217.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8889909-ace8-4342-8611-1cbc7e3f4ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.248.239.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5162ac-5f8f-48d5-91f4-6500e014a04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.100.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063d6b36-758f-40a5-b670-71e4d1897090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.124.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9ffcce-b3aa-4bdf-b155-653b851fbcf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.143.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449807de-67bd-4115-9e9f-9c6465ce3df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.145.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4e247e-a5a3-4840-a8f2-e28ebd1ba638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.147.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20cced31-0852-426f-8349-498977f3e2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.148.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14593579-1785-4619-a4ea-62bff7c02446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.156.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15cb68ea-2b43-4b85-a8b6-f1520925e574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.16.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dcf9725-628b-40c4-adba-de418b109f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.218.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c6846c-0f75-4257-a1a2-71213acb8d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.27.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26a5b1d-2b70-4282-af10-bead7a36f681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.74.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f47f19-1f08-49b9-88f8-883b3f1dd2be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.9.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169ba4f5-2ca6-46cc-af21-8911e1f12218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.49.218.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f24efc-abf2-4663-bfe1-98ddd8102c5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.66.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fafa7fb8-c0c9-4b87-9cad-aa56ea8a8fe3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.81.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eead76e1-5359-4f7a-b9cf-a1b5d29447de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.159.200.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d1665f-cfc7-437d-9841-55a17e243d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.99.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30266331-7784-4724-8804-4a217a88e8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1706cb-5ec3-4a8d-a869-93507b8f2005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53bcaae4-c4f8-4f0b-a393-9f9201159856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bc704e-cf54-4a6e-9fd1-7cf9ddfc12e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c861abb-168e-4556-97c4-8682cc53b5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e1c27d-d017-4d6b-bcc2-0857d22a2028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845058b4-b611-4408-ab40-5340e8c86de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bbea5b-7718-4509-8b62-26a6f7ae17bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cea02ab-6632-4ba4-99a3-61dfd0966045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112e0f91-14a9-4b11-9cda-2adde6435aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a65574-e420-4181-8e68-8ac10d07d81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7e2ae3-4c43-4cc9-90cc-462ddbcbfb9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3402425-6fe5-460d-b284-b67c5141f78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816b8710-1bf8-4a25-8953-f506edb5f096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038bfd12-12d6-4a29-a473-ec5ad951ea39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9862d07c-9c2f-4e55-8858-ec3138d7e61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47b948c-dd34-4c4a-83d5-bf6e41cbe898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1c38ab-6c72-43c0-94c3-99b9b80bc7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b965baf-d3f5-4fe7-8026-c66301f24d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874160e1-acd7-42b3-89b7-666db8f38385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db5148c-2b5e-476b-bc4b-b17aef56da56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ce0c1d-43e5-4e9b-a32d-90ec85ff0840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb94486-1b12-477d-99e7-1fd8a193cf8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5417683a-d559-4aa4-8e6b-811fb5c95b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2f91cc-08f1-4bc7-9956-6c23f6966084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d342a99-86dd-480a-88c8-9e0fe66a489e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff4c47f-5a6a-4428-8ef9-9bdbdeddf252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b0dd05-9552-4faa-bbfd-4c3f49e0dc38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d198a8a3-3d54-4674-8731-24007f2d077d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e051abb-decc-4828-91ab-22d250214f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcc0bc1-94d5-4fb3-8b0d-1a16986c7c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6444745-b356-4d6c-be80-c8e83731f37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f30ec59-58c5-48bc-9f9c-7a69643bd867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236270a9-e2d3-4ba2-bfe2-c1049218dfd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70225f8-363b-4902-a706-900e1b2e338b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90038eab-88c7-40af-b165-a5da5ce7cd26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807728f7-d48d-4d23-bf1c-a3ab4206245c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0a0af7-9bee-4bc4-83a3-b81df7f1e256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eee23be-95eb-49f2-8cb4-20b185b97a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e317db0-6267-45e0-af18-769a8a9b3489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee01a0e-2707-4f48-b357-880fc6883c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b22875-551c-4dde-800d-e7351ede10ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5c0385-0d68-4dcd-bba4-0b76acb2afa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8ad322-02a8-4689-8e5a-71ff9e7882db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29209ea2-2b54-467e-a632-0a187344853a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bdaa487-4466-4ea9-9c7e-a5d491857e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9acbc65-b19f-468a-b177-361cf64d6d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f225564c-da45-4008-9fe3-a3a86b9b5217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220758ca-6100-479c-a23c-9009bc1f0e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a27ea2-56f8-47a9-96bf-b873260783a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f4bd0c-1484-4dbe-9151-73259a869216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3d2a92-dd73-4f4d-a9f7-2bf94da163be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2fa0d8-eee9-41f1-9f13-26d744831336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d70dc31-6e51-404f-bfec-85bce88651cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac25fa62-53eb-4df6-9c9e-d3101a4d183c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aca5827-dd26-40b1-a99c-aa2ef3bb3f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46092eae-3e83-42df-93bb-e2ca3d049b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1878ad6-b422-441d-bfd1-07e884114202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a11f5ee-5958-4aca-b8d9-a036b79db10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612e5725-7ddd-441d-a325-e4d28d87c2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459657b0-356b-4862-9b99-abdcc8b688b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be77238-5411-49c6-bc98-91c8e0144598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12eaaa14-3509-4f75-8be4-464b8e8614af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516f2332-e2d9-4822-8f74-3bf2c9a59f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c4ae13-31b9-4689-a69a-31b9f1a7abf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda221ee-5b76-4176-af7d-d6d852fa5f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95007a98-28b2-435d-8497-af6a418bc082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822c6c6a-abd6-4f94-b9f1-14ba02e93f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded54d91-28fb-4dae-bb52-cb09ba90183c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e67b56-abd0-44e4-9757-250d3700fb24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a959489e-64e9-4f2a-bc18-da98983fc94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316f9d30-0ac1-43c7-9c72-553c53ad84e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d81505-85ab-48b6-b681-bd0c7798ffe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27422ae6-a785-4a25-b6e4-c70481f1d89b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76f8704-da37-43c8-bb53-45c31c84a2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3913a496-76e1-4396-8b96-b99650db312b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f22683f-00c0-4669-933e-0e7c917581f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edb0066-fa11-47f0-8db1-8c46cf054dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffe87ef-c20d-4d0a-9a57-63e85d65c5dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6f5235-297a-472f-a8c0-3cb041f3c93f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6558b92-d537-46c8-8a9e-0b5c539ea367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0dc4b2-261c-486d-9979-799ea16ddc7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571a595d-0bf3-450a-861c-53d81408bf16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b4d02b-eba3-4431-a319-8ae6fc81f1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb790e6-6843-4697-b4d5-d78c75bee3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77795856-2ab0-4fec-9925-269e38be506b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd57a7f1-2907-4ef7-b155-f8fd017a9415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec19650-a74d-4f49-8db9-a9d10c978cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e65d60-bb1c-420e-a56b-c26af9f89a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15314070-b796-40ec-993d-2b090490d618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e3118a-752d-443e-bd69-038bb95c2f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23856071-8f07-4328-9841-0e132336e035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99b6e54-3c25-4fa8-a9e9-397ba9369f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb3c9f4-8596-456a-bb44-39fd97b67168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9abb7c-f0d0-4548-831e-7d0b31fd734f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48622fd-9a28-44d2-a8b4-397a2d631cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82e654a-5901-4e61-a157-610a02fbbb80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38914d63-b143-4341-a2fc-c60fb5c2ba26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822f17c0-577e-4d74-ab3d-50bc47a29846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae2c62f-cdde-4442-94d4-0ea039e6822c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7cd2db2-61c1-42e0-98be-8f40b6ccc413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a2fcae-310a-45b0-a212-3b99e27ced44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc67bcc-b684-4d61-a5bd-798675e82c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400b22dd-3e10-4cba-b2b1-32c952913a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98afd78-67fa-4ab3-a84c-c0201b174eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c153b834-231d-4e56-a34a-6d4337d03f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab647b25-ec26-413e-a92b-1f59eb547243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624a9ca8-ec77-4893-9998-4f05fcd75779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8f7e6f-b9ab-489d-ad19-346aee451f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36387e5-f3bb-4414-b094-86cc4d7e3c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c932678a-57fe-48de-8ecb-26af1e6d1e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a0687a-9ed9-48ad-8db0-f8ea7c22ca15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed81815-2164-4b7c-88b4-a1b4415440de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ab95f2-115c-4886-8a51-d7b0041cd71b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19864320-d291-4391-a98b-2e7b590b97f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704bfdf0-b53e-4ee0-aba0-c8cd75736e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecf1253-777a-449a-9db9-bf2b8dc7eca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de40ab10-dc4f-41c2-b437-3529089372fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54542764-4b4d-4f58-9e2a-64feb16ecc04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3830fe7a-e1e9-4c1f-a88e-3ba7f4a33988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0333dce-18e8-47dc-973c-8000164d6160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50d1228-0dc7-4f56-9558-88a23c59d6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9c491e-b1a1-49ce-9424-d51231f02886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86432d15-5803-4e1f-a884-b08bf6e18d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cdd6c3-acaf-4552-9c2a-a5f3c92f24af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13032b75-15df-49c8-8ceb-ffe681195809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1596704-4116-4fdc-995a-6cf3211c3438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f46d42-4515-4bf8-853c-05b87341d3a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea821cc5-738f-4a4f-991d-ff3a6bdbaaba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d5b9e7-7788-460c-bc6a-e6108d59063f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdeb4b18-3b57-4410-bda5-68eaa4c6ac10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d830bb-0f24-402c-b987-b6f52ddb96d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63cfcddf-b043-4cf2-be49-5c6442cbabea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a01960f-6947-4b2a-9f8d-d597c846df39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9632ae-d539-403a-9bf5-758cb64ade12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00adbe4a-ca64-4be9-afcf-94002d567824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351af504-970d-440f-a686-7ba6c4d40264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ae4b4a-6af4-41fa-a6f4-2f38bb446448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a59024-5d32-4cad-9878-f0e43e7f8d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d6c7ca-5b0f-4d19-a214-1bdd3160016d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b72a8b-7d5d-4000-b6d7-04b76b317826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1f5792-3ba6-4fb2-b446-d5293649ca28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c118159a-b4c4-4024-887f-8705a8599d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0c1a66-39b2-469a-a545-ee832f84021a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f2c412-9311-4312-af2d-39abd62ea8c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b2afc3-f383-45ab-bfe3-142dba99d791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98d1454-1e6c-475e-9a79-1177e8243dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f776cb-fa5a-45f2-a3f4-5f09c110d1d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76637859-c51a-4262-9fc0-509942d2dc03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e968a6e-f16c-4a67-8e50-cf17df1d4cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767654f9-e0fd-4d8a-992a-69f23586b23c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc4fef7-4a0e-412e-8333-c8c439f00051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2149b04-0866-46ed-8375-adf3233129a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903a8294-241d-41bb-ae8c-4dc2fb7a1fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2a545d-c30c-4027-8e0f-a83bbb17f71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b28014-50ed-48a2-b54f-65ed8bfd7b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075c5386-6f81-409b-ad6b-82c74138502c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81c623c-07a3-449e-bb97-a5c50d5b7318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a65283d-66ea-4696-a959-ef31b83a8ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be4c60d-9553-4fb4-83df-e498f6b883bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1aff58-6999-4eb3-8c78-40c7fdb987da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f593825-a3cb-4483-a4e4-d3c3871d8446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30d8e6b-8b34-4297-b87b-00b0828e9209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0cf8e4-943b-43a3-a513-2c581106d956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2123699b-6747-4cff-8dc6-9d5089239f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8008d5-4336-41a4-a8ab-680d3d9c249e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da44e16a-f0f5-40d2-9070-45879d7c497b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99090df7-8828-45a0-afdf-b6b2421d3e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7079b1b-dbd9-444e-8a64-c6fab115462a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385788b6-ae65-4048-bba3-2f86d841e61e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d83b379-14af-4d1f-a55f-db45813f1171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8994d39a-90b6-4dd6-b26c-6345606215ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b1f28d-fa90-40b5-a62b-4db68dea7c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa766a2c-85d6-4591-9d7e-2a82c1c57241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303457cd-b620-4b46-826d-17ce84ecdcc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e98e730-b66b-4f30-935a-c5ee4ad29c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55bcbaf-f644-436d-b3b3-f9d8349880d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbee3fe3-b0d7-45e3-be3a-30aca812d9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00cf587-d0da-497d-b147-cc3a75234930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdddf504-bfe0-4c61-8e9d-14d55816f5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46e04cb-8cae-4321-9ff0-9db8a95b4293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d102cb6e-7c35-4812-b60d-261e4325ec62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e9f635-7ac7-467b-8f8e-b0836864a8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45e2f23-f0ae-411c-8ea6-5275e78db21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b896b75-5f84-4142-bab4-55a3b58e5d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac13020-e282-4599-b3a7-972d28c76fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc495a1-11af-4b5f-b55b-54a7b8f02d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b791698-2d2e-4563-a855-bda9f4a8e1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81da9e4-0d44-4838-ae26-574f52f592c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92efa23d-b393-45d0-8238-d3a4d24a9ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fd8cca-98e0-4a3b-ac18-07b668f27d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54368df-12a2-4a3b-b72d-6fd8bdd475f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c819c2b9-ba1b-4085-b242-3b8adc2808c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd21eb2d-1eb1-4187-b849-2d4f3cbedaa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8d815c-0da3-4055-acea-8d18f1be8e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65754ad-0d88-4fa8-bff8-c78fc421c78b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6240a2d-9216-4826-bd58-da04b274d13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d556ca9d-8d7c-4fcc-9435-3891494da04e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1d9940-53b1-4d9e-baea-7d49470b81cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab26a10-aaa7-4946-b75a-f7269fed1bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071e9e43-522b-46e6-9dca-382f7c3148b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4913d06-970d-402c-8118-ca6a34717ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6dc904-53dc-4127-9c86-daf341057b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d55bab-fbaf-4d96-b3db-38edf10104a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27156dca-200d-461e-8b8e-efd4d9709ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44dd2ae-5696-4921-87e8-fc55e872d927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029a5177-8845-432f-b892-39a88d62f6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24a9e1d-96e5-49d7-9dc4-38a74c76940b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e3ca9b-8074-467e-b87e-b69f608eee40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6ff58b-308f-40e1-9f77-d623fbc50a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be6eead-5844-453d-b2d3-380ca3612765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd700efb-7668-49d7-9256-554e500ad5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0553671e-7c53-4e85-a014-903b9e6e5468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d24e21b-0b59-4e79-ad23-ff0b91d6312c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37dfe11b-c1c3-4610-86bf-c71464bd1d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486f3a3b-54c5-4188-9377-078bb5bfe732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bcaad0-2bb8-46dc-b6fb-057c402bc58b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--638916ee-12d0-4f47-850c-60bf7bef69ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e3be9b-473c-492f-9ad2-c99b352ca89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984ac009-289e-4840-a62f-0d3b72bd5fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f913d6e5-e654-4679-b374-3dba0fe6a54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac34929-2539-4621-997e-a1f2e63928d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5db5a8-abdf-441c-b8a4-16f3b19cdc02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599c6168-357b-49c2-9943-92f9d930985c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c081ab-8e3e-4451-92a5-cd1a3447b3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddd0580-a218-46e7-a942-0b2abce4206d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05daf83d-c527-47d2-89f1-05ecd6922074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b329b4e-a92c-400a-8177-2ca2d88b05f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a3fa97-0b76-4b8b-99a0-0de6580b35a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474e62e8-074c-43de-9f35-f9a0b110deea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a45041f-d89a-4d1c-89c2-d96a4e82a726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21995e5a-801c-40f4-8fd7-03af8948ece3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1056ea2e-4574-4e17-892f-c4ee2b318549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8596a2d8-f90c-4ee7-a30a-4e2dda649ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2490e8e7-3306-4826-a437-deed417b2f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51134bca-3e61-4ed8-a295-e114fa6373a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4a28d4-5385-48dd-b614-7cdeb80a8d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4622add-a23a-4d0c-9c68-024051b49934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c020e5a5-22a1-4b97-91d8-50c73918245d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7e5092-45cf-4207-a47f-9019815b0204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e192f0e-d88e-448a-963d-19aff6d1be81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e974aa4b-c298-46ea-99ea-2b0eb8649b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07cbb235-8d30-4cb7-9528-b52be0ba523f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbd272a-ab72-47d2-a908-e6993aa662ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337a8508-c6ed-4dfb-9d97-6f3a8aa84a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb6566b-972f-424f-9a7a-ec7a1e5a1d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc00550-4f6b-4a90-8ae6-173a8d55f05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4dec201-0402-4c4c-bb4d-c561c94e6ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840fcc15-6d7e-46a3-b8af-6de780914528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd685d7-cf98-4ca4-8758-99bba00d3964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e9744d-f1b5-4372-bfb5-b230c872d127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24902d8-7bb6-4111-bafe-43a3b5196985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873b1ef0-5e37-461f-9de9-64559cf1f311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fe25da-122a-4fe0-832f-1aacb881819d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d2bfbb-f369-49db-92df-7e79f57c6aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bcb1ec9-ede7-4882-b2e3-477f31c7b361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c953a50-4303-4d96-a465-c646174119b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ad4779-fb0d-4ebc-a479-eade52a45cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe9c7f0-f4ea-4107-806c-a09f96762e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c01ebbf-ed6f-4624-a3ff-78de27b0a392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb2259f-334a-46b9-aabb-da3f7a4a546c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a146e9c-7090-4a63-a4c2-b0d02daf2da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2866f15d-ffc8-40f5-8670-334c99562ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4428b3db-72ac-4509-8892-10741e541983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5474b8e-b849-4abf-bf63-e35ed3ea483b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1275611-e1d0-4636-ae19-83df8ad05b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4991d5a9-6727-4e5c-9a9e-ba64123a896f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ec46ad-0d1c-48a0-bd09-7e344831f3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5ad4fd-af0f-4653-9d00-d15643d92988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8e9b7c-cf99-422e-8b9d-5205e462c9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405a153c-2977-4797-82ff-1469c8c7bacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2a7a2e-b674-4cca-9e8c-ba1c4decc7c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e106b2-6668-4a6d-b97d-4587b946da0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0c1282-d711-4cac-b4b1-dffa1dfdba60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdee9b14-e360-4150-a0b7-82134d80a759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885667e0-0495-412c-a13d-30c9fae67d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b9ab21-fbbb-474f-a128-e408d33d1002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b14f00-f577-4e4a-bd3c-aaa309b03c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d775a317-1373-451b-a5b3-66488946a96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ba5d7a-fc29-4d7d-8112-96106234737f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32856ac-c3a0-4d26-9c5a-a55730722108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e810272e-d94e-47d6-a16d-1ec927f0d923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89719161-07ff-42c4-9d07-b4684fbf7755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b823ee95-7aef-4fc6-b273-c29575bca5f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e681e9e-785e-4d5e-835f-bccc8c3e0e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef90c807-cf83-43d7-897f-db927b1b886f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa72a471-6827-4d84-bfa7-4e84ac622fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a506d748-237b-4dea-8cbe-ea1bdecc1cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4327d42c-30ac-4aa4-b25b-693428e15d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe55e8eb-82e6-433d-b64c-50ed01de71e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0281e82b-e328-49f0-8f56-22c37a0c14bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf06283-d651-4e7c-a3fd-e1be7527135f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce413fb1-cef3-47c2-ac74-a14ac38ce9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7662d5cd-7a92-41d2-8403-28010e85bcd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8149e8-3e67-4a38-ba49-974bde7ab8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34da0c85-b0fc-4a09-8074-5c00dc172145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2529813-66ab-4cc3-88df-60f0a5795941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a3d51e-e8a3-4669-8d31-22c8711c0ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39139b82-f24d-43ed-af73-1e618e84f1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb102ac4-b4b3-458d-8a97-7f0f87520436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0989c2f4-7ea4-46b5-9364-094e25ddd202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df59f1de-c967-4fd0-883e-1e57f3c09f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e63a1ae-5ad7-4414-b90e-99557bca16c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8953e37f-f2da-468c-a5d6-823e844f4341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd196512-e144-4362-845f-2e0769504ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccba6d17-bf61-46bf-ae6f-4d9adcd690ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e345599-9628-4756-9681-2942832d946e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f88ad2f-774f-40de-9032-5addb093f6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f45e34-c398-42dd-b490-82d5f2f015f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf54874-2893-4bf9-9c01-ddbb2fb45efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8344e7-d795-4aba-b754-ff062146a918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2628158-ca03-4580-8a64-9ea987df6d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c541d3-bed6-4257-acb9-a9417dcf43ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30023a4a-11ba-45dd-872b-ce10fc55a9cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e6422e-546f-4e53-b979-ff3c2c4ee27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1bcd895-1a60-408b-95a2-0fee94da0075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c8a3a3-c5dd-4169-b594-c3bfb43f577f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ece616-34a2-444b-877f-400f663f0a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db12ee15-c1b0-4113-a788-856936196a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217bd8f1-00c8-4c1f-869a-32fac41e3062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd942271-ff17-4c73-abf5-4ab96fd40066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24651a2-efd3-4d6f-9691-378e25e33c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252a58c9-654f-4df4-abf8-ee8a32d72d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef573735-6629-4ed2-88da-c5117ecc108c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2ca180-64a6-4424-a280-4e63e82958bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2933d0e-1b9a-4f95-9659-e2a546ea98d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cc52e8-2d7a-46d8-9b51-bcdbd46ff375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9053734-9b36-494d-8f86-6491a128ceb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec85e9be-7084-4562-8430-82a55f33c07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcc9315-ff3a-4885-a526-88b846c9b0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86faa368-2e7a-4c7b-8dd5-e385799347ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ae0c1c-8642-4878-b080-1d373289caaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7827e706-b6b2-4d65-abf4-e373c72d7f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d8cb0b-d0a9-40e1-950c-d60e216b4780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d6a5c8-877f-48ea-8e3d-3a620537f99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1615c511-6d51-430c-8607-b920c273b12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904bb92c-d716-4bc2-8a1e-2dc4ca58cee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2467915e-8e75-4232-bbf5-0e8b2205527a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe7a9d5-5549-44c1-be29-836e0ceed40a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b79c91-9353-4cb1-9fc2-1d5f3792944b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9c03e8-e932-4def-8cb8-765dc764f2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f910ba41-1fbb-49fb-a73f-841c9ca8286d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851d2115-4cb2-411c-8c87-87bfc2bd766d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117d32f7-96b4-447e-af0d-aea01fe6a436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15866099-1fdb-4f60-8a99-b56938967d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa76caaa-f1e9-4da1-ba37-b435955fbf61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5fa2ca-e925-4d34-8eb8-6d60be9ea843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8fafe9-fa18-4fae-b3fc-31373d76bcb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540f441d-ab1d-4ccf-93fd-15e19b7216fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea9bff3-62a9-4a99-b023-119156febf24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf18ad6-4a0b-47b3-8e75-7b40fbca0c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b5c0b0-748a-400b-bdc7-2b44693ab899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bf31b3-8b54-400a-a994-cb2f5e6af977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46d63e2-37f0-4c20-8551-606ce2f99937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91b43b0-58cf-43e7-b4ed-1bd786480f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afec799d-0245-41e6-b2f0-12f12bd5434d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7501765-ad33-4b37-bdb6-536158baa990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642ca60d-32d1-408b-ad96-a25f411a0f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9173f7a9-24ce-4dbc-93f4-951a8dc403a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcff5ba-8188-4c5c-848a-ac1921204a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9ddea7-a3b8-483c-8886-3c7fe90fd91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc10c44d-abfe-4bbb-bbd2-a6fac0032bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fcc561-a45b-4d82-a74d-156531f4261a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4123e3d-1aeb-43d9-bbec-1b102e27e219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ded6f0a-a169-43d1-ae93-9a469e7a52b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ba1127-86af-41fe-9147-ed1ae1e601d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b914dcbd-e800-4ea4-a6bf-d43a20fc5465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca072e5-8bb4-4a77-b494-45257fd73f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435052c4-011d-4554-82a2-d885e9b29940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19104cd9-4bda-4a91-b75f-f7e0edc6bdcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211eeea4-39cc-4723-ade2-a20bd0f74353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc5fcdd-68c0-4532-ad87-f990d2f15031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd188289-c1fb-46f3-855b-c635ad03c01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3daf34c0-72e7-4e60-a57a-a18ae13bc0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062bd582-7234-466f-90de-47c8a6fa4e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f82885-acbc-43f9-87a4-e97eb5be12a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8375135e-30f2-4224-bc61-6f9a2b0b1e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1b3a73-be1a-471c-bbd1-cb1c9f77d0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba892993-6698-440e-91c8-9859029be890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71a7ec4-c25d-42fa-ba05-ba0e3cc5fd08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f999688a-9e44-4bf5-9ebf-e0a6655e1958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd79e65-ff89-44ea-8a07-3f26bb11f999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7325e78c-fa09-41e6-9967-6882129a0f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7bd3af-4ac2-4e83-8363-49fb15fdaa1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46e5ade-4980-4551-a90a-b51cd3c48a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ad375a-97aa-4160-8951-cca64644c900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d8317c-de02-4db1-afad-eaba0339b7b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89aef501-95f8-45de-8f79-34f7fc583443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b420d8-3f26-44e6-95e8-446afe646e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5d24b7-5bf3-4b06-8057-5d900530f4fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fea7b60-0954-4dcd-b56b-fd1c7e15ccd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8ba7bf-15e9-4432-a990-a5e8662b3412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e085d4ea-3eac-420d-a0b1-9bc72a17a8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2baebd58-9492-4f68-b0e9-9485156e894f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb9efcd-3647-4fec-9ddb-a5c3b92bbdea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1611c227-35b3-4e94-8d07-d39e0f03b7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a085223-b3e7-41d1-8878-5958dd6edf32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c484da66-1fdd-4f82-a9e3-211ee0763a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9c3f15-7d94-4c54-b5ad-22ebd7ed86b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37c1949-3992-4260-a82d-365aa7e070b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1fa46dc-1323-45f2-8025-6947be52b7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb9ba99-05d7-4a50-a4ef-e252b233acee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791fc5d2-f507-41c7-a997-1bcc8fa43184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388e2ff3-08a9-4853-9e92-9a1ac5c72e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b8b747-31cd-4b7e-a932-cadf01015fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54c4f51-2752-4514-9799-24d19b01a117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e46d9b-ee82-4372-adb8-1e6e6cd9a6a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d94fd3-0ec1-43d5-94c1-6bac4e796920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10ea5f3-edcb-43a0-9a91-27ee69ab1b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba6ce5b-077b-4026-9b08-3f980cec5e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bcbcd45-298f-4e67-b3eb-03c88c667525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fccc3f-7587-422c-b2fb-a60d18a13b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7831394-8a36-4500-b513-7667479db8d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44805b4d-885a-45da-a8a7-cb708e9b649b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867225c8-9485-4ffc-b5bf-703403b1eb1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899c4689-e697-404a-a031-f0fb553fb20d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38cef1fa-f798-4269-b62a-dffc3ef1cd81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70448b4-08c0-41a4-800e-80080372c9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2798f8-da39-4599-a2de-ad5a41a2fb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8525829-7d38-4ea7-989f-aab4d0b0dd78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b748a33-0b4c-4420-adeb-64cb1088dfa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5de9ff-f3f5-4a8d-b959-e4fc459dadf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096b4750-e566-4255-a9bd-195b4cd9ad07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7187019-bcfa-41bc-9395-1dad853684ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4e8304-e164-4bcf-9491-b5c195f1cfc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d244f1-f3ca-463b-8470-cba0f13618ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130629e9-4f2e-458b-b289-13eed274bdce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfb4d1c-0d3c-447c-ae7a-d79f6a867e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26a9422-9677-472b-8cf5-15e540a8456a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50a28f7-b73f-4831-9ca5-9861a78b6e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.16.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fc1d80-ec2c-427d-85c7-2c85dbf9906f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10422f82-8fbd-4e74-8ad5-9dd0fdf2e9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.39.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d2f3b9-837d-47b3-9262-b4bbac9716d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.114.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0194d2-6d73-426a-9a3c-c2f7179221db", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.138.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a297b43d-55c3-480c-b987-39588a25b2cf", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.167.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf600c4-31f6-4765-ba8b-1364d6da56b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.248.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4db107-d5df-4720-a7bf-128ce6d566eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.71.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5ec004-46c6-4ba9-89d3-fa4bfd4206a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.99.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f523747-f7f0-47e7-9261-0f363eb4e540", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.253.66.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce416792-896a-4b06-82c5-6a4edf6fb5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.4.163.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ad3c42-58a4-443b-b18b-dd7e9c0f1b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.132.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d84f7a7-802a-467d-9e74-08b66c77f06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.192.217.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80bd7fe2-ea51-419f-af50-e8929bd6a3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.223.54.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026e9a9b-ed8e-4650-81ca-e1480022cc14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.5.16.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78839e4-f55f-426b-a17c-3bd558caea56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.3.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9224759c-6bce-461b-862f-d9474723026f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.132.235.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939cc6ee-2e40-4861-906a-71486922c114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.163.24.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238fa041-5fa7-44b8-adbb-e4acd761967d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.68.100.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35ce4a1-dbe2-465d-961d-c0dbd78df850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.156.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a849803-7f3c-4c84-9024-af4a1db81c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.176.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bff288c-58e3-41dc-b45d-a386dfb5c598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.204.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d208b1c-f474-49a7-9ae8-b1179de3b4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.209.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d98392-957d-4af1-977f-d609364ebb6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.231.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb5f73b-a77a-4eb9-a396-22643adaaaa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.103.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e193f684-e471-4246-9cc2-03c211550df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.148.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4721477-4e7f-4d29-8f9e-6a8f00713b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.161.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32f562b-af72-42c5-ac14-98d2a9209b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.162.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea98e45-c04f-452f-9453-e800d9426de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.232.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e2c1b7-ab6b-4311-b052-d2ddb9da2517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.82.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405e8da9-89cf-4f47-abe4-b5aa092512fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.101.126.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7b5487-79c7-49ad-b894-eb32252bbb57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3732c3e0-597f-4c4a-9bec-9085c7ced6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076d9cf5-0ce8-4829-a90e-0d2c437a4ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.104.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bbe980-beae-47a5-a915-6415f212b7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb6c5ff-ad28-41c0-994b-aeeccf1179a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568c6e19-e3d4-46f7-8ba6-0c5474947faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fe1e40-d15a-45a5-ae09-70553511bf27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262233ef-d1d3-4f48-9c77-52c77441a416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9e0071-27ea-4081-b8b4-9d61d6ba90b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128d7193-d5ab-49f3-b386-1c7a822c10a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1816cf-5432-4cf8-ab0a-f0122cb9000d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d76d827-8c0a-4e64-9821-f56c962ad05e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170b8df4-e0a9-4921-a45f-9658126e3ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d73222b-d85d-4f0c-84ac-a886f207356d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8fe769-e3b4-4457-bc63-f371f6f3d222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12991cb1-187a-4a02-b71e-1aa6245e5eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b16763-968b-4865-8285-5ab9fa467dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b4f813-ee9c-4b83-9b53-15f1207917fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce294fb6-1959-48af-a793-523df79e2d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e8f881-7fea-43af-9b2e-ea27129efcff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0064c91d-baa9-4e10-9e09-5e3cd63ee140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd4a980-ddf5-4e27-98b6-9325cf022b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4315e13e-4ae1-4b02-9ab6-ce8bdd1a7370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d6ff8a-bbca-4c67-b19e-4dd0db4fe377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398ed752-6f40-4526-a8c5-0681c116338f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8094bfef-f792-4e13-b514-c6b98e89fbfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f46d1c-52f0-4467-80f0-a5be5dba3277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08f5a24-d34d-478e-a7f5-61cb7aa176fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d27b91a-7a17-49ac-9112-fbe030f1fcf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1fe071e-2d6c-4555-bd44-d281b9958da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2ee661-a482-433f-94b1-e7547f78df79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac709c3-77ca-4cf3-889e-405c9e0ddaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1149a407-b140-4b60-8ed7-3eef3aff9c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b24a0f-3234-44c8-bbef-c61c2a9af14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0572fc37-6775-4626-86aa-1e446dd1d3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.136.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548fef9d-2557-47ec-a978-170b5c9450c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa8a465-d094-4738-a815-44615cd82b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d6e1ee-dc6e-48e9-9df0-dbda74afd843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f52d57-daf7-493c-9b79-0432c1aa72d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d8c3da-4f35-41ca-a1df-91396f1532bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0b026f-b887-4cf8-abaf-1ebb2a936f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33e41c8-1572-449c-9436-ade82eea1c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4c2a47-e1bf-48b7-a449-79846f33d6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1756ef16-c58d-43d3-b941-bc7004341145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b809d930-4832-4ea2-a9ef-e93d35394759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac3837e-34ac-4bac-8c1d-246eb9427e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bdb22c-e931-4bd5-b1eb-61419a99bc8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e655a3-bcf6-4b81-b09c-db588c98eedb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1fe1e1-d5aa-4e43-b49b-bc300e99624b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee776e4-2495-49a1-b5b8-5f1b5c209a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612a30fc-7067-4112-a32d-337ba302ecf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8640abd7-35e6-4433-934a-12d34d10c720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01de5c3b-90a5-4cf0-bff7-2d4b70d16c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fae5a40-6b51-41c3-a8fe-0925bc2280d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5143e34b-e5ae-4343-a459-d8828a218c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3523083e-f92a-4154-9e1b-9d13c93dcc52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd8646f-d4c1-4d46-988a-f2aef5a3b5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd66dc2b-8b46-4844-ac46-7b2012e4b4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ce3d16-75e6-4de2-b49d-0b52022fecc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d7315b-7c55-46a6-b80f-2222639be36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7879bce1-ac50-414a-88f1-337d15e97984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056a07a5-e4fc-4b82-bded-00b4df9cd352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2c06c4-8fbe-45ed-9a24-b6f2e51f73d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e40d1cf-06c8-4b04-9172-a63feb099579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66840c2-d3be-4e57-999e-2963b05f3fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cce3acd-991a-43c5-8f5e-e3ecfba3db4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311293a0-157a-413d-b387-08ec4d42f5fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7ebb26-17e4-464f-a233-7d61bb4d6f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ae37a5-eb3d-4dc2-89e6-1965c62c93b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b7cf62-655c-4a5d-b8d1-477be0fba5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc496564-6901-4150-8212-4d81c735460e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e9dca2-dcc8-47b2-a725-e20f9edb295a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ccc614-22a5-4690-a0a2-b30f8cd187a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d3c1a0-c349-4dd5-a05f-52628db2ef43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe710e6-cf75-4cac-a52e-7d34c63f5323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe783fa-e721-4f6e-9001-0b34e1a365b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c2c8ea-e02e-46e6-858b-7a7d04d2159b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9a6475-f686-4527-af1f-6bb30a11e71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906c69bd-8ca3-4f52-a6d6-748321dee645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31083e95-8ca4-4937-b642-c16632426d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377affd5-66eb-443f-bd5b-25c00060c6aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61cb3e6b-0ec9-4e51-8aa9-3074a2d07804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7704a6c-e7d5-4e58-a604-aea7a5743748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb556064-5dae-4432-9dd3-58c14b70cd74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c157729-69d0-4a90-a481-a92a6cf47cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b9ac3a-4458-41f8-add0-315a58e23a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a00e94b-d3c8-4917-8e0e-0a2b200ad658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e725052-bc23-4f0a-bf56-4c9775a22841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0f3a5f-a943-4372-bdd4-0ce8dbc42045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae867f0-ce41-4b6b-9742-a6fefd640ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad5e393-5d9d-4ba6-ada9-daf357bbdc79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a983a3-52f4-4a83-95d6-30426affa2e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba12a5a6-2cbc-44d1-a7b9-8c77ba2ff799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb15b9e8-4a7a-46ae-80b9-cf860201ad4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d96a509-c7f9-4104-b3b8-f4dd6b748e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293b7e1a-62d5-4dad-93e3-16771ead3138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0580162-2cb5-4316-91ff-018fa7c4dd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9443c23d-6cec-4fd5-a9ad-aa50ce3b1590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50df19eb-0b2b-4dda-8eeb-ffbe0d92063f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456f4488-77a6-45ff-8e9b-ff1c6f3067e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a0d802-7945-4577-ae09-8df67be1d5d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed7c534-053c-4cd7-a03b-dc3e78582a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe250509-3c2f-45c5-bd29-347d80ae2bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b35112-8e57-4759-a2d1-5738fd33169d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535beacf-7d90-4d18-8c05-ce827cdefda1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d2e440-0b3a-4cf7-bee7-dad2905f7ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12b2ffb-fc45-4498-a60d-681aa9070b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e377b2b-2327-4eeb-b847-75973f220d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ae7b71-3064-45bd-843b-9a97b236faf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b764546-04d6-49d7-bf4b-ca6fe1765510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249700be-3880-46b7-8af6-20300dbd47d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5366ae05-5981-42a7-896f-8154913f7f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f9edd9-bce6-40e0-8e5f-0736bcb58ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6acbedc-03b5-4e45-95d7-74563fd3bc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98cfa3d3-8771-40be-9469-5ab4149e5c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90b31a8-3c91-4c68-97e9-01f36c3007fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3ec5c1-1a20-4b36-b8b5-7f467c5fdbd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d25a9e-83be-410a-b961-3512ed638491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0ef655-6ed3-4c39-9be5-3e416c9ff456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417b0ba7-7e13-4a3b-8aa3-076be7740faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac7b157-b744-41cd-9f3b-9f7fb9b07a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2804f056-8eef-4f84-830e-56c3bf54a20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4716a360-43a2-4a85-a54c-8b776d3f8039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63cda7f-dde7-4bb7-b37b-f57b4621c203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248f0475-bf94-495d-82fb-e74e45f96158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d522434-faed-438b-bc2d-16df464377d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f416686-bdbe-400b-bc00-ee7496f76bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd59b2cb-5d49-44ad-9206-632d4759ce00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460350cf-b955-4a82-9a26-bbbb648d88d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d2fc4b-e239-41ef-a910-083fb676e22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a02655a-74ac-4907-989e-2c551751e301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d31eaa3-1da8-4389-8ef1-4dce4a02dd22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7d25b9-0f53-4d60-b9fa-bd46719d2d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f0fc6e-3284-4bf7-a90f-fa97b21bebe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a45cf4f-08e1-4fb8-813e-7687f66e52dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.179.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58af11d-7df9-4639-a138-24e9579af0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db753ad6-fbf9-43f7-88cd-f1579ae35544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e21a7e7-a05d-48da-85c1-a2d0d7aef9ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fd1198-c9d5-4cef-b39a-fe871760220b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f689737-c19d-413a-9cd8-b9bd85ebbcdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81fd4489-2216-4a24-b5eb-dbf57135f120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22692cbd-a539-4da5-8daf-7b4aa3d2f11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871d33ea-1223-4f59-b2ca-b8c023fea0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24748b6-914a-43cb-a331-1e5869b83cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcfcd3af-c930-4f51-9890-55a6c8ba2ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1adce6e3-94b3-489f-89cf-4cf6c1092717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f17b492-927b-4fab-adaf-7f7a6ec17170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c812c7ea-bc21-441d-9a27-2a2a0b841f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e41b797-1834-491e-b047-3154d7ede3bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b1e08b-0099-4e7c-9da3-cea801c25744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc37427-a147-4e09-b389-d964a2b71bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f31d7e-4425-4714-bfcc-2d9bf08f5314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cf25b1-afd2-4c49-ab62-f50f355ad92b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.200.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50a7f2c-4a90-4997-8b11-64d6f4bb4b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab74f7c2-ab06-49e5-a49f-d7a2e3db0805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82cf7ca8-85c9-4e88-99af-be24dbfdffe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ba71eb-bcae-49db-9efb-118221beb843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3adefcac-c1ad-47ce-9271-2466a48a2908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d666f942-3114-4a3f-9556-58b654f69a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281df473-266b-4f6b-828c-72362e3f18cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c5654b-093c-4cfe-943b-f1d4d6a3d6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fe68cc-6579-4945-9523-c038e3c46823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2314d93c-80e2-4381-a186-1d25b3706f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115d67c9-9b1a-4a95-8bc5-563c13afa2b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f16ed5c-df93-4e5b-a5e5-8715d16bc0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681d3e92-105b-4ce9-8eb1-45ca73e9e6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd63371b-83d6-4401-bdce-946b873761f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e6e0b5-f1ee-4405-816b-2622cb69d087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9fdd431-fd30-4cfe-921a-e1e7f3eb7e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413d4ccc-8960-4777-9085-4a478f60b6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8ab7a4-85b4-4de3-b307-04ed928111bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d009f27c-e7de-4e4b-a788-dbf3d2197cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979e9383-d589-4859-b919-24a56190583f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1889d55c-42b7-4272-9766-3d62ccc024af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfed5476-e213-44c6-bcf9-0adc15e29b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be4f2ce-d674-4b63-a420-74dc2f0b2e0c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.236.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292f4db7-aa35-4727-810a-a7c7d37e9bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06af8fd4-a1af-4ec0-b9bc-0110622bf726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb31bec-dc23-40fc-83be-f9ddc21ae348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.3.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc624f81-172f-48a4-988e-d7631df8d3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66756c03-2cef-4063-bad3-f45d9b0fa104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d20f2e-e4a2-4d05-91fc-f79097c2b572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a80039e-e956-4633-b059-70bd2474a8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883da02b-bb21-46f9-b556-078183d0d487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e81b760-1b9e-4f3d-b7c3-21a3bbf2c9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c785d8-e29b-4a8b-8a9d-2362b0175a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f99276-3bb1-4875-a41d-4f0ed56bc8b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15930d89-0e03-4cbd-ae32-a19feee6ea80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b054d82-1b4a-47c3-b607-23b6cd98da74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc30c14-c251-41a7-8eed-9a673e82f411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469e0b98-f9d2-4175-b077-65b9cfe2489c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3abd3d-ca65-4e30-b492-07c3edb39999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42493f6f-27a1-4066-b46b-5367b8df7d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31527df8-42bc-420a-aa08-b37f0eab8aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385b88bb-0db2-4c35-b8d4-d7bbc6f3a3be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54784bc-d708-45e8-9097-24ee8fd1fa32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a050c01-3b9e-4a23-8f30-bd07e7ea0c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d40fe85-b862-424d-bd53-03f2e32a6fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ca8fe2-6a6e-4695-997a-8118d5800fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58be5b20-75fa-4e4a-8315-8f3ddaf43d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d98d4d-df9c-48d8-b0df-25813eaa84ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4d449d-ebf5-476c-8ca7-042e7f1cd2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29bc28b9-acf7-4c24-b8c4-4f9533f2e42f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e227463-6b32-48ca-aaf3-ed8bd434432e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d776d3c0-af4b-4be7-9894-d7fbc2b35844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82436ae-9b2d-451f-b954-fc13b70cd190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d4e427-aa42-4bda-be79-dcb815ab2d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d991f88-6da3-490a-b729-952bdf568d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a46d77-e724-46b6-8932-6ab8c08d5973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e25878-db31-4d41-b011-528a57745991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae6d620-4702-47df-960e-15f050299126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c402ccfe-1ffb-4fe8-8295-836b598db533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5fa152f-aee6-4156-bd39-705f5dbbe422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.113.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e70b65-2ea8-4134-b010-cf4cf8ca95bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.224.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c655a86-c23e-43eb-b724-cccbc8c5a144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.60.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5e827c-f2c6-45ca-9884-ed48cc5ad8f0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.8.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96dba17d-9b96-49a2-8563-f4d468caf7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.80.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32693f73-77f6-468c-b2a4-12bc0091c185", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.82.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d6f00c-48ac-42ad-a0e1-df9eab926efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.134.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d0c4c4-e18a-49c9-9981-08b3471d835a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.147.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c9291e-eb64-44a9-82cc-950673f87605", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.196.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691aa8b8-3c5e-46bb-9b42-b8764aea6d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.200.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6da057d-2df3-4b7a-a1ed-c7ceaea3317d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.209.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e65ef7-aee4-4aa0-8823-6653264bb9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.47.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bf97bb-947e-4f6c-8697-d5751e97d8c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.62.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b64d3cc-588d-49d1-b5a7-fc8609f81149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.84.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a846e6ad-952e-446f-9c4e-ed7326d423ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.118.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770ab51d-b9ab-4906-a681-83cf832e9f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.138.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7319d9-97ca-4e9b-9477-1fc95db5b6d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.69.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1249090-3302-49cd-b69d-bb3873c26aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.79.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fb20b9-7c01-4ceb-918c-825e9254f8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.93.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9f4843-ee4f-44ef-a19b-7dfc48a158f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.176.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaafd50b-c80a-4651-93b8-1b3cd414ffdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.209.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe591a78-0568-4ea5-818f-19e6bb8fc1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.212.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140db8c1-f7ff-423a-a338-3db69036bb98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.217.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb86e7b-32a0-4635-b66f-15b7fbf429bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.218.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715503ff-a174-4800-b52b-75b80fea985f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.227.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f2fe8e-60f5-4abe-9a93-6c57d944d419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.243.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402e29c1-63fc-4240-b3d6-2ae460aa30fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.244.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6514b5d-d32a-43c6-a819-4766159637ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.246.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7f8a57-9423-4ee1-9ef3-3622ea1d7130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.247.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e523ca3-6038-48e3-add0-87a0be61a1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.253.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd36e043-48e6-4a2c-a9e7-baec1e97a9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.56.9.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3d9d31-e29d-4d19-9b70-ad8eb3fff20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.2.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1322891-68c6-4640-b467-b0bcab333d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.88.225.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993e5ccd-9ad5-41b8-a2f6-8ad409153754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.156.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd6c717-129c-4aad-94c3-fd5bd386b745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.191.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061e25a7-577b-4312-a0c9-70a34592bec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.204.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367700d7-b6a0-4bc8-b767-464b633f5d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.209.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1540abfd-4eb8-44bd-ab9c-2d4d62b12ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.245.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4ca208-73b8-442a-9181-141b60a18b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.77.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32065f8b-bde4-40a7-8625-01f6e3d226fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.78.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6355f2-26ee-4599-9525-1c6577739631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.81.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac96a2a3-b345-4302-b42d-77014bb2f467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.229.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a1396c3-a044-4e97-851f-4af3b2cd394e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.239.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7cc8c54-2268-4fb3-9cb3-28769444cd65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.70.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657b307c-c9e9-418d-85a3-15a6ccd573c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.89.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a181481e-318c-4cac-954e-5ca0d7b0e411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.165.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c40719-f291-4a6e-a87b-58ab10108c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d41784a-9797-4ab4-aefe-d919c6e47f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc4180e-8232-4fdd-a67d-ddfdb4d76bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779af169-b971-46c2-97e2-64a660aff78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf4c8d4-9e60-403f-9a15-9c55ed8cd5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec3f677-638a-4750-ac5a-438b01f2e061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cec718b-f194-41a2-b971-cc2488767780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd4d00b-b105-46ac-b74b-272a68873e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d53b10-cf1e-41ec-8e24-1dcfb9c3896d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5844183c-4a9d-4eda-987e-bf0dc6a81486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55cef45-6575-4b00-acdc-bcb2eeb3cf6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9582ad65-7908-4272-9766-d82eca106212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293543eb-80ea-4d33-80eb-3a7b8387fb02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9e249f-9d6c-407b-86f6-791d7c08f8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04efec9-560a-471c-992e-7c2082666788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06efcc3c-1cc9-4f14-be09-e481e52fcaa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee01277-c66b-4f50-8509-9f19d015fa68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe737b4-f1be-47f3-aa6a-4b3ccc7195ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99952bfc-b0f4-481b-a3bd-84301116b0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1cfe95-d7c7-432b-8101-a9962ad87227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907fdae5-7b8d-48da-9693-2fce32c51c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d8b291-80a8-4f9b-9edd-334d9fd6ed10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50473a6-3139-439b-86c7-fc11fc923f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807fcfe4-2a28-4f0b-83f1-467f29d23c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af2f5e6-66ff-4fab-9b10-810b2e8861a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72881a33-bad7-4cc6-93ae-e73b86f338c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfd4426-39be-4b88-b9d8-bd74383cffa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b8d322-2fa1-4f95-975e-928ac8acde7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c3310b-8f47-4e61-b087-a907544d94df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63b7fe9-a6d1-4fb6-b2fb-f2b3dd2f6f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58dfcfb-84bd-4f66-85f8-8b7b466c59d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ad80f7-d376-414a-9e29-6a2649f67aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377ffdc6-a096-4c74-a5d9-967b4774b10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687e694f-b2ad-4ac8-8f39-4174c190ce7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdabb06-cc58-40dc-bd62-f7bc490b4ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4247f1-1657-4da3-86ee-45e85ce19b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250efa1b-ea76-4d39-ae37-779229288178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516da50e-8272-4ce9-887c-5d5461478ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a4d6ff-638e-4aee-8739-88c0e53446d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d97061-ab0c-4757-834e-c0e960f1243b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182eb5ea-4be1-4b47-ab42-4d6ab31e2320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6499138a-e920-4131-bff0-9ea19d66cf18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243d6e64-b330-4eb9-8d81-a43e456550fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb74b2b2-7d2b-4d64-8b4b-fc1830e010df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a4082d-aef4-4166-868e-a241d8923d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5bafd0-f6b8-460a-bb84-0d4d73aa7e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e24c8582-ce90-4dfd-b585-453124c9aadf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb4f618-e781-46b4-a7d0-69d0a8c535b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24853dc8-9067-45a2-955c-f8bc2db5e2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4026edee-3c54-4ad2-8da7-4814956c2783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb4c1b1-e3b3-44af-aa23-32c520cfe47b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8479bc7-2378-42fb-90ce-a7ad069c1cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d380bd4-7b7f-4722-9fe0-0ffc0224ff25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3331a48-1e44-40f5-904b-b080a94ffb04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b15de77-75a8-4dd2-aebe-1558a343538f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb0ea97-d8dd-45b6-a5c6-370d0aecaaac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903bdacf-0aa5-4c3d-8dcb-cc1f6a61732e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118878ec-f4d1-4e2f-a17e-78ffa0988112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d480657-a682-4fa7-95c4-99e3fdc6c213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8fe518-41c7-4c0c-9428-c9b35fed0aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.110.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258b66ba-4a74-408c-9bef-654c7a13850d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.13.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49661aa-d59a-43f6-84db-b3136afa54ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.148.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab27d1f9-6d86-41dd-88af-c0e574ea4d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.190.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa13d925-a2fc-4ce5-a281-9e8f164e8dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.225.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf529719-9811-4661-a697-5eb07e312fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f91643-bb02-46cb-885b-8c9a29fc5f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.232.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3a8869-a637-4ddd-acad-e5cbc9a5bf71", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.42.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025d6a10-4944-4f80-b7a2-ced533455925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.167.228.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1eb7fe3-b55b-4c28-9154-7193a0701c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.167.72.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a78b8ac-a885-4aaa-b873-e6acb1ddc8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b4d878-1865-480c-b54f-3b4e14be9751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.197.250.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b317b809-e2e9-4aaa-bf71-4fb2f3d14d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.222.43.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab51977d-a008-4a8c-8da6-230ca78781df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.228.236.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf01d60-bfc2-43d7-9832-dc62ab94ddee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.63.58.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add80ca6-a4be-418a-8797-fa306a3df806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.76.20.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a464ea8-ee31-4cc5-8a2b-12eb90c46bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.197.113.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e8e2a0-ae79-41ce-9161-1c940f3bb207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.197.113.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2afe72b5-5264-4a64-8540-108836f6bd28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.255.77.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a336d6b5-be49-458c-b2e7-6928065ed439", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.246.19.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d68ab1a-3b33-4f5a-99a4-26b712c8c17c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.113.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acdf09d2-7233-4864-8e4a-4acee2275d50", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.165.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b170a92e-84db-4aba-ad81-d83b5d34c707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.147.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8131efab-3425-4ac6-a88c-b76a056413e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9886823c-bcfb-4b16-98ba-e1f9d7abf66c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f6f1b2-c503-4355-9c44-d44aa85c7e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7feb2d8-d661-48ed-99c9-ce6af92d67ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd64d60-6b29-43ef-adeb-26fd0ced47ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a653f7e-7a1b-4e49-8b36-7692cc5bde8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea476371-a932-4410-8712-2b0a6814a7ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae821841-be53-471b-884f-f6056b79594c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aefc6436-ac35-4602-99d0-f53449b86a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.246.250.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0669cb30-9575-4658-a5cc-30d6b749d62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.130.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea9a1ee-a332-4bd9-b1c7-8678e482ceff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.154.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6d99fd-1d26-47a1-8bcc-91639eeacf28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.164.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c577f65a-babc-456c-a636-80777c7636aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.167.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468a0d24-ee01-41fe-bee3-ce7e8ab10621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.177.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1baae70-de60-4796-9eca-53049148d2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.184.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05710aa4-57fe-4938-a9fb-83dba2b4d5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.105.76.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c39e3c-dbe1-44f2-8108-7156efbfd7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.226.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f5c63a-e260-4138-a801-12554454f57c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.228.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a26ca6f-8122-4970-93e5-58ada9fc9d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.230.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed283a68-1d16-4995-96c4-88ed7a2a8e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.231.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e135a7-1f45-4e57-9403-c661e618aa03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.231.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcf16eb-5dd5-43e6-bea6-39fb334dc09c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.59.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517df748-cbbf-47d1-8cbd-97e4deabc961", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.212.98.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b53265f-2c2b-4b1e-8f42-fc233bfabe4f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.213.215.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938d17f5-b54e-4860-832b-976fb5276b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.220.244.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0e8161-22ce-4579-8702-cea06b9d621f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.221.207.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112c9047-e32c-40f2-b222-c2856f438490", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.193.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a3ff5e-7f02-45b4-a815-578bd9cadf02", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.243.150.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4f95a8-45db-4175-aa96-3a0af62311f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.35.134.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cd2f35-9308-40cd-8041-f5c655c7f2d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.35.137.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26961425-448b-42d2-ad9b-87958bf44703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4800eee-90b0-459b-87b0-22a20d7d8d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6a07a6-09dd-4b65-832c-91f0b06170b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052e7874-52cc-481b-9f0c-acb61e91625c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef3acec-35aa-4fb8-9f44-0aa390f844d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066821ef-a343-4a5a-802c-9873330ccefd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.100.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07851957-cc3e-43c5-9bc8-8a53e26e1b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de1c332-aacb-4228-a2ee-0325c8deacc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40dfd54-7310-4e65-8a65-24462ddcdef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.13.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d382aa24-3816-4143-afb4-9241fe53fffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c86e558-d82f-40ef-82f4-badbb2fba980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ea75d9-dcb7-465d-bb6e-38647e8e6035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.17.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd16b754-e895-4b59-8a6d-aece61debed6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.173.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0224f60c-7c5e-4086-8f14-b0d292dd863a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81410483-ecff-465b-af53-1c2fa9f75801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c66b2d6-24cc-4882-b79f-505d7b8beb21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8362ed16-a5dc-4d2c-833b-6aac5e86bbba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063f2b76-3964-4e99-a08b-2e8ccb4f6f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60af58f1-bc42-4f7c-b3e3-bc818e77a814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811550ab-9abe-42f5-819d-c0fb47161f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e18db6-625b-45dc-ba0a-9ca5e86163c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0468e20c-c454-4c2c-a4bf-b67e38135e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e186c3-7189-4990-91fe-3320179dbdcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5304b6f5-9d95-4dd3-be07-5ffa56c7fa38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe53aef0-523d-4142-8c59-3d5802e5cd40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bd4ecb-998b-4c5b-a437-a0074456ceaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e95715-c449-4d46-b27b-0a99edf4b564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.20.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf2f28d-ece6-4a97-b7fc-5c7d2f416c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.209.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98ffd29-608b-492f-87ab-5e9b2709d344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.209.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200fab23-7ecd-4422-8c0b-63d03236180c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.209.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc65414-b79c-4ebb-95ef-a93f206f9516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9031e6a-f61c-4456-bff6-6e51d362347e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f152132-7650-45ad-bcca-2e8d3d8cfc2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f82f692-3a75-4b64-bb9c-2ee1b3146a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e36e753-6b96-431b-83ce-3cf3c7db3e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb3cb40-fec8-481b-b93a-0910ff7b7073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.215.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83da82a-9c4d-40a5-92c4-4fa8de7b26d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f6f45c-1ff2-4385-ace9-4d12f37e5c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1d339a-bf1b-4094-a75d-7c253d723bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.93.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a49451e-ee85-4493-9349-a7be89943a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ef6cbb-a510-4d7e-a757-d1cc5c583801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.218.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec23d6d-a292-423b-9a23-e756ff24a01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.219.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cd1ea7-dce8-48e5-9777-b3b89d6e90de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.221.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76902c47-156b-4a2e-82bf-29e25c5c1833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ec8343-4e82-45d8-aa2a-3784451986e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1c21a1-6340-462e-95e4-a8e10c6cd646", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--becc9e7f-0fb7-46c8-b271-58042bc251af", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cc63f8-e326-4ab3-9647-f8c8c0fe6d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0a603e-def2-42de-9f77-1f50a8da9aa0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071f664e-6818-4827-bd7b-29701ce7522a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.16.42.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c6063e-af56-44c7-a2f0-1a2135c2ac01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.168.25.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--957d7399-d576-4f82-9e32-6c424f686a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.30.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd49e3b9-bb05-4fe6-9f85-ff2118c944e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.132.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8780092c-cf2e-4fa3-b0be-c9bbf2f7e663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825e9ffc-a678-48d5-8ba3-25c7ad6bb776", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.234.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824e5549-bfa2-42b2-875f-6bff173f9c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.236.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fbb6b9-f4c5-4458-840e-7f31703c2ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.236.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60b02bb-4845-4f57-9119-af3e59383e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.244.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108a56da-e289-47ac-9b31-aa1d2e56a5a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.248.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0177f777-01d4-4c7b-842a-71764a208ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9acef32c-ee30-4c58-b724-e302b510571e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02228a5-7c85-4ab2-ae30-1ad479246e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.82.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be677056-b27a-4753-84a9-4a4868d52f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f9e5f1-5d1e-4324-ad5a-19527f18d3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91ef7b5-500a-42e3-b8a9-5b62b1aef25f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.179.52.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee6968b-673a-4e0f-ba7b-46873f90a9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.220.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9fab9c-e2c6-46d4-8650-e10564908fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a257329-5981-425f-b8c2-a7be47174dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5e3042-acad-4f86-9960-6ebdd4617736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c042c32c-2dc0-470f-a77d-26f2494b8211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15d95ea-b7a5-42e8-a994-eaac3f9b2858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f78065-849d-4cdc-96af-fa73844afdd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de4e6f8-d009-4acc-bcc0-35509f43cd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea0145b-a237-4cfd-8b0c-56fd7908aa1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08441ad-f78c-413c-9e09-f958637ca51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e192f9-1d15-4cc6-aebb-eb055a242fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce90448-b530-433e-82c7-733885d4396c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735489ba-81dc-4619-89aa-ff167d43d54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6bb85c-5eec-4216-b544-124e6f24f9c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b6086c-d2fd-4ae6-b15c-c28412d5f713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec3f53f6-5c38-4b99-9322-91945e495f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832f424c-62b3-4aa3-8ee2-fdc66615a3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e0a254-79a0-4e3d-a8f5-a1df502c30df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b77547-6cb6-458a-a2a4-4a99d30fa73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e518c950-065f-413a-9d84-356ec4544348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8887f863-f00d-4dc5-a592-05209e655c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.49.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4626db-6303-496b-ae6f-e47b8a019caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.50.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876db0f4-0323-4a61-a4e1-4f6156de50cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.224.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1869df-fa34-44b5-b753-20c4926b9175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.234.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb494b7-517d-4c56-98a1-d9513570de45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.244.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78496c3f-51a4-4876-860a-cbe02fe8d3b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10633a8-78ec-46e7-bd41-59ee0dd1be61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e44e95-8602-4ea8-af1a-4aacf0bea778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.224.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f0f7ca-4e7e-456c-bf34-c7e41e990c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.225.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d8e04f-daef-40f8-b58c-b98e11364c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.226.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61f7d50-9371-4c02-b043-e832cb1b26c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.24.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2390ac5e-0d73-4b9f-9540-bf00535af71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.49.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084aa286-d1e7-4d89-b979-60c2be77d1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.65.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e226e02e-0d43-4606-9d0c-9df7895c5e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.67.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40965d5-003f-44f5-864a-80202374db90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.81.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb900a95-afe5-40af-8671-a2724b15c56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb70be0-c4e9-4ec0-9b89-3f335d5a7af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a42de47-7464-4204-a4b8-bc985836ba13", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.211.56.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7687b7b-8dea-474c-ac4e-80598e277aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.106.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48166a72-767e-4ca1-b646-6e71eb2bec88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c03e78-db1e-4786-a07b-30bc5808546c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.224.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0907f8c1-bde4-4aac-9e44-bbceb5c523ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.214.155.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7608f101-8b24-40be-bd6c-81ffa6f5af4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.214.155.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89adaf40-aa34-4325-b258-92a3e98b2442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.144.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f3ae1d-4fe4-40fb-a3ca-8c393fcf3a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39438c9b-9d85-4f46-8cc3-71de2cf26e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7061125d-8df8-45bd-b026-bf1eec7cfa41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c6b587-05e8-481a-abf8-022275a675ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6402121d-ee6d-4e52-bb53-a711ea22ab7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74db4ab5-57fe-4368-a800-c7ce6590b7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592449c9-11a3-41fe-99f3-7bf88cba170f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba92f7a7-eba1-42cd-bc1a-36310c1369aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.104.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1403fb-8d3d-41f6-ba1d-a542448f7033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99451258-a7db-48b5-8b71-b0e50a4b6ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c708e6-c476-4579-80e5-8d230322634d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36031469-d964-4a31-b827-bda2dc0dc697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a91b85e-4f2d-4187-80db-d214b54006bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9edbec5d-e677-4fc6-bb3b-e6ee6a3385e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c58994-a4a4-46b7-ba6f-6b7d2b3fbcf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0fa7e5-755d-42b6-94c7-4264c0b148e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.217.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b83610-3d6e-40ec-85f5-f647322e5b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f543347-7217-4799-ac05-f020e83366fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5db3aa2-210e-4823-ab24-5ca6233b12f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354db8f5-be2a-4882-80cf-2b039445b49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d15a294-ff79-417e-b844-fd94d264b14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b4aaf9-c2bd-4952-ae0a-038403d91b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6db37d0-b5e9-48d4-837f-044582844e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c23a737-36cf-4441-83b1-90eac927afd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4323746-07ab-4332-b19d-d7731b1b4cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9210e326-3301-495e-9352-57d79645219f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e6e935-51c9-4466-87b6-cdb650da9b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.240.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decdb41e-941c-4007-9a98-e1f94d06cca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814a0fbd-90e4-4562-b20c-be78393f60fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565f32b6-894b-4ca2-aac2-ea7380ffa8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb62f57f-72fe-43bd-9207-d0fe8dc76d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41f35d6-2211-49c0-9826-84cd57ead7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2cc540e-03f7-4297-919d-fd880482e4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471a0ef7-c857-4930-92df-a571fc4f9880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f91428-417f-49e6-81af-9ca158bf632b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c82d18-debb-4be3-9bf2-89697e4dcf87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e704df51-0a81-4f44-bbe4-96ef2012a32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2c2fb7-acbc-4cea-8931-7afcce98f1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d58590-6d57-4a99-a248-7b74bd82b9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5127e928-37f9-43bf-add7-d72c2249b4d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.239.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35483242-4735-4441-bc33-e51c2def9e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.254.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba919975-211d-4df5-9ce9-1d7eca22ffdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95afef0a-4f15-40df-bffa-de9ccf3bd4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ff1e12-832d-47cd-b1c5-bcb10f897c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7132c8-29b1-442d-b544-c60509bbc0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12ce68c-2b92-43bc-9347-e6696108e2c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8067d0f8-25b2-4a78-9ff6-7bdbe7050452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71f2ed0-d1c9-4bbf-9be6-19c201dc7023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330eb0c0-196b-404a-b941-3dce50835b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bc4b19-3f79-4a3a-947c-644564a26acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4bf44b-332e-40e1-918f-1df2c4577af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3da5f6-7a10-4612-b75f-142ad35be1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31af0f43-6aff-4b9c-9108-3c8dda4e705e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8edfff9-644c-44f1-bf1c-20c5551311cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9d8251-1cf4-4126-8a9a-b80624863f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348829e7-bb56-4d7b-abe0-3eec31651920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f606cb4-1576-4a11-a201-f50e53e0ec87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9b5dfd-4ffb-4237-bda9-6c07e12e1483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1bacd4-4720-4fa6-b92c-757f7da988b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725bf198-edcd-4fea-a71e-42000ff025ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc6e5e5-8242-494b-ad11-583bbbde8806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.225.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd517956-e571-4ace-8e89-d53e37e6e1e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.248.50.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a646dfcd-0864-458e-acf5-e41ba3cfebe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.71.241.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86b0f70-07c9-44fd-bf9f-537af4832382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.116.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243a8a0a-5760-48b9-b445-5962e84cf5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.102.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d491b8-0b8e-41b6-acb6-daf62ac270ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.103.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f17f612-63b4-4f54-9799-af80800579a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.106.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d26348-365c-4aaf-94b0-4ab1fef91afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.212.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea8859b-7a2c-4c5f-a38a-58ef0b5517f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fdb9766-d2cc-4040-adff-b5e8d761cd8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149f0747-b14f-46b3-872d-b394280f8075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3f646f-f456-4934-89f5-2f088a277e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.96.172.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296566d9-4e09-44bd-9006-f886b28e532e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.197.14.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef608cab-caaf-4f45-b821-9c756b114f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db7e568-c55e-43d1-a7f9-9f9210c54370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.213.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a8855b-444d-4ba4-b6e0-d098137d57fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e537bd-37e6-4299-81d7-427bd693d1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a34638-3725-4543-8a94-a523ddfc82dd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.234.14.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d29e10-9718-4717-8fed-5da90b2eec1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.236.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf658f44-be06-4508-977c-ca0ae9a6f746", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.240.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577b8d69-4541-4b10-a850-c5a0bf0a47ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.240.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e884105e-1a25-4dc6-9d4c-e208d93d4224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.10.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c720c0-3334-4762-9721-f480e9e8538e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.254.213.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8dffaa-a940-46b6-96ae-f331bef6ba01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.192.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c88e52-4b42-4633-b73a-bb8d74eda51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fdedf5-0f86-47ff-ac26-f6be4d2c337c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.212.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29066055-ab6a-4d1d-9319-e0a528b73ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.214.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a555b52-c8c6-436e-8345-5e2eb41cfeba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2c9325-099c-4213-9ecf-88d09ef82315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee42a1e6-9956-4bb6-956c-5b82a9c1bfc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c02738-48af-4a9e-9a69-adc71d3c608b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b9503a-e217-4677-8ee6-0830c2c9d8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f05e3e-db8e-4d05-8a1b-35c1b558e6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146d5d40-d1c5-4163-9745-3c13e862e49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa24331-f6a3-41f2-bac2-4574902f232b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6814948-ee5d-4685-ac5e-1d07affe2561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2794ae-8058-4401-a600-84f6ad16eddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a9dddc-4cbc-45b1-b6fb-c0eb4f8ead57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee5d8fb-004d-4639-ad09-f54ffb7fc1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99d9b3a-22d4-426e-9b5b-a842c7d20c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e92328-de4d-46ed-bd04-473c4e8debc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.226.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1810b46c-8961-4c63-9738-70471d030149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.226.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a2bfe1-5f73-4f63-9be8-cb0f44ceaf1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.226.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c322cb20-2e52-457c-89d4-3af9da67d302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc0d98e-cd91-4986-8040-fa4e8ec51d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a6f8f0-16e8-42bb-b885-e1bccb8e6845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.229.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a836ff2e-0d94-47cb-b9bd-b3a14e296312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.229.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ff4624-b47e-43e4-b5ab-3c4f4d3c3abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.231.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb65507b-d304-4636-8862-1729922540d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.231.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19fc01f4-3961-419f-bd2d-6b90eabf99bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.232.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2a13ed-3317-4612-bd1d-8bcca6874d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.232.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f905b21-8cbd-42ab-b219-c990a7a9e7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.234.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92ffcae-fe3e-477c-a609-9038fc97686b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.235.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78732361-38dc-41bf-9a98-3f452966ddcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.235.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6728bf-5867-4247-a2df-f6ab3ab2b4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.236.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc54be58-a4d3-4579-b508-774fe461bbc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.237.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714b5e57-32bb-4472-8555-b9bb48c3e242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.237.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1bc181-98ab-465d-9fa5-bb8ffd532551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.237.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d8f864-977e-4496-8838-940e02bdfeaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.237.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de34eb09-f484-4c76-be2c-b8b828e5b537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.238.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b433e621-3472-4daf-a55a-a29d1833586c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecb0285-d777-40b6-ada7-7a7ff4e07b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a36da6-1ebe-4328-bfc1-88c139fdfe0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.247.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56467ccd-fa11-4a73-981d-31d5d71195d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.248.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3140ee8-3acb-4da3-8a39-4efc02b60d5e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.39.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7474c8-72b3-4479-abcc-7bd5afccc94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.44.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b130a4a5-4fb5-4fef-a14b-9302ecba9cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11392c3d-73ca-490e-b645-883e4a0804f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.59.42.255']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2db612-e9d2-4be8-8b5f-3e1ace47ead8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.2.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a0e0ed-5101-4306-806c-009a6ca74bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.211.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8653cefb-e7de-416c-8d73-b96166dae947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.237.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7b5d6c-eaa3-4dc1-bc04-cab25bbceaaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.174.219.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1333b5d4-d58e-4606-aebb-672b0a7d74af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.174.219.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5e4687-675e-4da6-be2d-c6270731d2c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.174.219.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9aa6be-fbcc-4144-a547-b7d209fcc928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.202.18.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2867c88e-82be-4406-a97f-bea7760aebef", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.203.117.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9f1c2b-371b-4d46-acb6-90b26e597528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.209.246.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6077e083-2cdf-4c03-a8e1-5c05159ca5b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ec6a30-7362-4dcb-846a-35282cf145e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b428e8-d6df-4d63-bbc1-8f80b6f3d273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.112.128.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859b1d74-1f68-43e3-af11-e97b115e7613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2132bb-d59d-41ca-9378-89b70970fc92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4d5979-7746-4ecb-916e-444634a006f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.2.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9796b0c0-43e0-478d-abee-08f3a593a219", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.211.42.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecb1d3a-c8b9-4fc7-aacc-79b70258d173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.224.4.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0d6288-d199-4769-ac43-25e748fccfd6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.235.182.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2291a30-29b6-4d67-9cdb-468365bb3731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae23d1e-c3c0-40cf-922d-4b19ac97da1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.39.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b39269c-b2e2-4461-8d6f-bc3fb01af8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da56687f-d7ec-4ca3-8fce-7923d0485d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e65555-074e-40e5-8811-cecd48578ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f04edb-ec19-4908-8adb-32ccbb222520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd2135b-a696-4648-98fa-954fcb062db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1250ced7-b9e7-496f-a092-288338493bf9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da71131-6338-4067-9512-ccef20755a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45edd2d-57f7-4eb5-a563-bfd883026717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc51ed4-cc55-4ca5-befe-10de9e0bb5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21147eee-6101-486a-af65-049b7a34590f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3881d3-7030-4f70-b458-dd4e2276522e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba07d47b-9259-47fc-a44d-3a3d56b1a57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.136.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b5fc08-5125-4571-a3bb-e1b596dfe363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecf3d15-5ad6-4604-8395-f020ba20cbf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60ea2b1-de48-47c6-85a1-b2916a1869ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4e975b-1b04-4de4-8e74-f6175ede0855", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95986e0e-f33f-4452-9eed-74ca45ee9c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f9c78b-68e2-4abb-89fe-0cca92f96e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8758e76f-ffb1-45a0-9614-d1f912b704ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a765eede-7499-46c3-bda7-3501e8f60d18", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b2407f-fb36-4ff4-99b9-86a94e46f719", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67043d1-0c7f-4964-95f4-9f89dcfa1d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9f554b-1bd1-454a-8f00-10377a7cd0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b86549d-5139-4ab8-8f3a-bde4526126db", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefe525a-4396-435c-9288-3394fa7dc665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a0af96-733f-4226-a537-4cc2e6901e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4964a158-2885-4054-b96c-252a99710357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90bc8896-438f-47c5-b050-f1fecff5e77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d044f8-ccf4-4024-84c5-fd4499759702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93e78a9-c5b1-4037-b25d-071e5632facf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9b1464-dbe6-48da-a25c-e9ea2fe5fcee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a74f69d-110e-4780-9d11-691e2df9c79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316745a1-97bc-4207-8307-27046d8e8d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab48af21-d204-4f91-aeb7-8ac31d76a2f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6573e9-c695-4597-b838-b4dc313d1d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224354f4-a7f8-4a33-b655-b7f6acf0e7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bb339a-d751-4dad-816f-58458e3a0209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f72cac0-43ca-4c1c-ac1d-a3180dbb6c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af848fee-a193-4d29-95e3-ee8c67d649fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4d59dc-c503-499b-9c97-22fec900bfc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7ac9d6-877c-416c-8e29-095d700b2475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4bbed6-d743-4ac4-adb3-3f0553c5dd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760677ed-409b-4247-bc82-881b3ccf551a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0fdc27-0b19-4994-af16-6d654114b78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9220da-9dc7-4d6c-8fe0-8c904924ffe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392265d2-5990-40cf-a79e-223c308ca4c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c75f7bb-787c-42b2-be75-e65ed53ff5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686c74f6-3453-4595-999d-d4d9fb35fb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.235.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76143a2-48c5-4a3d-b565-2da1217de739", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.11.196.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc7c825-19aa-478f-8503-3813433d00f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.112.179.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--741a631f-cbdc-41d1-9197-23625d10fc57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.124.88.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b518fcc8-2748-4135-aa78-93e4a685f61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.185.93.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd04f1d-64aa-4cb9-a1e6-b672d52bafa5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.73.120.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82251fa-ad91-427e-a80b-1fc971f1d8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.8.2.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c7c021-6255-41e2-bd60-48c51e237815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.92.66.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64adc946-a460-4c98-9737-7ee4ef172d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.10.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99923ac-2743-433a-93a7-5225c0f6ffae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.161.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be66130-df04-4836-b861-3dcc0a26aed7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.214.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db09be2-94d7-4530-a17c-22f0de0a8a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.250.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a52627e-3017-480a-b18d-0cd0b111a626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.131.63.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6e1d64-29a0-44ee-8e96-30538347201c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcde7bda-3d5d-4f0a-b370-07b200a297e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb393bdf-131a-45ba-98c4-d22b7dd591cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6b1acd-7136-41d7-abae-564fa1ae498c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297592e1-ae9c-41f1-b7d8-584b0795d8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df20ac4e-a95e-40d6-b4ed-028c5c149ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9eb0f2-6b5e-4854-8899-e8e577badc8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adeec26f-109b-4e33-8de4-fae20bda3b88", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98054662-152d-46b2-b1f4-6c0eda0669ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.238.225.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf70cba-40bb-4236-a75e-72ddafce49fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.27.90.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca965c0-81bb-4a81-b5e4-db117484d929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.46.172.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ecd373e-dc20-4806-907d-f25a5235706f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.216.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f81641-1d9f-47ef-9257-f25db7e2c067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.34.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8137a002-a38b-4440-9cbf-426ea4cbc19e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.184.46.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb9689c-b509-4878-95b4-3438f8701cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.221.50.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28677afd-93a5-4a83-a24c-39264f64d88b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.32.33.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8453381c-36dd-4d98-a911-84686001a67c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.33.210.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c63332-805c-4c85-a45f-84d504d2f2ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d46f01-3188-4996-92e4-7e97c5328d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.150.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3381a047-85b7-4245-af3e-b4b95eb52728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.168.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf07380b-b9ff-457e-b090-abd8448ac971", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.137.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1a01d3-f125-4660-aa4c-910513678a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c537ee0-b986-42db-8e91-a4c680d9d431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43014124-9a93-418f-859d-bda09c2cda14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.235.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a42b5c-c8ed-4d3f-8222-85c8583c6395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.36.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adafe171-ae94-46c4-9a74-b720be4e75c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.11.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4719f7a6-70ce-465b-a263-10157e983018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6e99d8-2ab7-4c73-8dd2-30fff1260f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.199.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c00456e-af85-4c57-8a62-3fb655ac05b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.143.149.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d798f8b1-2c79-43b7-949e-3d94fc6557be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.144.1.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c0fb11-1c90-4276-bc73-ef4209cbcc92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.188.255.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71258ea9-d264-4dd5-a500-5577c2d1fdaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3f940f-50c8-4568-b16e-9040d51923b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49de4dcd-7cd6-4580-802a-7e7b22312e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.234.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52a2f21-7e93-4ede-a2ac-2b30dc151b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff2aaf7-05ea-4539-bbad-03043b6695c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.220.214.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cde36ad-6b9c-4c61-857e-d2aa77723387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.220.46.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1976b8ca-4939-4330-81bc-f329aea360e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f938a381-d5a8-46fc-a3fd-a1afacbe5e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.222.174.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04006077-d6b4-427a-aeda-f956cd64261b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.224.67.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3253cbe-fb27-47fd-843a-f6de50a27271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.226.68.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9dc388e-5d65-4582-a29b-128e4b147ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.226.86.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57d3c66-dc54-4129-bf52-440447dcccf5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.230.189.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fb07c0-2385-4729-aac9-deebe0abfb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.5.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3f608f-7b78-412d-97e9-42aa6ea7bf64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.104.105.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270444de-fe4f-45a8-995c-99bd3bf28481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.141.211.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c0cc63-ae7a-4565-8826-77438948f161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5691ab1-b680-4020-a92f-a899836642b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0094afe6-68d2-4eb9-8642-0fddc4fa90ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.176.249.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45498e5-0fb0-401d-8bff-f9b97eba930b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.182.234.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640e7e2a-5e35-4d5a-9613-726e7d45724b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.182.245.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87a03f5-c63b-43e5-8c4c-9fa1c99b9e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.211.96.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52846dea-34c3-4c91-8c41-cffe2acacf91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.211.96.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcdbe5c-b9ce-40a7-90af-5efb8106b18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.212.75.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1b01be-22c4-4a86-8624-a97d7199ef04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.232.31.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f39bf6-17a0-417a-9e54-30a0bffb2d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.172.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e16032d-4873-4b7d-9489-676d6ec55546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e027c228-f042-4cae-be7e-7d3829471c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.138.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa192e9-e8ed-4026-9510-1fc74b8f6195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.226.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35b4745-1be0-49a1-a3b7-93acd7fd5416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.238.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abfc4bd-a9f3-4faa-bace-bf5a35f11696", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.0.214.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8accb794-9823-4ece-9776-78e3a475b473", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.140.66.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81b53eb-8d5a-45b6-a37c-a3c81409e0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.166.45.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4808396c-fab6-406e-851c-2e3498470154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.176.62.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9215379a-277f-4593-a3a4-450bc1ed60a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.178.155.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfce42ab-0ada-44ab-aa1f-4c508c30ab2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.215.226.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4f683e-b78f-4a69-8097-31702509a988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.215.65.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ec87dd-6bc4-4144-89e3-ca18a96d2f01", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.85.209.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57a05bf-5005-4bb0-a833-1265ef80d0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.94.224.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff56d46-33a9-40ea-bf4e-7263a05971b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.105.123.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6763768b-0d06-4922-b8d9-0f07726a8bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.117.137.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6415b68a-7f6d-4bcd-b557-e8af57108c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.225.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3031417-dbc0-4d2e-b60f-f2e139bbe41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.227.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f429ad-684b-4e72-a5ed-a49e86094416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.126.80.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d63e23-736f-4616-aa45-b41adf1caec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1bd86a-076d-48f1-ae0d-d0d68614b086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4805d71b-2f10-48c1-95b2-56cceffe4601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bde696a-eae8-4aca-965f-27e70816c02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.156.140.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195f4c7c-2ac1-43b5-bf2d-e5a0fad1f599", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.176.129.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f2e872-b7d1-4b45-ac75-d369ca635209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.176.91.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45c7989-063c-4b62-b15b-498f84ea57cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.183.19.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3312ee1-b30d-4815-88e3-d35259535682", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.239.80.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0ed66c-c0ec-42aa-a9ff-e533a8e46ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c5955f-f6c9-415a-9493-493f53a1d1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e9ad9c-8a13-4392-af88-abdab56f2413", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.243.186.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e93b6e-3f88-40e4-9d1a-137d3b9fe999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.254.173.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1a1223-3446-4e53-ae48-686840dd64fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.32.228.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ba2224-4fda-4234-a2c7-c2126f609cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.48.68.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d33524-2690-4cf8-84ff-2b9e59385cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15492f11-37be-4c36-aabd-5b615b31281f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.76.176.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5132c4c6-5d17-4efb-8178-4c3d389a6467", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.76.66.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2aacc40-389c-4c6b-8f92-9473eeda34b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.9.1.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e770dc9-0056-4ce9-991f-bb90367bd5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.93.50.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74dd9e9d-4553-41f3-b212-42bc77a6d8fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.134.89.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475e0f58-811b-407f-b170-10fda1265730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.207.45.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80eb649-70dc-4095-aec2-47a82fcd94ff", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.221.22.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7d6943-e4cd-4ef5-ae84-43914dc31cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.230.204.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede11cc9-d6a2-4b27-86c4-38a70a920098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.232.212.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae95948-3cbb-4f34-95e2-19dced4f6dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.241.54.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a33123e-8f5b-41f1-bd4a-6b5c535bbf6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0890a6d7-8d27-4cd2-819f-f59b73bd9558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.6.187.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfeee67-85c0-4c46-845a-dba5e56a8520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.35.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a172c880-d0a0-4654-9ead-f2eb7c6ecfa8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.58.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6a702e-a7e5-4c25-bb4a-53b7dd204fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.120.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c47c8a-f3d1-4989-98f0-b5cbb8ebe216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.125.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9699ed24-ffb0-4c1c-b2ef-941b5e3cd1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.94.185.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8407c3-1e7f-4472-8511-1f9a5b14e6c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f62fa4-9b1d-41a5-96da-513e6ad6404f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768b851f-1f63-4281-8a28-f63eac0188ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4cdf92-b685-4756-bcf5-6510b339870f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c17db4-ccc7-474d-a081-92fbf89e2307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701b7307-17b6-4fbe-894e-b32bb9515a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daee167f-6365-4150-9ce8-5a4e052e6b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e33842d-7029-4568-835c-8134b9d480d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42be637-8449-4c37-8f46-3fcb2bc1b075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a18f672-20d9-471b-86bf-b5b4e49198d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb36d42-2e89-403c-9dce-47ce7752adc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134eae48-8f11-47d2-9b6b-f608a75beef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b98869-511f-4a5f-b260-817cf28b69d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38ca08a-54da-42f5-91f1-d09109e579f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72682193-b67f-4e5f-8bd8-716777108e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ccf989b-9b3f-457b-9c46-4beeb4b7cbd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe9cca3-c462-4d7c-96fb-201690177835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960cd289-2840-4202-98c6-109f0df84591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0f6f0b-c39c-4c74-b029-dd3341f0195b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c02e5a4-d89c-435c-a8fa-6dc1c83c66ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3da9cbc-7622-48c1-9226-624a2319e71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7147f41-55ea-427a-aecc-db6d0c5facc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea35fdc-3c0f-4ecc-8a81-2bd9f50360b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfa9de9-9b07-4cd0-9145-6486cefc61e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c873dad9-7fb6-4a9b-a03c-3e6c21637b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60b8eed-2aa8-4479-9376-dec8d07d7548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5200ef4-557a-4896-90ff-54789576c48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af184bf7-fa21-4046-a190-e526a6429a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23c47a8-af9e-46ca-ae0e-69c4d9ad5770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66fe44e7-e415-4b50-af50-c86ce8a1123c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384f5a20-7e0b-4206-9503-5cc8d771b2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c148c875-a578-4703-a424-f3bf77d40f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77529691-6608-45d2-a76e-f3f2d3bd404f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ed0363-8df9-49c6-91ff-aad67980cbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afffa80-ed0f-400a-9b98-05b42291f5c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc3c7d3-8e19-4873-a984-2a235cb026a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c3eec7-be67-498e-a4ec-65e494ebee0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f92546-ecf4-49da-9a01-3d0b94b87a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbd21eb-6149-4c82-84f0-e78dde31ed26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ab5c66-1862-4dac-b6fc-3042a47b3d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b029c628-12b8-4fdc-82f8-16f041673f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1500d6c3-8a2b-4bbf-aace-e614b3f920ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879700f0-1207-4e73-a4f1-5e1c7b04c788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed20d38-15e9-4362-ae16-d79a9f55c5e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99919b39-2e6a-475a-8715-0c5fc19832d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f78d6eb-f17f-4e3c-8dc3-f68afe423861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce81e18-fc62-4486-b9ca-cb229f1bfcba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6747472f-20b6-4d97-bee6-1f393c3f8f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e80efb-e27f-494b-98d0-5ffe4dbe7eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7566941-6187-42b6-be39-ebf1c8035c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbfcf5e-418f-440b-81eb-72eea11e2e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013aec8b-f6fe-4a23-aed2-a2265af4b50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f26efcf8-5fb1-4804-a8e8-c0aefa946dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b60944-a54d-4f2e-ad29-4332a59946ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b7e638-3f68-432c-a1b0-2aac453ed01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6977ee6-2600-4ba5-aff2-d85c1cd938cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.107.179.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c845b5-6c46-4686-8aa8-6db1f2ca5525", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.146.39.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd554a13-a3e2-4c4c-9b3f-be279a76d9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.157.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15ecdc6-617c-44f6-8cd9-8264ec4f46a5", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.174.5.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9d61f8-072c-47c2-8278-6e87dbd49db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.104.248.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18e92f4-191a-417b-86f2-53617cb76cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afc4628-58c3-4752-9cd3-cfc1dac0634b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.108.209.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2b37ae-b670-4e01-b08e-900662cd9ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.118.79.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02557606-e9c1-45a0-87c8-bdef5bd28b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104f0f1b-42b5-4a7c-aaef-67b87215bba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2b8f07-b173-49c9-9d42-39bed7d485a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.126.239.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d4a92e-48bf-406c-89da-e590a33914a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f3662c-d7f9-4d2f-9f5e-3303147eca94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ab33a6-05c4-49fb-b172-5937c1792d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed69ab0-aff1-411e-ab25-154ed9ffc070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51305372-4e8a-41cc-ba78-dc86a8b4ac11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.137.122.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97dc9ccf-e011-40c4-8f22-320c38c9fa3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.145.38.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35e019b-c338-49ed-9aef-6a5702ff27ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.148.0.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1340a9-3202-494f-b93b-8a44b9337fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.148.3.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a064dcf-b486-4de5-8766-e229ab2a27b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.16.39.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6724b5-1db8-45cd-95e6-26320103ce9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.172.215.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319b7a1c-3abf-443b-82bb-e6a732606571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb731c0e-19c0-472d-87fe-b4280c171b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf1a356-6975-40fd-b4e5-252dccfcfe13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d234c82-e686-4d81-b870-bc0dcff73fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbc0b09-5934-42dd-945b-973456b3f29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94972ec-d30c-464a-8d71-86fa11289dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286fb266-258d-46e4-b984-69cf95e55943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3187e9-50a0-43a5-a018-95bbb44d45b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3666e36-7bec-4206-9361-af28013fa97e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03d184d-e491-42d3-8465-58acb8e66887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b6f876-41b5-4746-86dc-8c169871a694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd81fe8-813c-4671-8639-ed4f5a73f5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99614bd-6683-4c70-943b-86d53ec9f9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.181.8.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1a26c4-3e59-4030-9711-2fc60f7b1ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3e57ac-ff14-4bd8-acab-b5f949775c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.188.249.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a57c19b-1069-4e72-b960-1ee5c1235f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f4e768-0f35-428f-9125-e97e4bb3ce16", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12aedbb6-51b0-49e0-8f3f-0b3cccf01c0d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6a0bf3-8c3d-4dd0-8a30-c7da2f57a150", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f143f3c-9256-4d25-b1d0-cfdce0f8c07f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c571f06e-1961-423f-a515-d8d358651a0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f841422c-f425-4ea9-b5cc-0f7d0976c737", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc7c6c4-09f7-42ba-b273-5788205322ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbef3643-1310-4ea9-8f1b-1225923f3811", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4dd3bc6-033c-452c-b244-1de2e7da1397", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6db931-a4f3-42c7-a1ee-22f709bb0191", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de81efe0-0169-4854-94ae-719a3ecfe609", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32eaabbc-85cf-49d1-9b1e-9e800ca11307", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abb2159-28b3-4148-ac58-1ad5ab39d296", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39541f65-9d6b-465b-8769-d30f062efdbf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d78194-8473-4d2c-9cc6-9035163ef18d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b029c6f6-9a6c-4f52-9cea-5454763a7e72", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cc5e94-8828-4179-bb7e-b5a5ab80d933", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048c1adb-f834-46ff-a559-35303a71ad3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b90f09-5435-4ba9-8cf8-eb214638d26c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737529be-bff7-43d6-9e20-42cf1351f3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516faffe-3b89-4d46-bef7-7dbadaa94b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2bfe8a4-dd2b-4a67-9312-494257494f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf4339b-295f-4b1c-a6b5-b72f1af35484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a11c714-9547-4bbd-bbe3-080be90678df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ac06f4-e0b6-46d0-b3e7-6fcf42c6a0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.209.196.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb9dfc5-252d-4d52-a2e7-1058d71b7a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.213.156.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55021d5-67d0-4477-9cc6-49b320124c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.213.174.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b23ba8-e520-4b95-b14e-73829da103d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.213.80.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9948575-3e44-400e-906c-551276d51fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.215.164.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2c1c06-e47a-415c-b2d1-0a48629cc93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.215.244.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd12e07a-d4fa-42ea-a5b4-04063d27ecbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.0.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311ab0e3-85a8-433c-83a7-338400918be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.219.133.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac5e3ae-ed27-47e5-9584-5da19a9850d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.237.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866ef643-11ec-4ea8-b09c-f76dd779873e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.222.138.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdb13ed-d07d-43c4-9580-fa7f34a1174b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2681b02f-aedf-4029-890a-b9b522f7330f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.225.41.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730217dc-2ccd-4317-af2f-4432801850f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a647168-de3b-47b1-bb33-d4a5f98937b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f3951b-e6ff-455f-be4d-81dea97c672b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db55a8a8-8cb4-4e2a-a8d1-3e3166b7b834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4596df01-fa1e-4dd4-af20-1e4528c7b88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7893813b-9173-4ddc-bede-0dd17e36813c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c1e466-5c99-49b5-ac44-1e66c4e5b409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9013aa4e-3be9-4a37-a4d2-0aeedc77fa2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1993d8dc-d5e4-409b-9f43-aee82ddf541f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf24941-e8a8-449e-a1f5-8cf5974d40f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1a4a5d-7e50-4813-9bff-087ccf215532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36adc17-4964-44e0-b2bc-5a84a0d44396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1b0480-12f4-496b-95c1-0f9bbb025f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860c5a67-2289-495b-8261-6e6c1c8cdc88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ef6ea1-5534-4329-9e6f-68061b29c9e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0455059-67ad-4c40-8ad3-e5f236cabe9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.231.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290d71c4-ce2b-4599-bf07-2f6743ed75e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.241.208.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41dd60da-34a4-4c54-948d-03d237f930e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53969722-087b-46c8-95bf-1060aaed3a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13250ceb-7826-4dd1-a4c7-9072e1ae585c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d68a94e-7446-4715-9434-5ba32f3af4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490701f9-d87a-4721-a316-67a0fdfc96fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73685846-3378-4c4f-8418-d89fbb0c5f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c36c58-6de9-4644-b5bf-e2463fc075c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41accbf6-08fb-41de-85d4-15959e77f245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca497e20-a7bd-41c7-8ad8-9e4b6a755750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efd6823-467d-413e-b0c6-c7fc02a5cd0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868a0fde-f468-464d-9639-1fe933d2fd9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164b272b-48c4-4cdb-8940-00be4860fee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b89202-c4f6-47cd-8ba1-fbae7fc9801e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ff84e6-edef-45c6-9a1d-7138ab42d54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbf32bc-83d1-46ff-95ef-3cce119f97a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafb4e23-5c47-47af-8d34-433e731359db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8efcd3f-c73e-413f-9f53-dc5f02610c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0fde7c1-704e-4043-bfba-c3d2d8a67806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef32020-1c60-4413-a378-d91eaee3cb15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.233.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd6838b-2490-4562-8b8b-39c3d283d34b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ed1dfa-6cb0-4ddc-911f-8a0c4978114e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65d4aad-5b7b-45cb-a63a-bfa300d15985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc8ba4e-d919-4b77-ab0b-41c388c94e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7296f4-61a7-419b-9e41-164faf045143", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ab8f23-3c3e-4ebb-bf6c-ab3d614422a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81425447-06ea-4942-9dff-25dab33ea433", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c84813-3c43-4e07-ae73-ed48323b8700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626d04b2-8f3c-4d85-a604-f6cfd7188132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.249.227.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bbd201-057d-452f-a0b4-73bd4412bb11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.91.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829afd35-f5c7-49d0-a2d5-38da4c175f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.26.122.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61060482-7300-4c6d-a9c3-84d436470d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.53.209.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4d0919-ba9e-4a89-9b07-615f363889bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.53.211.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932cbe85-d3f3-4130-afed-0e1efb6c212c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.74.221.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e31278-2908-4b82-8a76-ace72c620571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24457e34-b06c-47f8-96f5-dd28a918ccf3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762bdaf8-777e-433c-a5e2-af924399b7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279ce310-f928-4df7-8f27-5f27a8a6a8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eef18ba-85de-482d-b677-7fcd51a41497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7fd037-dea0-4171-af9f-604397d49b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d98259-4625-4053-820e-9e8fd0933efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.121.253.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f137ba-9584-42f2-aa01-13be12ece527", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.123.105.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99cc3f7-005c-448b-ad9d-9a2559c59f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.149.199.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba06a83f-03fd-4af2-b9d1-0923c10c5112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.172.250.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f2b3db-0e44-4e4d-a646-d084c3b21230", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.215.191.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ed2d5d-f27b-4510-adb5-45cb2922652b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.233.184.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1cdabd1-b8e6-46b1-9988-636976a37670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.71.90.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a292e5-6a85-4786-b9c2-a87e54e08bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016c51ce-5a72-43c2-8a41-415d229b058f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.131.191.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628aaa12-e466-4765-95c0-01e281f520e2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.132.49.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f30202-63cb-4053-8974-3c6f569c44ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.137.225.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73423f25-050c-4a55-9b18-83529921c8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.154.100.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402baf73-d80d-40b7-a9bb-afb627d9700f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8702561-cb0c-4531-a8d3-68576acf9727", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.200.27.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f22b0b-82b2-4a4e-becb-e7f71d27b7dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.201.102.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d651c0-d1ae-4657-a813-a714225a3d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.211.14.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e220fb66-fffa-4a2b-8346-64d2671f1ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.217.145.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c01f33a-3813-4270-bcec-92b17563746a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.223.227.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c79649a-cbb5-4dce-98f9-db340749ea9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.230.190.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d5aa54-becc-4852-a678-99c5fa6f7dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.108.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d372a0e-50d0-4bd3-b2de-9b789ca4121d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.123.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d294de6-114b-4639-a50f-526010e7bf3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.197.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975caa81-0f87-4129-9d06-2401f6fc2b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.246.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c56d7c4-3692-41a4-97e0-f463687992ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.62.7.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6554297-923a-4f3e-ac13-28d036bd6d73", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.165.43.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3a2014-d400-4182-8594-503622a3bf20", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.121.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5aee08-31cb-404c-812d-a22ffab8d9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.146.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c843f1c-63bb-4aae-82aa-f4888922e6c4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.154.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb09830-b3e1-4fcb-8b94-0b219afd6850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.19.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7060932c-2f68-4bb8-a5b3-dc59401f45ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.25.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a5591d-64cf-451d-93ba-44f9c11bd91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.79.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f3b8bb-84d0-4e92-bff4-132c46630d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.214.144.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5f00dc-91d8-469a-a132-2b3995583474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.215.235.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a307fe68-13b0-4bb9-a66b-870201d92972", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.253.30.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a020bd-efbc-476c-bb1e-6a578654678e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add6fdd9-e90f-4cff-a975-08c7d6b4d55d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6821de94-757a-4ffc-a017-c5e33dd0358d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd332b8-98b3-4dd3-8dfe-38dbe1ef4008", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.69.225.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b614580-a2da-43db-9a70-2cadfc5fa7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.93.233.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7634a72d-c35c-4ae0-a1c8-44295a40ff85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.146.163.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad28f9f-045c-4f90-94b4-7771c3a54b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.151.146.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c513ef4d-8b26-4f74-a1a3-a56aad82c33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.160.63.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4399c0d7-ee2f-4a72-8421-ecfd4fb6b482", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.201.207.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da13b0e-e059-4e57-8a55-1e86d3d3816d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.219.65.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb87e4d-e7eb-40d4-b94d-ebe7d37b2643", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.248.130.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad74e03-fbd8-484d-b985-ddb0809aa6cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.51.43.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46654811-1cf2-4710-815b-6b34bb058c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.102.8.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f75a2d3-0a19-4a90-a3ef-89d0b1d01776", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.102.9.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489abb6e-9f56-4988-92bb-4b6d2a6cba72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.111.226.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71c42d2-2e92-4344-a728-a19a856b4f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.119.187.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a180d7-cb58-497d-a43c-53e82965ff7f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.129.122.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e3bc5c-4c27-4beb-81f3-34fbbfb0ca14", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.129.122.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f4e238-318b-414d-9010-6a820bb2c3f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.143.191.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46437cbf-feba-452a-95d4-a5fdcc11ec72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.21.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d82f68-9631-4680-9bbd-2b351ee09967", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.182.160.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fd53be-8ff8-4680-a55d-06f418cbd312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.92.175.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bdf686-1859-42b3-8df4-7b9232b997c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecb5e7a-f1d2-4d28-95bf-e936490b8c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31345fcb-085c-488b-a63a-9e37354c9ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f131d6-d993-4c4e-99c0-bb5ee0a848f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.234.201.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cfefdf1-8a80-477d-b70d-d509ee61d656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.241.76.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a957c915-f0bc-4655-b26f-771b8501d305", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.252.226.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4595e7-6992-4954-a4cf-448fc8d0146f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bb2fa2-2b37-438b-bde8-0584c693547a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361c76b4-1391-410b-8506-9161466aeef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.28.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedefe1a-a560-407b-a657-bd90fa2c5e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0152d490-e861-47f9-a46d-9d0622452edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b613b80-5a14-4ab7-9b26-81202c180887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759270c3-3921-4fe2-9ce8-ff5cec4b209c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc65f81-d802-4ef8-945d-a04988b3e23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc377d4-6082-4b6c-83fd-78aba3ef5ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cad9b8-1aa5-4080-8de1-dda3ddbd1a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0947afa9-2f73-4237-8258-bf5b0a138be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf419e0-2841-41ee-a598-8c3f89f9934d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.152.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b420cab1-b6c7-4fa2-af03-2d007289279a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf37da2-a4ab-4fa5-8196-e8bed3f64d0c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f807d952-4af5-47d5-949e-35c01b27b39c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60d8283-d8e4-420d-96aa-51630540e3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.194.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5043c7-f410-4dfb-8047-b9f76e5ddccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.198.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a30188-73c7-4589-be76-bdb38a2ec4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.220.50.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018c8c79-1dd5-4cf5-8684-e2cdf684df97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.220.50.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550e8ca4-20d0-49f9-abd4-2a1c9e00f132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.220.50.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c1641e-d886-4f42-9960-9a670dce6a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.144.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ac802c-c571-4d28-9504-22ead64ec4b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.210.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b3f015-b24a-4623-ac6d-a4bd05ed422d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.221.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78432995-f379-48ca-8bd0-bae60a3b6d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.248.150.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b48e36f-37e6-4404-bc8f-d454652080e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.250.227.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1372d2ad-6a2c-4208-bca0-e310d1cd03c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bbc24f-1648-41e7-90d5-6730ac940add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064fde0d-f8e2-4902-91d8-f8b69488bb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.127.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d952eb18-c17b-43af-a81d-866355511494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.150.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa904059-200a-4213-8a6e-ad70125f11e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.16.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b357140-6882-4dcd-a58b-3aa13d8d05c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.199.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d24b301-af4d-4920-b66b-064b031dd578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.96.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e089e1d0-8f3b-4776-9f64-0401cda28f53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.36.109.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86950f5d-7d39-4294-b8c3-22f63366c186", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.36.109.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65da876f-313f-4b2d-9fea-3e3288c7b744", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.36.109.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a3b7f7-0c96-49fa-8a21-c462b6228f90", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df25f5f-a6a0-4386-b79d-8dc0af9bccd5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.71.142.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95266102-2657-4067-b739-53b2fe55babd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.71.142.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a67553-df3c-427f-a9da-aae7757e8afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.218.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8691de3-6f8d-48f8-86c3-3c1651fd7488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.43.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118e9c1c-c1a0-4f06-be8f-926b4381a782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.148.63.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2748b8-6d61-4dc7-8515-331e454149db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd074a30-62dc-42d7-8e65-3a9c99607b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecfafcaf-99cf-439a-92da-de007318564a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c663f35-442c-4fe4-9713-8157b5c6376f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf273170-51cf-4280-94ef-6a03d5f4ee61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b331e1-12a0-4e05-9ce9-34ecfe4a2074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54dcf39e-8075-47d0-b5c4-505267f3046c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51536d61-ce2b-45eb-bcfc-98c3cde8828c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5f659f-f2bc-4e79-bc77-3338b504bd73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae93885-c9a3-42c4-8db4-577ae968ab6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8e5e20-fca1-4760-b3f9-d514ed4602aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5966441f-2704-4624-bec0-76723c665f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6132775e-ea47-4a81-b8c0-7653089626c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b211ab-35e7-4cc5-aab1-ee15e12fc16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51039323-498a-46c8-a1ec-214ec3c23d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c27475-bd01-4c67-af78-73c26d40c62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f4ecd1-7d6c-4b8b-82a6-63edf5647086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f883ce-e2cc-489c-9e73-ef0b25179bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e4d42e-0225-4a0a-8c26-17ebe44d0d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe3928f-8917-4461-b9f8-eac0f83bc50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4afa9cf-cb81-49af-951b-08f2f90f35d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1509bc7-8907-4d7e-b598-1911345b5fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564f88fa-6b9c-4906-8736-d94dc9663889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da473394-a760-4a65-96be-35ba45206887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cd9082-49b5-4e2e-bece-8b709f8f8f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a74e46-83ad-4901-afda-915d9cf09e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5e400a-d809-4051-9e68-d6c4bac6262b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844dcef2-9511-4764-a60a-734a3f1d5b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0b1461-c760-420e-a3c5-c5044b9ce802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d3aafd-6daa-4bf0-92ff-cd1a228e0a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5328ba98-a37c-438c-8543-336f2a4536b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf95dbf-26d8-4cd3-862d-144095ef60c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077566f7-00d9-42bb-8ed0-a7d3316a697f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95efc16-6289-492b-868d-3bc7c6c21ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9fd200-72a4-42c8-9507-f28d11947c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc07ffc6-3f6f-4975-b04e-474ffeeeac2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2fe9f3-4147-46d0-9a13-30fbb2549d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba95c94-035b-449a-8f64-852e99f4d490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7692bd59-cd43-402c-b8a6-5efca4f0188e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ada6cf3-db91-4c53-8ad7-34acba65db4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0488d362-b625-4c59-b462-73d70276b4e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b3631c-347a-4f57-9f82-c082232029c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7412cf36-29ce-4768-87b6-d64f787cb1d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae2a305-b27b-4df6-a51f-6e1c70b33596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5d2051-e6b1-496c-ad18-f94f58cd9ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d2a5b5-5330-4686-83b0-90bb97562b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d189871d-41e4-42bf-a1a4-05f256d697d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be36f944-039e-421c-8cf0-48199ba8f7c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d81f32-67d0-40ac-90e0-43edb9703569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64aeafd4-d317-48f8-91b6-0a320efcc1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180f5712-f178-4d89-b88f-cd950a61691e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ae2575-14bf-47b6-b94e-c4dae758b374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257b84b4-d181-4e80-91b8-93e581c09e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf3d160-2753-4d8d-b7df-2345a551d887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7ab225-ff59-4fca-a142-6a24dc893771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a43439-529c-4eae-991d-9f4210401b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26de3e08-2d6f-4ade-89a9-5e7c0a98e49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cbfc9b-8a70-4f35-b526-b50f8d19223f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d9c7d0-4793-40d7-b7d7-adcf677f28a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80bec03-7007-43e6-a36b-ef426f6a17cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a81bc45-4aa9-46f3-bdf3-4e8af23028ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3660c3c-90e3-4495-b746-c6374ecf917d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc3ba51-1f7c-4d6e-94df-978218fdc9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a47943-85ff-485b-ac6e-2a61f66033be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5128b6-f0f8-4bd2-8976-1de37e4e13ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea9232d-f0a5-4a5c-8245-82603d1315c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3c2bff-bdee-4916-adcd-bde2d88f6671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fcc9206-b435-4218-8c23-cf0e60d82997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7efaa11-4304-44d4-8c63-ea7f94cf5609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6993c4e-51eb-4df2-827a-d65ff58ef38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed923d8e-13b1-4fac-905f-2aea67e560cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75ab818-3747-4b72-8994-9a29e838b851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1795f75a-ab47-4e49-ab8b-fed0f4909611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.169.194.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba660eda-08e6-43c7-a901-185a7d928945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.147.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1159110-cfb6-4884-891c-d7893e48b544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.221.201.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58714572-cc54-4e69-aba3-ae1a0e851eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.228.139.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e320ff8-6ca7-452b-bde4-a9331e7ffd5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.123.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857725f1-c9a7-46f3-9870-9b18b3dd31e2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.123.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c59b994-b663-469a-ba89-51665cc2468b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1daf04-5307-4e48-81f0-9381f5ef4425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67e04d3-417a-4523-8da4-25360f38e5db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0db92b-2b8e-4a74-9382-aa30c8f400a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93acdc9e-2ec7-4396-a68c-42624a71f36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abc6580-8d94-4231-b38b-3f7edd3ebb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f912d3-5fb1-4d2a-a375-efaaaf5fc178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4b1928-ff9e-48fc-a330-00996cff1cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351dda25-5be3-4042-a2d0-2239f8c9ac63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96bd74f-c91e-41f0-843e-1a1e069dda28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f7736e-41a0-4c7b-85de-9ae1a33cf2a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66dd4f63-2a30-4f27-be6f-6b8821aa62a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.70.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92258bd-7a97-4147-9831-c5a877b3a4af", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0984b5d9-f234-4eda-9640-967450729575", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.56.116.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbaef4e-862b-416b-bf5b-750f14cf0ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.107.115.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ab045c-c578-4ac5-8285-c8c7712456ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.233.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4530c5cb-48e0-48ba-964f-da51b156df14", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0509f2-5021-4570-9fc4-e10e48508aeb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa10f9bf-8d3b-4283-999d-d243d078932c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31805f86-2abd-4c07-a728-bde22fb0836f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c8e0d3-ee40-4543-a167-b78a8803ea5a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c31e644-a76d-4dc6-8ed3-0ed7deeea3c5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a252768-59a0-4731-85ec-60189c142a15", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3700d7c4-5a7c-4338-a0c2-60ce0d7a1ad6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7234145a-62b5-4e03-998c-a9bcf615e255", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78efd045-ce45-4f63-8c61-d2dffe3de355", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6bc7a3-f337-41c6-93c8-74fdc60dade2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.120.230.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b964e54b-e6ea-4e83-9fdc-82e7da0caca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.120.230.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72dec019-e69b-41ef-ab19-3b81e781acfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30dcaa4-b3e8-4dc9-b8b6-6c1fd4b8a6c3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.150.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d8d656-5e82-43f5-bfb5-1d2624d148f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.162.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0c20bc-4d55-4acc-bd2d-75f753ddc551", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.181.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fa271f-9c00-4b03-829c-6440bda32c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f719a35f-9e2f-48fd-89b0-dd17f107ac3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22aa9ce6-e84e-406a-9fa5-2fb159c2de8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9494a78d-ca41-418f-983d-932b8c34cdd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3165671-4b4d-4420-9714-41e11cc17168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b4b14f-200e-4b9f-ae06-37ad811efc44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e24e9bb4-3f01-4042-9183-c9b65bf71bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.176.254.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec50708e-54b5-46aa-a1c8-d606452bf6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4ef387-7194-469a-b84c-d12f66a01d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7d22f4-f64e-48c9-adac-958daf9f8abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234afd40-d7f1-4cdf-aab4-4213493cf048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce7c0ec-97af-4970-9c3e-6ea12164a3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa11945-f0b6-43e6-bb64-238bd2d6925f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d40fcb-c2f4-47ed-bce1-5fcdf4123c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69aca5d5-6331-4daf-80a1-0eeed4ac7482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7e06ab-f87a-47d5-ae1d-f22a157d3f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b6c2a8-f462-4b1f-b68f-03cc6e8a5bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f419553b-ac8e-4a1a-950d-9514eea3592f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94e578c-905a-487e-ac56-a4a0b894b7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8921d5b5-69d3-434a-949e-2101be800703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0b856c-26d6-4dce-b735-24021d276c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.210.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42747f2-5d25-45f8-a2c4-8bfa758f8f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.79.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629028f8-e09a-418f-aa6e-eeac4fbd276e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.85.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07dd00b4-1e2f-45b1-8846-31bb62c2fd40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.42.205.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7bdd7ae-2f29-4c00-8c98-2ed926bb6849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.48.251.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b622d00-a64e-4b49-8812-8d26aad57fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.5.79.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6d62b2-d496-480d-be4c-9e3b290f57c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.16.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aca70ac-b74b-4ea7-b58a-b092d17886ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ce6435-10ac-4292-a7da-d00e2c2810ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.61.31.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0d4bab-3ea0-4fe6-93da-3743499c577f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.62.163.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ae3e91-1e2d-45f2-ada0-4d5b57d682f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.87.248.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee21bcc-d30a-4714-81d9-a09f2eb5ac8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.133.47.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049ef0a0-920a-4a2d-b0ef-5563e5dae8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.137.245.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c040568-76c6-4646-9988-6b0a5cedf91c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.154.52.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1111972a-cc3c-43df-8059-6c0bd91c0554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850d73b1-fe6f-4757-8a51-07c32f3cd6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e126f5-4b4c-4a25-af44-3caf4942d446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afa2f4b-e055-4a6b-ac05-bb71de9ee79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21635278-81aa-4f27-a64a-50fbd4ca027e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f733360-c328-44ca-be4f-3554d5f4fdca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ff86df-bc6f-4df4-8c66-bda4ad814100", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8556f1c4-1628-46c8-af44-a37dc528fe9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef091bfe-df21-49f7-8842-cfcf9cc5d864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3609f416-5a08-4092-8d6d-306cb934e170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8277d5e-2542-430b-8833-650211ce8358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234fc8bc-cb11-4385-b3e1-bb1095372fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567d25d4-08ad-42a6-a344-6d322bf0ecc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2300412-1c9e-4d05-a690-d2ff3faf0e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13baf0f0-5a7a-4184-a228-5d817495291a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29388602-b6bf-4778-9710-786da1cc2a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6521f2f7-7dcd-4845-8615-bf58b696918d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5909f73d-82c8-4e21-b116-d7847210b014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113f02cc-f798-4e33-907f-08c8855e17f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2d9a3f-dc5d-4b5f-99a2-846487889f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7a0d9c-ad5f-47c1-9bc2-014d6b764f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77575df-caad-4ebb-b36d-41d2ac3db6ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cf277d-0e6a-42df-b176-a05fc844a31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7cb8cae-8576-496a-a5f5-36cac09bac3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0606797-dd98-4cb2-b20b-5ca0723c716d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8ebf44-6062-422e-9f80-040662c112d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608843f9-6246-41af-9f51-ac78a3fda5fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc453656-2f02-47d5-bda8-0d9aacb735a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afc3b57-3310-4294-be14-6bbddd8091e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47aaabc7-6056-4119-a05b-157b95f924e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfce1016-fda4-4a52-8c55-429006be3a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0fc63ed-5359-4392-9be3-c8c758a67e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.20.239.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cd1711-3ad1-4f6a-8d73-423fdae52676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.201.140.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a80bfad-14a9-41ca-b027-0ffc5aae5023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.211.191.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3052d88-3f44-4631-b06e-69a718dd7bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1700987-5085-4e96-a0a0-bbc0e76bc777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd8868a-6c15-4a1c-8781-5dc186e82a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31793d3d-00d8-4ecc-b3a2-f6a0a5def347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f9db91-d3e5-4d90-9b7d-91aac3690226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5af9a85-419b-4e3b-8018-f4ad40a267d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b988eec0-07a7-4043-ba31-bab7a8322e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11d1a42-20f5-4820-b09d-cafe4a67907c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404b4400-0772-482b-b6aa-c674caec56b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e3d134-0555-4f11-9725-46b0a4dc5f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.18.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1a3d4f-14d0-4a51-964f-4ce388ca3613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.87.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1a34ce-ba28-42a4-9a8e-d0c1f030efc9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.3.220.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3310e2c3-7275-4c72-b4cd-7e94380b0414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.33.236.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e42972-a6ef-4a3a-94ea-a2d5e42fa4d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.62.24.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f305d4f8-06c0-4367-9d8e-9ce200e74b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.62.32.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02d57e8-9dcd-43b5-afe8-0e90faf6228c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f175e0-3164-4f8b-9da7-a08b89bfe937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2e6b2c-8919-4bba-a7b0-03ce4ce4d80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c37529a-5bf5-4b72-8c94-885bcb479583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a69705-0d8d-4b6a-aa0b-f05a4c3dde2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77760915-f004-44f8-bda1-b732d78eab43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.97.63.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d643c66b-64ab-4de7-89c5-2aefc0d79a16", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.3.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3f7582-4a9d-4025-bb23-a29f3471bc0c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.216.95.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6f1ece-3aef-4ac5-841f-2678c1ba043f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.221.164.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8005512f-9294-44b5-b988-ecc02f9b0669", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.221.37.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad269240-790b-4726-8c5c-64aa37055eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.240.181.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96900891-3e47-4147-93ba-0c6b8d8419e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.43.101.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2df8b9d-d114-4387-b0d6-fce85322d0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.155.134.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94484e05-502e-4088-a97f-419bba647891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.161.126.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd47004-1146-4717-ad3c-7849f4931d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.188.231.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa12925-20b5-4390-8c53-1153f036d239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.42.248.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980c2394-5933-474b-a05f-4c1bc087fe88", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.44.15.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c293b86a-4c11-4b57-8db1-618f70c4a045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.179.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79eeeeb3-5401-4ae8-9c5c-7473f9f9f91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.180.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee652d1-ca38-4b99-90e6-7f50ad828ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.183.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b13c52-7797-4eac-b402-1bb00dc7513c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.106.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8899469-749c-4e92-a9d2-a6446e787bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.202.146.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d30dd1-2e65-4ef9-83d1-093777f34b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.209.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece2ef37-5d63-4132-8210-fae7dda56f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.233.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ca1208-9f2b-4a16-99ba-014520d00929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6116fb-0e6a-4d77-9d1b-1cfd1b92f672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c898e9-1768-4d58-8186-2048fae79153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15dc63d5-3d93-4550-b88b-3e66ab633ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9559523f-4ad0-4784-858b-637a4f2720e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e353d80-cc63-4eca-83c0-304c3e0e5f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948fd01a-f76a-4d98-bd9f-900444ab412c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8a14f1-bcd3-4388-8339-d223ce5280b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc3f711-f9c8-4ca2-a22c-6a59f0d672ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a588829a-b1c6-403f-a1d2-6581a11312a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7023d047-c304-4017-80cd-45249a370bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e030b07a-0fc2-40a6-afc6-de819a8c64fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9593c96d-bfeb-4af9-a94d-47b623d0cdec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c558433-1ef2-4ddc-922f-e317a7c3a9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e67937e-d9d5-437d-a799-a7524d8e37e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5984badb-4390-4575-86b8-7686ba0f049c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4432719d-66ec-4cbb-b1da-238064c2ebe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6f2c2a-c062-41ea-affd-014a7f115c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcf2e06-e880-48f2-996e-4977493c6892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3beb28-a186-40c8-b254-84046a8e2c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb0c469-8ddb-400b-8785-af9f7568eccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791e9d54-347f-4da8-9c01-16aeedcc94b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9059035-41b9-4ec1-ad28-bde1cb92e839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e51049-09a7-4546-ad1a-6cd86f5440b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6cf5603-f20c-49d4-ba69-d5ad32bffc4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31447cbc-ce48-4d9b-85e6-03f08581faa5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c13501a-bff5-47d0-ae9b-295458be9cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ebbcee-12c3-4e08-99d6-49635c53b71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--174bb40c-d92c-4945-ad0f-3aa4046d9d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9830420-551b-4f61-a65f-3b46278f3192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1991ad-3f3c-4ce9-a125-159c34defdf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46803a70-a425-4861-bbb2-d2430d1a4300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b0d761-11d0-45c0-962a-5d06df71bb3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f590e631-c97d-40cc-a690-bd9e2c3b8448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c5cb5f-2305-4afe-9974-f8d09f36521f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e7dc29-3f6c-48e4-b238-901a19d77ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869166e5-36b0-44cf-87d2-c9b3c6838ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6e7bd6-70eb-4468-9ff4-e311ec7d9a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788222bf-db4b-4d0f-9107-f0e0582fe694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4184376-de62-4b60-91d5-0b0022e8686d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aef2207-42e1-4ce8-a59c-6c8f1b522891", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b89d52c-c873-4f70-b59d-ce0848184cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96571183-bb82-4933-b470-a2fc28a252ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c611d7-ff43-4c39-8514-f04317824ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba8ab22-40b6-4577-a4f2-f55312233c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc60971-a53b-4c3f-89a3-9b7d7acdd3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35a5bb8-3a91-4d12-ba97-d88f01bcd62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3069ebaa-fd09-4685-82cb-a9940b5277fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58060653-7441-496c-a76b-22bdeaaa3a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700f4f6b-6df9-4e77-8763-2c422a30f830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f394518e-e055-4fe1-9505-d03457c2d946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a541ec-7bf0-4644-bdd3-90b4fd7dfb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0cf57e5-ab3d-4774-b0f1-1bc85398b8f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caacbbf0-1ebe-4dc1-90d0-9abf0a941491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c47705-b338-423f-833d-445e08565caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c95828-2ab0-4344-99fd-1f7831f28689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e799e216-9b12-4f9b-8c43-e320869687d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5004f5d-8557-4a09-8962-36c2473791b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31440561-f66e-425c-a90a-238c67f808e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2c8312-3dcf-47ac-af47-61523d331ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29158497-69a4-4d13-9bd6-cbf857903ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4c0776-238e-47ab-8b7c-aa9ed05bc9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448c4925-a5f3-4d81-bf13-8257f96b66a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e525ad92-0142-4253-9134-3ed7893c2fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f60c9f-a02a-42c4-a50d-0d8495eb20a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6707d5aa-b798-401d-9b40-9ad255b76af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd336939-1217-4962-acce-ed2afbc0434e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061d02d6-1f5c-4074-a9bd-360f4e9e0fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e1183c-3d80-4de6-bd4a-752a02e6eead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87678f2-4aae-4dbf-bef3-172fbac3cfb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4540ef0-f97c-4a67-ae5c-74217d92da79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10015366-8e64-4d02-9024-fca9af280fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80374af-f964-46be-9dc3-045c5673f47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da995b6e-060f-4383-acdd-5278fdc223ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7b637e-99dc-4bed-a708-f1a332837ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7571491a-cc4c-49c7-8e04-874f5f6418ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7fc472-752e-4653-b23c-d434a2e78517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e480b83c-e281-4832-92dd-7a7407c27443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7bffa7-30dd-4489-9451-30c966fdd921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78a49b8-f352-4d0c-bbf8-85a8deb763d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c5455f-401d-4a60-9dcc-8cdad1e16128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5320f3a5-088f-4a35-ad0e-f5af21aae55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75a2230-9e9e-4233-a9f8-1bc548bdbd1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07be22fe-9f30-420e-99ba-83a73307d2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751c503e-b858-4480-b7da-66b36bd23bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385de410-b69d-4328-99dd-2c82c2b89929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfe4ca9-b026-411a-84fb-78e6d3e89560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5478163-5ef9-4beb-b8d8-f7b26d922e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b09008d-75af-4c7e-b592-38f6a0dadbce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3748a21-9f93-48e1-b929-7206ae1cfdb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf261ed-2adb-4cda-89f9-db668771c885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc237904-9282-4618-a5a3-47504af4fb7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae9beb7-8caf-47a1-8b43-0c565cce86c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9890f469-02f2-4a57-87a8-7ca90e407f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc97bc5-5205-48ab-9efd-760ce6e96224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32292e30-f8bb-4bd7-adc0-5b55c5c4f16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c5f2b3-7f6e-4e35-af03-5b95f34c8fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce1ab2c-fde8-43b0-b8df-e82e517c12b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0711ae8c-08a4-45b5-8e89-176b1800a5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f5f0f0-1cf9-41cb-94b7-6dc6b84a7de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858f0828-7e26-4461-8e3b-88c27fcee471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cd1084-46fc-410b-b7ef-64c61231bf83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6f60ca-53f9-40a3-85f9-97d86f38fd1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9699a527-e962-414d-806b-e4176177ece1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44be4d3a-f3d5-4356-82ab-01fd58646db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8096fed1-aade-440f-9d94-b77ea3db8adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9144961-9688-429c-94ce-d440af031fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9396ef46-a6f7-44c1-93e6-e2a4e6242ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096f67de-dc14-41b3-83d9-c8037386b95e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfbe3bf-902d-4991-874f-29b0fae0ecab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b7f268-8820-4209-bf4f-0be74e18843b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a044f41-5eb6-488b-8865-4fb6d2fb5a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda12dfd-2dfb-44a4-aba3-19bc412ba23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1182fe-8c41-4fa4-87e4-0dcebbd92afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7fc442-b695-4294-8c26-0a8ec43e57d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbc9901-fc37-40e9-af93-c92b40b4cd87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.255']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca885e2-dd28-4cff-83ab-aa22207cdab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b48355c-e392-40b2-80d1-fb0d13aa14e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22204001-942a-4a07-a33b-b2535aeb7a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e54cde4-2481-438c-a379-d0dc15e7be0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd881cd-13e3-4858-815c-0161a883d92c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae98289-5e46-4aee-81a9-498041d99edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc0e876-e069-4549-b849-842cf527ec09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94550339-df1a-4f92-81f1-ba872a46b00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7143793a-aacb-4a64-b98b-b9a4aa1ce3c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545b6659-749a-4da2-aecc-c2ffaaa1bddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cb2027-011b-4c41-9d3e-68762cd323e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8f7f5b-31ba-4d10-bf3f-49f38a197425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efe4546-e68a-462c-882d-e927f86ee02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8205bd8e-0672-40fe-aad4-a9559b6cf6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47080bc6-f5c1-459e-880a-a2a7d311e510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8915cd46-5435-425a-b416-c740bb491eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35741d53-7a7e-4e2e-bdc0-bb01859a7cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779ecc6a-797a-4eff-aa0d-10e2b2c8542a", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daeead2d-33f9-4192-9ca5-3b6cecbf56d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07d56e0-c1ae-46e1-a944-3145f2013917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739e0d1f-e2e2-406c-918c-4a24d90ed0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a32c520-cfb4-4ca8-9607-6bcf809842db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b3f224-c6a5-4a5d-800f-95b0b8bbaba2", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d545dfa3-f327-4e7a-987b-5ee9a80fd5c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200424d8-161e-4fb6-9dc7-f92a4e659009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579cf7f6-8025-4d08-989f-6b88632d0f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9e3497-aac3-4ba9-b91c-642d56d93b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a217b9-9b5c-439e-b72d-ef32081d8c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87eccc8d-cf3a-40e3-8a41-87339a0188c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e8a869-77d5-4592-9675-e947a965e775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4132efca-634b-408f-bf71-b48c0d21239c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597300ad-9ac9-4f74-8d54-740f9429a828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb342cbd-6e33-449b-8ba5-da08add30d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64172a7d-eecf-4d6f-ad9e-6c8ca63ae8e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e98a838-e3f4-4770-8531-47f136a3da41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffee1503-5846-4cc2-bff4-db8d2b997581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b72d21-efcb-43ac-b010-95d33d3cf8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7a0ab9-d39d-471d-aee7-fd291a54a92d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ace2b75-ad1e-436c-bd20-d9e3f6d94886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b5df53-2084-48fa-ab17-9d6c49a226f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa828f95-eff7-437b-8e95-9ff7235ce795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061dec61-824c-4912-9d27-50667aea87dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d133a16e-5c3b-4239-85e9-84edde47e4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688c6276-7d4b-41cb-b66e-356ae81214f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e5823a-3c57-479f-8e55-1acc2c46dfae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b8c060-cb92-493d-8a0b-6ad59c65b4dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1164c193-5e67-42cb-950a-80a09d07f600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4c0cba-9e3f-498a-b8fe-b51961006e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e017b8e-8db3-4f9c-8633-8b9cea0d8f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea623407-83ce-47ba-a40d-de9187ac733f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b1daa8-d826-4a3f-a157-06693e642069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cba7219-ef24-4839-adad-416be3f781e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e297bdc-92b6-4566-a556-1b239fce98c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f55400-d417-497b-b1aa-2e7452641e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3a3c67-0ceb-41be-8a1f-631ec1d6bddb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.244.242.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024c2ac3-884c-4bb4-990f-72c9714963d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.85.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6b4875-c45e-4bba-b418-ed74f6a121a5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.86.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17494c2-c21e-49fa-b95d-bbe2b87ddefc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.134.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b0a3e4-55c7-42d6-b266-ff9d0af2ab07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.179.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619446a1-efa0-46cc-88b6-27e50bb80627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cdc5f23-65b6-4770-a5d5-4b023baf1baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ef3827-0754-41f9-aa5d-db960a3b3d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5f7153-8660-4592-a306-e1dace554d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ec8088-5533-4116-9466-57dbf75554aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.57.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253cc6eb-5c1e-420c-9266-ddaaed1a6652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c185e2-96e2-4314-a425-a7d8aff22ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.59.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c25778-dd75-4c8f-95a8-fce9b33e1f81", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.56.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cba1109-620d-46e2-bda9-c32a363878e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.62.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43139594-9f91-4f78-b910-fd24e53b8dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.63.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2af368-0dea-40f2-89ef-6472a088d928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.249.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6b065b-4a63-4af5-9cc8-1da6c7f9c49a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.254.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3b3271-e2c8-4cfc-a7bf-01774a0b4934", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.204.135.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ba488a-0000-488b-abdd-97b7c7be25b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.245.176.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154be45c-7a56-445f-87c1-b54e4072afa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bf63bd-f50f-42af-a474-d4715e05ce49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469c9bc8-01d1-4c88-b9b9-546a70cccbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8845a0db-4032-4b3b-b2de-0f42d56ee936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02dc62f6-1d47-4e22-9d3c-0c90f957adf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2cbb82a-ef3d-4649-979a-a5984c93db09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3033be7-3a5b-4a29-8972-a5dd2d78fa25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b874f6-147e-4666-ac95-770cb7e40733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0afd25-4f6c-4076-a679-f066fc7aadd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504d29b1-b50c-4219-8efc-4ba728d9f754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56193fc-eb06-43f1-8dbf-866532195ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e72efce-0b35-410d-8678-0fd4ed4154be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94801e28-4098-41d4-ba0e-39fa433274ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed654b06-2a7f-42ab-b480-75a85b390196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64344892-1670-494d-9b63-a6992d701878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8ec5d4-6722-42ba-bb12-bef767530b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d400e5c6-fa93-4fb4-bfcc-e3a816bbf505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40527ee5-d204-4c38-b78a-6ee85ea102de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0034f501-8afe-40e4-b9fc-91fc66d9e351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2153999-1244-4c8a-8b2a-c9431f4e70e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac6b649-ae90-482f-bb1f-b1dd832bade0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d019c08d-f5c5-46b8-8fbb-a0496ceb4d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce0c742-779f-40a4-a03c-4b1e61c63f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615f582e-5ea6-4ad4-9c4a-7db5661a352b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06527959-fc85-4855-bf86-dd1b808b1e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b6ed29-0c0e-498d-9809-a1472f12ba0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6beeb26-1b9c-4a60-97d4-ce297a0a7be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fd11d6-6512-441f-a0b1-81c19794aca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05dfc76b-e939-4fe7-a743-48cf93d33cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b22f10-4417-4ec9-8b68-42672258865c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362d1604-8afd-4ab5-953c-db479c4168d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f36b108-a2dd-4c83-a0c3-61962de0efc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c647a9-b537-42c0-bcc9-c3da7da7b396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513aa445-8799-4ba8-a317-81f03450112f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc6cf37-7f2f-45d2-abce-234048f590a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed42f86-b9a2-4af6-a605-a3a57f023355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccce0e7a-a790-4f00-b2c2-60ee990e34b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa78e23c-a255-424a-b3b1-afd430d8ebe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24110b95-b062-4e2f-9b1c-3316284403e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0347565-3bfe-4515-9610-cb929b779410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00649da8-258a-4f82-a48c-90c3b2be15fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3386b851-5e1c-42d6-af69-5caa2254f7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8120c5-de29-4757-95d4-ce7368a41511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcac80c-9f67-4a92-8166-bc484c4a53b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a86a7d-1f39-4a27-ab06-f4ff800f8c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff170d06-8e2b-4ef4-83e8-3bf8d0265013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5e11b6-fcdf-44ee-b79b-e38a29feed12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79199d37-f4e6-44e1-9127-b343538b489c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435b5feb-f4d3-4038-9327-88f510e0a914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f2a8e6-9bb1-41a5-90c8-8f4a4b20e0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8b3017-bc98-4f49-8a7b-f98b3b94e4c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5cb4b01-b238-440e-bb9f-27fd0583dd2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555fe364-5c02-4369-b0b8-7bfc490c46ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59248d33-ec35-48d7-95e6-44921debc7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd2fcd62-df72-4298-b05a-e332bd411c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f0151c-a1c3-4830-911c-6eb69c15d924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd41eac-5ff5-41a0-9d92-549b1678dc95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.165.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0db0eb-4c1b-4c0e-8518-9913f1f9c347", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.186.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1643502-8e71-4198-a989-654ee4c741fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.188.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a129ca-4ea5-4dff-b578-67b0154d51fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.210.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d26ca4-8cea-4098-94a0-53233990da6b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.229.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5197c4-7389-4238-a902-57fc111613f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.83.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15a5ba9-5429-4c70-97c8-fdfc8f2aef15", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.181.160.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728ef960-afa7-46e4-a679-828df1dc88ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.182.113.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6575c736-a3e5-4e65-8c50-8560521e0ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.185.73.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b388b227-f14b-4db4-b050-c40afdfe6ada", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.1.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77eff33-418b-472f-b2ea-b0b6a30ad9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.43.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116d293f-7403-4e2c-8abc-b36e149552bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.56.30.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46b3851-7c0f-47d1-ab83-9e094fcae219", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b9ffd2-86f8-4979-9f86-0951db854154", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0912a0e-c66b-4e79-bda3-8fca9b06b98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d40ff7-8b5d-4b6c-86c4-403a96b86ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0dfb51-b56e-4773-bfe1-6632a442bff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.58.203.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df79ad03-5e0d-4501-b8ca-ca36cb4e7b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9737b217-6476-4bea-a41d-dccba8109107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.115.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391d6f9a-26ea-463f-8bd4-7acc046de3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.116.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77254a3-a7e3-4975-9f38-a0cf4bdda1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.117.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc905e6a-6d52-4f1d-bde5-17431bd93876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.40.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a73c223-10d8-4399-9084-41e790818b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.42.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3dc1dd-b511-4e78-907a-2e63b1007a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.89.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f2f69d-a031-461e-96f9-5a6c3d94636a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.17.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4cae9a-d34e-430c-8baf-7d4f31c8d5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.186.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ed6d3d-e789-47d8-abda-1cf0d30c26a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.195.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b4d01f-6bcf-43d8-9a96-9a97d7d10d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.196.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49887c85-6873-427a-8050-b712037a4f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.196.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83719c04-c06a-4d9b-a638-29e1bb3fff72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.205.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b7d919-caf1-49c4-bf5a-7c08b1b59115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2521b3f3-efe9-4501-bf6b-900d710b0fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.32.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501c543f-8826-4b62-b1c4-0a3127397ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.32.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ed1a09-f9af-41e5-b183-bef358abea7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f938a2-7140-4cd6-982b-6013b25e0bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bfced9-6fc4-437a-8b9b-5c3726476a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac73514-a56a-466e-acb2-a70dad72b880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52c65de-22a9-407c-8bbd-6e3c243a86f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7e1ec6-a1ec-4a17-ab72-6d65d9606739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc64dd1-2835-4a00-bd02-f3ddec5bf1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81851385-7770-4750-b812-5a15b7ac1b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.112.233.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dee4de9-b5d6-4e95-9389-dcefe4715779", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.51.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbaec5ad-13e4-4518-a036-660ff4652ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c4bb9d-5968-48d3-94f9-bcab4b02ac72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e772aa93-1b97-4ac1-aa3f-8758f855aae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.201.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a60d97-9443-46f0-bc8a-4d9f9570fde1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.202.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e59c7c-8a42-4021-94de-3a04fd4d6b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.202.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d865289-1d1f-496b-bc66-ca88ebf63bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.208.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613a1004-03aa-41e8-be36-6fbe712397f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314b5d64-75e4-4cd2-b59f-d63155372a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1a23cd-3ec8-4898-9821-25e4667d384c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.227.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f328e6f6-e517-4f39-b8ae-aa7d9888ea20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.233.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51860354-022a-4557-9d29-62ed6df04206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd89ea0b-8f5e-442a-9058-443dfd224c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab116f3-bb6f-432d-8827-cbbb5f799100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.248.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f427a9-c6ed-46bc-afe4-ce27feb818c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6cc5bb6-af9b-40eb-9471-1740ac0cf0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9240dffb-e06a-43be-8da5-5c406bf33ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09450731-b52c-40e4-b195-e5452733a361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d7af4c-f09f-4e6e-a3ef-0cbbe1820954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e4b25e-7718-4b49-a780-40582d64cbe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.46.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f263dbd3-f8d7-4808-9c40-de5d53d743ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.222.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c88078-6a10-4685-9295-f10ce9762f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.87.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ca3630-6ff8-40a4-b4d7-66a27b00c9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.88.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7425d053-d14a-403e-ad28-d7a3ba9c4ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.152.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ce5fd9-9fc5-448c-95cf-d6e3bf41b334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.155.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1470be48-e970-41ee-9400-b714943c95c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.192.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92df88d2-9834-40d5-afe2-b54867106260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.195.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791d7bee-ff7a-4139-8fb5-595d4ca39f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.200.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636ee8d2-972a-4cb7-b34e-c3d7094af62b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a24ac6f-de5d-443d-b51c-321d9e69ba96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92ddbbf-e3a9-43b9-b1a7-b311f28bc132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.203.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4081b8-7237-4b1a-9880-34c3a8e7eb49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.208.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6973aad0-6e19-4f3a-a0bd-ac7f7f6c97e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.218.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6218152-a76f-4f13-952c-ef7e5e92670c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.219.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4086baf1-bf1b-4ee0-8fc3-497e8ce49ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b796dca-52bc-4281-9adf-0982ac46ded3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd86e381-0a31-483d-9b76-7cb9d88fbe04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.224.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e851a74-5dee-47db-8c46-5ac572210bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25c31d5-8062-4cc6-8fca-8a494d250d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9dbef5-0616-4633-88dd-9ae7f93d4dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.13.164.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c45f08c-62e5-458f-9be7-55f5907b2611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.72.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ae2a1b-f30a-4b2d-b945-8d43acab77d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daee1c4b-fa6f-4d58-9cbb-06715443d1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e568b3-a0a4-4c2d-8de5-f27802303d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e810d880-1dad-40b7-99ea-7d2dbac9e142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de07af72-c784-4f2f-bc2b-d70dc42d20c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.75.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6842d58a-3b7b-4c20-9109-6e73e433c0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.78.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c22dd6-749c-4988-8903-ef9e96cf75b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.78.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c31b139-3fcb-48cb-a27f-eb102b40e937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.79.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a769ea-b617-4a65-8329-48ba7c44fc9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.81.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b997a38-2497-4c56-8127-de34be8b8881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.88.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a403e0f-5f61-4112-9dfe-23140ba0b9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.89.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e1da5d-98fd-4051-9891-fc7805b07bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.90.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a847e7-7a6f-4a0a-9e09-8518ce7beb75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.90.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35cff6b-4f85-4782-bda2-d8eb630a099c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109093fb-8269-4483-83e9-8b2358ae968a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.95.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7e38fa-6dd6-4cc7-bd05-ba7727acf8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9638de-51c5-47e4-b711-adcd5f5b3ff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7182b79-b393-4793-b4e4-e88b421fae1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7352b8a6-ab66-4f76-bba6-159287cd2c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3d4763-b103-4679-b0a9-3d9f8441d72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3879162f-d287-40b7-8f3e-15014688e75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.164.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c61ceac-60e1-4f56-81f6-6f33ca4f942f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.164.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be87cba6-068e-4d87-a724-c0bec8d283cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8e24dd-c968-4f56-ba25-f5f81400f8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eaf816d-a01e-4fb7-8fdc-9e5cf33ac360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f906a852-dedb-4f93-8b8e-2bc96052bc6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8277d28-bc47-454f-9d6a-35ebd5b1b12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff80303-f450-44fb-9dd8-9d5a8f1d5b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bd66db-7332-41b2-a80b-666307acfee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba1e469-0eec-4ece-a75f-1df1e0d5d11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.194.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98b3a11-1757-42fa-b654-365daa188fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.195.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34a010c-d4f4-405c-9358-edca8440a241", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.151.217.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc30a491-8483-46ba-a956-a0330d8faf43", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.157.117.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb17edc8-1bec-4a00-ba56-07ddfa03f81d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253e02a8-7a48-4fe3-beac-c52548122f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.10.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f4dcf8-e2bb-4210-8614-28610fc45cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c5e22e-7d93-46ad-a271-d6ab9393be4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af44b128-44cd-425d-b297-b99fd00fa666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bfb5c6-6b89-4b11-b7ae-c443981f1b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9111bfe-cd41-4f5d-b450-86d076667d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654113b7-6169-461d-8fe1-5cfc2dbca852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb248a3-1a41-4aad-8767-b92a3e8b4eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f614b635-687b-4f8e-96af-a4df9c62b273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ad9c5f-930c-4673-95cb-bfad5651fcd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c60bb3c-1ad1-49f6-b32b-03673cefd2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b78ec4-4e03-4678-9ec5-5856f0d9566d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e27b06-07e9-4602-84de-958f94009153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400b505b-24db-479e-83ae-10607fcffc75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097d68e0-5191-4976-972f-66d3fcaa1e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0466b4d-2165-427f-80e3-2565a3cc9e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766e229c-c477-4619-9304-2da73609cb30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324299bc-87bd-4366-900a-5a36b9c2235f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1deeaac1-b013-4ac1-a1e4-70f756864181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d2c98d-7453-4e0a-8102-a50fabbbb8c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38520eff-aa4e-4931-a1cd-4480d21f22f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909079e2-b71e-4018-9351-5e7e28004022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e37014f-9120-413d-8a6e-1f0d470ceca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016b3495-d95d-49d3-a1bb-9ba49843d988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9525b78d-5b98-41f9-8abd-2d307c3ce23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0acfe996-9d40-4945-b763-00214868a4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b420a533-0bf2-4ae8-b65e-0ed65e44d25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fd782f-8e22-4ccd-917f-531d870c9949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.4.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f82fb2-503a-4ab8-b0df-09f92c9741c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b0719c-6115-4d70-9085-0e0661c7b001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.59.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784722b8-03c4-4fc7-a8c2-a3b6f544036e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.6.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29164365-8f75-4a07-b9d2-e32944da9ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a385891-814e-4f90-b067-da406e48261d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac4939d-b4cb-4970-9875-f416ac837d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d47f41-e37b-4571-9f52-a5c2c361cd70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06f3126-0c7c-4b1c-af65-ae19241e1f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5040362-80c2-4655-9dbe-d438614ef305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98760255-37cb-46e4-b75d-7a98249cf861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec22fe4-fc89-46bb-b2cd-a632b28fb6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c225602-0dc3-4985-a84c-5657000d1f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0abb60-359a-44f4-bce9-2829f3b3a8e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.8.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd308f6-66b8-4bc9-a367-393752553536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.167.99.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac53a736-0a71-4c29-9c5b-1a03b40f0144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227e9d81-672b-4b7d-8e90-90f464dacfc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd4cb72-73fb-42ab-98ef-afceeaa468f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b460cf68-5455-411f-abe9-47bc96a673b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.1.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cac3ff-6a4a-4c31-87da-fc386c92d486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.11.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9419f5fb-4c40-4afc-a6fa-4b7299d0589f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.113.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9201e28e-d3ce-4862-9e16-ee69a5e1a73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7487cf75-333a-4694-8934-d70a9d78872d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bae8468-0bfa-43ea-bc6e-d8e9dc94da9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f219a3-548c-4dde-a9fe-8d9bccbb19e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06955bcf-22c0-4841-bf62-3e1b2e5c6d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddae511-458c-4750-ac59-fef8a6dd6157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016cdf27-fe39-4203-bcc2-7e32ae45d71b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9549570a-289e-4b8a-b19c-6806b9ebe5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6456fe-62e3-4724-a82f-c7247aaad3ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16698542-5b19-4c28-85b4-763f89332f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b763d057-a275-486f-b5d0-30fd50f8c7c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63609883-c4ca-475c-b1c8-97fdf49bec72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c06461f-4b4f-4aaf-a382-8182310f6393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69376d70-74e8-47e6-b4e6-478036ea0a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61eac961-242d-4756-8e57-a0d4e5972ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a3df75-6807-4aca-b33c-a23090ad1aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c6a13e-a554-44d8-ab3d-5c91321d4c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.0']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261e72a9-0c61-4d0c-b427-17ca33818b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff6e48a-c6ee-4fc7-9c79-747a3ac3cf84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.0']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f41efd-a4f9-457b-8b62-0a8ffa1bf696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf30db8-ef80-4b7c-8ec8-1f6b5c0c24b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c099b3a-4f37-43c3-8100-dd493472875a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982395c1-bb8d-411a-8b26-9e77e1f36fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4ba5b1-77e1-4fae-b111-aeadf8aca844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344ad339-1e55-4171-bf83-2ae7e3f4934e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496c0550-8014-4195-875d-b37a872544d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977f7658-4f19-4f2c-833a-5918a32544a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61ee588-3e8d-4460-a14f-0e422e44a80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c6bb40-4af3-437a-aa50-bc5279eea610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.13.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61fc42f-0309-49a1-bde5-563f2785d92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.15.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270a5f5f-3624-4f1c-9d7d-4259f6400f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a335fa3-eeeb-4f39-acd8-dc37a29d890b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d91d54-3a18-45c5-80c1-7d3e191ae7dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b20797f-9d8a-4985-9e3d-87ad238be578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6ca3cc-0bf8-487e-97f7-96b48b9a4af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e80ff5-bc1a-444f-b686-950ada405d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3727b1db-799a-4c12-8a2f-875ddbd78cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fada88-9150-4fe2-ab59-5cdde97622d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--892eb46f-3c71-44a9-b04a-b247cb10f9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bcaf47d-e55c-4b2e-952f-57ff75b95df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.8.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66aa9e7b-1b55-43f5-815a-3948f466f903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.99.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f19c1e-aed0-43d3-9ead-a910a80d4407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184d7eac-88e7-412e-ba2e-6028ff548aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25669ae9-89fc-4b83-a064-26df26ce9260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba51e8a-4c93-4f65-b800-64aba848bc72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f37b48-224d-4252-af58-925b36d02fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a061ac-bf98-4746-accd-e92829e605c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4410c17-bb9f-4cf1-a4f5-726fdabe2b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa06bce-d32c-4b5b-97dc-d19e4c95d539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a6a0b0-aed8-4f35-95b6-3e8f5b6e3741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86fe0d1-bb00-46d3-8036-7f104bbd39f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bffafba-e930-449c-bc58-c73b2b464674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f493f2-48e9-483a-a767-b0024d2494f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65236d0f-143f-46e0-b56e-92d55cb117e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab850c8-f51e-4986-9dec-f9b8db5b2f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5130e9fe-5770-4981-a641-60c9d0ca2813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91f1775-d2f1-4533-a1a0-b706c2b4b933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1635500-adbf-4cc5-ae17-aa395271d511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12f20e3-f421-497d-ba9d-ec6e4269a05a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53dce08-9065-4c58-8a8a-098fdc3cb756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b277ff98-5281-426e-862f-651c0526d5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbe39e2-efc0-455d-bb0a-0eda1fcee981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ff1c22-ae43-4bd7-83f1-a9b577df8ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1beab517-1e3d-45f5-94cb-78e4e7ff6a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7046e6c9-5852-4ff5-bf47-bb467b644619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627dfc34-1c18-454d-91ad-49dcf4b5cbf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a9f588-78e1-430b-bbc2-836f2ac3ce65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.108.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9adb83-9ebf-44d0-807c-98edb7f2f15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a66355-f5bb-4af7-b067-9ffce598ef1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c0b964-0227-4c67-9edc-c2624b984615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c412c8b-2c01-4e02-bc3a-b00937116759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9da05e-9350-45e8-8852-9cd802b8ef44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0200d91e-9838-4adc-bb32-92d198fefde6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.80.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2477b19f-100f-43b8-946f-f281f4177009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9f9e8b-9c47-4a03-b674-cb44566c96ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdc4a0e-c884-41f5-b142-faddc7f59baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2978b30b-fc2c-4222-8361-24e2b28db395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c272c5c-6322-4044-b76a-d91af6ebbaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.26.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b1cc88-b090-4dea-85ae-7d496707c569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2463960-9b3e-4b3d-b0a7-2b58bf403f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a93b40-9503-4e04-a079-5f1a0d4b8053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f631c66c-0383-435f-9386-0f331ecff096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17ef630-49b2-4ced-b135-c5d3f57dd3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16af3608-3893-4f97-9980-43bb83cd0517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db48b1b-899c-40cd-8b75-e6f71a50c07e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78359d38-7cee-4a6a-813d-b3b5e5909d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.71.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103bcdc7-7acf-4048-8c0d-938fc246ea90", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.173.116.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7642fb1-90a1-4d8a-bf3e-a4e8a0078a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.186.232.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4359bd7f-682c-4089-b024-4242a11096ef", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.45.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ca4923-625d-491c-9df6-5a78e8a0356b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.206.185.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b000dc46-ba69-4650-bb03-9c0fb633a1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.210.107.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a087ebd-2ad9-41de-aebb-1a1258b39aa5", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.220.195.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7619c2-2b2e-4367-ad22-c1c7ec5b190a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.56.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a82cab-4ef7-42df-9b0d-805a090acfc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.60.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420097d0-ac41-4468-b188-91e0d6998208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.66.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed47dc6-f781-4893-9809-8e76044eeca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf87508-f115-4a82-8920-d7bdea97d338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.69.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ba3e26-2edc-4f09-9066-31a7a99c36b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acabc3ff-61a3-4fac-9152-30b13e84bbc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.225.160.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5d94f9-47b5-4051-b5bc-ad4cc30928e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.226.60.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accbad40-9b84-4f74-80ef-9ac14203c652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.24.236.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301d36e5-0aa4-4c22-96dd-50e23b6b6ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.19.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dab9c42-4d03-497b-904d-60359b6bfc45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.19.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e3f65f-4f9a-4dd8-821b-2b0c4d648cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.19.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e0d1a4-0351-4bf9-86d6-66c23dcf6b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b639b34c-4249-4d8c-bf1e-3443bcce3f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f2a8d0-7471-4381-93d8-55fc33515d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e70f7d-c98e-4350-b226-899f1e478435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6e2cac-aed0-419a-97a2-052612f6f3af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95609879-61d8-4515-8cd6-868523b78284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab1de49-abe7-4c0f-a077-b12518fd6078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.32.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9dede83-29d4-4de4-91a1-791c0e1fbbca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16307d4-a9b5-4189-830b-f46c75165835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d28449e-9268-401c-b878-0a5cdc89f19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.37.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733bc3b0-6fe2-4ccd-8c43-62e6be87c927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.37.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5777a5-5061-433e-8624-51e5c9ffc187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.43.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfa8fb4-087c-48ab-949a-109f5ac16df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.208.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f4b95b-b518-4c09-ab34-844601a18969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8969b8-f0ac-44b5-a00a-b357cc604fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2bba66-9dbe-4fec-8b84-5355d1d9353a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259f1e9a-fcb5-458b-b1b0-daf4afb203ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.104.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12eda723-46b8-4025-85dc-ec999b04a4c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.115.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d74821-e7b4-408c-853f-c2e1e30896a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.95.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fc0a5f-8a4d-4f19-9a13-2c4e5ad5a138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.226.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8622c7d2-5c7e-4f51-8d52-fe7bc26067f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.228.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16292377-67ee-4ef2-a485-09911c82c325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.231.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e81e72-dd7f-47aa-84d3-f1c87c82e349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201ae476-d57e-43f9-b7d3-ffe95f56a512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.246.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5152a7-2ece-4de7-b7a7-ebb3479fa1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.244.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b552efe-84c0-48bc-97f3-823d9677bb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.163.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490c787d-6bc1-4952-9770-fd2ae29a46b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.2.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec3bea81-86b2-4b98-acbf-70ea76a7db89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.24.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b918799c-9d5d-41c4-8144-b241bca6cc38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.35.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d6741f-f38e-4c3f-b39b-6c7eb52ec9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.4.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3842cf6-26b4-4c1f-8831-ee12158802bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.84.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea1c92a-7d3d-4d7a-95ad-447b68af8b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.57.47.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e29ecce-9c9f-4c81-b536-e5af58fb7a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.61.127.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a130cda8-9545-480a-8e8d-56b386425d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.62.193.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4c9117-fa0c-4745-8245-7dc0abac455d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.63.64.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9566e7c-32ad-48f4-b9c3-60959dd0fc80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f8c588-f44e-4c13-990a-2512bd5a93f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be484230-51fa-43a5-89ba-171ae585ff3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265c3693-890e-4572-adae-bca26e01457c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7054ac6-5832-4656-ac1a-e1e476562c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c322d86f-0697-4708-8e22-a86ee9844744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ccc8ec-df20-4a5a-8cf0-7dec6f622a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed9a80c-1413-4476-be81-394c710e20a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570a8726-2217-48b4-bbdb-8ddbfff1aeab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a30d0c-8fba-469b-9401-fc704539a0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797959d0-1110-4175-bbf9-181bf04ffb66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00807e73-b6ce-4561-b0dc-6ae34b9892ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1b04ec-237a-46e1-9cf0-cb1964542ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe82b4d4-e97d-4f93-9b1a-d82593cbbf15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043b7ab0-47dd-4214-9f79-a1b179f82991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ceb4472-8f33-4cfe-9a18-588e193f6b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bea6218-585c-4347-806a-0e31b4d29fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff4763a-3571-4aed-9397-79554c8c7e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4491ae86-50b1-40e6-801f-0c22f539869f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd045f1-2a4b-4233-b191-8fa84f5fdc48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388f589c-f460-40a5-9f6c-0210891cd3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655148ca-4d2c-4cf2-acb9-30e242220b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3747f85b-f10b-4c46-8334-1f756c057c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e3d726-f216-4c25-95eb-63f6dddc6e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d281d574-462e-47ef-a9ca-fd5ac7d1d34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f2b7a7-0005-4317-85c0-f6079fca1aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97e7331-0a6b-42f2-903a-892691177283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e1efcf-3791-45a7-bad9-ae939275ea93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e663a1d-febf-43e6-a279-fab9e21cd144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98607c9-5ca4-4550-b537-715efc9fa7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c5595b-dbfa-4274-b8b3-092077d3db6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e449800e-d65c-4852-8b4c-799d01a15e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040e23cc-e085-4a17-9416-ca9bb3655505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6cb5f41-4209-4517-9420-181e9597c64c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9587a7ef-7f97-46bc-8007-ca2da8754b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1a3401-4c97-4e26-8898-3acf03bca255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea6375f-67f4-44a0-b874-f1b6e81c8aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2215de-2bd9-4dc2-a483-4e1c48770b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.96.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1743ec5c-5a89-455f-836c-980e69b07da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4eb89f5-4bf8-41dc-bc46-4fbf920deb48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931feae3-fadf-4736-b108-940cbb78d573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ef1574-5c80-439e-a166-6e26f2bf9636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.152.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a519c5-7b5f-474d-8299-dc23664944bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae7c875-7789-487c-ac2a-6d04a81eeda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda9a883-8f73-4840-89c6-79ae99e251b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40c6d7e-874c-4fe3-93b3-98cb607b3fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.169.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c504642-1bba-4e6a-a152-30ce501801cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8159ade2-3ab5-4ff6-9c77-63963a68f128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.184.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fed474d-a872-4dbc-b782-5bbf9f1036cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b413288-4b68-4c32-92e9-c5548d483fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273ba259-ea7e-4e1e-8193-f10a6ea3097e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273b1692-e19d-4cd9-874c-32e5c6e413f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0e1741-6b77-4457-ade9-367f849ce81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13628cb6-fbfe-4cfe-b247-895da0095961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7179eb13-5d18-49cb-ad91-c849b221a74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31bf11c-a82e-41e9-988f-1e08819db1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad2c631-a8b6-4866-a798-8daaf8beff1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8712e4ff-1557-403d-9f15-ff180b530299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6214a0e2-2683-42b2-a89b-d3d432b968e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc068e5-9f87-48a1-863c-25de03bdb749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8102442d-85f3-40f4-a1f5-c11b81426ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27ae5a3-f163-4227-a15f-ee86717e37c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add50a0a-9d35-4980-ae25-30661155bf34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bb35a2-9877-49fc-bebb-417907b0934b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebe6aef-d595-42b9-a7af-c52a91c8aa80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef08a07-a00c-474d-a324-1030070e0ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4341f9b1-efff-478e-843e-dffa0ca0f4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f58b704-24ff-4d45-8267-05df0311908e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5888f36e-4614-487b-bce5-a5036b9b2011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138fdc90-ff20-4a49-8364-f80a2067e1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccb979f-3e6b-496e-b170-44e61e49177a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a718454-9c73-437d-b989-9a4fccded27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea1f3f8-cdc7-49e2-a083-78f5f833cbc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b363ab-bf59-4aa8-b220-84e962230ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29f0c80-9dea-45e1-bae5-a0c53b5403de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6b95f1-2b54-4e93-884c-0dbc0be3423f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27baa731-3deb-496d-8a22-77f9f3de8823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93496ce-ca6a-434c-861a-08bc7111da33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18dd8572-6871-46dd-b8d3-7ffd3e57111d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3195eb3-fd70-4ffe-9704-8965dbee2e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a25a5c-f37d-4b12-a63b-422030898458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a552dbdc-5e8c-4f17-bc29-bc7ae7de7d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fd0f30-ffb2-48f7-a569-7090de32607e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6983d987-3326-47ae-8462-34f4263766da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942a681c-e9ca-49a0-ae8b-f3d3bb037a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e29bf462-41fb-480d-b737-95ce6b080caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c9a199-e7ed-49dd-91e7-e6c91f8d5841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26a96b2-b043-4121-b925-ef7efe83bac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912ac84d-c0fa-460b-ac4a-be883b62dcf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ad6d23-4a7c-453c-8fb9-6d5494bb11b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43daa117-7c92-4650-896a-25142c402c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a763c8-2f2e-4778-baff-79782b3d4fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4102aa4b-6f1d-4bec-9532-5975fb405695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c88ca6e-3bce-45b5-8288-5ec2073ca74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1557283-4cd9-4e9d-b443-4d51d6a0de15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf76aa4-0645-4c26-bbc5-af23228ade9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d28b1b9-4948-48a2-9010-40b234085de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62e9707-b6dd-40f4-aca6-4b1d041afb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9c6ead-ce6f-475e-80be-08b353644192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeeca2b0-4125-40d8-83fc-9904f0de69b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb60219-60f0-4754-820a-3651aa537bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110a2c18-4cdd-432e-83b5-7cb7e9e52a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850cd84f-aedd-418a-8d8a-2d52f2f5bcfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468a107e-b754-4b0d-b036-49107d0b5d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f1099e-ff19-4471-99eb-0d5fda6b08b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b701cd-d187-441b-be3c-e1dee356329d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71691d07-d537-49a8-8506-b69970a91b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3cdcd5b-fba2-4a78-9882-715788bd28ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc224b90-6310-4b53-b270-879f7f57d228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a4a8c6-cbcc-4a66-ac1f-e4c945892710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74de03e4-87ab-49a3-b020-47f26cce4f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21d4aae-f0eb-403a-8e91-e4e933167558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351ea565-d9b1-4d68-a66b-ad9f7c5f5aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a669ccb6-7b9d-4c04-aaba-c013803e77c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9e043d-af02-446e-b9f9-3f8a3f095f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b79479-ce74-41e4-8006-2a2d5915de12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63981661-482b-40cd-9897-5c25238d354d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c78a039-b35c-47e8-b86f-2a7b75e53edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d42990-82bf-4ea0-aba1-8ce0be517648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9ba35a-7d21-4619-8b47-36754b511dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953b7806-d874-4efa-a333-19166fa1da2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97eb313-edff-4bb4-a9d9-d08b63f268f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd23ebc2-01c0-4285-beab-a1ee11481249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474c9a8f-3c27-44dc-9d75-aebe9b8e9bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595e4920-9c23-4950-8879-bd015832d235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5419948-89d7-4497-89cc-1be918d018dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d2da39-b46c-4484-ad7b-9dcdb743a1a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.216.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817252fe-4d86-49c2-ab74-9b524ddd92ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db43ed05-d2cc-42b3-aaf5-7617841847f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b56f064-9b7a-4a53-bdde-33cb4915d390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb234559-72e6-44e4-a0db-f6933b16e0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.224.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cb12e2-a7d1-47db-961b-c866294f748e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.69.227.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1ef949-7f17-49a8-bb40-ddd2fceb79a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.75.146.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0373f2-dccb-49e6-a503-09663414b0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.79.243.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f17b91-4644-474b-aa1a-b0b90f443bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a76d58-4e09-4dd8-924c-e5b110ff2f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275aac3b-fbe8-4d18-9485-f94c5eb505d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.72.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b952be94-bf88-4a7a-b331-54c5d8b22276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.80.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df69daf-7b37-4fae-a1ec-bc3c965b9461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.82.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f3305c-b1f4-47e5-b6f9-e6c884ef34de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e46336-9e90-4060-a846-a9c5a9a7297c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481c2108-88f4-4dd4-aeda-6500773055eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa25331c-a2f3-4b9c-aa50-bc5fb5ea332a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514fb2f8-1479-4f4f-92e2-ec987dc98e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.45.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9549c9c5-ffab-4158-82cf-caa777c0a38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a35dc3-5e1a-445f-9df1-55ed5eeb78f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.150.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9199dc1d-1dff-4826-aeed-793ea0f656bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.165.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a788d9-842a-43df-bcf3-fed7dc4b7be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99845198-4876-473b-81f3-2957dedf0533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80a119e-9123-4efe-b93a-4c8e3b38449d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c265c7-f1fc-4f34-be25-a2a3f29608ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.170.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d77560-b41b-474f-a8a5-c85915f93e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.173.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee8b424-0aef-4393-a273-871a39efeefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22093ab-2d57-40fd-90e9-e0e5fbd9b8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.32.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3baca2a4-c26f-4d7e-b4ae-26f14753addf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.48.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662af4e5-d5be-4be0-8cf0-dc7238c080d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.49.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c5f6ec-2967-40e6-9164-6bee41a037dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.118.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d8171b-ddf7-4dd9-acb4-8a329632cf28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.119.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079e62ed-e926-42f7-92ac-2ac51c22d183", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0233dc-c412-414e-9341-e99425d9b943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3de4c92-93f2-432a-a843-6e83c398c1e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1fab7b-7b40-4058-8c29-e8e41aa839ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aceed085-8a81-47ae-9443-6d2ecec2ed49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.162.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123d580d-a172-4e05-9d42-be72d2b32f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.166.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580aefc0-f4b8-4c3f-83cd-dfcd351557d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.85.246.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16181074-0fc7-45cc-997e-ed852e749201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.136.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e98531-f810-4a4b-b69d-77a82d334689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.152.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b901638f-435b-4400-8684-d958b3346e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.165.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec130c3-bbb0-445f-b9dc-de5c33532f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a33d218-bbd3-4531-8bba-766d6158dfb7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.0.57.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7dd138b-dc6f-4a45-a444-9eb82898c420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.126.105.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94979dcd-dcf7-40b9-a552-692be77381da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.229.8.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d11cfdc-f38c-47c5-a920-d462aead4c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.56.131.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc2bbef-4cda-4448-8afc-920e10b3a24f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.57.190.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296f4c02-efc6-4bd5-92a0-70d94141be08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.94.131.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120c7604-1970-4c6c-a65f-4295c514a84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.110.183.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9933e4-0c61-49c5-b9d5-fe175c784608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.137.50.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d3c4d1-9a61-47e3-bd97-61a1ce6c9e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.161.46.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bce114a-1642-4961-a501-df5b49e6f669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.215.98.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb85161d-8010-44f4-9926-f4194ff3db0e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.249.87.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670a82ac-976a-4ef9-8bf9-450d69fe1017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bc6a36-5c9e-4dc1-af37-0b52c0304188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f2d0de-eefc-4caf-92d0-848add281fa7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.142.163.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4207a4f4-b860-41cb-a314-cfd2038b2ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.143.110.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f718da9-4e97-44cc-be23-8c7b6a2af6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.163.101.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9a0f94-3dac-41f8-b2b9-36caab5e3a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.164.134.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79404d0f-7315-4475-8e67-16531c3a0917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.166.164.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfe6cc9-0133-49c6-b8a8-4defdc14eeea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.182.103.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ac050a-b87f-4ef4-b672-f91b77481ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.4.115.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c686ad44-d391-4b79-a166-96435c5320c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.40.178.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc6f3a1-dd17-4a42-95f7-04e51ef4ccb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.5.33.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153922a3-a2b7-410a-8731-8e227f2a0d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.51.214.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42f734b-8986-4fe2-a9b0-9a8180b85636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.61.248.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baacd8c7-5fdf-40b9-87ae-30f1ea05b729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.63.207.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31df9e0c-6814-4db2-bb3b-166bc31adea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.71.141.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482bc116-7d0f-4dae-b744-ef66fb558809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.79.34.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a82113-e728-4364-8037-6af6d5a09cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.88.241.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa59400-49c4-4323-be73-fa558ca13837", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.135.96.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1425bbec-ab7a-4fa0-a6ec-f2c8272abdbe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.150.107.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c884f0-1dbd-48e5-be3b-582f4d5199e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.163.247.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104850b6-282f-41fc-81ae-e323bfaaac3d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.175.125.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e695e127-c828-48cd-a76d-37e7df231848", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.192.227.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857dcbae-5edd-4f6a-b5bb-7ff20a652961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.192.227.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61fd247c-62e5-4e51-ab55-acace9d89c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.192.232.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271dcf6d-d95a-4053-96f1-a1293f69d07b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.194.110.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3e620d-c313-4c1e-8a6a-8a216041c14c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.205.37.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5173ba9-a58b-4838-ad7f-fe8f1dde8938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb80aa4-50bd-4656-bbb5-e4e2e12144fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.221.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b353217-bd42-48e6-9aaf-3b7b8c48e60b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.152.193.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3315fe4-aaef-4e8d-b94f-2a7ed348935a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.197.252.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2bece7-e278-409c-833c-05a2424389d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7832197e-1516-4d3e-86c7-672c1a6e59a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c08ddf-ace0-49f7-a0e5-425240715cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f272e3c-7eba-496b-a640-b681e8dbb768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.125.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834f8b09-c99f-4798-8fdd-050e0595f331", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.125.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d76be9-9992-4850-84f8-e47fa31803f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.127.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05524fd8-9a00-4e58-bb4c-62e9209b72de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.188.216.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae48e5b-6fb8-47ee-b352-712759c564ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853274c7-3a7a-4e75-91f2-2785baa3f8c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5478c813-918e-45ce-bdad-936c6749957c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad846fb-3d5f-4da1-aa77-dbab711bfb2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cec61e7-72c5-4426-8571-fab99578e578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32fd2494-a027-4e57-80cb-9dc82c1ff081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ca43b4-9ae5-409c-816a-87937949c5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b537f6-ae1c-48c4-8bf6-b93e393706f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581f18ea-3a2c-4402-aae9-cda3d73b488a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871cfa9e-9679-4a82-ac7a-f480b0d506d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06cbd488-8890-40fc-8f32-50e678b8b176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a362b66a-5d31-4f50-95e9-b37ace69e41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c38e934-fc5c-4b4d-a6c4-6d51fcaf072c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a35c48-00ee-4aba-9de2-f9877caf979e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe430aee-6fce-49c7-b3a6-15667b50778b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cf6965-bd1a-4258-b1e6-d69c930ca5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193ecd0a-de27-4566-a9e6-cdeca8877759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f327b7fa-c8db-4bd6-9089-0df667713373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb91bf91-4693-436f-8c91-169b65198e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f825c13-889a-49c6-a8cf-3a6e3bfc9394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a43f49-bbff-484b-b2c3-132d37ca8ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc85b02b-3ea1-48a5-86d4-90b6a43118f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dda6f56-fe4a-4c6e-8131-738130f5299b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56780140-35b6-4330-8e79-15825736256d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042a1206-ed6f-427c-9c69-5d208cfeab7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61fbb546-b45a-4c0e-ad29-0abd39aa0def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636d0f2e-1c5a-4ca2-9dd1-92c8a45852c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf30699-6744-498d-b14b-850778505345", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085f146d-912c-4113-8f37-071bb1346ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df171548-c30e-4132-b8ba-fb9e48f2c99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81eb776-59b6-40ec-b8e6-ccaab168f59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb821ee-eff7-476f-82aa-2297d24e85a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21c4482-645e-439a-a6d6-3d8c04b682c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f5dd40-1ddb-45c9-8721-6caf9801d94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97acd949-2f76-4c36-bee5-fda61bccba34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528a208a-1ed3-4c1f-bc8a-9efe17f80d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64b10e4-18e1-4ec5-9d4c-c93fe4b8bb4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0abe7a-46c7-430d-92bc-0e3410b26729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d49e515-f018-47c8-9fe8-3433d03a2893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b8f52d-4d59-4488-bcac-4cfc91faa2e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799fcdfe-0e8a-469f-8541-b062884b84de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374f3967-478b-4f4f-b6de-63e4e5375a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6ba52e-5817-4463-ae22-522256081e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403b9752-3b94-486d-ba66-cde2bebc13f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733eaef9-f3aa-44e2-9ee2-d4e8cfc8ce85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8658d6e3-c4ae-4aed-8a28-3791a9f06d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdad7590-4b14-447d-95ec-dcaadc4b1170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318ddd77-2925-4396-9ae1-6c8c23ac0ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5392e3-ddd8-42e3-acfb-da7402691a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cfb1e7-8323-410d-9424-66201eb41181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e809cba2-4c98-498f-9ef4-01cdb4337e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c27bff4-5b6e-4495-bdae-a75721558ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb862ec7-828d-4d07-9821-24ce3d07c1d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd6db5b-2a2a-439c-a225-97e90916047e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8d53b3-efc4-4023-a85c-55be6761f710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe990bb-11e1-4894-bdea-b4ff0f255f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d288c5ea-e668-4a73-b986-bce2ce8c7e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e57fd6-2a79-41cc-a5ad-e81d848bb57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619e7438-9fab-4e70-858c-bd78da7e8ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdabc37-ee68-4251-9bb6-0a41d58ee2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8934719a-b1f6-4ba8-9171-fb71d63fe956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9396e151-0943-4613-82cb-08c4a9cecf94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada95f60-df5e-4a98-8752-115f9940424a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8909af10-5d24-4995-98e3-8257364e4c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cbb6fd-d426-4dfe-bad3-8c282ff39c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f196c17-fe11-4519-b904-14f67c6b5b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3081d7e-43e3-43ea-9ac1-d878c75c5136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5006e29f-3d0d-4cfa-950a-fca78c930874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ffbe941-897a-42e4-944a-79ca3c6cdc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1d2e0d-f00c-49d8-b4ad-80e1191304e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba2cbcb-3d2b-4b51-ae09-8ed8b7b31fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77717a2e-9ba0-44bd-a96e-0bea92e18196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c059bab2-06f8-4c69-85c4-dd4b6e7ad6c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d02afe-e734-4286-bcde-9f7510545260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8163062a-c278-4aa2-b5fb-d4c5e4f53004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ca3d42-66d7-45e8-8e1a-755b33fca256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667755e0-e29f-4fc6-afbb-bdfaaa39cc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13334150-d53c-47f2-a1b9-5bb7718fef93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8af83e-67c0-4836-8843-fcc443b116fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cde7a85-c154-47df-a50c-4914068e06a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc71ad29-250a-45d5-bbe9-c2928f36729d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab79e79-bf40-4a59-aa11-cf88f59ba670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbff667-a5f0-42bc-aacd-ba05a5c8e626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35b4209-f2dc-4b01-804d-85fc2d837f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466e707d-7643-4cf6-9c8d-0e0aaf411326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4579e056-2707-4d3f-b2fc-5eb337a36b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a125e8f9-e19f-46a3-a832-a6650a05e6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117a7025-9731-466c-b9d8-10f38ab6a6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fb688d-3fb6-4269-b42a-9e558ee760ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e671cf-34da-4fd3-b98d-d5acaee5a3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0020c2c4-e185-4c3c-abdb-c7640bb7d357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314717e1-0905-4fea-9d62-5f23d53e3452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b497ee0-5522-4a56-aabe-9b731f020002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ac7bb6-3bd2-41cd-9b1a-ae361c5d1a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0d3b95-63e6-48d7-9229-24ac7d550e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469c90cf-9918-4929-8237-881af85fa06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28dfde6b-282e-4f14-bba1-46b3ba4367d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b473d4d6-fc89-4fa1-ba61-e7f8f192a630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377f6289-34ae-443e-8a4e-861cd8459ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430c6b66-982c-43fe-b5c1-0cfdb44b8da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d46038-ab6d-4d30-b2c9-8470faed9f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12018ff-29df-48f3-9b38-3f6e93067f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14792cbe-eece-467a-87c6-8e196be31c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e7ede7-10ac-4f39-805b-66b615cb6b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308acf48-ee75-4a64-bb6c-03339bf3cb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd23b512-5aef-4d74-8a6d-2789018e5958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b0a5f9-7e94-40b1-96c2-93bfca95d1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d809d0-13a2-4368-932b-97ea8c9b8aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07734ab0-0036-4060-967d-b3fc2190685b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e0d0f2-018d-4803-ba01-0acbe6ae17f0", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b5611d-f5ca-4c46-9088-9f72b7e0e49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30518f48-8822-4453-b059-a07a6c41fd90", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b4e8b3-02e4-4ced-9041-7579a03272a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8323dd-9c12-4088-8f91-b0cc6e4faa84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8186f4f0-611a-429e-81ae-1793657fc446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff848256-2cee-4467-b7a4-abff793a5a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b655502-1bd6-4eda-9c50-d982ece7f55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39629ce0-25ff-4a64-b8c9-1585c61570ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ee9207-c7da-40fa-a61f-fb7ea17c96ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d259b4-847f-42ac-9e1e-87eaeacb2ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c19f825-d696-406c-98f0-687b30c8dc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c39a128-06ec-4395-8f91-374b3b023334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305c26ee-1734-4ea8-a73f-a236637c7465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9987173f-7ec2-4f39-a81b-1fafaf20ac68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bdf208-0de0-4607-b13c-e5034b120ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9ff1ae-4307-4999-95a6-bbd53ca9cd0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8fbadc-c9d1-403f-b48d-f07c26480b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd0f2705-551c-43bc-a3de-78ea0a9bd027", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff24297-d3b4-4ce1-b94c-b908e4daa8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6162694e-af5f-4f24-afb8-24dc71383612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a599b4-9d59-4861-8c37-41238ef6b111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3384623-63af-4b93-abcf-82a8028bac06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0d4610-01a1-4562-8ac3-90edb37647db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca80db7b-62f7-4e40-9283-f5779864ae17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006d7d7c-4d64-4918-9434-ec7564738ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1077c2-2cc5-444b-9dd4-2a678dfa1939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f7c6c7-a70a-4b98-ad6d-331c2d0ef70d", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15630838-1786-44be-ad26-b1e383714549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14dd29ef-5d72-49e2-8312-8057ad7f2023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0163abc3-fdad-4745-8238-9ceb6755b8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5bed5f-1312-4c04-932c-4cb2a67225f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8138637-f41f-4ab1-906c-9fea1c64e461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab846b8-94e4-4494-92b0-8023f6d29176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc1b14e-ddd0-4aa4-bb87-801873014d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4ed3f8-13cf-43f1-ab13-815680bee628", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dd28bf-1d70-417b-8d9a-eecc529eb276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b49cbc-c7a0-4090-ada1-7b7bb2c607fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e9a6bd-f04d-49df-b0f7-3d8f80fd0afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503515ce-b17b-49b5-9774-ad4814ebc5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32139d39-8478-4e29-b5da-c28a6eb70343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6bf13f-a3a6-4b6f-b285-75087466f42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c796de1c-b6b1-49a0-9f62-28902112b7f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a164d25-694a-45e9-8e62-2efd21a4b4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fcf0db8-348a-4848-9e88-b4fe44669dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae6b604-edaf-4e40-abd1-5a2a91929911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b688d9a-0018-4fea-891b-a0071c2952d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86289787-363e-4154-a251-6c1883062de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746e914e-dd91-4e25-82f4-d5292074c229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c904332a-8f68-40a6-8662-0081aafdd9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15573c08-a404-4784-b699-5cbd3d00ecef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7426d928-49af-452c-a829-40d812772b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae923093-6afc-457a-aac4-de242d5e2695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa92809-2a1d-4ff4-a6b6-7bda0317bd08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6b0778-6fb2-4918-a955-81a4be596567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3acf143-d280-4ee5-b67e-b6c859c6aa4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b4b094-fd35-4f56-8025-3d6b32147222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3841b04-aef7-4ce0-b8b7-c267674ae9dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082ecf2b-6c4e-46a4-a53f-f20532cda2fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ccc8e7-736c-4431-a5da-48265303756f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9576740f-174b-4f18-81f2-f4985dd5b1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ebd3b5-6c0f-46c5-be07-c6af2a9c3172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ba15a6-4bcf-4214-98c9-dd1c5ed9e130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989ec830-2539-470f-a651-ae966189a2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85102ad9-7ebc-4af5-8736-524a5274f1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de510a68-01e2-4ddd-8b35-e0f979be6674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78cf19ee-1834-4cb2-847a-7ea6fc2e54ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36423658-4eba-41d2-8073-f1a834965eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360ecc9b-e4e6-44a6-b777-cac2331c673f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.235.2.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b64474-c518-4833-88ca-41e81f60ba41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.120.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf07b7f-a2ef-46fc-bb63-996a2905aa3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.186.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9dbbbbc-0cfa-4685-a13c-872e3a8a4da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.197.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4733bb6c-51d8-4bfb-a9a5-c18517592f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.218.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f885335-a2bd-4d43-b8c6-97eba64e063f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.42.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3181851-ed34-4d2d-bfd1-73c3f1430d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.5.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4159399-07a4-4399-8ea7-27aad6574568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.57.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43041712-6833-4612-8f32-b39177b36496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.76.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a62095c-77a2-42c5-81e7-04a38de1206b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.212.244.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2febd0f6-ff71-4aad-9943-35a40fbae00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6ba19d-4cd0-424f-877c-5cd180b21218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.223.228.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e95a5ca-fe8c-437f-b204-cbd6ad474970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.193.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dd5177-3bde-4d9d-970e-159d2c0894ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.221.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7151e3-5cb3-427c-b229-23355b2b7ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.226.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79a7911-97cd-4643-9dd4-84da5d472585", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.250.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b4e6ac-3152-4606-a818-ee2ce8f264e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.0.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687ae011-4bd3-41d7-afab-b70f9ba67389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.19.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2fc6281-eaf7-47a1-aae0-7958f6b8f274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.33.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5a5778-197b-43a3-bdbb-caa51ec77f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.82.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0d92ec-400a-4d71-a76b-b66e94c1da95", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.232.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdead70-73f0-45fd-8b3a-4bcbafd37a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.241.173.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda9ea94-a449-4d13-8ad3-79e886aacee9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357bb7d5-940c-4eb8-9e36-59c4463653d5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.56.225.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010df7ef-f472-4df8-b884-de212d483abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.56.229.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbda18b1-3539-4d61-8c8f-a445ff0379c0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.56.229.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4e876b-f50a-40cc-b451-4b14d65684aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e576b9-04bd-4391-82e2-9b27a87895db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224b030d-429f-425b-8d5d-fa7ed090232f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5796185-c7c3-4bcf-9c95-23217e16bad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce1d87d-ceca-43ad-81da-911dc4bd3f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba38993-ea3f-4b76-91f8-3f77b1e2319f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe70396-37b4-45d0-acb5-7d1d65de2caf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.109.52.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6101176b-a1a4-4540-b0b5-0a80c2b7922d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.115.228.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb4653f-1623-4dff-97c1-094526531042", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.84.103.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b80652-7411-4688-a440-74a758d734f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bc62a6-7eba-429b-b94f-ca40c24892c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e482be6-f89c-4867-8bf8-d11bacce03fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75301ca8-5a6c-46d1-af08-0065f8c5d7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ffffcc-0d3d-4e78-8195-7fe8e7dc4732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5e3498-7146-4066-8612-81ae9cae7594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.126.80.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adae7714-0666-434a-b4a9-d555270bcef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cad641a-616f-45ab-93d7-c97babbcbe4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.9.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f81963-c245-4cfc-96fa-8c327c497ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.159.153.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1a6c54-fe4d-4a9c-bbee-0365c6839cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0607c63-4f35-4e10-9ac8-36b38668e875", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.98.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3521017-5e68-45da-845d-aac1f17af542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.205.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98473d8-8198-4216-9dc7-14eed560bdc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.229.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f537eea6-e744-45c5-b297-b6d8b05a5869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.229.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f21cc6-09d4-48f8-8f4f-ffbe928c5ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.96.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbff357a-402b-41c2-98e6-4230647cc160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9c0195-1995-4edb-b55d-1bd5e8192c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929f411a-0149-43e9-8739-7587c1763266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ffe0506-1a38-4ae9-aa89-889bf6dedc74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0c7805-9d3d-4678-a2e7-868b03b2cb83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.184.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2acb14b0-6362-4116-ab7d-09621999b261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.187.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142ca4ba-17ce-4a4b-889b-d50214cf53ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.187.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f340ace6-1e17-4373-9672-a3536790cca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493a856a-8d39-475f-9d76-1156c2dc7e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829440c5-1b37-452c-ae31-746bcc3e3ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.210.155.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563c971d-0aab-418c-93d5-fd77d3c7e187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.212.104.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b2b7d4-75b0-4c10-9a09-eb612bbf902c", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.101.237.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4096dd-f70e-477b-84de-b8b8dc6664e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f03f055-8b72-412e-991d-eb694b1818ca", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.184.82.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7768e2-9834-47ab-8e6c-a7a345529d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.199.165.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7a43e3-ff40-439d-a6d0-4d2821e1527a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.20.91.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c663a1-0f17-4aa0-903d-5597072fc6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.22.25.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6573351e-2fa9-4337-868a-2cc62799595b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.228.218.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc9c498-e117-4ff4-9f78-e85f6294cf8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.238.116.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0b09d3-1f70-45f5-8a86-3d2cbb3b276a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.238.116.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93bddba-8880-4815-847a-1fb0aa5da18a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.238.116.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde180b7-fef8-4af1-81e8-651a47d5797c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.238.116.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e809e8f1-d19f-4748-9bec-1688d17eb8da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.238.116.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9086695-d57b-488f-a098-9db39fd16ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.238.116.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f8f517-8277-4e9a-adc4-1626918cb6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.253.37.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f340933-3b2d-463f-8c37-0d58135acc70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0bc0e8-ab4b-40d1-bf23-9f7884584ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1dfdb1-5b06-433f-ba25-696ad9800f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50167674-c707-412d-be77-c8f12a6fea24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c24d06f-d06c-4fb3-89f1-bcf688045eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b6e2d7-0d3c-4722-8ced-366882d265ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08414f66-ae87-4c12-8f23-c058c122e67d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aec01d9-750f-42e2-9e5a-edbc793afe21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c14352d-90cb-4e6d-bc63-89b00d874038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58dd175-1c14-4329-8ccb-4f1074cfdb13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc6a983-7569-431d-9c1d-7c509814bdcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf9c427-8307-4ea0-b78c-72e0c52d9863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1ce51b-7f4a-469d-80be-4286e8a96b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3703f2a2-7fc6-4b2e-83c5-de3478330300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9086fba-2faf-4eac-bb6b-8f0d8b8d04cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361f2aa4-6e24-4c47-b810-2b08442ad862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98303871-0851-46dd-9a0e-0f8548456631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f36ad0-f207-4872-b53e-57226be228cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69d5b55-fef2-4ba8-b408-7994e5468509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--914fbd1a-dd8b-4d2e-9c22-7b79a7021b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab91649e-03d6-494b-93a6-1e0a2368e141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e852b042-8ab0-411e-aca3-e35a2e433055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda2e3f9-4d3a-4706-aa83-c45ed0ae654a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.32.129.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aef706c-7e5a-48de-a118-1980e4ea8456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c01231-8ca8-4748-8ab0-9cba2a987939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.72.129.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59201008-0c6a-4228-8c97-07a8318b9153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.100.184.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc4bf6a-94b0-4683-a796-26660996e57c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceed4408-9b58-46b0-9d44-f4600a0487bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.115.236.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e58fd7-d1f1-4b52-9a61-0b848077e442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.111.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e872dbf9-dca0-4d04-ad09-10d98034023e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.127.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82775a96-7c60-483a-8fd3-6af8fffa2393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43641fc-339b-444b-a290-a06b16a6edb6", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.193.3.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9527150d-c253-4519-b95d-70a7ec75e2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.140.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17438f8e-471f-4318-b0cf-0467412e7b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.247.156.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbadd146-0d2e-4950-a165-3b7b0b4d0c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.47.65.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c28d56-32c4-462c-be1f-f8bb8f68ee9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.48.71.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f96811-cff7-488e-8a6a-b98badee3eab", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.56.32.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4751c3-53cd-499b-bb4b-7bc8f5adbf7e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.109.226.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ed05c6-e7af-4498-bf1b-bf4fbb9c8731", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.136.79.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c730532-6b7f-4b44-abf6-ab40fddfb5df", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.136.84.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0bbf4b-ee35-413c-af39-635d187d6fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd71015e-6fa3-4ff8-80f2-4b3c8a056279", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4b002b-04fa-4365-9e5d-c973cc25c3d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c682f2b-f4d0-47ee-a79f-dd3cdf292d50", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ba3feb-da89-4acb-885e-cf039a8ad9fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289f1334-bd70-4711-81dc-c9f327a085ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c8141d-da4f-4c70-af92-ed0c2b53bc69", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dae29ed-0e82-4b21-a6fb-7a3d91f73f43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97563be-cd6a-4af4-a625-0d14db106458", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58d21e4-b25c-449c-89dc-96fe2c8f7f1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e0591a-0fd7-43bf-b1c0-9019ae1678eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19cd98ab-eeeb-499b-a9cb-478d524ad04c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e0ccee-8415-4c0e-b1f2-88218a4113f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3624b349-676a-4a15-8ad5-4ebb76e7f0a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77fbb19a-7419-4d6f-b452-240a63408d38", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b155147-a6dc-4171-a8ac-92c1eff2982f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b3c0ab-fd36-42f3-b027-366ca3ce2ae2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b9d77a-416c-48d0-8c7c-c506575fdef3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6918d8-0b61-4a46-977f-7523a977b7a0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6307622d-6684-4da0-8e51-41270cbc9f0d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8734692-96d8-40f7-83be-63124c715582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.48.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efb82b8-6852-4b6c-bf9f-13d9b2e8cb09", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aced94d-ba7a-4138-9818-154e55e787ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5405b2dc-ece3-4ed7-897e-4b806126f8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3badbee8-a7a7-482b-9755-ef98d7f79ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d22a90-b6ee-456a-807b-1d59f5b69045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.22.168.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f042ca6-7491-41e3-bcbf-4394dd21e58b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.74.41.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240fc54d-4e4c-4e1c-a9fb-31d963322721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.236.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f17c491-daba-4c0f-85ed-040ec7faa954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.236.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e18e764-359a-421b-bb58-9d93f88b2fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510aadd7-d6a9-4373-bacc-af73aa591026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789a0385-bc71-4eaf-9279-b8b0249979e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e9e680-7ed7-481f-a218-87d9c0d5cce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3b6b77-e4bf-4df6-b329-6ceaba122107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394ed078-d11e-4678-9935-8fa161fe2c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465add24-8494-4868-be68-92e7334b282f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfdfc4b-fb61-4e95-8459-0aaf766a8b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5f5de1-6f01-419d-bafd-4b4dc34233b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc48fa1-2878-4cb2-a337-33b5af1fb382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3e7640-36da-4fa4-9b2f-7c521f4fff0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a466b06-3451-41d7-abd7-c6fe1514fe32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b280f776-0b64-4c43-80de-9cb36ba775eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d617f6c-079a-4c27-a1f7-f18866a1e380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719f204b-99a4-4971-91c1-fa64b0973fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6d4460-8d33-4c5f-9a2e-6649eb14e9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51a9e28-3e9f-4e74-a098-7bf717479e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ca1bc0-c100-462f-b2ff-ed1f45ab2dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00aa728d-a5ae-402d-b39c-80fa7c71bdc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5742774c-d98d-4cca-895d-07dfa78e988a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905a8078-c567-4ec7-8950-c952fbbfcb04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee1d68b-d2bf-44d6-a702-a08d053f8927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1521516-55c5-4460-8ba7-4d289d23934b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11a3e2f-1be3-438a-be3b-18f575387ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe7d50c-9c97-4df5-af1d-6bb018c1cd46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8612900-82cb-44f3-8359-ca361b27cfed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f541b821-08aa-4294-b11b-e9ad36576312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632bc50b-5171-4dd1-8eef-14345835ad0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c244080-bc04-4384-8134-0e26efd01e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8f25e6-35da-4399-b7e9-d9bc88acbbcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4217be4-3838-42d7-9a10-4c1695d44389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588cc1dd-0483-4775-856b-2252d96b0d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d248c267-e24a-4ed5-838f-7a4f20c189c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35f1f69-8c6f-45c4-a64f-88b6fac7a2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e993eced-257b-4108-9795-2e8f900f73fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ce0a3b-200b-4f71-ab0b-020110b762b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac38a8d1-b638-4511-8162-03e83130ac61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33c278e-2391-4e50-a60a-db5519eccde1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83596df-4618-47ba-a31f-4e3d9aea198b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47482ce0-021b-46eb-b992-214cb35d8048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15fbaaec-2b29-4a01-a834-166a7ba7919d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a907b83-ae65-412d-adc6-c181ae592e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9daf914-5bb0-4f85-9851-54fec4a52ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83807259-cc77-48e8-a171-1fc07cbc8807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0fe6a5-bdc3-42de-88f3-e7f0171fbee4", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.83.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0746d9-a166-4ba0-891b-adab912075b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff63c27-84f2-4599-b851-e6b7df026f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48eff00f-1124-429c-b3e8-5541f2a85646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5634cda-246d-4cfb-898f-1bb02f135555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9377d2-8d63-4f30-be9b-786526d924b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f7ec1b-0127-4011-9261-ff48fe478c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384e3605-e148-4f38-9ee8-c724d64365ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fea7a04-c7c6-4a0e-b63a-c7ddd7bfd2a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ea2270-4300-4bcb-a8f3-9d5f58d9cfc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf08d20-2011-4563-a8f2-2379de168355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d92d576-a4dd-4077-aabf-260d30f55502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28d2bf0-9577-4802-af93-30a0df5b455e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5ebbfb-db16-4d06-a5f4-f52bf8ceccc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bdf2b4-43d1-4232-aea0-3644589f9aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eed6fa3-44ad-4eae-9ebd-ebd04fa93e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19bcc74-91a0-4482-a3fb-63fdf7eb67a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7a6079-a66f-4539-bdd2-85a6614a0ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e74375-ae8c-4db0-bcce-f38425abefe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c4f361-8057-4bde-964a-76cfa6112ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e5566e-c4df-4b66-b98c-38c1c75925aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588bf02a-dd36-41a2-b0a5-bf9078bd0cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c5b731-c515-4ed3-8993-182258617b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a96b6d-932a-45dc-a648-d5f294cdb690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d6e9ab-aea1-4084-8ed3-02b6ae01200a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6398dc82-c8e0-4a01-94c3-a794d8b1b064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f26d295-2484-469e-afcc-263b234e780e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0b9260-226c-4475-84e5-b6fc4b761dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fa1d91-b03b-4472-baf9-91a5e341c17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea12b00-8789-49b5-a25f-924522365553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965ff165-d88a-4c69-a120-83c62c57b32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b22161e-22f0-414d-9cd5-1326687cf885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f8f808-750c-42ec-bf5d-3bffce8e5b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d1825e-0523-4750-a7b5-83236e802112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f627c8-fa2b-4c4c-be2c-0a4a66282b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622d41a8-e2c2-4ef3-b84c-592a31a36077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e56b8c4-1bde-41f7-975d-e8c4040dc1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8437cded-2c3d-4e8c-9665-895eba844b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64dce2f5-a131-4204-bed8-dc31ce6d5409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2227a0-2340-4f8e-9941-39ec085d7607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db1f2f2-996c-440f-853b-19ce1e904161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ace150-fa14-46a7-8c1a-948a0fe9f588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2ed68d-7f1d-41e5-a924-7e9b17c96d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9bfe80-5314-4692-a2f0-d3e7a4f325aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d7190e-9058-48c6-b20e-de57dd8eab58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e3e497-aebd-4c64-b3b3-bde5b2ff33af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ecfd68-dec0-4dc2-aa7e-c00d65085f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56a9f16-1ae4-40d7-99d6-a1cf413e92b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4577418-3357-4504-bb39-ee1c5cf78187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a0f9ba-7d62-476b-9834-1e22c7b5533b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c595bfa8-b473-41de-b83f-c1d863716b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec70170-0c72-429c-b111-75ff089b39eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3619cf8-5e61-46d0-a0fd-49bda0907608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba8166c-6930-4af3-9c77-f09c71e105a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145525f0-03b8-4fc0-865a-2b33b61200a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2de6c4-1568-4ac0-b293-e3e6af5739c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd82b86-47db-49d3-8dee-b78e5efc9a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e061c705-9418-4573-ad58-471dc0e27e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e65d5b-d813-43f6-a8d9-c61f25e8a8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ea3dd5-406b-45c8-9a6a-27c988acbd52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1603babe-eeac-44c5-843a-2210df9a512c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40669684-f0cd-4565-b7bc-ceec29665a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de74b3a-d3db-425d-b9fc-ce7379754c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6757c641-ce1d-485a-b2ef-f527fb03f263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30547a31-1d0d-42cc-9e12-12ab4ea9ff9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3428063-43f1-4c9a-af88-9fb97884e9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc7a395-f7c4-4e41-be38-66fab7d82a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4362f7-5fc5-4244-a1be-73649aa7b98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176f0279-00ba-4019-a18e-f9686eb4d138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc35458-8218-4339-a1ef-529651f65f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb067a02-9d39-4add-95e9-0b35f53bf02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24eb7d17-b071-4876-8168-a9b2b023130c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bad9aa-6c40-4206-9c99-c7c17e0c94de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df567e9f-3352-4770-8e64-ebf7c47abf36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f8a88c-17ef-4944-bf37-0ba5a21cb06f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a5da72-9328-4d95-8f40-886ba88ca150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b11993-241f-4a6b-8a18-0cf6576e7a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdcaf46-fbba-446d-8cd7-7e29bd30150b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa38091-46c5-440a-8b8d-4068de30d185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e144d0-081d-43dd-9c16-813da22896e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ca3e5e-8d0a-44f2-a3d3-8ddfd221d5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e20928d-1574-4d27-bda7-caa71a9f33d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1e49c0-2424-4904-95f1-00f036c621d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99633ee8-cd14-40f7-bf9a-8dee4560b8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c292778f-57bd-41be-9e67-cc3455195951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da3325e-0624-4881-9353-3668e4446aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaaf2af7-56d0-488e-b836-f67400d566ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c3c62b-788a-4681-bd35-690603f5e0d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54a84b5-000e-4b73-9c70-9d071391bc25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebc66fb-6e97-464f-ba48-e430d1c31d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce62f954-a03e-488c-936a-d8e52e816962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.38.48.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98a061a-d555-46e0-96ed-03c89127316e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.57.110.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5272b022-62b6-49f4-92b0-b6c6aa80468e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.161.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15265dd-a79b-48e2-a0eb-8461e226a4ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de5bbd6-7596-48ba-ae01-43e86ed9ba9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd34d9ce-f1a8-4fd3-9cf9-db9b98e6b135", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3657776f-6236-45a1-95f9-b863957b10e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4c3bc4-2895-4f94-aa2c-78c34bf3e4c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdb39d4-314e-4628-88ec-de379724dcbb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.61.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc60f61-eb0d-4a7e-ac91-20692c4d0900", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.160.226.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d98347-e7c2-4081-8861-b3c976f61329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.59.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b924917-6a60-42dc-afa4-4ff561936438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.217.248.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc384600-f2a7-4699-a298-f511f0d61326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.219.192.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49462070-3626-490b-ad04-3f2764215e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7857a141-b36f-44f2-8232-cd32d250f0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.66.22.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c891b4f-50bc-424f-a62a-6dc704a1fff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.70.186.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328fdafc-64ca-488c-96e6-ad1184c2eb39", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.72.209.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f9124a-0a53-4548-91b7-29dd11cdd810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.77.11.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ea06bf-dfc3-409d-bbf6-3510852557bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.166.93.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a4436a-3d1d-43f3-a568-e888e6e98031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd51e71-d99b-4712-a65f-cc7c455970e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.185.241.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ffbce04-75ea-434d-b5e7-ea4ff11c1d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.59.175.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d187ac-beaa-42a2-982c-8e6ec18b4d0e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.6.224.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3708dff-7505-4616-b903-1c08cc854531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.75.165.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5edad4-7744-4c23-8383-2f4a76975a12", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.78.131.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3ebe76-4351-48be-b30e-ed2d92ae3a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.176.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07cff2b-b7eb-4bf2-a241-792bf4cf69d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.182.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59dfc06a-b159-43c3-a4ff-1455f56d9f80", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.153.106.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78681625-1c91-4bfb-bae8-83c993574066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.85.84.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06dc769-6af8-409f-9a8a-5d0f00c393d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.121.206.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfff5a38-3004-4110-8d43-c69d1da9ab6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.134.102.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b5f469-1a73-4082-bfb4-e9ba3cc46157", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.165.187.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b608d7e-25fe-4e6a-89b5-bce11af62b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.232.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a152992e-1d38-4ae6-82bc-6bf30e3e1b66", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.172.226.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304c7d1d-ff10-4a00-96e5-1c032a6ddb62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.1.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f37c05-284f-46dc-9eb4-5dd17acb753e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4df93f9-2da0-4965-a51d-e52c74b46980", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be21d337-d22b-42ce-8f35-3317e043a842", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f853744-9908-4167-a250-d90ad0e3e362", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae2c167-5798-4cf5-a459-9fe3300c65e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1850cbdb-1b50-4337-b51f-e347b2eb6447", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.51.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ec01f5-02d1-486c-a5c8-9ae3a54f781f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6dbe21-4c3d-4d25-9da2-d48f25772dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e96050-1c98-4917-9685-29b976ba4566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.247.247.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d70535-4f37-44df-8835-265d455278dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.248.173.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a67d718-3f42-4fc7-ba15-4caaec28b561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.10.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c8a6ab-1dfd-447f-bd7e-57e13c34eb58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.10.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5794783f-6b56-479b-97e5-07fdf2cc1da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.10.187.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e373a1-2d01-4d24-8fab-b1f23b8d3c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.11.20.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3eea7e-d987-4adb-b51b-92a659186a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.130.29.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654a8faa-27c2-4213-9b68-0a8d6fdf281e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.131.139.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72bbb10-1d49-428c-bbc9-88419f15d6a5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.157.80.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56390f8-a7e9-41d2-b774-083370861b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.159.119.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c391a1-f7f7-49ad-a271-300118517d08", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.161.235.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01201e9d-7250-4608-a7af-388788f8adc0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.167.66.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27a73c0-af79-4f12-a350-88f501a3cdb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.180.218.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6a0ec3-7869-49c5-9d3f-6385304e95e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.198.80.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d04df5e-9edb-4bc9-bf7c-2ae0a536afe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.198.83.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f078289-af9c-4463-a5b7-2fc9b06aea1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.220.131.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164cceb5-bca2-4a96-b5bf-7f883e28aaa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.232.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7319e2c-3e1b-4d5a-bfdf-fb4982e1b5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.228.10.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ec6924-2a7a-4db0-a9fd-2f43e93d5a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.233.24.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca93d44-a6dd-4419-9456-aad9c7c20ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.233.68.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3447e6a7-e772-4722-a664-18cc70a29f59", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.236.21.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4336db5-16bb-470d-a075-7a067c87b2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.109.76.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f06813-4513-4555-add2-5adc8f2ee22f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.124.177.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39ca354-4ed3-4d22-a6ed-9191d374b29c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.132.26.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3608af9c-d18a-4377-9d85-1ede06daa7a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.140.182.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f1f21e-112e-4a66-8f05-315100fe1492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.173.215.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4ccf2e-7606-4313-a6d4-695d3aa0a85a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.201.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7111afd-7f3c-459a-a9ac-869a0835259f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.88.163.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541fcc50-c98f-4e4d-9863-48fdc0552438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.96.44.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde70a07-afd1-40c4-b0e9-19ee22e2f3f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.100.237.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09362d4f-7679-4454-a8df-6982b395212f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.100.59.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a608c19-640e-4181-9256-8b1db91b22ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.108.176.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee0fdd0-6164-4505-9c92-a5fa76481334", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.42.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109f4124-ba8f-412e-876a-e375ade995f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.44.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb90b07b-edb5-41e5-a9c8-3a69b5531ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.130.154.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98fca973-74a4-4446-9875-5d82d5ce5146", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.151.253.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51cd4a0c-8799-42b5-bd12-d63c06f7cf1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.85.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1d3ad5-3c48-4673-99d7-da73026f9d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.167.168.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89439f9d-3812-4406-9e81-710647c5b5ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.160.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea853917-4f61-4d95-83df-be344030f3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.180.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1e94fc-7986-41f7-bb67-28a9539dbbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.180.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9675b68-64de-4fc0-a269-18b58222d1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.4.205.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c54f2f9-b387-4b9b-ac64-296ba9d724c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.68.7.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb01a049-80d7-411f-aba7-5301014c25b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.70.188.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e247d17-e1b1-48eb-bfd6-09c60394742d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.70.213.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c908bff-0fea-4051-9d39-b7c2efa47b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.74.189.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e957e29-1c1e-4569-b018-b11b3317572d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.98.45.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1572096c-d2f7-450e-9d86-10b30c1f4231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.145.248.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72711d7-06b6-4335-95f5-1944abc32b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead676a5-dc15-4389-a8bb-ac8444cac92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99236eb-bfcb-4ea7-8b14-ab21e0b176a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.224.43.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5697d623-45fa-4c69-8932-e7379f337f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.224.93.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef73436-f9a9-4cf2-b4cc-215aa4c2fa68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.225.45.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50e3968-0d85-40d0-9f3b-3cb4f280e341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.111.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc6a9f7-be45-4f2b-a403-c6117a4ccb73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.188.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3fb423-7bea-4493-a347-9f66610fd91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c183f1a8-5a1e-41bd-93a7-c713c1368848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b369c98f-6ea2-4401-9ff2-f1ed83bee5cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.13.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3bbe78-072e-4492-af25-02d8636b44f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.13.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78660c8-0913-493e-a5cb-475d02733fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9deb8150-964e-4056-a3c4-0db6123914e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.8.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc68b2d-b4de-46a0-824b-c61daed9baeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.204.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0412b4d-c53e-4d64-bf0e-2ce11258fb71", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.27.145.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1d1cf2-f3aa-4f80-8efc-e2da02e687c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b448fca7-7c9b-4660-beaa-81c1d1d9eff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4fcf7f-47d0-4bd0-a77f-b537924a4774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136be829-5398-4b2c-98ea-0c630e79753b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c68c6ed-e6f4-40fe-8404-c0cb008b8e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f296a298-6955-46d7-9974-6024303061d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15b5fea-929b-42b2-af70-655682787d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a463b2c8-d1eb-4fe1-847d-86f5b77333a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c30cf0b-a477-4f96-8ace-945d83256466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b063920f-051d-4ea0-a027-82d7a4ef996f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c97afd-5e61-4ef7-a44c-767eb36e8878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd618f26-d9a5-471d-9bca-d92f4aa9a7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef6f363-1b10-4ef7-a6f6-d3681dc71399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9811042d-2a20-4e91-a196-f4c174c6ac11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e572075-bf5a-4a87-b8a8-4e34cfacd148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2a69f7-181c-4183-9113-208bad1c04bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c20893-9512-4428-8fda-ec6b4f9e42a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2518b88b-7fed-400b-adbc-7ce3c029a64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81868c41-0f32-46b4-aafa-2b2cfb60ffad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469b8466-3e2d-4335-951a-374adc5e2596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e592ae-239f-4a5e-9195-84dcd111148e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.20.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73665397-da27-4e32-81d0-6d0038c0286b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.20.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759e3fa1-7c09-4e6e-add4-71d1423672d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.21.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b1cb79-b9f6-4531-895c-a36c555bd8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.21.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d144c9e-6cb6-4018-823f-3e6fe99295cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b29c3fe-510c-4115-8f27-cd3f763f0a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b94b992-7de5-45af-a800-2d6990072436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.200.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25fc978-30ce-4532-89b0-db900aaee9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.252.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97db0190-127b-4cd8-b74a-b2cae98f536d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.92.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540e794d-053a-464f-afaf-e63a0d9dc1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.137.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7fec39-5475-49f6-bb9a-687e5029638e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.217.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc576c71-d409-4e73-9d01-01f15f9bba1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59ce2b5-477c-47c9-a882-20fbf8cb7ded", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.115.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc08d198-87f1-4893-a582-b34f4536b94e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.43.161.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4dfb33a-d571-4101-adde-58f350616225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.105.51.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c759a430-b1e8-47bf-b272-234d2f1f5a47", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.124.32.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa66e451-bbb2-42a1-9ca9-ff5d61dfc8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.17.203.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0286ddc6-eea6-4518-9bd8-3772d365321b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.18.166.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aed24bf-37b8-4a9b-8f63-5648b8a72fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.18.84.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a003ed-f384-4084-aaa5-7d963a560a61", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.185.17.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e60a85d-9dde-422d-b153-b9f5a1fd55ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.21.27.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bd20eb-a0c5-4ceb-a09c-25d4fbe648ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.211.176.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bef46ac-3fd8-4bc5-99ca-bbcac2068a35", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.24.15.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d96ee6c-2bf7-4a6b-a1f5-8242218da5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.25.64.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6564f274-e1be-4ec8-a9db-c5cc2118d37c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.4.72.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350cdb8c-dff2-448f-85aa-bea2ca8cb24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.72.217.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1367b89-9cff-4659-a7c9-e45763b2af5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.40.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91f3d59-1a6b-4282-9994-cc3553be51d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.40.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ea3c0d-3ffa-4da5-a235-810a3f06b3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.108.212.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9931bcf6-1cdf-4210-91fb-c2cf281672aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68917e42-c4f1-44c2-a5c9-5d91f992763b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.134.111.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb646a4-2406-4af3-8a96-b013a7fa9a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.137.185.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b872be-1b7a-4992-a58e-0851e51080b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c563db1-81f8-4088-a8cf-84b282e5dac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.50.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a4224a-6a38-4fce-87ce-c7b1e0b216bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.51.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9180a4-239b-41ac-802d-1bc0c48aaeba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.144.144.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2757e942-513e-46bd-9dc8-b5d9f728dc16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.145.29.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db00d9c7-b654-4cc2-bccb-0803a03b3df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.148.156.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bfcc24-254c-45a9-b597-b52c82830bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.148.223.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d743ec8-bc75-430d-8c84-4f1720a01e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.149.10.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d198dcd6-e167-4670-8d51-ace5897487fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.16.108.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e852972-e986-4f93-ba6e-be6e537f4cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.17.157.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a63b5cb-0eaf-45d7-b074-7b58cd2cea28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.21.167.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f36fe0-7b0e-471d-b794-218769ea4298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.21.35.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce536d66-d385-42c6-8451-2aa10ceb064b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.213.226.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c644ec52-3363-4d67-b0a3-5ced5ddce28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.22.167.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e498ecca-14ed-44b4-944a-ac6a286beef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdeda458-2e30-4bf5-ba23-e998df20bb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.76.217.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a30e9a4a-ee55-4f3f-a426-ec61e20a9530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa66d38-9f8a-44bf-a0fe-e0a53326f46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696989f6-2b12-4727-a015-aa4d15e67853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d86291f-b7ef-47a0-8ac2-205dde696df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ad8dad-d9db-444a-bdd3-ba2e0313fd2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438af053-ec15-4445-99ac-0f1472aeab4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff30003f-6805-41aa-a276-b274605fbfe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.148.99.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f381ec9e-fc7e-45c4-8543-233dfe898d99", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.207.44.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf6ea30-9ef8-4094-ad9f-d7c4fa021369", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.23.0.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820e4d75-551c-4d34-9113-24a9f098f5a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.176.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75694d9a-ec6c-4fad-ba34-d62dd008e15c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a20bb9-e258-4132-9438-ddf46306af66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ef20a1-b240-41f7-9fe1-a6697a0cf588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89bbaf1-f592-4866-bed8-af300ed481e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff70c7e-91ab-496c-b4ad-b63c1c6b74a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd980adb-5fe8-44f9-afbd-8a4c907ded05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.184.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab4e871-ffbb-463e-ab71-6e59f95470d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.236.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7323b3-a8dc-486c-a2b6-273fd463ae60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.236.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d23834-eb04-480d-b60b-edb155b3280d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.160.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1b3978-56a0-4ef9-bb9b-2642874432e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.66.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066e9324-87fa-49e6-a562-724d563aa574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.196.233.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445a19b9-f333-48e3-bd3e-97a5a7fa1bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.100.191.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9687925-7131-4e03-9bda-9426112b7759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.109.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5587881a-de66-4ef0-94d5-1c596a9ee08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.173.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092605b1-95b1-4c8f-be12-2d119410d1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.9.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad13cc17-ec0c-4a0d-b2a5-1fd6f3569ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.104.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4e82d9-e66a-4a7f-b024-0d1537158307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.124.208.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9b16e3-3ab0-44e3-9686-1038d3fbf863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.174.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3020b6-97c1-4322-8ff2-0f2ce3022b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.140.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce269fa-5da3-4e06-89ee-6159af53397b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.131.21.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f96a941-ec05-4318-b5dc-d2bdcb376e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.131.251.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318e40d7-a90a-4c21-8cb1-1135c78dda56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.132.194.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720a6b6e-5cca-4f5d-bd03-f659e64acddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.134.61.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5219016b-b7c3-428b-b90c-2702d1874edf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.138.17.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff800941-a3fc-4fb6-a403-6e14be612324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.33.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0effcf27-8e82-4a03-a7bc-d58cb001bb54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.42.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebae34c-a713-412b-88b4-905a96b70db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.126.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0562a1d-0605-48c7-8ace-9d57718678fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.175.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88275ba-0d8c-43af-b658-ceeb89091c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.141.204.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591e4125-6ca4-46a6-bf3c-b81f1d0b8312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.142.172.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bfcc25e-5c51-45d4-90a5-bcc44a6f9278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.147.30.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a069ea87-c160-456f-aabc-225529dafb0a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.148.183.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d15ee1-3f96-4d12-a513-9ba55e0ff31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.11.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177347a6-1751-4151-b752-d4b119dc13a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.120.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac948ca-9f70-4c11-ae8b-507ef4c15396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.134.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6bfa7e-7fe7-49eb-9778-546d7f830e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.174.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02c2fb3-a8d0-48b9-94cf-d5690cb6d66f", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.226.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e702b9e6-7c09-4b85-8f8b-3660e5b4dc9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.248.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df98ce8b-45e2-4c93-89ef-03c5ffd8ac17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.50.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8386c464-47c9-47ca-bb34-27ae026e2e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.16.209.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9080602-1502-40dc-b0e5-b97a22885a7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.169.98.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14dc187d-827a-4a2c-92bd-8f15c7f52d59", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.174.0.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f051a99e-ce63-40f8-a9c7-5cf7af8c70a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.174.253.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34deb40-55cf-4ae0-a715-24b46f398ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.179.129.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a154591-7ffe-4ed1-b08c-a230278abcfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.180.17.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd81158-06c8-483b-bc1f-9dc7f21ab6a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c4620c-c516-4499-867b-89393882416b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.208.194.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611511ef-12f5-44a5-9ba2-1a7629f7564f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.208.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66723c0f-d3c9-410a-9c6a-6f677d3db009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec158bef-e5e5-4cda-aeb2-2e927ffee80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.23.68.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5511ad27-4dd9-44d2-bfcb-123a15fbb2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.24.10.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92025fbb-a6f3-4cdf-b9da-2ab30e280ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.140.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70790f5c-9415-4aec-a41c-4902d9a7f2d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.157.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2475bac5-2205-4de9-ac7e-1d472d02f34f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.178.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6752af-0bcd-47d0-8f87-6b6c0f5d58bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.188.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542e5ecf-200c-49cd-bfec-e70373e4ac8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.117.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7415fbb-47ac-462f-972f-6eb10f4f4d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.40.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f61253-7ff7-4af0-ba82-a2af816a8861", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.40.145.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d07c747-3f50-4d0f-8647-1fbcbade4f67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.40.211.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1c1bd6-8985-461c-8444-52a5e07c4ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.50.31.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38dcd7ae-45bc-442a-8943-5b3889e509d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.50.64.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa00198-8228-4ce3-be35-bd110e950113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.168.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8aad02c-d296-4740-b6d5-5845419151a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.183.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c0a305-77f6-46ce-a794-868fa70f58fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.157.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15098b9c-b6f8-4f9d-ac4c-f818c18de266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.175.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c8dac4-d5fc-4c3b-b1ac-5f9142c4f001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.191.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724343b5-a700-42c9-aa14-7dfa41d3a2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.160.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513af323-f2d9-4f83-8ee8-5a9056ec4880", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.197.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aab433c-720f-4172-a747-e89e8fe6873e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.217.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b97ba36-3a83-471d-ab9d-58c6e8e8aacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.238.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962aa79c-d132-4374-9cf8-a3388d9013dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.36.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf712527-85f6-46a4-872a-790270f22cb7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.99.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a945b234-dfcf-44c6-8f1d-dcfc748b0d78", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.63.21.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90225b05-d00f-42d5-b6dc-cb0f07dacf39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.130.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c444fb-00a4-4238-82e9-f97c6d82e015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.75.150.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c478bb-3783-4591-a3aa-c3be450d90a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.133.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c73097b-8afd-49ff-b23d-5f1f73927698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.198.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70083927-cfe9-4eda-9e19-1f0af8c4f78c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.46.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b67f05-d662-4cc9-a70a-626c96cd4af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.8.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd217c5-2336-4c50-b606-679077dcbd73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.97.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d56efb-30f2-466c-9013-30beebae3211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.151.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2583480d-7ef1-4afb-a53a-2dc5d38a4499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.220.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0bfdc67-f0d7-4649-8f8f-b71d5630c2c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.221.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532c957e-91b7-4158-b3bd-18634505036e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.23.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf165e44-9cf2-4ed3-9a2f-11123cbb622d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.30.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2779b0-d7ba-402e-b78e-75e06d865cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.51.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b423616b-379a-4d13-b3f5-978af5236e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.55.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e0d173-77fc-4e92-ab83-612752ef7b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.65.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d329d89-363a-4635-900c-aca40abb06e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.82.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6af013b-bbe8-4691-89a0-55b5dd0b465a", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.95.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a061e2f0-02f7-4c38-b30d-95f1d4c4a8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.104.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4c51cf-28af-459e-bf40-33a80e7354f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.202.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f47edb9-75b2-44b6-81ab-a93af3ba7faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.229.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ade7a7-8e6e-4679-8815-507a7397f82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.81.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b222ab9-d64c-4f73-ad59-13bd27e9fca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.97.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59cd587-9e94-49a1-9a64-ce5bcff82d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.81.224.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d324fc-a7ce-4c3d-9799-7ec26344c9da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.81.72.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb0fb80-dd60-4052-b870-9bf39ee2ce24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.178.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a9d19a-0b58-4fe4-a3e6-037b8f04910d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.90.120.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b977de-2df3-4dc5-a5d7-c77f61858fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.92.151.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1f7f20-5638-4b00-ab59-4a73c2abe9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.93.128.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755fbf74-7795-4a08-bf17-2c1ec20dcdd5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.93.179.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d9b857-3843-41e3-b7f6-96fb873f9b56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.93.229.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2176f7fd-fd82-4af1-a718-af109ae9cb5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.95.52.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02c0d6a-4abd-4d20-a3e9-0619f97d1ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.51.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a21158f-9cbc-4f31-9d65-4c263578d3c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.165.123.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b02ef29-67d2-4684-b699-55906b10b089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a4ec16-3fd7-45ea-b001-74d9d02fe39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.126.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9c4ca6-3799-4e1a-8a91-fa0f117a088f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.227.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e24601-2838-4243-8650-22d8f9ddd72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.9.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e29d92-954c-40c0-849f-4950f3a57c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.181.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ebb75f-a410-4a01-a02e-6a7ae7e4f6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.248.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b02884d-3856-4452-830f-b86bc81cfbe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.81.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db62d341-8a7c-4678-ac6c-4711055519ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.199.159.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59dc352e-6cb5-4006-816e-6f899d06cff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.202.9.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244caf1a-0a54-4b0f-a87d-15ce7d1ef0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb9c723-fec7-47d2-a788-16290dacc0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480b63b7-eb20-4634-9005-b4c95d10d4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bee72b-1bf0-44e3-8ee6-58312862b4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eee9a49-5e45-4edd-ba96-529816b4462b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e3e0e8-da37-4636-81fb-11cef4542cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6668334-3a9d-4d9f-bd13-2597b3bd6c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b599cf7-e24d-422d-b4a3-e33b672023c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e5f278-08d8-4d7b-b632-ff4b9dd95932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9446207d-1901-4814-b1f3-04d567cc46be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be08467f-95fe-4266-8369-be3e1ed41a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00f8174-01ec-42d4-9428-7a496b5a56cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da552a29-70ed-479e-8cb0-f0f31e7b2817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5091b14e-4c26-4f3d-b5ed-a75bd26fa2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d92b08-54b6-4381-a428-9a3fe8295608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ea51d3-ed1c-4dec-8175-4feff8de2c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e10c4e-ebb7-42f3-b7af-d9b46311ce1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3dc445a-8c53-46fe-baf0-90ab40ca8028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d309dd8b-0963-4ed1-b4b3-d8359d1aa062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a34c22-6d0e-41cc-9a09-03f65ed65a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92792bd7-1cb7-45bf-aa48-6f8de86f0bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83eda269-60c0-46d0-a1fd-e3e2d83306ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e12c44-5b5d-4879-96c4-d829175dc28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0aa5805-ad4e-4fce-a512-a468fe724a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6eb6af-1264-4991-979f-0e0791722186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f21aab0-b85e-4de8-9f21-f3691d89a43f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96be5ee-27e6-4441-ae75-82232fa2599f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3dc488-cdc7-4573-82ad-d4d8ea8fa2a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf357f57-cee7-4e94-9e4f-3846dc0e8a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057f200f-e80d-4f25-ac76-9ba3d43cd779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36ef06f-c271-469d-87d3-a78bb90193a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b8eb4b-e5ea-4c41-819e-766ba3dc124b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3c8232-e9df-45fa-b6c9-f32873476034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436bcad5-ead5-471b-ad48-48f34aa09750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff2cb6f-7d4a-43cd-913f-6f6cc49a2482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d593cc37-2bea-4fb5-aef9-daf7606ee07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b97213-6048-4aaf-987f-5ad9c21d5c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a0a7b9-53ed-4806-8ca6-9329203d9875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea3d661-ba7b-4af6-9cdf-4250e8568222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5bc242b-4be7-46f2-9869-e93a8bbb086b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95ae08b-3579-4e6d-b843-70466a49c17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257f587e-056f-4148-a148-56eefc560a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29389025-f97a-4786-9bb4-82ca5f88f87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a08419-f790-4f4d-bc89-bdda9bb97e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d434c95c-e380-40bc-a350-58e35d3f25c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cae4873-fa81-4aa4-b42b-e9596aa35f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a58ae6-aff2-441c-ba3a-b993f8e04dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b0e73b-2263-417f-8881-e016a75b26ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ff861f-e3bb-479b-9728-655bbb22f053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31505e58-d7b8-4b58-9805-a866775bd156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f44996-0980-4fab-92ff-211382b1c496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9c3c8b-7dd0-407f-a619-efcc721e5bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d650641-1ffd-4a85-9a69-d3d5e8cbb772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4bd06e-6d28-4ca8-87b5-bbf4a1528e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0a182a-b4ff-486a-874e-e7feea58887f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57255ea6-1c23-423f-8033-1f29424f361e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75044ce3-9c60-4dc9-8638-171835685710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e392167-460b-43ac-b50b-20d865eed635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d4b899-ae0b-44ed-be16-a31c1e3fef9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc96bc8-c484-4b5b-9ce7-4e46d8688e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da093a5d-f5ff-4420-8261-066fc6c766e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b503c4-e0cc-48c1-9ecc-24196c94cfee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abaf0b2b-7f51-4175-a11d-0d0bcceccae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1c4b86-caaf-44c0-8ac7-a4a068bef511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd82bd46-8c97-478c-b9a6-fd489fddaf29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7e29ed-f72d-4ff6-a810-03cb59e69f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcc6b62-fca6-42ba-996a-82a6cc32f6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96835919-1335-4cfe-80cd-ca3d47600678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e1fa16-8b3c-484c-bd0b-1065e34b868a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25889d8c-f0e6-408f-8b01-607fcf466695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bdf9927-41d1-42cf-80c9-8d663cbf1ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d030f913-d0d4-4efd-85e5-8f1ae377ff2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f772669c-188f-493e-96c8-bf7dba7698fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b9d7ac-0465-4b54-9f01-c9d97d04abfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372f1980-b357-45fa-b846-8087d5fd51c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2a7033-02be-4e24-b862-9758c40efbd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c4513b-230c-4a4f-9806-253f9ca713ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc2187d-73ea-4ef2-b984-b21a3a4ced78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d65277b-bee3-4bef-97ca-58af6ca22130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56d3d08-aaa9-438d-bd26-7c4ab060fc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c43489b-4698-4f3f-a04a-3c971894e79c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d8b1b3-8cf1-475a-aeb5-fb7a79eef499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2da2ded-695d-4d71-86a6-fcd665dd1e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7378ca7-d933-454b-a2f2-ec65cd90da95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1cae7f-2625-494c-887a-7809f7478d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c1b59a-2878-4f10-a5dd-bc8032cd40d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43ac4c6-f2ed-4016-aa4f-53f30a2246fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb495da-3687-48c4-a2ed-15468e2ebe3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d86a4d-f6ca-40c6-9d46-15cd4cc6a35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3424401-bf36-4f32-ab1a-0f6d32be1c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0042df-14df-4d0f-97f3-1b2507c745b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d15923-7f70-4a29-a189-13e81eec1ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70c6faf-62b3-4716-874a-5c1e8d6be4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e9d834-ca66-42e5-8040-2b69d4d039ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676acdf3-3896-4bdc-80d1-6755d82b46ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513d2e75-5246-4b4c-92bf-6531107f1ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c9de20-290e-48bd-8889-140761e3dda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355655dd-566b-44d5-8793-a8cbabac9ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8489c4f3-7aaf-4413-b138-463083397f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f517132f-6837-4d2e-99f1-aed2cbc87b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f334a7d-826c-4bb7-8192-7ee1aea4e500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6a94e8-9d4b-4d56-969a-398f354a7302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab6e1eb-0abd-4fbf-b5c7-bd0aa03b5693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62312548-aeaf-4662-b15e-512019d377fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90376865-aa80-48c8-ab7b-bccbc94142d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a63bd7-4b99-433a-9a56-8967c7bc8665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99fef13-a313-450e-9417-10be38fe6c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e210c9c-36ca-4b7d-b79a-431c65b04394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6db2b4-f941-430b-ace8-169f0e39a47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6e2048-91cd-42be-a610-f7c1d240c31a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204618d8-fd01-494b-a0d8-977e9d094bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee17ca64-4fd6-4727-bf95-a42cffc745ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44b3f5b-a286-47d9-b5c6-4e7043b7a56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb8ee0b-520e-43c7-a014-87b7ea842949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca6eed5-474f-4db9-8af6-69887b56eb06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bcc8ba9-3588-48eb-ac53-a19e92b7db5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ab2a00-4d9b-409d-8938-3ff4bf2f2b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2dd099-915f-45e2-a92c-b6705dc5900c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc6fdf1-e52a-4a44-9911-cd0f9f17cb0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1f1b56-2cce-40f8-aecc-8ff809830dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6981d63-844e-43eb-b552-810ae3d5d8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b37f3e-46cc-4bf2-8ec3-c9573b5a47a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc2d7b8-a4fd-4a9f-8eef-907b6e311a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0898a6-ba63-4f30-9b98-d844930907a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6d098e-7168-4159-885c-fd6195844454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d56e09e-035a-4261-9b82-ca438037e04e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff6a078-ff8a-4039-beaa-1a3d1b56ca85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd882e8b-6cba-4ec6-82e9-1217aee5d98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bb3c73-4dbe-4269-b8f2-d93f59907385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dadf8c58-3d03-4eba-99b8-5bc9bbb10bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0865dfa-7bd0-4827-ba5c-e1e2912bd733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f017b415-3c8c-4671-abe2-3fc9bb7b9645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5290e3e0-0ec9-422a-ac40-b597288a3c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed663c8-2405-4cda-8292-9b73eea676b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5990e9-0a1d-438b-85d9-94e0c25deb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be8d287-ebbb-4a61-8bfa-7944d327bea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a9d768-edf1-4ac1-816c-02acb7c738c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27f61b4-3657-40e0-bb07-7996a8c24f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2b63d0-396d-45ce-9a59-91c6a11788d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834300cd-f774-42c6-81eb-cd89425a10b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3668bf-7ffc-4c24-afaa-175123349c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35fb3a92-3ef1-48d9-b0b7-70df1081c244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7142b572-af2e-4ea5-acc3-bb2cef9987e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0de0ff3-d54a-4d82-9b0f-a70a9e469d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc5764d-90da-423b-b838-f54bc7d90ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69588d2-6d94-455c-b171-14acc3e714d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d475010f-a619-4c75-ab6a-d54595bdde21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1113dfd0-5b55-4b64-accb-153c2c552259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e176aef-2bad-4593-a879-d3f11c35431e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3ed18c-7181-439c-b6a9-444b71196be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c932dc1d-2bd8-494c-ac4b-5c62ee3797a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bcf59f-242e-473e-ab67-5b4ac412913f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d9bea4-cb75-408a-ac22-71a717f0be09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9dcb5e3-7b08-4fc6-8d57-f88f430ed809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873b00ab-3b4f-4273-8ebd-d23e7a02f0b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f299f50-3a58-4c25-94b3-e6c026af696a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f27075-4ab3-4325-829f-218879aae4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab583868-19f3-4be6-b8f7-2a727cc800a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b6a299-9f59-4c67-af93-ce928a2a023d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c453d64a-ddf9-44b2-a8a3-55f3f54d16c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241c6d09-b914-410f-b42f-c8b1b84358f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9281c546-62ae-4dee-9f50-01193203420c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e13c359-8683-4aa5-b6d6-0da2972a81ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db18759-a28b-445b-8150-34d5545372d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd30f35-010d-455c-91e7-703635503c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c8fc77-34be-4399-820b-f57917d8433e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4fa9fd-3dfb-47c4-8fd4-04c8b12f0a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e84187b-81b0-4f3f-b1a5-431f39bf08da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed1cba6-1eb5-4fe4-83bc-84ed78ee7aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88363399-8587-4a85-ab70-1f25ec446d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb961f60-732f-440b-8dfa-6a3de5630f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be0ea7e-3618-4eb6-9034-9dc8dd6b7ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d83a1de-29f8-4249-84c2-c2a0eef14d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bd50af-05d8-466f-a1fc-62b56a3880a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b18c84-b046-44d5-97cd-5ac12288012f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e9c2d7-3c7d-4c90-98d5-48afa0cec545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4abb24-0919-4641-b28d-6238705bd0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b6bf02-082e-4a89-b6fd-eb3e01080c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8a78c7-e8b1-434f-8a8d-82479fb5aeff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af58615-be31-418f-bfeb-c4487eee0ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ecacc2-3c5b-44b8-9407-2918d358a84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b36576-abaa-4e8f-87b0-1bfa4de02f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c3bb96-31ed-4ffb-8dde-6f95a51bfd04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9853c9f8-059b-4ac3-91ca-3610f388a434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f28cb0-3611-43a2-bb39-6a17095eac65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12173943-80e5-4598-86a6-09b5bcdc85ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5baabe65-1522-4f60-ae59-4fcb7f54fe8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca30d05-4938-47d5-a371-0360ea9ba672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072a56af-208c-45d6-aacf-15c4790f0643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f98b56-3d94-4e3e-ac52-269b20777baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5d0a0b-56a3-4dbe-9ee2-b7dff88258c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2bd93ee-759b-4864-a16e-a3e3a8bd2f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8429d2c-2d19-476e-8aa3-abc49413724d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fff0042-fb6f-48e8-a8b2-1e31a029626b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afde51c-ed07-476a-b317-ce871b3d1c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abbd0d3-f162-4949-85ac-a437a6d08268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa990ec-2b56-494c-b436-43a56986ad3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944add49-f243-4a03-a6a4-0dd0e82b498a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71b0205-53ee-4b6b-8db3-5f958fe8733a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb14917-108d-439f-b183-6636a406b338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221009bb-0c52-410f-bc60-d1dc510088f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08840cd-1868-4e24-af85-0140d5a6c050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c21e77-638d-45f3-b6ef-b7f265fa18e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896172af-7203-460d-b68b-2658e2471b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1a5a9e-b3a6-4718-a7bf-b0b9315c26c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235533e0-aa8e-405e-9610-05e7db397ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99335ec0-9b4c-46d4-b909-ca86ced0fe7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc241373-c027-465d-9992-e51500eb7134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75a1385-f170-49e8-948d-7c864ed5c2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eef0f4c-464a-4a0b-b906-e9816e7d7eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8cfb84d-b1a9-4337-a3cc-36b9b2ce4cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c05584d-f7f6-47f3-bcfd-afe88e44fbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d47289-d00f-43c2-80ff-3b07025aeb75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c86ed5-5b62-46e0-ba57-74e5a0b40d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50300135-dc9a-4d5e-80fa-4bcb13594009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03234b21-adf0-4156-9fb6-6c5e39a6b5db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790e1c93-f2dd-49ce-847f-78f4a52d923c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e89edc6-0174-4bab-b07b-37ab87e28e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a807c4e9-bfdf-4656-93a7-c46a00bac627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d0a269-da57-45d8-9c9a-80d4935673c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d9d94f-6231-4775-a1a0-cb94d08fd066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a3ff80-a3e4-4b8f-adcd-4d54f92cb7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d476f7-6f18-4630-9e04-4352150f794f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54bcf0e0-3213-47ad-a75a-5d96e0920891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106ece03-5dc6-4850-8556-c6e9d5306555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f421b0-2648-477b-8c8e-78a0105e9473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c08b56-b580-48dc-8c94-3c702bfc3cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91d72f8-9fe0-4a31-ac23-7f969ea4ca82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2658ddcf-5545-4744-8e28-350ec80a409e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f089542-944a-46d2-abc6-cf0a255e38cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2fbef1-f852-4cd3-bdb1-594af31d8f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ef8a6a-7247-4b2e-b832-6d71213378f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab4a4a1-f87e-4a0a-92c9-db525f8a673c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab72727-0762-4128-b4bc-c164a7d8ad42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c229ccf3-872c-4cfd-823b-5c2571781d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760af61e-0d9f-4d32-ad12-18f6e5947030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0c3129-ad8d-498c-8125-590279062852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0cbe7d3-f97a-4633-8a90-a2a889abca84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc3576c-1c27-4576-b612-05778968dd40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5381d5e1-f957-4972-a866-78763ecbf096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f968136-c517-4119-ba7f-602cabe79ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca86353-3bf8-4e24-940a-d7b8714ba8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ccce016-36df-48e7-8be9-feb5a2b6dd10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0035684-b816-4dcb-878a-d7833406f8fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158e8f26-9d1e-474c-9fc7-220590b71cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac3fb9d-50ff-49ff-906d-196e0435a07d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd02f12b-5ff0-47cc-8b05-5355107dac81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464723ee-0a8d-414c-966d-55b9801d84c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e116a8-a402-4b45-8f18-06d8ea4fda45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7acadc-b183-4d5c-9bd8-fd942a13c5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a8bce5-eec5-43b4-883c-627d213a57b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821255ef-b9e7-42ab-b2e6-1bc507e7351d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663d160c-fdce-46d3-bb7b-4545c8c09cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a2c88d-8a05-4a88-b77e-a9ac498f0b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9fdf21-280a-4e31-8d92-020312e17c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa0f198-6374-47f8-9ec3-0484859d252e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f8f02b-bd9b-4b74-ae56-d3985a12f723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2d85a4-1f8e-4180-8ab0-cda03155df9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176a0cab-6486-4403-a40b-12ec80d33742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65434ce3-41f0-4242-8559-9f5a3fc65158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9c487b-5d5e-4c44-a88e-cbe57767cdca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d2a79c-e963-4eae-94a4-1606bb943ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b84099-086c-484f-8c8c-28fff1f8d2c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511e0062-25d3-45f2-a53b-9f98fcde8a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9225c84-a697-4729-b454-2f0ff3796717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13db6c39-8c11-4a78-9729-03f9f305c1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe49b4a-58a9-4ef1-9a09-9f148a3b6643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349c047f-f4e2-4437-8c9b-3baace8d698f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e606688b-7ccb-49c5-a9eb-f41582b40e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778b12a6-571a-4506-8634-30bfbec7f032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3c9c04-1b3d-49e1-932a-be19ea8f8028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bb5cb8-03ed-4b79-b2cc-550d49ba129e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f84755f-a352-43e8-bd4e-aeedca180353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97760fda-6ebf-45f7-91dd-7f3b7d9f7ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c136b55-d550-4c03-9eed-1df8f9f16ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28d51c9-218c-4229-911c-c205df051a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b8d980-d265-4ad5-90d9-8eeae7bc7c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019d69a4-990a-4202-b43c-f3f60fa09e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d67373-b19d-4f09-b220-9c8fef675bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f613613-507c-4aee-8966-c2ffc6b91b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2666cb-2cee-420e-9943-de87bcfeb81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8d9676-7fd2-47d6-87f0-bef573762404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0b6bb5-f1a5-4c20-9e0a-b30d9ebefae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7bf56b-7b93-4594-ac82-63a8f7415126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5c5a1f-f977-4d00-ac2f-1069b85f6b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f3bec8-3a57-41d2-85ae-68b27ca707b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496779b2-3d40-4668-ba00-ffcbb9d71877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c500fa2-cdf7-4409-b496-14efff3ed8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed27800-fc07-4793-9c17-2615f962e4ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--957b5f8e-6692-420b-a781-6a0770309b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c2c4f9-3a5c-40c0-ac22-b2ec4ce8b62b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b589a91e-da63-4450-b6be-b70960a0f7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d978793-86b2-4128-a2eb-42658459542f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187b5e8d-9b60-477a-8a27-030cd4e19137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56396518-c9c8-451a-8f15-3f2322c26bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7594a29b-f1d0-4edc-9cea-cf018d0c4656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc25b467-1633-4e52-a69c-f4a109760e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707f954d-b692-4665-9ef7-0cdfc4479363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0e4bc7-f2a3-4812-88df-4e5cbd08410f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1ea6c5-1fd4-4f66-9702-92c089e534e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5876147a-c1ad-4d2c-95aa-c1666b56675f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3fc9aac-fca5-4274-9980-618caeb18dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5babde22-7936-4f53-b44b-f811c3fd7ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0c0186-7a61-4530-844e-75b28c31ed67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f103536-057c-4229-9b74-a2a9490e5153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9473431-3f64-4b5d-b777-c0a3923d5d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6c13f0-1a90-4337-b2c8-fc7539710cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a2e37d-667f-44ec-bc14-cfe725a590fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0caf68e-41c7-442e-b8f7-5c0737d2c7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0cb0647-9086-4fe3-b4ec-6ae0e108ae26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1109058-04dd-4259-9fa8-7f294acc7edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404982d7-553a-4f3f-8321-46ef83c754ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186263d7-f221-4d7e-a74f-0826be11ed79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6b2ea3-3847-4bdc-8cce-d3fba06fb89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28d733b-1e7f-415e-bbe0-8d631df12bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4e74b3-dad2-4460-af55-d6a62a8da93f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4969fc3a-b1aa-49e0-adf9-df3ca03320d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727100c6-69b1-4130-8333-d701767acac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff41d28-e41b-4fbf-98f7-3eb7a71816bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdecdca-f233-4a0b-b3bf-745b698779c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424dd3ae-ba90-4711-9c20-214fd599b5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1910b080-ba50-4755-92e7-f3a9b7b2bc30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208b7da2-7f17-4ef6-b475-766a7aa7d821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a5b5c1-5973-4a3d-bcb4-fc60a7164b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b8601f-c8f2-4e19-b65f-830ab5560f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5ef2b2-3ba0-4dcd-8815-ed72a2474005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78e7858-91e0-47ab-a3e5-9582555b13c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cfb581-3853-4740-ab33-087aacd1e62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2c6ea1-866a-4f9d-996e-9d8a8715377a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ec001d-1746-46fe-92b9-654174ba6480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332eff58-ed96-400c-b5ab-afba55deba9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6865f4b7-f885-4ed3-81c3-3e6e98ed7cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7245a37-bea4-4af1-8581-fa95b612aab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc1064e-9686-4283-8ed2-38bdb53d9e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d1d2bb-e90a-4f41-98d7-60510433a23a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5d5d27-9bcc-493a-b76d-ad36df655290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc40149-7b0c-4752-a15f-c860f0164f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d92325-8d9e-4e8b-9cef-714ad454a87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c999930-2282-44b9-9bff-6e91ad3ad9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0a4970-e1fa-4966-b7e4-208223962527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd25d7ed-6f8b-4841-b0d6-c74be9a7cf2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384fd48a-602b-48a8-a4c9-6dd4e2c2b8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b19c61-32ab-4d7a-9f3e-de08ee0b3818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9798bd97-5f48-4ed3-9830-c852c6de328b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0057c8-158e-4272-9036-c88425a8d380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf777ef-aad0-46b7-9f3b-305d37fe18b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f828b48d-1137-46b4-a596-9240cce542a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e661e196-5a9a-4de9-9ecb-fc59ef65c4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3482015b-f9c7-4872-b058-aca78bddf65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d225a4e4-9111-49ef-b815-c3e2fdc9f64c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282bff33-9711-48c0-8462-c241a9833a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cea9b4a-0255-471f-8366-c6e942cc0d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a502e69-3c0c-45ab-b1ba-b1444e844520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc3ab24-f1f6-4bef-800f-88bb0dc677a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e405e7e1-2c22-4466-902d-9f5fcb12975b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65256fe-970b-4aaa-bb7b-cac15b2e063a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e110b0-6a3e-4915-a239-a950ceb4f75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e454014b-dd3c-4d72-b9f2-e09455c6ca4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333aa5c2-b9f9-4e3f-9a3e-59a370feaaef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf26e27-2215-4232-b18d-6e2affda94ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ccc4459-2f70-4a03-9d75-039e18dc30ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3df185-d9c3-44c0-af4e-60258ae6ff08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724ac6ea-f11d-484a-a490-a37ddbd1de47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d671d816-2aef-47c4-96b7-3a1ef0b7cb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1407eef5-156c-40c4-9b3d-271ee30811e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e489587c-81f0-45b9-8c8d-a4775371220b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562c82cd-1ce9-40b2-a53e-25ef0c578b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb809ea3-82b7-402d-9dc5-ad5dfbad8093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6681ee-22cb-45c5-a5a0-034788874c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716d2486-59f3-4cf2-beec-182bf76245d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8694d48-5639-4876-8835-557bf038fbb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88eb1f54-8708-48b1-a9cb-43d4e434cb4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52fe5282-1ff5-4aaf-b0c3-bdcb20473b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445fb3e6-7a43-4406-8114-ba7fee221df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c359318c-599b-4a86-ba78-98811d9e8536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23ba3c4-6926-4d0b-ab5d-3836330c5398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc666d44-6120-45a4-8597-00769ff6b351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a68d01-e2dd-4a0e-b0b0-c7b26f94100c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c3b1002-068d-47f2-a009-5cc7806a9587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44032310-ce4a-4565-8912-7d8aea7db340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdaf335e-ca5a-4f9a-a5d0-0eee063c6223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da9bc5a-e266-4a36-b064-03e71ae27d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6203cf3f-f823-4ea4-a30c-f3ae9bfa882a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e266ac96-f3aa-4de1-8acd-bef158eae2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d3b4bf-a56c-4550-9a74-0a8399adf3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7a74a1-ebbe-4c47-8b96-d1bb043116c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbbe954-cedc-41db-a0f4-23ecd3818540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c3827a-0f2d-47e3-843f-734ffb64bd11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874b6494-616c-44e7-9953-bd374c5575ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24dc82bb-9f7c-4a39-8fe5-6cc7779afe03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe71135-5d27-4887-b344-d147ba8ac2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a235a965-a60c-4e3a-846a-795402aed948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88774897-7249-4346-9610-89d8c0e7aa7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9867e9a-504d-42d6-a466-f9549ff5856d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc892807-8f35-4a6d-b3e5-e53d2b50eea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9019bb-deb1-4b47-89df-8fa0e4fa2e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43d3e0c-157e-42e8-9058-5e91e7d604dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2c4404-b724-4fab-a41d-af75ec0e7cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6b4896-4cbd-4a17-bafc-70b3a7bff41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d841ef-7a17-4b8a-8e41-dd3dae6b872f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8f2b1f-d66b-47fd-9654-63293593f139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fbce76-449a-4167-89fd-cfbd0228f545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cc78c8-b6eb-4568-bb29-b33f073a1ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91044dc7-4371-436b-b284-b1ed1fccede3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d66161-7dd6-442c-b5d0-e5d3f559d119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c46b97-b90d-4929-9a8f-e11f7a5ba111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b48b53-348c-4910-a478-e38b3986ce93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0c19c5-f94f-4e25-b122-d0ceec88ef34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83096432-a59d-4372-9008-c3cf59782936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc01e9b-b255-45c3-ab1f-9c7dcb71471c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f393bdc-3102-40cb-9aec-7cec9ca054fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7587488b-f9cd-42e3-a8fc-e2440a8ca994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76c095d-241e-4dc9-b669-62eb4a4e197e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1eac05-54b1-4623-be03-533582f592e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca582617-aabf-4162-9acd-f811e9f1a4fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f1e509-3a24-4b78-8b7d-cd76aa5d6b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d963139-78cf-4a21-b0a7-3be953339561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653d7088-ad03-4456-b06d-c1ee42b98928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcebf8ee-be5a-4fa4-a6a2-ff73591df4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77116c93-004a-4e67-99ed-67b5e20dae0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d2040a-7033-403c-a229-b94241332891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2ed9a5-6359-4492-97e4-5aae93720384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7ba3f5-771e-48e6-b032-a90f53a1b985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5952c5ad-0d8f-48f3-9f8c-af2f36930d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d036ae2f-aed3-4c4b-9df5-5a1778973ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f423c52-1dfa-4cff-a10b-df8a388be76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f58d16-b32a-4908-aa7d-eda5cfbe7ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e75486-d00f-40a2-a9c1-0b36841ed642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7a524f-6292-46d4-89a0-471d4364d642", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.204.30.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dae40ac-7a24-4e00-af47-9fa9dc1fa7ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.149.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88661a13-3702-42ea-b750-2d11fe86b033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.198.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8c5f71-fa5e-4773-aac8-e5acca9395c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.211.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76822a0e-c442-4425-abab-0457044b0e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.39.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7f9ef1-94ae-42ac-946f-5d7fafdf1a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.5.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84df626f-b813-44c3-8016-07a589d586ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.84.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32066375-9e7e-4102-941c-e11cd04c67a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.204.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51a477a-72aa-4275-a6c3-a7b4397c204e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.140.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7b02f4-d6dd-43a0-86fb-347c0d71563e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.144.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ed6af2-a415-4cfc-a091-6329519dfc94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.220.132.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4604c30-8b68-4cfd-9c7c-ff51bbf8dda1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.220.152.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ddddca-393c-465a-9aa4-bf40fc50527b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.221.11.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c17bc1c-95c2-415b-94ad-0f84a0c12edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.221.183.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c6cb7f-2a6c-4bf5-a2ef-ff4180953eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.124.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bdce4c9-808a-41f6-8068-feef623f21ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.174.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98aa9712-8992-429e-8e1c-8fa957659370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.206.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b58086-a6ae-44c3-8194-baa7ca4f42e1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.5.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7b8e72-22df-4323-9c39-d63d054c461b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.146.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192932ab-93ea-430d-ad50-6115b85fd052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.166.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8ef690-02be-4cf1-b923-51bec914367a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.172.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fe3454-655f-42c5-a50a-afd04665853b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.253.86.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870c1292-6295-4039-a63c-c7e839d83586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94695be-a779-454b-beb5-f78417f19f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be0d8cc-7f16-4ae7-a0cc-bb89b4a29806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49bcf41b-979d-44c3-a7f8-a0e64d197332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f6ccc2-79e5-402e-8a23-67cedd83b9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.108.171.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e7db72-f4a7-480d-abd7-d3da770524c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.108.214.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6321b4af-41f9-4d42-9ee2-69cb2ad086c3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.134.203.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7966ae01-fae1-4eaf-9390-b1ab625d2938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.151.144.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6701aff-9b02-4313-93de-0cdf9c4c84e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.156.154.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a9376e-ae63-4867-a867-b7a987221994", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.24.66.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfc8c5b-8c11-41ac-ba35-27e3364bfa40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.223.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff71f80-ec69-45a4-acc9-2ebb0c14289b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898e4a74-50d0-4055-9311-7dedb8a7ee7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.62.34.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629c8a76-0861-4c9d-adcc-2bad0779c065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.70.196.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2cb2e2c-779a-4b6e-984b-252941554f37", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.88.16.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fa0173-bcc6-4c6e-a012-10fa9c61398e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.91.147.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e29382-05f1-46b4-b1dc-7366985c7e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.95.111.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782871f4-656f-46e7-957c-7a828462fbfe", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.11.232.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27f8e43-2cf0-44de-8cd2-f1e24c439d91", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.120.213.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7b2c5a-d2db-4fed-8ae1-872bb2be1f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.13.247.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08985c57-b492-4414-b6d4-34ce7ae53bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.143.61.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef07141-0157-4e46-8d18-cf3dde4367e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.212.90.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357df79a-8d49-4800-98af-a5b2fd0ae0d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.228.64.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c4605b-e05a-4b36-9f2f-389200a80106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.233.85.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4b3cd7-b36c-4fe9-91bb-c9f5476f777a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.34.229.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b72e32-01b1-4ea9-a4c9-f6ce8ecee3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.37.182.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948cb3ed-152d-4186-9deb-642475e6bdac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.48.253.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790f93e1-37b5-4e2b-9a58-98d527619563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.60.242.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0afea125-235f-432d-b7d1-b7442b345251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.60.254.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4764ea56-1548-4a2d-ba87-97af153b3969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.79.255.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43aac4ee-fc69-4ca4-bef8-8d952458fd9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.100.222.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--162780b2-4d2d-42e9-8004-cb7572be87b2", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.130.108.0']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feeefc04-2c60-423a-9f3f-28417c7027aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.132.109.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff0a139-4eb9-4373-a28f-76f6fe8ffe8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.156.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a709366a-9481-47e2-841a-22a9099cfbde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.22.167.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8918fa41-336f-4bfd-9ea1-0e3d7f5ec7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.253.163.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af7a5f9-5988-4814-a140-b34a9849d7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.93.206.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f512469-c23d-4037-9749-13de531e9e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.96.178.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e3f981-e2a3-43c5-b110-d3aca3b77c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.100.84.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5b9e70-34f4-4ad5-90a2-63973487416b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.104.63.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b67e46-281c-4957-b518-de869a40852a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.107.55.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55ffe3f-c1c1-43f5-9549-d7d0abc661cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.144.129.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16bdfb0c-146d-4542-a5bf-798803f30e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.8.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a251877-8b43-4b67-93b8-a15afac301fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.97.255.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e226305b-304d-41b7-a80a-804094ca7937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.97.54.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30c3879-2553-4998-b61c-c6ee343cee42", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.98.177.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff575483-f9a0-4caf-825b-5bf3ed507a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.190.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95525f51-3a9e-4662-a140-ddc91ccecfa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.191.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40b0ed4-8c0a-4e9d-b3b3-20e38428a339", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.157.250.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ccb678-0107-40cf-bbd6-b0a7921fd9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.198.24.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fa10e2-f323-41e9-903b-87b2404e95e4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.206.92.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaac8b93-e153-4997-b204-bcdffe09c505", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.211.84.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5678d531-117b-4cf3-91ba-b6bff1235b56", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.213.139.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b881617-aad1-457e-becf-bf6097beed2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9eb2af0-d05e-4675-a17e-6a4700ef6c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3173e19e-587a-42e7-b586-0ccd0c48ccbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.236.161.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b20bf1c-30ff-48bc-8dae-1facb7f3fe79", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.240.106.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb846d9-233c-4bd3-afe6-e206ca8baf2c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.246.117.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1e9046-2b5c-4167-b02b-bb855de19605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.117.44.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a51579e-b380-4048-818b-a50d21b1ecec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.24.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b282ac-1acc-46e2-8ed9-704f6d22afe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.26.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98ff594-32b3-49f4-982c-efc5419d368a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.41.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f540d9af-a594-49a8-96ea-d3c7bbf177d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648c3f7b-b82d-4411-9677-64a74abf6d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.122.152.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a9da3e-f480-4203-b202-c2dae05f0cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64ff364-d829-4340-b771-17862c0eb537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.116.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806594ad-d2af-4df0-9dcf-fb770e320fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.120.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35275474-77bd-4722-939d-61dbf1c1ff16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.170.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b14e67a-658d-4c47-8d06-6301675c22be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa79f7e3-afb1-4fee-b240-32e0512f2577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a6c957-5590-431c-a39a-fcf7c2d2f26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa9814c-a74e-4b0e-bb1b-4baef9b89b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e7ff63-e698-4862-badd-5b6ebdbee65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fadf51e1-1787-41c9-a940-efef17586641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55fa6a4-494f-4ad3-9c05-bd59f0bd611e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24887b0-3c68-4058-b08a-2cfc8bf51553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb5e2a4-2bfc-49f5-9318-b0bf7f624e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6745dad-20f2-4371-be79-c1c3332289e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715320e4-af7b-40c0-80ad-49e17b360b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfe6bda-3cce-4ded-8812-aa20a47a9724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab391457-96a9-4c95-af85-4faa981837f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d7f428-13da-4b06-9b24-ca00229383a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507cd162-4084-455e-893a-e17b54fe25c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03aecc4-a61e-4fb8-8049-0ad2a26efca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb44752a-d929-46ac-a75f-9b15943402e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7bcd115-d3d7-4bb1-b05f-802f03308709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd123ba-fa3f-4155-ba0e-5c6277818e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56505e2-e309-4bee-97ff-10f16f401d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b2a82d-402f-464e-bc9a-072dc32b9fde", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11c8b9f-df2c-476c-836f-033add7e1316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af3c6f6-3152-4cc1-bcac-364d7ee4164c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbeb0982-ee51-4c5b-b0e0-25b123e9e994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3765b724-e564-4f66-b3a6-c4c928944f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b6066c-e323-41fa-a905-431b0bc1b490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8965b8-ca97-4ef3-909a-e8433ef7a2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8c4b0d-1c19-4d35-968c-8e15eeedb2db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb581fe-18b9-48e3-b63a-9e711814242b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.176.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc5040b-9482-4d06-ba34-829ca435da04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.178.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f0c566-e2f7-4735-9447-ea327f9a5277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.183.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75d4bd1-1d1e-48c5-a7d7-addb39d11459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.184.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce736002-b242-474b-82c4-fb1f336ba312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.184.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53de5300-da16-452f-b327-24408b92a14e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60cbb555-c857-45b1-a9a0-5c57989db18d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5d0bdf-ccd1-474b-9f79-99dcbab4feb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0b7651-9aaa-4e71-84a0-d924e2a35178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a74bbe3-0140-4e12-b7ce-6add04642bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33b2111-06dd-4342-954e-98e47911f0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.81.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15dfbd3-0372-4d43-aa2f-3a45c8b32795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.233.3.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79395947-c8f0-4c13-b2a5-a20a5e4fb27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1c3521-f92e-4d2b-8984-c99a9f23fb30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.177.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3619cb2-6160-4eb0-b7e6-5ceaeb5ab869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.208.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662faddc-ce12-4667-97af-ef4181b44d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd869e3a-8bf8-4e18-9587-b9aecab11352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.117.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61af695-3033-40af-9f26-f1c643b95975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa88002-8ea3-4f11-9d15-7a2d6e6a8d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e032c0de-f315-4ced-9527-f1986844bc54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4591ec-d48a-472e-b084-70d46145627e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.140.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9550a007-50e7-4036-98a5-c15eb6645d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5afb5f6-5f9f-4681-ad5e-af3057864b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.99.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35290a71-9e11-4274-a275-0e7f587ddd05", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b21f5a-692c-4182-84da-7cd1a61ece8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eea9bd2-7f2a-4b71-a598-49b52222afff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b6a75d-5516-41ac-bf4f-6401b6293789", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d06b3c7-e3a7-4dd8-98cb-694259f79b49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f13a7e-6dd9-4cd4-af92-831b7619c655", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13395166-20e6-41c8-8dcb-c69302d0a8c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207ba9ff-0116-41b3-843b-51e7039b5465", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0e35e1-7d88-4d74-b3b8-4fa563a87de6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910f5778-f8a4-4127-8261-0e207f49b123", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fd4338-c8c6-492c-a66f-3fe8c62b9bf1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5397b006-53b0-4026-a287-407ade3ab394", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7a3445-0d67-4127-b8a6-ce542e12a617", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad927398-3d0e-4d1a-9b1c-104be50a92f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76944c46-6fc9-4cb7-860d-844fd1f07879", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6baf59c4-826c-4b34-86f2-93fc11319e21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb81c7d-b300-46f5-8957-c0633cd62836", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c2499a-99dd-496b-bd4c-8f06f902cf09", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac49c22-5fa8-4e36-8940-c20b5c411ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.200.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669f8958-a24a-4926-8cf3-340a2d727929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.201.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c61731-036e-41d6-a3ad-4b6dfc358a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.204.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763902b6-28de-4343-b557-715199cfa626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.204.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaecd551-38b3-4f6c-bda3-904081ef0b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.81.224.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab51fc0-eaa2-4fb5-82fb-c01b5737b254", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.81.224.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043a42d0-f98a-40b6-9571-8bb3157fce90", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.81.224.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53059ca-c1e6-4bb6-8ae2-ac896d067ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.81.224.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31254fb5-c121-4127-8cc2-b8a6b6e45403", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.81.224.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9235ab-8f03-491c-8091-2fb8c2c438b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.157.36.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc138dcd-3360-4a60-a6b2-78500b37c453", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.188.124.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d5c243-50ec-4154-b7f8-5e08e5911015", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.216.178.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f835d60-0d85-43e0-a366-40d8a02e136f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.216.182.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3176a487-9914-4c2f-8063-8e525cbb88b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.232.144.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425cf3a0-5f3a-4f8a-b0c6-0cae59fdce81", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.242.115.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673d827f-5a85-4bea-a512-2c4013c9c4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.38.96.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5710c265-3dc0-4f98-8791-44312b24633f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.63.63.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7b4755-5889-4d5c-af0c-e9b17db72a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.64.172.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d7b3d7-9819-4cdf-a8c4-e2b92a8b2008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.65.68.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be394f11-33d2-45d2-88db-a8ca960d90a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.75.114.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7cc9e43-f77c-4669-9758-c7ba77ff1ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.84.193.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71a5ef0-e03d-4f2f-a79d-b41355ecc4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.90.100.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874d723e-88c5-4daa-a64f-44ebde5db4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.1.65.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340f67da-adf8-4b1b-91f0-3838a28620ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.114.171.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee98bc9f-bb53-4d41-a0d0-0c079fef799d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.118.18.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87e286f-ecd3-4b03-ad35-2792373f2b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.121.161.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12fb08b-5055-46f0-b37c-3fed6d6feaac", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.243.142.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd98565-50fe-4187-9b10-81e6f0035ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.55.96.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a5d99f-07f3-4c1f-800f-452402d4ec83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.96.40.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42d2785-f3ab-40a4-842a-d410330e89bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.108.48.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765f00fe-4c7e-4d88-b5d1-ec0768954b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.110.37.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a65cae-2430-47d3-bb6b-5681fe59404d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.60.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebb6a40-9fab-4b51-bf0b-c4227d646770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.26.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81151cf9-79fa-4dbd-9678-d95c29c678fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.148.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab779da-252c-4bcf-9c37-5b97d2ba23e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.54.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45764e18-7124-4f62-b6a4-0f104df15505", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.61.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631fa6fa-b0c0-4174-b7ee-e4271b46133a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c7e30e-f49c-474e-892d-ae1bc56d35d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.129.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3457f5-19dd-4fd5-94d2-c8c6c7be3a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.188.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bac1857-50e9-4e5a-8178-c6eaadcf0905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.41.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aacb28c8-960f-4e52-972f-3577acaea8fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.51.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d01e5b-28cf-4e6a-8197-8d02c9b8c4f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.182.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b295757-93b1-4988-b41d-0df25854c8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.49.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad7e929-2ceb-420d-9817-55f8d7d99c96", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.136.119.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfdf941d-360e-4cc8-bc7c-0721b96249d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.136.32.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed9f5d8-c7fe-48a5-a968-996963b59f91", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.136.86.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c76b94-d5a3-4b17-b66c-0b05a3cdb44a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.136.88.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c746c844-2579-4f28-b537-6c9374a91a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.139.0.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b99cbb-08f4-466f-a981-4d3e96bf8a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.40.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d594563d-8605-4ee1-8626-e7c7e97e026a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.148.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee931b4-bbc7-4fd5-87fa-eb4b5930df72", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.201.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ecc6bb5-d882-4693-8017-5f1eeeb28e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.212.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad5578e-6718-4bcb-8a2f-24bd4f0dbb3e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.229.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66b695d-04a4-4788-a9c9-8498b4f403e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.24.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7aab70b-164f-4bd4-95b3-977da623fc83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.29.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08024714-b253-4f32-a196-8035948f6eaf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.71.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c46221a-d29e-44cc-ba5d-55383fbf3eb9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.147.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9e65d9-3ce9-48d1-a325-bc9e4b8e53a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.188.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ac6e22-ebb4-4c5c-a43e-a1ae4ba32623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.38.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7387103-3f97-4aa7-a6b4-4d3f6db48d30", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.144.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d12e2a9-292b-40a8-95f9-55063cbf4556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.148.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460fdd3d-0bde-4090-ab9d-fe346644cfdb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.51.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8f222a-8848-45d5-9db2-4e13f991bc6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.207.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959476f6-d53a-4c1e-b439-8b22a8be9070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.219.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d462d89d-c1f2-4722-8afd-7d24224c0951", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.114.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632fd963-23d4-467f-b335-1d6854d2f40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.107.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361d737e-6794-4ec6-82dc-df27f8272f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.113.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309f6cee-66d0-4abf-8522-c477d8476f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3573f03-5fee-4b60-81f1-45c64470b897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.4.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a7dea9-052a-4cf5-a2e4-302950a6761d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.92.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2639eb64-a1fd-4d73-a270-a9d34af687ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.190.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef463a0-37f5-42c5-939f-559cab275047", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.194.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebd34f0-96f9-4a63-9484-577d51249c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.167.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068b18bb-9fb5-4542-9447-b5c92d9a5537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.244.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d51341-f163-416c-960e-515025b99688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.236.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b1e87e-9f43-4920-be65-1ee18c0187b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.245.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab7a7b4-0a94-4ba2-82bf-d70e04ac5200", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7fc443-d741-4962-a2b8-e4989e12ba18", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082a86ae-530f-48f3-8072-4f8f8ccfd002", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160d9b3b-394c-4fdd-a4ba-c79d1d154782", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9182fd82-874f-4325-ae1b-ae79c7227209", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079ce841-71b1-468f-b4e7-986fe5b9e532", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a02110-f7ac-4846-b44f-4c3bc8c4b709", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d208652-e361-4be3-8c24-76fb35eb00c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75226512-7a2a-4ea0-8613-b24c8e582d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.34.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae13f0b-4ed5-4d13-b071-34dd54ebc114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.36.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867b27a1-373c-4e44-9332-0b456652324d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.44.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf2fbdc-e0b1-4189-b611-7c7c59d9de06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fadc4ff-c048-4b36-9aa5-13b889f9afa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3d7a3f-8f5c-4f75-ae91-590a80028d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a19177-34c7-460f-8a07-19b8b049b142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2c077a-14a4-49af-886c-5de5b5e317b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada50d8a-c34a-42a5-969b-4fae5a24a10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8299724c-13e5-440a-a78a-7a1fd7c75d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f0bcde-dda4-4758-b4f2-814d19a7e1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9592de82-404b-4cea-9543-2ed3cd847dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247a3693-501f-4e09-834b-24a856ad8345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e661198-e7a6-4135-97bb-3ee7c4078342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e400e7f-e4be-4f5a-af9f-c6e42848eca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56313d0-e12f-4f54-ab3c-a9852756af71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e078043f-6e9c-4d15-93e9-f3a4710499e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf747cd1-247a-4dd9-9e64-7c45590a7ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d83db08-852f-4590-a5f3-5a3b5819b951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fdb0de-9df0-4ac2-881d-08a2543a3683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3658b7a4-7f93-46f9-a470-c0959e6ab4c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b75a80c-972c-4ad0-b004-0dd9dba822f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9d6861-4aba-4fd9-a782-1cf20b2f872a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.193.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94332b83-190b-42d3-ad51-854cb6c288da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.245.249.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1a4749-6227-4a02-a480-5f746cab7857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.246.210.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52cce83-e033-401c-b2ff-dd738cecf5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abc5510-68ac-499e-82ed-9e3e4b2dd3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.160.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309dc227-7311-4ee2-b5bd-51e0703b1338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.161.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef82019-04b9-4ac0-9d31-aaf0f6be5b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.164.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca405661-43be-4fe5-aa4c-073222577c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.165.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ed504a-19c6-4891-ba17-6cbaeced1825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.165.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef54b92b-9452-4d37-aa36-fb9185c641e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.171.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ff07c1-75a3-4850-8281-2be5fe015861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.172.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68348cfc-e01a-4741-be1a-f1c5d6a993c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.176.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7d28a8-f777-4f64-8cc4-e3a490105d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.178.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4625ec6-22d9-4631-a897-264e1a853a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.180.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843111c6-9970-4bc5-bd08-59ae42a7ddb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.181.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d3df26-db03-4c57-9e69-b4fe9e3f2132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.181.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47229ced-a918-4c77-b431-7f5372dcf01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.186.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0ec4c6-8d36-42e7-94fe-3550f45a6cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.188.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e9c923-1bcf-4d86-98e4-a2614b19e9a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.189.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3840db80-5447-476f-8d4c-6dab0547c6ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.192.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dac29ac-be13-4f7d-8ceb-fe7bcc0402b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.193.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342b3499-853a-43f7-8bc5-a66314512ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.194.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7909b5-6cf9-43bb-8411-c10fc276b7d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.194.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf2fa70-1b11-430a-a019-507283efa1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.197.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc29321-b30d-4072-afeb-0e4897d3f17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.198.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2951c43-1709-4d44-b8d9-867929f182b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.200.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5967e3-6d84-45d5-8118-1fb697630579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.201.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ee2c86-904c-4cac-a79d-a61d0733061e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.202.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c9ec16-9ab3-4334-8108-fac05115890d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.204.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6234a493-6683-438b-9f83-41ee4540aa7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.206.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d62ebd3-bd00-4a23-97f5-3f2e32b0bf93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.188.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46ebab8-fcad-47c9-b2ae-402de52b5aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.188.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5cdc28-eddd-41fd-a3ef-043a00e8dc93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.188.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde19308-f435-4331-b884-0743dc9cd4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.10.175.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5417ff4-fbc2-4d68-8705-e7872e6ee9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.57.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af31b64d-a0f8-4b60-bc02-c7d5d9d8f270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.149.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8249edfa-301a-4a27-aaf1-216b63dcf6f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.118.146.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f9848d-62a7-4a2e-875c-a03c451629dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.216.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77a82d8-c9a8-44e1-a6fc-76de91482cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.129.98.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb1769b-c8e1-4e6e-b39d-65ab6733848d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.13.151.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0697686a-502c-4c91-80b4-c747fa88d83a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.130.127.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f70d941-e270-4871-ab6f-3ac4b038a035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.46.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425867c9-931a-4f82-a28f-666dcfd11c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.140.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46dccec1-9bae-4537-acd2-9776c1b6d602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.161.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee00dad-1bab-4171-b5a6-e2f9878594fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229be937-a61e-4564-a48b-6f9bd6f5dbe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33f51e4-84e0-464d-b421-e1cc6933a3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459209e3-645c-47a4-aea3-59645167c389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.138.16.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcae2bae-8064-4c9e-9f98-4e0cfe796219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.107.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d687a2b-ee2e-4105-a0f5-e9f6429c4308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8f13c1-0963-4db6-a743-3a5a758446a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0968454c-2978-4792-9234-ca91d7c040f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206f2afc-5365-4c4c-9634-c5b4e433ea1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7cfcb2-498d-4a1a-beb0-c4ad4be8cbe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f302b37-c563-473f-8e7a-671d9ab43917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c32819c-fd5e-48e4-a06b-127e9e9219c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9df406e-1097-478e-9626-f864334f2843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2bb01e5-4618-4d86-87c8-5ace3448f658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2d8032-be2b-4cb9-b7d3-1fa68572a3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b6b28e-8f81-44d7-b40a-dfd96e24d8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73822a34-038d-4e49-8e5f-162fe69ba482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df4a420-7b7f-481f-a64a-d02a49833928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c5ac95-4329-4244-baf6-a0ffecb8e6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453ca4be-5510-4f1f-808c-50f134e3811f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541aec23-ed2d-4de1-a285-f36f6487bcf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99b28e4-9bb8-49f2-a045-162da1dda914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28a43f3-1913-4079-9b07-d1544ddfe4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb888eb1-6f6e-45ba-8aa5-7c6dbe14ae82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15815bc-f9af-4c19-928f-4680f26017ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.144.212.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84009630-25e5-44f5-a93f-04ddb7ad1000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.146.54.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f154157-8bf6-4b59-b214-81790363e8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26a9b50-71fe-437a-97f8-b926cb35156f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2de172-bc9e-4b8f-b662-40030af6805a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19e3aec-38fb-48c5-b451-a1c2b7f48537", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099bd722-2877-4a47-a36c-fed76310c1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7e52a5-1b34-4f27-8e96-0a76d6a3eed1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f02661-cd1d-43a2-b09a-d01e8dd0ec39", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663216bd-b3c6-4fe0-8970-1f113552641c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2949c0ee-63a7-4d71-9d1e-bf9f2cbda8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14339976-9802-4cdd-9be7-efde4b015bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f62cf68-d70d-4a00-a9d0-469a8c49faad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34597c48-b286-42ce-b010-f2dad6ab2c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086416cf-30d8-428a-a5db-dfdd9a95b801", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa25b88-c525-44ee-bb10-e71021783b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.146.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f93fdf0-5c06-4eae-ba61-3839e6702e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d045bf-5e54-4b2f-8c86-06944fbf64cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551a6166-c221-4211-8148-5a6da1f2fd69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f808255-f407-44e7-8beb-de2c371f8495", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7f4b84-f27f-4b3f-bfe4-9e546848d6c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22526fa9-0279-43c0-8fd5-935e75bc3a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63dda1fa-18c6-430b-8b62-a44617e9c6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee32a87-b439-4cc5-b2fd-55ab68312372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5edb6e6b-8263-420e-9477-74a213ab3021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6086a3fe-8739-4f3f-ad62-19645228a13f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8787b436-8727-4a18-8166-4a0991dc9014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f771529-0fb9-4448-afba-ba4cdf43dfff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78655df-512a-4f7a-870d-120e098846c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25b0004-fbf1-4cb7-965e-ffc00ac4eb25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54cb25d-ef83-47ce-9188-279f76bf3386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293ec79b-ade8-4d0e-9c17-1af057e3e047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7e03f5-2600-4338-aee1-c3d2ddf41d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5581c1ee-eab4-4d17-b252-15405cdefe90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed057a77-9901-48fd-82c1-ba23084727f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15fb458c-cc06-4b5d-91ee-c4690d1dce36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494d6f54-bb5b-4d48-8097-f5aa07f9d19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec20f8e-0f1c-4092-bb10-8099d59e4853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84134d6f-7ad2-400f-8781-9d1ebc67ae4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe44cbc-dc43-4c5d-a391-2046375d16d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e9e2ee-d010-49f4-b6ff-c1f6bc478081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2419b29a-6476-42d8-88bf-cd7868d000f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b9a3b9-3a6c-4a50-85ae-ef81de1c2f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e49e43b5-2b20-42f7-91b6-c2221768066f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ce49fc-b7aa-43a3-8bed-d12ec58bace5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c3abaa-a637-4319-9bf7-bc625398597d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d6e806-2cb0-4ba8-b92c-48ca9bb1b9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd343e0b-1513-4696-8a3e-ffa82677b95e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9630cbea-0b4e-4179-9706-e69f61dee7dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3bb2d3-e8a1-4ed6-82f1-dbaf98b28457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b365c74-b035-4c5f-a70d-584d85d8e664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeea253d-1e29-464f-8cd5-89797d7c7193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f677fdc4-2459-49f4-9106-2a7702dfa6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f241e984-fcf3-42b9-904d-58f402df0c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7b3e7a-8b12-4520-8657-db2de0069f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e505e999-5520-43ca-ae6e-46290cb154b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6f4dbd-e73b-488c-8c3d-bd6c58a3c560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69b8e95-68d1-46ca-ab45-faa76839c19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa33849-900b-4f6b-96a6-c504d8cf8097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e7c8ea-b1d3-42a2-b942-a1b3b622ba70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1e2a98-3a24-49db-bf71-550003ae7521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff9fdf2-be82-47e8-9ff1-0a8e8005e17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1884da03-f3e1-41e4-a244-297f375936b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb471c8-85cd-4336-978d-986221d5843f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906fcac4-a01c-4ba2-bcd8-0063c6595b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0faa21-4c18-415d-9c7b-3fe0e92edcf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187f4229-a89c-42b7-b61c-692ae194d9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03ddc1c-c9c1-4297-bfc8-2a4625ddfe3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a813f834-796c-483b-844b-e73732cd5efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878707d1-f296-4249-8e81-f0d8f71b50b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67379183-3843-4da5-bb2a-ebe2c7c1d079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafe8eec-6c66-4645-ae52-370a59107d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1549710b-82c5-48ce-851b-ea345371b62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fea47ad-e343-4f9b-b6c2-ece6cb3e2f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0779ede0-adc5-4aac-ac11-24a9904cda5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f7268e-5697-4126-8510-06d7efed2d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132b2576-f2f0-4952-8b40-a92309ae5e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3380c3-d6a6-454a-9be9-5a0672b77ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71a224b-f216-45d7-b25f-dcd2f454b686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e18f825-ec79-48d6-b857-fa3bdfb2db56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47636d91-4958-4d0e-8f6b-72cda94f4c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40432383-1a0f-47b1-913a-d030132744c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a80acf4-74ad-44f7-93d5-6d1c12bf3155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4a9f40-162d-4846-b7c6-ba964cb0ba9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70fb328a-ce24-4811-8cd1-0e286bca6814", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.159.223.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d718e43b-03a7-4159-906d-e9346848c04c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.162.7.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03f85c1-f9fd-4071-b4a6-bdcdaa2577bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.171.132.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4299fd-9b67-42f4-ac71-640ff07e9d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.171.28.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e08809-3ed5-45cc-bcf0-1076ad334203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.174.75.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f57f6e-0a9d-44e8-827e-23c8eaeacb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.175.123.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478ff11b-71c1-491e-a8ed-d7cf8c480be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.18.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1132ba83-3f77-41b5-971f-9c1c3f7ce286", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.187.108.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef5f6a9-46f5-4042-a4df-bff246b2e1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.184.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c08650-9933-4a59-982b-469fbab2d943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5747c1-3273-454f-89a7-2ecb4186cc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e2594c-94a5-4a76-b2f6-e447f38c9ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1cae03c-e2fa-4976-8570-897b14111c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796f1612-3a77-4125-81b8-0ce759b38351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a84e2d-6f31-476f-b55f-8f576510a433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff780cc-21c2-4895-8aef-227becf96e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1cb2e11-6bf5-4e76-a3bd-9bacc71b866e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85281a8e-8fec-47e3-893d-567dc06aebf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.195.161.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac64b7a-471e-4c3b-ac7c-e6f8e9212d7f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.195.250.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e4f154-df27-493d-b0f7-bce5e84b7718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a1760c-e9ab-48cc-8a77-0aafd9ae4677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c4891f-5cd2-497a-abbc-1c957430ea5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e21871-197f-48e0-9f9b-961f71ed2326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a05310-b6bd-4fc6-89b5-254c62ee8e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b976036d-5b34-4751-9e92-f7545df432e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511b070f-7d61-4d49-8705-3dafb1be0dad", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e185056-85f0-4c2d-9949-ef8958ccf061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbb16d9-dc89-4b84-8507-01c36f2d93ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f804cbd-d513-4cd3-a6e6-fa955c880752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5561dde3-bf9b-4270-adc9-7450674a70a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4df5dc4-9036-4092-9a57-dbb5bb6b89fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0accd374-3ba6-4f70-a7c5-7d42635bf3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba0b798-8d45-4946-a917-e61cf138c4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0fe462-e92e-49ba-b491-50e1130035ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf1eedd-1de1-4bf3-b2a8-386f96ef42bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490b9b2a-4951-4c0d-b9ae-031a14172479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b422c7be-181e-4a5c-bcc3-88958ea72dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118027a3-b7db-4ecc-8917-2d301a49b9f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69da562-e8d0-458f-bdc7-8097fd0b4cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c75716f-3f1f-4130-b63f-6eb05be458a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22df5f45-4fda-4e7d-8a23-de962fb1a3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.66.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133f77ec-baec-4649-94f9-eff5ddfe2b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.238.132.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2ab3e1-890e-4615-a1be-88f51ab24363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf76e079-fed3-4f68-9fb4-d482d70b73ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea908323-5f68-40f5-8611-767536da4bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db15df18-1b58-4a62-a43b-f1f8936bacb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.252.188.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e890ca8a-774b-4c62-aa24-30f013f60d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd2d610d-cb65-4891-8214-64936ef16e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534016cc-5aa8-47f9-8803-a3fd9e91205c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20797ff7-48b5-447a-a772-90414f4603f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91228a1-fb4a-4cc9-b98b-9082ea70daab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9f072c-76dd-46bb-a020-976d4da17762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9fed28-d346-40e9-af3b-39e58a997a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf492bb-cf4b-4293-94b8-b8693eca6272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422b65cb-8893-4b0f-a4a7-a675ad1dd63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544edf11-11c0-4038-a027-533f326d98db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcfd687-e5d7-490c-857d-da275c7c12d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ed4ce4-1d4b-4a05-9b87-837303749c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.16.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a9b5a8-9ad4-496b-9537-588437ed56ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94c6bb8-4801-481d-ab66-22c3394f558e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aec23fc-538c-4514-89c4-94bd06db4e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0abeeec-f8f5-4919-9599-24599acf6fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.46.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c27314a-51a0-4769-8780-60acd7bbd4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64094669-d150-4da2-a4f0-f25e57a12001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.65.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87000b9-5726-4c2f-99ef-cc0dd098cf3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.65.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de772def-dfae-499e-abe3-0ffe1a8fa517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.68.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421f891e-528f-4801-b0c0-1424cd9b8898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.70.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a19ef7-e25b-42d6-8fee-59fb395b9165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.73.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283c4c89-12f5-441c-9d78-57ab708ee152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.74.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538a8c2e-8250-47b2-a532-96cad876b1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e6c3a4-f0a7-44da-82fa-abc3de02ee9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a86a4c1-ac03-49e8-bb2b-94289f93316b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1910a1-e4a3-4d57-ba5f-b85ab97694a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38bea65-ddd8-4713-beb9-066670e281b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e2dd70-a4f2-4b71-8361-21c459eceaf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a843de1-b0d1-45ae-9b76-77a0e2c97729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.80.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a0caa2-5134-493e-bf71-becdc71fb1d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ac0ff0-b89e-4677-806e-1a204edf7cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb797e2d-bc5a-492a-9056-d3e70fe466e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8accd4-679d-42d3-a41d-0b19ccba9939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.85.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409d627c-ea4d-48a8-89e1-400f3e24c563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.87.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec20c91-e461-40a2-8c43-6e9d53652beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.88.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6795236-a360-40de-9ff2-cde67e762f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9125495c-ac48-49c8-880b-9fc31dc07311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041909cd-1bff-4917-acd1-15da37f5ab48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.91.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3dd9c70-941d-42be-92a2-6f9c9a01fd82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2877959c-58f6-4136-b06d-0bf3828e525c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44c44b4-8e92-432b-ab26-a16e03874d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92df6acd-e2af-4e13-af83-dc5baf675ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42914005-6684-4ef7-b062-7c4ae8a28b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.98.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66b5c88-d4f3-4ae0-9f16-8b18a90cb804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60ad903-4290-479f-83c0-e6b7ec87b413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5557c023-a7d1-4c8c-8b20-1ffcd6e70edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.214.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934c6e11-7b84-42d5-84cf-4a1f2b0327f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181ceb1c-9dc0-4508-96fc-2b3d83b963e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.45.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d39a66-8804-460f-a8e7-98c50f5bcd00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9895c87c-c2e0-43f5-b690-fe0865b0eaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d18ca83-17a5-4a3c-9518-2380ee7b69c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a45be6-1a91-4387-90da-de7eae13a577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440f737e-88c0-43fd-93ab-fd8e7f5e3439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f061d8cc-c02a-4e60-a437-7d37228d48d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d148fa-b4b3-435b-9994-7413524d4554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b083a375-87c4-42f3-a495-3e20c1cc32a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3e8d16-6d38-48a6-8ef7-5254f1feb1d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69db73d0-d730-4b9b-9c0b-6cef6f96df3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1588e55-00e1-4692-b31a-693ba817e8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93ec8bc-e94e-4e80-a580-f795da63635e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c459e5a-3c4c-4c18-8e44-651955f5b15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd1364d-a4e2-4bb0-a7a6-ea1d7eab31f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8cb23d3-aeb7-4115-bdf3-034630c6a4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19a3e25-8949-4d3c-8c03-8945f556ac7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.102.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01128f8-0c02-4e2b-b766-26fdb55b45c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.117.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5920e09-f513-4ddd-83af-4f36c5e02bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.185.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da5d464-21a1-4b5b-9f89-d3a79ebd441c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.247.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafc7863-5e61-42f3-a23e-5caa6422a11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b190af1d-d3fa-40d2-9940-2512b1b9cdfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca6bc5b-e027-4840-b8af-75e9af243001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2dabe5b-725f-4d9d-89de-2df11a40ed50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2771180e-ef55-4410-b058-5a4bd7d44523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4721844-0456-4840-acb0-3a8c71e309d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c470844-608a-499e-981f-28c48921f2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.108.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b00bef2-cef3-4629-abb3-9ce7cc56d7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0584a0d0-16fe-47e1-8b8e-1f01bf0949e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3355d0-5b48-4137-84e2-13d3265fe4b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735889d8-f003-4be9-b2a5-8821a3830f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.79.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1931f8-5d9a-41bf-b463-050d345be8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c9eda3-1762-48f3-b296-9b4a3a05d0ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7eb9280-589d-4c75-9411-8358b1f22485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4a7bc9-08e8-42c2-a0b4-ebe1e33d0c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b850459-be14-4fa7-95f8-e095f7f0c5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a8f898-b3f5-49a7-a05e-a1607d471869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.136.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b09a5ac-0fdb-43e1-8593-0b97842039aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.63.4.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30839477-d06a-4b12-bd76-4a05c7b48360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.64.134.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaaf8b2a-adec-4207-9921-eb4ef27c61ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.66.156.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964a0dd8-48bc-40a3-8dba-9ddb345496a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.66.52.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfc66fb-a218-4924-9dc8-d0114f7d2680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.7.19.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f158e5d-7b7e-40e3-9b91-9e380fab8f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.76.175.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b900b6e6-44ec-4f3f-a130-b2f70744b345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.254.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e117f0-661d-4380-9a3a-b46cec36e09b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.78.206.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffca21d3-7895-4986-924d-02eed0fb8e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.78.207.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e516787-e923-4169-b09d-9c829325f57e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0316515b-ef4e-434d-89dc-6983db2b5b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29509b95-6520-4d76-9c47-bcc8a54b5874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a032a8-bb0d-40f2-8a99-da738dd7c6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e506477-1010-4b2d-b991-80cd5f527b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6087a5-f94c-4e17-821d-9af01855e884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8c9c86-bb9a-47e8-8e62-467905716500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e88c896-b9a6-48c0-87bc-67242b16466b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab177e9-7651-4afe-8502-eaa112d19bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.128.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15371d3d-85c0-45b4-8e09-eb8117b17ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757ce897-83a7-4224-b094-4beb235e53ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a95373-a5eb-47f9-b994-b1fdf8cc3ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa08d58-a6de-4030-aadb-53a1639c6ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e3bb07-5745-4002-a46b-90f19558e533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a2ee2e-cb24-4481-9fa6-a3e4f73a5df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.138.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5120149d-59cc-4b82-894b-b78f2f0b6acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.139.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1b5257-678e-4105-ae02-1ed4e9bd8edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.143.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2f46ba-e36c-48a2-a00e-996dad22ae11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.143.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed18278-46a4-4b2f-b4f9-e2b7a921eed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.143.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8cd19e-8a75-40e4-8963-8e053f717824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36383c7-7656-401b-824b-729db2cf3477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd379aab-dac4-458f-b6da-e482ea4f2715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef6d13d-afdd-42c0-86d3-5e451376e799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d6c5fc-94ff-4a57-8a5d-6d6d1fa4ccd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa3c6ea-f53c-490b-b7d5-8f03b7921054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04631a8e-db78-4d71-9dea-84ece2c9c719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.150.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89611d6-35cb-4b4b-88f0-d84ee785f1d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.150.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e250924-2d65-4e84-b3ce-d4a26b468773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.152.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50e0d0c-f01f-412b-9717-6d9e319bd355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.152.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27eb2070-7e44-45d4-a0aa-145e9a7dc8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.152.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a89da67-8546-4fd3-b2da-29a0ff05aa56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f88da9-5fe7-4bba-a18c-dfc015ecc4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406b1272-5ebf-4db9-8b74-adf3ca9e5306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.160.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8bea82-00f2-4a91-b98c-59b2661ad832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.160.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a475fa7d-e6fb-45d2-a397-71e84d98b453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4597f1ac-4943-432d-8f79-3550749dae4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5210d083-1dfb-44cb-b54c-7973183618d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221137a3-8403-41bc-b35b-5b18efb77509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.168.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c821f5-9d65-42ef-b26c-234654bacc8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.170.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7daa54-b887-4938-a8ae-02a5d54e109c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.175.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095ebe59-1126-46a0-82eb-3a1e0fd45564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.175.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76922cd-814c-4c12-aa35-1028dbdd6bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.175.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff341106-f014-4fff-a3ce-3ddd384404c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.175.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c48aa0-2650-45a6-b5b2-682acad2fb1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c560539-2170-48e5-b459-df0b046905e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.180.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8704aa7a-a517-4ce7-b188-8a1f89e84b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d82ad8-8447-429e-8643-41f34a204e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf62662-edcc-43de-a441-4e999edd1264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f717f9d9-633a-4dbc-ad19-293e836f9cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39208edf-0fe5-41d8-879a-41f8573897b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aaeac4c-d8af-4840-ba0b-cb10feb44744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021ce25d-ab89-44ff-9a32-abcfb1e1f08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5581e06e-7e59-4ce5-8d6e-21636bf5d59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.189.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ba510d-78cf-4f0e-8b27-85b12c2b9a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.189.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8252fc3d-8972-45ab-8144-4c3a111766f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d918de-2e89-4169-8ef5-f00d5e2be5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdffd56f-0e81-446a-968c-12ef897a1120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b0ae2f-7aca-4ee6-ba3e-dc3c352b5036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c591634a-d1be-4dd2-9c2d-1ce675f894ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c6648e-2bd4-4c9b-8cfa-102a05067193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194b49c8-ff2c-4a8d-91e0-3251f13ea83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36bddb4-cf76-46a9-ae97-6085983be766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0e72c9-6c98-4ec7-8656-ddd3f303a247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2518e7dc-de9f-4443-b9fd-eb00cb30331f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72766df3-171b-4b04-9027-4cd26d996368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f5be4f-e802-49e3-992f-b53f2a0d24a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd86e82f-bd82-4413-bccf-7442e6ccc7eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.5.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bb1e3c-baa6-4bdd-8f31-886da99b8cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.8.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33c5444-adc0-45b1-89a1-0317134ba7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a0776c-59b2-4bc8-bb69-f7108b00b0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05b5707-5efc-4157-a567-7b58d734085d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66248843-843e-411f-b736-5fb09989f865", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.8.19.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f894c4f1-7cf6-4f86-976a-cb5d44a0c95f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.8.19.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc84c9cc-a957-4e92-9ff3-15ed860d5638", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.8.19.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800230a0-9593-4fca-b536-bcd5c5d7d1f3", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.8.22.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07c9ca7-b52f-4107-9626-cc17ce32469c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2518fe72-fb9e-41f6-b14e-7166df4edfb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df451815-c53d-4986-9cb9-8eea6b02b849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7f5a36-622a-433f-8fd7-df6839d9936b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf421cd-4d1f-487a-b912-28264343a843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c6e124-1605-4660-96af-1363c1756534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad0d7ab-bb79-47b8-baee-457147e4d896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7ee8ff-7926-4dbe-bade-992c5500c3ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc50bcf5-ee8e-442f-99a6-36610c511217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c461edb-1c3f-407c-9e41-43e6fcb1c8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934e04bd-abb8-4f1c-b5fb-8cbcf1c02dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1daa965d-1c0b-4b2b-8017-e8af9ababe70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a07039c-e734-4d97-92f8-753066755668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6a69d8-17d3-4b23-8d88-9f782db91f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf24e0f-5d9c-44ce-964f-cd09e52c2ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39cdd23b-5da6-4b2b-90fc-db4e4311d3af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efb1626-59a3-4d92-b869-b6910f8c09e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35554554-3c91-4a08-83dc-31a61d8fc7bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bebd552-315e-4dc2-8f93-21afeb5fe732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975352aa-cb5d-4fc9-8f7a-e720c18b89f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd30988-dfe7-460d-8208-f44c252a9793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfb6dc3-cfce-4342-83ab-1d0c36b2c4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc045d9-fa8b-4625-8839-db14d2a4b10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bfc349-acf3-49a6-bbd5-dc23b797df89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1a8283-5aa4-492e-b49d-c423a4c018a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662be27c-bce4-481d-8cdb-7e335ef6d9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382c9bc5-312f-4b3c-b17a-d6e93a4eb03e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94717e05-9c3b-4c07-bb7f-656bc4561b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7f7875-f1c9-4a9a-992f-f2cb42fc6a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd29d740-5b08-4f9c-9a0a-8481f69d8a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabd012c-c7e6-4cc5-a7fa-d43891aa365a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8946f797-cca1-4d68-b161-70ce416809f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d54bb4-8942-4f3f-93b5-b543461938cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fd8b41-a0fc-49ec-8531-765c754995cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92289c0-fdf6-4316-bfa8-4c3720204923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78eee8de-bc5b-400c-be0b-81df266a5aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0632872d-f847-4915-b589-7645448a283d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab131e6-b138-4d22-b643-34664d3adb15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08cf948-efdf-49d9-89c5-62ae1e4714ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b032e096-ecb4-449d-b1f4-c621ed2ae3b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52b02bd-aac6-4c48-99b6-14d9edb1dd34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2337ba84-3057-4606-9f2d-6a7658e1fe11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e49d2364-541f-42d3-b443-279fee247696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288ab1b2-913c-468f-b407-0bbf184405ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.153.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59904f3d-620d-49ae-978c-1f1b1f458480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.88.186.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e87bbb-2cb0-4fa7-812a-1cf8b87db0fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e280c4e-cb53-4662-b8be-b487498f9c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3217e0-297f-4c4c-a8ae-f344cba56bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ad64e7-4e11-453c-a8a4-3eb010d87a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.108.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345df9dd-7949-4bc2-9e83-0c3e25d1bdac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.135.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e79a81-94c8-442d-98ee-e0a80f41ec50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.157.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e110cb39-013f-4f50-b8f5-dfba57f62440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.173.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc3c29f-3df8-4d14-a70c-605bcdf1f5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.222.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91528b9c-612b-4c06-b5fb-043819b86cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.234.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b14f7a2-ebbd-47f1-8285-9476627bc470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.239.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d589e40-a53f-4b2f-9a98-f970dd59274d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.253.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50d6566-a888-41fa-9db8-72a4a778ef65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.81.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ebadca-8e74-450a-ad8e-9f3bea197043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.98.0']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59b87b6-b954-4457-b004-5856e1724a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a05cff-4cdc-4a4d-bbe8-ee37f593ff7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f42b87-6247-421a-ae7b-0862c25ebf67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a461d488-56f7-4df3-bda1-7b5d8b03ff6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.67.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4dcc3ee-0969-4180-9d19-95aadf3c405d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5acd671-b81d-4ef1-9e56-9ea29691c6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.152.232.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ff7e5b-15f1-4ee2-9e62-9331fb209d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.161.50.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e75833f-45b6-4cc2-aa24-9560e83eab05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9123eff8-cddf-4870-bebb-3ce199969e67", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.224.17.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2552f262-749f-4484-bbde-bafa7f19dbf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.4.161.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74dc2c52-2860-43f7-996d-677e358db220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.55.211.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321bd4b3-2d9d-4c5c-9ddc-199a09162afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.62.221.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7292e6cc-7823-4f6b-8ec1-d27ad9a908a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.194.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81e0236-ead3-4adc-a46a-d66c9189c6be", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.36.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8681984c-4fc2-4d07-803b-d4249e0652ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.48.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8513f407-031c-46a5-94bb-bc735cc44cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.105.123.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a995bc7-4f18-4664-8357-f8484cc7dc4b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.108.129.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b075095-85b7-41fa-8619-f5103870af5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.110.149.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f1489c-6790-467f-843d-45791f16aed3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f8ab8d-4103-44ca-bb25-1786c74fb19c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46567b9-f84e-4469-88a0-11e9eb25eb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.165.0']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfefa227-085d-49ae-a558-f4e5e9376660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.169.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2038f51f-7f20-4803-b199-31fd901e1867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.189.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de136d53-b292-4840-ae38-424fb098e70e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.199.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe31c20-e7cc-4126-820d-87364dd1e48b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.204.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f6128f-ba15-45a6-ae34-d25b90a02082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.206.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb459ee2-94c2-4020-864b-a98b1d82c83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.37.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c29c79-d00d-43dd-b441-07902c5811b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.55.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66aaf9d-3f9a-445b-b752-def0d8a5b336", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.70.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06022bf-9729-4cac-882d-8167628d1cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.1.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab93fe23-9068-40e2-b8f3-e1e0f3d81ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.101.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d1dd9d-406e-4a6e-bb28-515b9a732665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.118.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab16f4a0-442c-4524-ba6b-901d3c5a6333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.17.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aac07f7-257b-441c-8d90-68e1d661ef6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.185.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7611339e-760e-44d7-8dae-6e6c82cc33b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.3.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b39b90d-0a93-45b8-8d9f-3298b5d6311d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.7.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ce90c7-2d8f-4641-b758-9504ca23a709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.1.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53edc4dd-d0d0-46c9-9384-d9575180d4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.10.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0515925a-7119-4d5e-9663-be4035cb1d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.117.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c682d94c-dac4-4575-a5b4-36648d43aa95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b368124-241c-4346-83fd-accd8cf4fe73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.131.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0b119c-83f0-4074-9258-617ca632d4bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.131.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8298a03b-4945-401f-a580-32556f5944a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.132.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd246546-c81f-4821-a70f-db2d49bb3b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.132.255']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89f9797-116f-412f-b9ae-d590c8151253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.132.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a600e95c-ba92-4f86-87ca-a022eac01580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.133.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5d7429-060f-42fb-91dd-5cbcd02e9919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a476d8-c349-4a54-9ff9-ea804d86f4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755cc844-761a-46be-80d0-f80edc0ccb73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5d9b61-42c0-4e16-8d9a-5dc48de73586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2180cdee-f240-4dd6-8380-c568b8be5d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ef0c2c-1aee-4a86-b7e1-4ebd032fbb10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6022c1c-a0bb-40ca-891b-13f3fa7e2c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f918947-6265-4d8d-ad58-8b635876957c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24009a5b-d276-4099-ad36-f52e0cc9fd1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb48868-1d99-4933-82ca-2f1e9c4ab4d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0becf4-5387-41cf-b0bf-e3262c96e7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ead0ca0-1145-4264-bb9c-21c1093c9276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34214aa3-907d-4851-aeda-4990f495a45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ef0e7d-ff3e-4f5c-adca-43701f53a759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2780b07e-a463-4b2c-94d0-dceaf57cc6e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1411937-e324-4de3-b5a1-6659192c324a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9fe07b6-d904-43e9-a14b-039df035ae57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57755184-0c2d-4fd9-a59f-1e215a15e973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97919c5e-a896-46df-96c9-9d8140d3ef99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b93fc1-f76f-43b4-aa48-1ed3c86f0195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.56.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d442f44-e3ea-4520-bff9-944705681cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.11.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc476f5-8a82-4020-87ec-2ed7b9b94614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.112.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5b11d7-ef41-4cbe-b5d0-f0896b032f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.120.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b5ffd0-2f09-4feb-a614-604d06b4856b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.122.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f1cf3b-a6c2-47b4-9e77-029ba869d766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc89312-7e61-435c-ac23-d2d91cf4f2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8870981-17df-4145-b748-574736eec174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5fe5beb-9bdf-417c-b756-4db2f3dc9c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9715bad4-a957-44ae-8184-c14f58fe0972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7de529d-8f94-4945-9377-aee7fd8f4959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.128.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824f0f34-5f23-4315-876a-69b69ae9953c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.129.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ff8d01-ae18-479e-bc39-9e648560f75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.130.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48e9be8-2b3c-42fd-b4a7-c7809823c4d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.131.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f91412-667d-4e69-b8a5-b14eccc13ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.135.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38678522-750f-4992-a1d6-a8b61d899a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3b695d-a3c6-4e96-82ca-8dd5b19bcf41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.137.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91c2b68-3b81-4095-b26e-035180fad50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.139.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927e5e58-5967-40b5-aa3c-9854fe999f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.142.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786c14c6-61d1-4e2a-b2df-4cafb074ac73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.143.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310538e1-5c76-4964-8e06-b62bb83b14c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.151.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51944248-353b-4953-a5f7-656066780b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.153.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9a8d7b-4957-4816-a311-49b7200c8168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.158.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c44fd9b-b4c9-4eeb-b810-5d034bbdc5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.159.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2025586-c696-4e69-a5ad-c869f9b9ceae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25002213-804b-417f-8745-675aa7e00322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730e9385-9641-4895-b55a-1605243c37de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.162.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515bcd43-4490-4176-b8e5-4c15b41c3326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.163.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c000f0b-a5f6-481c-9422-c6f5448bec41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f6057d-ca0d-4f30-9add-753e3b5407e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198d5ffd-dbe1-4bd0-a576-f5e12745aa4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.174.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d793067-1c93-4849-bb5e-ff2d12d9bf2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.179.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175a6bac-d203-49d0-8a09-889967703e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.187.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5829ec1f-d075-485f-b842-15bf269c5b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.187.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c750c4-5c5e-4cdf-b606-9a4048d235e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.190.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5aacff3-a33a-4a91-8d95-95549a3ab2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.192.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e424f923-11f1-4c9e-933e-b47571fc0eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.193.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a62a808-978d-4579-a2d6-751e8be2181d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.194.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f97e989-6358-4799-80ae-8d13de576d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.36.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6388e064-3fbe-4141-b932-87b991b4440b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0003dd23-e6b4-4b27-b89c-bb2479c013b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a001fa-ecec-4e8a-bc59-a4d1a816e94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.39.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b78c14f-83e2-4003-a784-f763b0efcb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.42.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f2fa36-5f3e-43fa-8ab9-d43138aee1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e698f89e-421e-49db-9585-54183118eb66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.45.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467423bc-8dbc-4769-a818-4a7a1f88dba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.47.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf2961a-6931-48c0-8ba7-e8b93a4e8b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.51.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff312566-0794-402b-a223-1b615dbf7ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.54.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ed9fd4-42e5-4ae6-80a9-611fdcd8fe01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.57.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f75b85f-2915-4743-9967-2e8ed7e97c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.82.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf90a96-1321-4c9a-826a-0c02672a9607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1538970c-e8c7-458e-9e72-8d82f95f317e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.84.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46612174-ea7a-4927-a329-2cedaa759822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.84.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc8850f-5016-4dc5-8849-6073303b56ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b09f468-a382-4172-b1ee-f3587b8782d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.88.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9523288-1880-4c72-8596-c1cb6ca93aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.88.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c816e3-ea6a-44bd-bcd5-c165638065ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.88.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be384f7-0a05-4539-9c7e-ac15dbe6e0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1744e046-7ce2-4caf-b137-4153f6468508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427f887e-3138-433d-815e-67efcb10a52a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7df2661-c63d-4b0a-bd4c-4aba5e8bdc2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.93.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4d19d6-ed1e-4691-90d8-e6b72718930d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.93.255']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7f7e7c-68dc-4cc5-91c9-079cd3e7f34d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c067889-5db7-45e3-88b2-3823765d76df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a0ea15-c45f-4146-95cb-13179cf2af90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e85992-e0ed-47ac-a331-ce6b314313b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.1.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e3591e-0c84-462b-ba86-d5618fc47682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.100.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e67d6a6-b13e-4401-9cc1-06ab8a1e61a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5572628-175d-4cfa-a99e-1d839936d0d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9795116c-e5c7-42b1-a64c-ea5d27d8879f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7865464-66f0-4450-b8fa-15978148c4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.106.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd657f07-921f-4f1c-a251-0df6ab2cd3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.110.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458f1a22-de91-4f1b-a611-1ff453156cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.111.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32eeb07-5777-4ede-a702-41edcaead943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.114.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bdc36e4-a44f-4b3c-8d6f-af379f637f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d99494-6774-44d6-aca5-e3906aff04c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef803036-0215-4bde-9d24-e01bd8a205ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da73369-1339-4488-8252-836daef8d5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2272fa63-f23c-48df-93c2-f97592224cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707a45c4-1ed2-4ce9-8cba-07430e5cf26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf30144c-350b-4afe-ba16-fe8af6cea3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757d3d28-f7fe-4f99-96e8-d94cde5784f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c7eaa8-ab56-4bb3-81f2-f643afc438ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e2db09-71db-43d2-9e3e-a7fb4b5cdf06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3db4bb-e71e-40b7-89ff-c9fc69fc6e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.13.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2d26ea-a0eb-40dd-9aaa-f9d36e93c581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.14.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ab3876-4635-4be0-9b8b-6543b1af19e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.140.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a2d902-a6b5-4eb1-83b5-c82fc6647b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.140.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c51c69-6820-41c6-ab3e-d27291c67940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a97651-daf0-4b67-80dd-d9cb50117ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.143.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a8e10f-d45e-484c-9efd-6a7de63dfd7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.162.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be449d9-15c1-4a5b-a24d-f075bcd4f394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.164.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52404a3e-7a7e-46c3-91a2-1d416a91b2de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.165.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d92c661-8d88-4b70-87a2-8b12047b0813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.172.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53edfd7e-da07-486f-bd4a-10415e41aa20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.174.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea7709b-b0c6-4089-a10c-110865d05443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.175.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d7b340-0080-45d7-abe3-803a69adec74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.177.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8502d2-170e-4d4e-8bbe-8c141cd72bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.180.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6db4e6a-7305-41db-b4ec-e409db6e0552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.184.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072bd267-c763-4333-9c42-e4d3825c2da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff106c9-1b8b-46de-9ec8-895299d1408a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b0993b-ee29-48a5-ab33-7a1de9c17a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.186.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfdfb66a-fdea-4804-b6e1-c475386c64e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b79b20c-9945-4c1f-9240-2070cdc52abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4adafa6d-9591-420e-914e-82d6fcd0aba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993a5289-5f32-4e51-980c-26eaafbf27fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.248.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f01dbd-8061-4879-bf26-b7395add5b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562fa2b2-5593-4ec0-b23d-2848925e0bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4aa69e8-93c0-4fdb-908f-bef8eaa39193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b9d8a4-7e6a-4683-83b2-8192c48f7e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.253.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db34e2a8-e01a-4bf0-858b-da0bfff6d09b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.255.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014ff9d7-d734-4c47-92b1-1aad35965aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f6702e-e70c-4823-a090-5b1d224e19e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bb42db-f38b-4a3f-b217-709939faebec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732a241d-1bf6-4a65-adab-370a79f9a724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89860c12-c15c-4d00-910b-387e21f2953a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.31.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c3d6a1-0a51-4be3-8c56-d943d1d7f37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.33.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8d5ef5-a3b3-4670-8afe-5f3be2bc35b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.5.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7133b62c-edfe-49e7-a4e7-3dda01370846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.50.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac355815-712a-4fd0-a73b-4e06fdcb591f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.51.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79362537-c0b8-48d2-9d59-39dfa49231b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.52.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11daff9-d085-428a-9203-a7b4e873145a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.56.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262fe997-dda8-474f-98a8-7b3849b9e1d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.65.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7480d6c1-1a3d-4e5a-b7e7-f126df1ee58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.7.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c470d5a-bb2d-46b2-b5ec-423527362cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.70.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b446430f-5902-4c75-803d-c2f33a268342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.72.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985328d5-258e-495e-86f9-c6ef53e0624b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.75.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c352e27-cce2-4429-803c-0e8f0a4e6503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.76.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba02d4db-da60-40f4-bef7-188b6c2f3ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.77.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a056a24a-f04e-42ee-9b41-deb1f963af9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854714d7-e043-4822-ac8b-34db2bb258d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0d456f-d4eb-4ba4-abfc-468f60a368d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.80.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff7c643-36cd-4b81-9674-ee14c0957885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df4eacc-5af7-4145-b7e8-e5da7ca38105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47dcdc78-0360-44eb-adf8-454981bded9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.87.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0112337c-3abd-45dc-8df8-3eb6efaa1363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.9.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158eedbd-6f7d-43f8-ae6d-443a6e595a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.9.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa64383-6589-41c6-bc75-91ab27a3846a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--748746bf-1eac-4115-96bd-38dab08fbfca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a395e8e-8758-4708-86d3-327c6cbe7c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eda52dd-010a-4914-a2ee-a496974eb2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e1b911-60b9-4425-9f43-eb0e7dae978f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2a5804-ba1b-4636-bdb5-035a5fe8d4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efe54b8-d94f-48c3-91f6-512110341e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b28a80-5cb5-44ac-9504-b08f6a005ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.95.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf165f2c-6446-4fb4-9bee-9785e8c71691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.98.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319fc993-af3b-4291-ba5d-6680fad0d5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.99.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26813d97-58b2-4765-abdb-ad8da6799d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.116.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb8ee0c-9e50-4679-8607-3487679103c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.156.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4306b748-8f1b-40c3-b532-4e231b27eba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.5.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9a0a5c-d990-44e5-b01f-93c01c25a329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.126.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420487a2-fa54-4fcc-878c-6d2821e5dca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.130.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9aeddb-402d-4f61-9c32-5fa65f678580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.131.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33b7e2b-127f-4a62-a3e2-5221ed688d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0be67ae-0a2e-41ff-bb0d-0549ffbf6cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17052526-8965-4fba-bd73-ddfd105c2397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413c9ff3-f118-4391-9512-6af559ba3663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.150.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bf8b2d-8ec2-4fe1-b9c1-a5d2da209d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.150.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ea728e-779d-4762-acaa-56538b3d841b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43295f12-7c23-4dc7-a64d-6f2aab71c4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9f9bd0-f9d5-4a4c-9ba5-b8115d49ddb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405e6c41-e6f6-4b60-af3e-5ad09ebd37ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.155.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae78d98e-1337-4a92-8e3c-f501b3de9aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580283e8-e56c-4d6e-8481-453e24656f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b226f624-7da3-4048-856a-f89870674861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.158.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92084c20-e4c0-4b49-83f4-9db3072c20a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.159.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55759d5e-9dc1-4ded-b630-b78cd13fb918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.167.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c07e41-708d-464a-bcb0-a82ac786c2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.171.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d079c3df-4801-41c0-b449-a2b9b8e79ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.172.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5898d07-d972-4998-b2ef-447b12c1dce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57ef6ae-396b-4560-955e-8323ce322a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.179.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c211b4c-bed3-421a-b1c8-44a0fb80ae2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.184.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7322936c-c227-4458-856a-8130e40d2778", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.192.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d21829-a473-4f67-8684-7845c72ab00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.193.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6954d17-d500-4319-90ef-4317dc4aa718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.193.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a782bc97-4a92-4d2d-9424-a52a65dd45c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.20.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340c5fbe-d824-49a4-9013-ac3d23cfc729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.20.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941fb9a9-0bb0-44e1-81cb-6b6a74e2b2b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.201.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437f3054-f521-4518-94b1-fc070bf93626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.201.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82062b92-d6b7-4b4c-82e6-27d1adea4129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.202.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360b6ced-e5f7-4bed-bcc5-6c1919893be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.229.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688578e4-5b1f-4d00-8120-21a5aef78e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.231.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0a27df-5a65-483f-a088-cd106a1c6fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.238.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d728503c-54a6-4a53-a797-a1864559a124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586ac4f6-ccac-4c84-b2a3-395e11fdfa41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f129d81-b64d-45ee-8e17-5f015f348814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.245.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5085560-fdfb-4c4e-b809-4c342270a524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.245.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce93c2d-e11f-4a1b-aeb1-f34603acc5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.249.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c619f4b-9502-43ab-a4e4-a502ff135b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.251.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ada390-a358-40c8-83a5-0f93c2bee1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.32.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563b02e9-0fb1-4a9d-bffa-bd0317aa5710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.37.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f2c2d9-eba8-4267-af57-16f083ab035c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.39.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5008d87f-29ec-4f7b-9b41-dd1be6a92a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.39.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e82a8f-362b-4a21-8adf-be8848af2809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360c5fcf-3884-4069-bc7d-98de9a41a7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.46.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7d2238-502a-4921-9ba0-12ff78f14843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.52.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef04ab71-c3ea-4276-97e4-8dacd0b7f30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.53.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30facff4-7407-4dac-98ea-4413f9eb2064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.74.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c04423-1e78-4777-9824-cec0b63b5b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585299b2-82ef-4436-8572-a199f1632353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.93.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a9f0e5-0277-43a0-96e8-689b3ace788d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.20.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5410c9e1-3deb-4375-9e39-f82e454af8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.20.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd2991d-00db-4889-b7e1-e4cac0bf06e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.32.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36e526c-64b0-44fe-ba7a-089e5721a37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.41.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57475a85-72fb-4db2-bbf9-1618313f8ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.54.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb0de50-d8e8-4122-805a-d131c5d7bd01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.56.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c269c64d-a653-46d4-81cc-a5c011f84e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72e002a-2fe2-4407-a145-4f2b98e74360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.214.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91444ce-988c-4fc9-8cb0-a3cdaf9982c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc60cb6-5e36-41b7-81ee-ce91d26030ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.216.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3cd5f32-681f-43ca-bc0d-a67aa0afa412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.218.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9866b11e-c808-4b53-8305-d47a0614de51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.218.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2a942b-c340-4285-bdc9-55e72a1a4420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.219.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031bb86f-3f4f-42cd-b41e-e20a02033046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.220.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ca28fd-6fa2-4f33-bc02-916e7ef65404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0727c0-b2c2-4674-a79c-8f9845a44482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f0cb54-e2b5-463d-91d1-1f14244434c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72f1298-1910-4bfa-8402-4f9f84b117ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.224.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce99f12-8818-4ae0-8022-4cb0967fce25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.225.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb393357-81a5-4a73-ac37-cd9d793e209b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.228.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c21782-37a6-4894-8c55-c87d37ed0b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cf8258-8bfc-4834-a0ef-973a0b8e6318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8750ba-5032-405f-bbb4-ebe21025afd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62dfb58b-3afc-4c40-8b6f-ecb52b9d9a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1315d158-b1ff-4800-a47b-3ed979d2c93a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476147df-e8f2-49db-921b-70cee78acefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70ae716-bdb5-4d02-a789-d66cc6b6884c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.234.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c8a951-ba3c-426d-9e58-9e170dba1851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb917ce-39b8-4a9a-86f9-9bec7956303f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9474b130-69b6-4b98-b233-3b714818518b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.236.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76a5e00-3374-4976-9e67-48a0660de025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.237.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7eaca6-f85a-49f4-8215-9995d43a2756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.238.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82901eca-ed26-4107-990c-4a31b1ae881a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.238.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ad6927-55ca-4049-82a5-d52864786fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.79.37.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14643dc1-08c2-4c66-866a-aaaba33f86f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.82.80.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0998b092-59f0-4c0a-8146-90511856c753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.83.157.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17164a01-d76c-440c-bf0c-6a800d4f0716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.83.20.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1f7744-c591-46f5-9dfc-82b56ad7dbd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b511b4b4-ed4a-4e2f-bbc0-201e4844e36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca0eee8-48a7-451d-a50d-02928d346c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6e1601-9893-417c-8894-afddcd03ddcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4997346-5d60-45ea-bc38-257e706b546b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9bce39-32ae-46ec-9b51-316d42fd9d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840bfec0-6274-4cc9-afba-2ba4cc294088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5313a3-ca1a-4fa9-b734-308b9c115b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80055fbb-1e73-4920-83df-334d510b9257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e63a4a-a95d-4233-8efc-772ed44cc94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bc9f13-63a0-4b27-a187-4a1a6c2a2597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c3a182-e3a3-4c70-81f3-8dfeb3bc681e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8adde943-cc26-4d85-a885-123356881a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.107.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5125d6ca-09aa-47ba-b2f0-e191bd9898fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.107.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada552db-4b93-48af-9215-f543a0748ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c01e12f-1938-4f50-b9a7-08bc4eb5464c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6aee560-f0f1-4b8d-aa50-143327db8d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c44121-70b4-4e53-b0ec-109a7464753f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a237f8-9579-4d21-8f3b-82fae1b939d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831cfda5-177a-4ce5-ae23-948173d083de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f52b37-8f55-4327-b3ed-e1bef7db580b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc1faaf-dea2-4e22-bc25-0c7a0e63898b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0707a2-ed57-4935-9d37-2181bba3b8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff546597-fd3b-4b10-ab5b-1609eeb2489f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80285edb-c63e-4fe5-94c0-ddb47a392801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2886a72d-675d-461c-9edf-0d3078ebd32f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.115.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba6bae5-1608-47ba-937b-1579951609cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596e2353-a073-4045-9718-f5068c9a9978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f5c8ac-f07c-4020-820f-a282c364abf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.0']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f983a4b-28c4-443f-9ad2-fe84635115f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1bac226-8237-416e-89ca-c523ba289754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e388ab-0cf9-415b-82b1-476be4996a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e1c907-93ca-4bec-9bae-3f6797bac74d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49c97c6-0193-4060-b944-e340c7388bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568c3592-d23f-4c60-b5a0-3b3638aae936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cea9f15-f06a-485a-adbb-7a6a14ea781f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebede19-3d53-4e08-99cf-608941cbea8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24fe85f-6817-494a-8d76-a6aa66c0c6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d16833-a931-44b8-98ae-3e42030e4dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6be314-4741-49b1-80b4-a41a26f7b7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39e5997-58a2-453f-88ae-931ebc9e7ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67df987f-df72-434e-9f57-9e4407f326b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46bcf532-e53d-4a93-961d-2ec08ff9006a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9d5c4f-3e7c-4dd8-985c-37218c2e9275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46bff813-4eae-44cc-bbcb-59e4ef5f4d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59131d1a-6805-48e4-8257-0161211b5cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33fe66a6-466f-48c9-b263-819c7a08c7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031edfed-99bf-49a7-835a-5e94eb1892b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79288470-c9ce-4da0-a9a3-312752df3b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe48c71-7c77-43ab-ac5f-22efbc2cb88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bac63f-eed3-41d6-bf67-85abae231c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b18089-5774-4f9a-9585-74dc8c3ea6d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d7d28b-59ef-4af9-a9a0-4906053dc0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d312ecc6-cf14-43da-b166-96a1004f9bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a289066-84e6-4f19-bfc7-f278d7926d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e118df-fe81-4399-b727-2121184dd251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3087492d-e3ef-4d8e-be7a-29cf0dcd223f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221c76a3-4472-4bad-aa02-2631dae2abef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b07119-b511-4c22-a672-312d57398248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.184.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40e9dc0-6ae6-49f2-8a45-051337d79336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.192.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8798ba4-e318-4e71-b673-a892b2acd692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.192.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfe3a8d-f65a-4fb8-9a25-0840f1c77d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.194.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f692fe17-5cfd-4b41-8653-8705b0ee32db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.195.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222a2ea7-d277-4c77-ae49-f4485c4bbaa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.196.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82003a54-4a72-4404-9811-5b7f9bcb4cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.199.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe6fd6f-e4ad-459b-afe3-af85f87bff37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.200.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5797c0-db1b-4d89-9870-2a33c8a6fdca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.201.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4d8a4a-b450-4178-9fe8-b26f024f01f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.202.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d361802d-2175-4e76-9a50-b9664e53abaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cb16c9-5ab3-44d3-a5d4-a8d87d26ec2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1577fa08-6981-47ec-af2c-be0336a23a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b938e8-c69e-44b7-bfbf-e727f53fbab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2636acb3-3b89-41e7-9de4-c837c44c5734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ea0931-5c33-4adf-8d0f-148586d1d12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d88d22-1bf3-41ae-9442-8a97d4440cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0e68c0-9697-4219-93fb-2fe14144d2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.229.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063c84f9-4605-4ea5-a59e-cabe2f8d1ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.231.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4e2e1f-a03a-4fce-9255-87e0be4cc185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.8.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4af6db6-d070-4ff0-afdd-5a9bfc7e0a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.85.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e14a3ac-e63a-4593-bf5a-107703ec637a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.2.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e96833-6411-4a3b-a573-732e21140a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.28.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0364d2-f55a-4cf0-adf3-2df03249fba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.35.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e66e3cf-3a0b-48f2-9bb4-bbcca06b963a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.54.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd7170e-b425-46bd-bbc4-0e54b5d1e6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.94.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550b90e7-76a3-4495-8766-bb3b6951d2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.230.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15b3390-5961-4062-8fc7-c6ed8c64b15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.240.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684483dc-d3c4-4bbb-9084-56a4a537ad54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.250.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2416e63-42e9-45aa-82fc-6d33aa2c1d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.21.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3823e43b-3939-4d61-90f7-4f8d04f64fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.25.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e91d54c-fe70-44aa-bc4c-7e4d961a8cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.65.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc23c4fd-1c05-4476-a6f8-c2f71d306bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.72.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a263157-28e8-4a3b-a898-369b0d629c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.74.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff5fb21-7300-4043-bcf9-0876ddbe2ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.75.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed250f6-38e6-46d1-a41a-fda6a1cd917e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.90.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88715a2a-db6c-466f-aea4-ebe72062feed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbcf6f6-ae3c-43be-aa2d-cade6f1f1554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c741db8e-52a8-4099-99c2-11a62a4f65df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.166.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6c16a5-e723-48d6-bb2a-0d0abc847e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.97.38.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8c3d7d-75da-435b-84a7-20c814df5e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eacda392-8250-4cc5-907a-3bb5173dcee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86e03a7-df30-4c3d-8d7f-cfbe143eee81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5b858a-b139-45cf-89c9-5f6d2059ae85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.208.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ff33bc-7252-4f8d-9849-1039920f0af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.242.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67805f7-7469-40a4-b7fe-f807c9e5bac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.244.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106a3779-35ce-481b-a5eb-ff283d77d25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.187.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8979d15b-15ed-4aba-9fbb-1994dd871185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.233.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5ae2f6-0cb3-42be-a6a2-aaab60862011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.64.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e823705f-1ca1-4bde-87c5-bcbb621b05dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.82.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0572af64-f98a-4d21-97f1-d55a475e5965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.84.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f6ac1a-93d8-442b-a696-4c87bc2d007f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.115.217.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277cb6e3-6254-4dfb-ad82-a9b150cb930f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.200.158.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33cc16a3-2b68-46cb-94ee-8fc9d3247f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.229.72.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d244a367-09e5-4764-81f7-82940e81611d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.232.136.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568dbb59-f69a-4c64-b22f-eeadc81872da", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.36.243.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ffb80c-1e8f-414e-9a4b-713135b23662", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.141.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd644a8-a642-4bd4-9223-d8f075233898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.183.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a6f3a1-004e-4544-b4ff-9389fce04ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.188.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f386f956-28e3-47dd-8e96-b4e1995bcbd6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.73.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7480b78b-1fb1-4fe4-967a-d97576d25d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.73.235.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869a2fe7-9931-499f-a642-3dd010f3b9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e02c0d-c904-4884-81e4-4a1b9a91f819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.129.247.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d3aff3-6618-4f8a-8609-68613709a7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.134.181.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8167747-4faf-4605-80fb-b0dcab2fad1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.156.159.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273756af-9937-479a-8f86-41ceaf09cced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.169.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269103c6-efa8-4218-a2a2-ff154bdb03ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.192.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d42203-614b-4876-810e-e5c7c7f6df8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.124.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6dc2cab-0242-4293-bc57-ff06090f4988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.86.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aecbcfdb-3551-4d26-a4cf-7540266d73d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5187d8c9-5dfe-4108-a2af-2530e28d7994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5d2753-3d7e-49e6-bdb4-bd644b5f272e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce042c2e-cee1-4a9d-9b61-3ec6bb72554e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db50621a-9cff-4c07-95f7-16ff25034cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed7d4763-d027-4154-ac2a-4af9422d63f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf37cf4c-062a-46b1-833e-bbf7ef506c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.132.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11007989-a399-43a8-8df0-7e2aa2e4c102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.159.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec59f5d-8280-481a-ac73-e94475d567ff", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.232.126.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d5cc41-1722-488d-a6df-d4bc74be76c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7c4eb1-0c4c-41fb-b005-0fa215245107", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46eca97a-8548-4164-97ec-2b158dd430f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ec6167-72b6-431c-a7d4-43565928d35d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8cbd8a-1402-4dc2-bfcf-7757ec281a48", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e6522f-500b-46ef-9350-0c68cf7bf538", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29021c2e-ebbe-4cfe-95d0-4c128f82ec5e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cb86ec-fdc3-4da4-b65d-0f3b9b42eadd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edeb1e46-7c49-45d7-a240-560a153ac0ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f814a3bd-74df-4af8-a2ab-c441764cd36d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce677d5-cd27-4b75-a967-96236b5c7e6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb43d4d0-fc61-428a-b3c7-8507c6b3b81b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97443da1-72ac-4c51-a5ac-7789e17683a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8633b5-96c1-4dfe-8d41-eef758988496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.3.146.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2fbb2af-6324-47e9-863a-05c98cad4da5", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.39.49.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd60dd67-43d9-4002-a4dc-fbdfee1f8624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea10abe-72c4-4233-9374-5a6f83f8d37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2caac11b-9246-41cb-a672-4a08b684737f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87724068-46bf-43d8-b1af-39ab8bcd7758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.78.79.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84256278-51e3-4eb0-8060-f81ec2bb753d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59a48a2-36ec-4b87-9a8c-88796f9dc039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34a0e71-4162-41f2-81e1-895d5e08f2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.113.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e97c741-3660-4476-bdfa-bcc8ebcbd1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.12.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edec1790-cb67-4f0d-84e8-3bfc55e73bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.2.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837e5d4a-9437-4247-a354-78b7b5847f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.26.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9bb5e1-c3b7-42c8-8a6f-b76f1b235467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.30.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed73931-7974-4ce3-aef2-3d980b599168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.32.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f5cc60-8f0a-4108-9b5a-1ae5a9c22a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.44.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b030704d-8e97-4aa7-8fbc-f55911201b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.48.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f66452-abd1-43b0-af57-bbb2e305e7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.48.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a48824-6fde-4456-bd26-c41c3e2598b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.48.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d140d29f-e2c9-424f-8809-fd77d9abc780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.49.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b0fbae-902f-47ba-9f13-7832e26c1e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.52.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5237e946-de54-4a71-b654-618518fa0827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.54.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717ac3d2-0893-4192-8bad-6bc58763bf8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.54.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a09498-cb10-4f54-8a51-1919330d0fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.54.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a27c1c5-d080-4e0f-8604-490f4e5db402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.56.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc77fa2-ae42-4662-a8ba-ba88ec70c31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.56.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a563722e-6348-4791-91f8-6a5ebe6da966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.56.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec19688-b23a-4b85-a982-532875f6d60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.56.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ee9659-c475-46cd-8774-c12512774a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.57.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85057f39-054d-4660-9c22-f28ad504663c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.57.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81409caa-28ed-42b2-984e-4ef669b7d790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.60.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d229d81-de1b-48bc-a999-8404773365d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f89d6f-0daf-47c0-90d2-2dc22e541a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de348e46-a595-4ad7-a012-e7f93cb7ce34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.151.191.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af79e4d-c63a-47fb-973e-3cdca788dfdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.234.113.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b57d26-18ca-4ee6-a3df-5832a005af4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.197.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deda2832-63ca-4136-b5cd-5310f9865f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.127.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc1d7a9-eb8d-4373-89d8-3589118ac0e1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.34.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c7cf00-aa8b-4eb0-b4b8-72c7ee9ef739", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.84.211.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9f66fb-c3da-4780-b384-d5dc506ad3eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.143.123.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d9349c-9594-43d4-813b-ddd27e57ee48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1dfb3b-9a81-48c6-9545-226a349da26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ba8bb1-10fe-424c-b905-2541f0bf9e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.248.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265f29a7-d3d8-4b6c-a3b6-d9e742636b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.45.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a91479-68f2-459f-ae69-af739c119734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed32fdf2-953f-4075-abe3-3b638064bc53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.95.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ea0413-e660-40f5-8843-1970d0898729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.198.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c910505-7b76-44e5-be52-53092ad21456", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.198.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43791e5b-90ca-44ef-b835-0a26eeea6601", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.43.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb24da63-320f-4f44-8524-587a8e20e17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.222.254.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a84fa47-c8ef-4c39-82c0-71108ba587c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.105.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ced9f4d-0dc8-4b84-bd93-0502d35f9aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.254.141.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f48cab-cd96-40fd-b056-dbcc171ca547", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.66.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78785c12-f2ff-4e5e-9df2-caa485e3068c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b738810e-d71e-499c-8290-4b108c47ed49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d790eea9-7ad9-4e3e-a09f-0da079fd9aee", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.165.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b229a6c-1532-43fe-bad5-81cba124dbd4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9663cd-9fc2-4e09-9054-084632818d99", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.144.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7461b7f6-3ced-4182-86ff-9a9025f1b965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.149.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61fb3132-7d3d-4619-80db-b818219bd914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.251.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3641222b-6136-450e-a801-3e672ef636bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.99.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35379fc3-3a09-4a85-9143-bc5891140f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.85.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b8989a-e6e2-4af2-8628-a2d2ad1a4f57", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.89.129.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fafceea4-73d7-40a7-a169-b5e30a9bb6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.89.25.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a9646c-0030-495b-bfcd-a22223800976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.14.66.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a262d94-15dc-4953-803c-f2cce0bb38fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc97d95e-3a8f-4c93-b7fa-5931a0bbf551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00987114-c65f-4dd2-996a-efd7f3d3d9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1422299f-5bf4-4392-a077-cec814d82c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.149.205.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fbd81d-f810-45a3-8b5b-74c2718d2460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.15.78.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27db0978-7265-4c6c-acbc-48fd5cabd145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.15.82.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4a4157-6594-4692-bb5b-95cba0fb7876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.161.55.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efd2baf-f984-4efe-9a64-28e004b2ea3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.80.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8be08a-9d98-4b6a-9c0b-17fa83dcf714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.80.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49567220-0504-463f-b638-08ddd06831a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca7eb7e-2cbc-4b3c-8bd0-2ca136125601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.88.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9a7f90-7db3-476f-ba52-22373563ec9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.90.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7547f43c-0044-48d5-a6f9-810b027f5a02", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdbc4361-7263-4578-891c-cfb498b714e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef38a136-c21f-4f9e-9984-fd39de6ff4ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1edd8a-a808-43ad-9185-4dbb896c94d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f8844b-28fb-401a-a120-dab742ae6184", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f58ef32-d595-4139-9a01-8cad797c6c4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6cff9f-81c0-4998-ba88-fc5ba059a3c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32aca2be-17d0-4ae0-a144-352f9b7e5038", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09024fce-0d7c-425e-99da-8c3140a31bee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67ec474-09b8-4294-863b-1c572c250f94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7014f9de-b086-4968-bff4-f21f009f6c6c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af8caf8-b97a-4066-a58a-0a8014f94723", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9579ca51-8c1a-4807-a071-4f8de63765bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6565e899-b346-4be5-8ae1-db9b70b8199f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc119c90-234e-409a-95e7-3ceb9f3522b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6273596e-1dfe-45a1-a30d-d0b489a49938", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb70d2e-d08a-4d4c-a32a-c8538de6a422", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df641c1b-04de-4337-9eed-5084313beb7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70a1072-4307-44d1-a66c-2af51b384fe2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdd9ddb-3725-4217-8502-3d9b5171b67c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a2ee5a-c274-456d-9704-3028f4b89458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.136.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d9b81a-9e3f-4e1e-ae76-0e1b9d630f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f04740-eddf-4774-96bd-2ef7e7671ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.144.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94577d06-1a45-4d0b-86dd-9d23565154bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.146.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db549790-fa14-4312-8b1d-0f72bec8643a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.156.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52285b1-e407-467b-a816-8f1674a04d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.158.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33f405a-9507-401d-91f4-825a725f5cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.159.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe05c03-325b-4179-a365-7a9f062e6cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.170.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c383fa-1506-4856-b972-319cf3e39da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1235630-9672-4078-9eb6-66f44af40251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.185.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc318f6b-04f5-46a1-b88e-8cd23d74d91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb5fa83-0893-44f8-82a6-64077984a8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59b5463-3ae4-4928-9e3d-701eaa79dea0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342e9db8-ee5a-4c87-8c3b-367738b2b925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9967a9e5-a69c-4ba4-868c-088477b29c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.40.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68104615-b3e9-42c7-bd65-1c4e8891a4b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.43.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ed6107-dd06-4959-a0ea-93970737f530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.43.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1401fc-d2ff-4bd6-ac65-627487fceb37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.39.163.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18927273-9732-45be-a48f-975bfae7e853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.53.189.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1d7f91-4612-4393-bf30-38849704d6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.2.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807d1433-e891-4dec-92a0-ecbe0ffe06e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.193.53.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6c58ef-4356-4e66-9e1c-ea3db96b7133", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.9.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97af4f45-9c09-4c9d-aef4-073c58bd2522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.88.141.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28cecd6-acfb-4ea6-b031-de50b093983e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.98.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed23548-6efe-4b7e-8bad-9291a1d64022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.154.241.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2f31db-2462-4861-ae2a-a8ceb9b7cc05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.107.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6508a3b6-0c56-4ac8-b5c2-7651c1a3e659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.76.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2c5eee-cc86-4ef2-af19-d9ca99fb6130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5fa85d-fef7-47f2-a1ce-028719596fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.213.107.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635f1a82-8f0a-4daf-911a-1139fa346e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.214.29.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5c0dff-f5dc-4450-a9ce-db5c4117ad63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.27.232.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8eea5e-f605-4c54-beae-82f4a70497cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.45.56.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd358d75-e4d8-44da-89cb-674b2ce073e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.47.105.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f3d214-0642-4b13-b63c-4fdcd5f01778", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.50.165.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1117844-936d-4874-b49f-204992fc6963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.51.63.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a693e1c-5c97-4985-9bd4-a52b0e588388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.71.104.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd64885-ed8d-418b-baf6-90ca13aa7f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.97.171.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498db2f0-5b26-4383-beab-8503599cc711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.103.104.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47712252-b804-4559-98c8-ba173deceffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.110.215.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8babd4d-d1b4-4778-b8dc-cb4562dadbfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.110.241.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a9b419-483c-47c6-870d-6260a57d1dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.110.83.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d8bf53-d73d-424e-9120-d202333d72a5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.124.6.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7fcb2d1-0f1e-4a13-84e7-177c0060fa51", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.125.215.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0b4f06-00d8-4e22-8d9e-0eeaf667b4e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.127.72.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77b4086-5e09-48d5-94c6-056ded419fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.103.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ffa5547-2755-4559-b302-5d37dbbd34e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.74.227.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36063d8-363c-43c8-8d79-c2f7af965753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.95.97.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422a698d-6712-4938-ab35-c5cb860237e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.193.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c754d36-d450-41e1-8fc7-eeac0602c8e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.205.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d1e76a-24ac-4fdc-a897-11ca3d99e322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.163.217.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dada45-c6ab-42c5-a77f-ace5396636b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.166.82.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8947ef3-5a73-4f3c-a849-27be4c09f052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.166.82.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44b8eb4-98ed-4229-825e-ac3a27f7cf46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.182.124.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65f9936-e7cd-492d-9239-7bbd26ba35ad", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.19.245.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a5c75d-88ac-4e46-8cf6-c28eae1ab471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b40f679-cfe3-4e66-b211-7d5822eed260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.23.233.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f561e4-1d04-4c75-b020-1bcbdb4c85c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.250.246.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34aa685a-dbc7-4399-ae0c-faf38b267e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.129.155.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4917006-76ad-4e71-bcbb-a3558b67c59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.138.113.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed83c9c-cce2-4813-b1e9-a37ac6b4fefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.151.249.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd73f2d4-bee0-45a9-8b23-191c51562061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.163.26.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5f32e2-81d2-4949-be70-55a7b86eed6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.178.24.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9c0a8b-4582-48b3-9d52-fa4d46053cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.216.49.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933647a4-3fd9-4458-a873-bca297361bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.244.180.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0084ea7-f225-4f07-9d14-1d0238664370", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.28.144.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92055dc-a05b-471c-8b75-e78fb8cd2adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366a09bb-006b-4e3e-8264-afcda8d32b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372e8768-8bdb-43d2-9ae4-5691a670abac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc7ad3b-332b-41e5-bc3b-51801cc4991f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb61aae7-d884-4cd8-a141-cc77242bd4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c51e68b-48b9-4aab-bf27-9a33bc0f1bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6336fb-7475-4f52-ae5c-b11b6e656c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674aeb4e-c920-4b0a-bcea-8be0c245ff79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a970b593-6d9f-43ba-b5e5-308bc19e23ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c1fec6-4091-4017-988a-e2938239c547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ee707f-db21-4658-88e7-b4ef30ad3f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813a2bba-b0be-41e1-9f11-7c32b64397d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75636f4f-e7d4-49c9-8df6-8f68e9823283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083027a8-fe64-4d1f-877f-2a4a7c49f00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3dec87-d12d-4af8-b9ab-677889395b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334e1eb0-7af0-439d-85f1-3b1a7c582543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0965a9d-f9b4-4009-9fd0-022fdc47e998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a72e2a-28ad-4a19-b31e-2753eb617c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5152bf61-3ebc-4196-953a-436293c69aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0b9f47-0c78-43b5-9649-93efb7428d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37638b51-4ca3-4fc9-a81f-6b44db27ffd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.32.45.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db338e7c-0ad6-4c94-b06d-a5a8a127032f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.54.165.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85305a82-db65-4c0e-8a21-8c0a845794b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.76.136.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74820c13-d3ed-42d7-a4bb-568af2c02a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.62.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810ff15f-d2b7-4b8b-bb39-8f9d9cae2693", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.141.63.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ba9b6b-befc-45d2-a59c-bd68280577bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.146.169.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d4dc20-3089-41a2-8d37-c60f930ab4cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.146.238.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9051bc51-7151-4afa-a13e-2c708a8513ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.164.177.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1d03e3-7f00-4143-a0f9-24b27f3d6e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.136.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa44b10-b52c-436d-9fea-b608ecd682c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555dd34a-bae7-42fc-8f1b-180276a8e385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15469ac-62fa-410d-9738-26b0e23203b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.142.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739b2d85-fb55-4675-be3c-1a0c2a23d90b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.142.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff894f0e-2ac7-4901-85bf-45ecfbee8917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.142.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380b7e89-6fad-461a-b83e-81e2fb00fbf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.142.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098c35a3-e19b-42a0-83a9-04305329270d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.142.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951bc735-b62e-4c3a-b57b-2d3086e361df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.189.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907c2075-09be-4052-96d7-d7ef132440e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.199.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819554c3-4227-45f3-8103-686f4509ffc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.207.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9e6e53-5911-4c30-bc92-4afbe2f2846b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.246.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb1c370-cd78-420f-99a5-f0093598b8e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.27.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708166db-6ac4-498e-827c-bb6902240388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.212.70.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791a6661-8e4c-4e00-9453-14af7d5ec6df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.228.126.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa2b5df-a087-4e64-9488-344004fd6756", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.238.22.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879e14be-52b3-4653-8e15-bf6080b8b237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.4.15.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084269c0-365e-4052-b603-d3b4f3c0fdce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.93.178.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882f2086-adb9-49b5-a47a-d7e6e3a5a9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.190.113.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5ecfa0-fc03-41a8-9527-f8096f04e426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.112.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5363951-7f9c-4b42-9415-b79a42c6a5df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.69.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a74e9f-a7a8-4c38-aff6-f649184e1d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.98.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b99d5b-07b7-45f6-a463-01d71ea2c9ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.133.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad529eb0-569f-4b45-9bc7-a834a3139c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.150.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f418b026-093f-4144-9a6c-c57220605f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.160.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86177672-fbfb-4a15-a933-ef1d7a35228e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.164.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f22a1d5-9b03-43c9-a18a-0f437d562ee3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.175.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d126c38-3737-4572-b1cc-f1afc56b377c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.52.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e385749-6c27-4f66-8020-cfa9d13aa6ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.7.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100ee625-14f7-4627-9ac0-1d7fe7f37e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.151.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6746b973-4c06-4dc4-9c75-e03c1d75bdd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.201.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6252bf3-ece4-421d-8f16-b2ef3cbdeffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.235.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd04e53e-1d1c-4406-8826-7f68cd7cc70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.236.146.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4a4c98-2d39-4fd8-a338-8dc502d05fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.34.84.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca4ae4b-a11f-4ea1-a33c-04212638ec85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6981896f-4e70-4159-aa33-80ee6c3a41ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16bce865-f5c9-45ca-aa6a-9b2d780eb04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fcf078-37fd-4f4e-a93d-4b7cb7aefdbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e22b16-2bc7-46cf-9857-bc736aadb3b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255a3391-8709-452e-8f8d-dc04c296df97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6f85c9-f0bf-4f62-ac97-e3d4740aa544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5776ee-7855-4c4b-bbcf-bb3fb619f146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a463b04-a167-4e51-aa70-50a7727056cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91575148-114f-4990-9be7-e0126a29cac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aededbea-b323-4ffc-a6ba-8bb7a02fc93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15e5cd5-a166-4f19-a583-fe2247c98291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9675d3c8-ca3b-4eaf-a8a0-a6c123e1224c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab122abe-a1d7-42b4-b9c5-9f18cdb792cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3873da-9ec9-41a1-b747-96d1d67cc6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342b1a61-493a-4b2d-b6d3-6b375d30b86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0974413-9f82-4c13-a999-3d44780d5486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6fbf74-a34f-49b4-b9ea-3622d7716567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad415ef3-f3b5-4e9c-aaae-abce428ff40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8463bb0a-7fa9-463a-9d1c-a024751a27a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ac5e97-be21-49d1-afae-564e2000cb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017cd6c7-3716-4d14-8b25-9b81618aba3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a7350b-9262-45fb-83c2-e916682b1680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017cd1ee-83fd-43e5-b8f0-6f14544d0453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673cbfb4-39bf-47cb-8f87-c2c00a65f6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83d75c5-7ed0-488f-a105-cfdc3d4f1746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654e5164-57df-442a-a082-12516fe96b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789ddfd6-ea61-4542-ab90-d7d24da99b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0a32fd-6437-4262-9416-38690e501f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5851ab-de0d-4423-8201-2a7144e1961a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28f6be1-b99a-4f0d-877c-ca48047f5045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0e7a75-f35c-49f6-b58e-94200c0dca4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fe0fca-8541-4d69-be11-6ad55a441d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1085e0b-6461-457c-9f5b-a4247adbfe5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd0f9b6-accf-4c8d-9600-8689bb289b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df303b48-074f-4305-9429-e26db81a23c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcea41b-0b33-42cd-9f21-d34e7806a65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a2a42e-0a7e-4d1e-a98a-27b69e87c3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b173436-4020-42fb-987c-81690e93ee4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ebe152-08a2-48df-9b01-5fb3f56016e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d800da0-4f69-4bf9-a6b2-32e2e1dbfbf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2366d3a1-7893-4b08-8ebc-4d9b237547ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7597dad-2d5e-413c-9fc9-1f4587f28a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc51e4b-a721-416a-b413-58a9052f17ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f39b55-654c-4244-b193-a13873ba6778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7fe6e21-3819-4551-a7e6-df2fa0adbf52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510bdb11-6a17-4e8a-99ff-ab8b7939954d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0152aaea-3dd5-493e-aca6-08b107fec009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba04d7f-4ac3-4672-84d3-f6955a1b7b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edac7585-391b-41ee-ac59-3ce2a0cebf29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf84699-715b-487c-b8b1-19339a3d9015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de23c343-7df5-4467-8f37-4ee000a9802c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7e4665-0210-472b-8d30-410891c3d486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2713e7a-091d-456e-bfc4-93b38140457f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acac36f-4679-4541-abc9-2d9969a58093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be745b3-2c0b-4e1e-973a-7ddbed12641a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1990df-cd4b-48f8-9fcf-4f7116effec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff939ca3-c2fe-4e30-846e-2bec7d9eecff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953097c6-3a2a-462e-bbed-19619bfa8b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2501b786-ae69-49cc-9b0f-50d14edcaf71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691649c6-0f1a-45bb-b6c5-2bbcecc33bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a985ac07-0224-4e8b-b027-24a45eac5adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb759d5a-1c2e-47f6-9939-e62c578a81ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572b2b34-73fd-413c-a4c6-f3339867ef66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3401df-52f6-4330-b6ff-56b8ca5c2f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca15ef97-02bb-469c-bc62-ae717880fee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e174175-07ad-45e5-a007-870c7b1521d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e7c64f-1181-4cf2-a1f1-3552438d72b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718593c5-a6b1-4b1a-91ca-629022e23b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e326a46e-97a6-4bc8-94f3-e9454c000f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce6b908-ee9a-43ac-9a13-86ef7de339b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e569d2c-c2f1-4326-97a6-1ec502267816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179593be-d545-4996-ae32-be2a103d22ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063f152a-f026-4a4a-b314-4afc4d27667e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c180b6f-1c3c-46bb-bfb7-cf32240ba985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d24edb-d9cf-4945-8c99-8a3025b40e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b9eba4-99e6-4869-a3a7-cc180ee22c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79490c0e-0b59-4142-9148-e5654fbb4e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61b2113-11b2-453f-892d-db54206ab220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f82ed20-13a1-4851-bac9-a39169c52111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d927349-1ec3-476b-adcd-604d7eee730e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e6c77a-3b34-4d15-b882-498de386c5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db2a1ed-3022-4b4f-8f9a-014c92078975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbd1d60-853c-48c2-882a-457007e92c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584fcdf4-b814-41bb-a8e2-fbab1fdd5bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc452112-3ccc-417b-a0d3-1c9d2d67803d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebaebb5e-cc6c-4882-9a4a-32e841dc8809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5369d51-5890-42c2-9c7f-9342d3b5ef09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9227e751-41ec-4f56-b9e0-8303e34ed501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c024304-a4a8-40ba-9f59-573f555d16c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d1ec1c-495c-418e-a4f8-ac914fd40591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2745d513-5d81-48cc-8d53-eb3ec44f5f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90336e5-3820-4f55-a42c-bc1b939cac80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0340827f-1cdd-43cb-919b-bbf585f1d090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fabf86-fff6-4ce8-8fbd-8e8a05688eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa45c0e5-6c8c-4799-9d4d-203c27cc2839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baddefa0-5082-4f2c-9a2b-281227227938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a742f3-b96f-430c-8e36-97f8ed230762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3100bae-504a-4c5c-9382-5a4f72e851c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82056353-8627-42de-9a15-247237b67e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0feaf2-e3a1-442e-8fd0-0982c70840ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6176a87-6fe0-47c3-ad4c-90b0d5aab06b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba9ea8f-b666-4743-a7f1-c60c568e05c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9762cb3e-5431-4567-abe3-b9ba81d2777d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3327e172-5b2f-44ab-ad6b-5e56f675ddad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb62c0c-c902-4d42-88e9-e7af744c7d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68149593-6df6-4ebe-b805-58dc4171f4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a799ca-487b-4ae7-b9c2-ec94820078bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466a2635-330a-40a6-bc12-a25fdf50d29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b1dadf-f9e8-4874-9938-0c0461986641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0966d542-53eb-4090-af27-c4219c761b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110c4599-ab78-4c01-a045-74abbc53a4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98616687-feba-4779-8ce0-9eeb929d98a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d02964-ddcf-41d2-b4f0-5b2ebe067513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0b1c6c-26e2-4b80-9950-a64239255f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdd1da6-3d6a-4c35-aac7-b57100bd6c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2050a8-215e-43d9-b5e8-35842373e273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfb9c9c-867b-471a-8e72-148f5e9ca35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a4a063-0899-4361-b0f7-5f176faf045a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10886ca-7c15-45a5-8a29-f93c63a1650c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be00130c-36c4-4af1-ae87-0846806b97a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74da9730-0fe5-4d6a-9d9d-85c28f404fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb40480b-eae5-451c-93f8-ec157940f736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a81652-cd20-4e6b-b934-991653199c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eee2542-0330-4873-bf8e-55352c94be76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d363910-e485-4fe1-83b2-06ca679ca3eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9063beac-f56b-4fef-aa18-610b93db7d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1408bb6-6f44-4a03-9cfe-bcd94949747a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7dfa062-aded-4167-bc86-4e931d0b800c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc269f9-258c-408a-8ff3-8a1a2ffe2ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2af5e1-9bfd-4144-9a81-5f755b1cdff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603f2c89-059b-4251-9c33-9018462fd411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68d9e3c-b1db-4b22-affa-848629379a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d26226-fa6c-4c69-99f3-fc7a4cd9fb91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75db5979-3a15-4917-9958-27ed1d2d4dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75a4d0e-3b72-4e44-8665-fb1d59bde02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f8aa70-5fa3-47b8-95b6-6e03cc87f8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f06286-cda9-482c-997a-96f098f7b789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819cd92c-4203-477b-a5c4-21c51d80e543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfee4cb5-6cd7-44c2-80a6-56d0d5c6914b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d114e490-a49e-43bb-81d5-d9d841a7e715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14b8a9e-e0b8-420d-b1b7-c0d71b5087c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba8b8c4-5218-4e13-bf2f-2aa134770d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8671e987-807d-4b8b-9cf0-fe4ffb0c236f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc9d4b0-3438-4546-a08f-f74234581a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a609b89-f0fe-40c4-b238-523847b15f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5340d23-921d-4a24-920e-8b19dc5bb3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3540125d-696d-443e-994a-a4d038f5aa72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f047f68-77b4-4617-bec3-a1579ca4881f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d26d63a-6b00-4627-b47a-47870f221f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9950d7-d293-4e4c-873a-d0077b36d814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd62a07f-d878-4944-93d5-ad52c4e670be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37e3fde-dd15-43ce-8721-18819ac7c8c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef9b2e9-db51-4c4a-8e33-4602b9f13c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bb4785-30dd-4a50-a689-bb668f1ae3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30e16fb-0f0c-43bc-af49-42d914d11bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51f1970-0fb6-4957-a864-164bc47d3431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e29e581-d2c9-43c2-a005-9fc1341811ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e66fe8-49dc-4f0f-bc19-cb67f2f2cf69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28981d03-a08a-4ca6-ac3b-c9d0e05eb82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c33139e-4de2-4de5-9ef6-33547d104051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958eb4f5-741c-4e35-b9b8-5f9d0e63e440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba14932-7a9e-42d2-927c-832bfd456fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8d3dfa-8aba-403b-973b-f5fa0b2c310d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79e4e0e-b898-431a-bcda-812086b1c590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3722e9e0-1c72-441a-a222-d598dfdf2bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ab39b6-ce79-42ac-bcf0-21e42b06fcb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2a0f5c-76eb-4296-af79-eae9be5b7063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13eba955-c0fd-423f-a18b-25f9b520ce80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455e48b9-2819-4836-adb2-b000e0b64d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5951992-9709-41d8-bc64-3eaf33be549d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fcb8a5d-def2-40f3-9904-8e49f466768e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8c31ab-add1-4971-a81a-e4bfb644a1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94604bb3-ef67-4415-8c48-31122991c1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85aa330c-dea1-4610-886e-5f2de00811a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9dba2e8-a9a2-4dd1-ac39-bbd532ab8c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d56f040-2367-4a2b-8f87-af38e1cf5f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2946aa28-362c-4e7f-a729-545bd134c993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82806408-611d-4c7a-8bd5-8ae6be606685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d822b0-209d-430c-9e08-e48e087f7f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14db25f3-41d2-41e1-b0b9-28a40d855495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33cfd08b-ef6f-4222-8791-c03095780957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d257a1-814c-440e-9c95-5a4079a90948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bb859a-16a4-4b47-a615-b1e8e690ffd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59bda6d-5315-46d4-bf64-776cc71fa75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942cfb55-c582-477f-96b6-f646343078d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a9a0bc-735e-4325-9325-35d478ab4b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7b596a-ea4a-421d-b766-6370303cb662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd51f1d-493f-4908-a17f-768965a10312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10697234-23b1-4258-9fa1-5427b10f2c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c5918a-2856-4080-8019-39d32da777bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56465ff-ced2-4938-bbb3-af1a7cd458eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079580a5-5fe4-45a7-9084-b7f7a0ab343e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f83ae6-2dfb-4041-8074-790d6993160b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c518c0-6142-40f8-a9bb-499ac8c0c416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ffc112-b292-4127-863f-212fc281fef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1593911f-64fe-4b82-9eb9-a01a74f03d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b16c5a8-e00c-4f33-b1b2-61dbfa41fc7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e694da-686f-47c6-8dd4-4bf0f1d43990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d89cb0-0fca-412e-a6aa-248beb1188e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cf2a7d-ab12-4ba1-baf7-31a74b1bba86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c6a4f9-5dec-4606-9981-f8175d53bd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae427e34-1787-48ce-b391-f99013cc1af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c410cc2-e591-4725-9f33-bf7cb9cabe2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb3cd59-dfef-43a7-b509-b3cff66fcc8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5941c007-b46f-4987-8f37-bf0b7aa52efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d027bd-b28e-42ec-b9be-ce7cfaf303ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f87e34-3212-4fbd-8021-b2db6c9e69de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6af3e28-6e66-4925-8207-64c87fee64d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb6f26c-bb4f-40d6-8e25-695535c3c6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a267dbd-a365-4e5f-b59e-5a02cdbc28f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a27e0c7-0209-4835-a310-0ac82851d9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffa8468-741d-4151-9ebf-3fb6602caf6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c102c684-6966-4725-843e-1ad3f8e12dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53130fa8-a84c-4d85-816b-7071bb564884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d783b08-747f-4d1d-9c3f-eb226219cfab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9a2c46-4443-4c18-83fa-feda92b5d0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15741b62-1183-4784-b8b4-3e0889301e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6f69d9-f975-42d0-a190-8e942a41b02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a30f965-190f-4a63-abdc-d0469b8f0281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e251800-1c32-4ebc-95e7-2813ac79a199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c3afc8-b8a6-4204-9d8b-5fdcb10aade3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60e27e0-0e5e-4bd4-b1be-5891964696c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751d4c5f-a5a9-4c22-84a1-8fa466096a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc35f8d1-328f-433a-8d64-4dbbffdc588b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6d7c4d-0d5b-4c4c-b6eb-0dc460257798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1bbf8a-2282-46cc-9f9c-d376793d35c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad7bcc4-6a59-4ea4-878b-66bb527f71e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4819e5bd-c8e9-4347-9fdc-6b11611b88d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af275f7a-64e1-4e24-b269-de7f17fc6dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59532a99-824c-47e6-9b96-5a26b851eddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689ca4ca-9d7d-49a6-9a37-87768e2dfb85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e39f312-1fc8-4cdd-bc76-2d125dd22615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3c9c89-723f-4cf7-9f35-e48571a1fd5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9457ceda-25fe-470e-9be7-a70f488a6d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873f3d12-d2c5-4896-af28-497752357308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88eb691d-82d2-4a9c-b052-a4b68f96c775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a04eb6-fc52-48c9-88f9-add317e81c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3851b5b4-078b-4093-b36c-dd7ad338a28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da83dbff-2f72-4e76-ab94-e3b7212c3cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac28d11-cb02-48dd-b301-47e7c8e36f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b3a696-5f39-497b-8ff8-0ff654fa197b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a205552-1ad4-4526-9ad4-ef6f85f768e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceec36c8-b36c-480c-a81b-910f3f7bd563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acceed19-bc40-4e6a-862d-54fcc807f9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ee0087-d610-4cf2-b782-c0a1360517aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991d1566-b2ae-4ba0-8e36-a8c9cbc48807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff8d405-15e7-4623-a8bd-7b1b669abb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec555e4d-a91b-4921-98e7-16e1b2f2aa35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39853e5-29f3-4d66-88b0-afd9edc0e14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab0991c-ecae-4eef-b0db-08af1df5dcda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39025630-5831-480c-ae65-d3c5ae73111d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1590c680-e07b-4098-b0eb-60c59936612c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc9febc-cdca-4699-9510-23ffa580824d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60161f3-4b8b-471e-9466-dcea546de30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f15e9a5-54ae-4e5c-ba24-b53f9df6330a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095ee270-6962-4ef8-b780-5450f305f441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a896b0b9-26c4-4e30-9dd3-35208b69d088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67351db-5ebb-41a4-95fb-1e01d553695a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d2a181-dd0a-40c4-b97f-f8a626173c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f383577-6ae2-4865-97de-75127037aaa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667dcfb9-1678-4736-8781-6ab5625c8159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da66fecf-476f-4f05-9c4a-3a4f91eae78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2840276-0743-4aea-867c-c193b37f60b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcdb7a5c-2078-479f-8d09-21e48a71643c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9837bc1c-4700-4727-9af3-94ee06d47bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce77ee6-f850-438d-a717-5054b399c63e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.83.43.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd39bd8b-6a1b-45ad-aa2e-f157839d4f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d788e228-11e6-43ce-9323-9961c3832c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca5489d-7ceb-4a5a-a85d-de9c2aaf81fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d3866c-ae55-42d2-a229-2bb911212f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707ce1d0-a168-4eef-95d9-5fa53e3cf1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7abe22-e0f8-45d0-8e04-ef00bb667824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93cc747-a0f1-483e-9b32-a05e7cf7fa7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66567da-7c67-4f06-8320-e001f029d7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e42f5c0-76a0-49d7-8844-d08fbf8c9713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc96dcba-ca01-4fd8-8fa1-eb8e3aaa9265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fc91a4-df32-4f49-b98b-f0553e0e54d6", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3458aa4-929f-4299-a019-175398ce4e6c", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0bbc7e1-2e78-43ff-9579-7e2c3d1be30f", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1304832-c66a-48de-ae4a-61858ba78da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52511bb9-cc35-4b97-98ce-65e88a661ef8", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b470c56f-2147-49bd-adf5-fcdbec7fb074", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e872aca-016a-4fcd-9f1b-29752a50da74", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e39cb31-8d6a-441f-ad47-6b41eff7245b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff1b5d5-434d-43f6-b445-1ca7d6415998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554130a4-89ba-495f-a4a0-6d7bb504d8bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e3fe27-e27b-4444-adb2-fa783de9705b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab3abe6-c6e6-4a1d-a897-f68746598c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02a0a92-a6c5-4cbb-b754-30bf8765f717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd0648b-584a-4020-a6f7-505263d1d3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4d1d12-4bd1-4e98-b334-518df99f27a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ba84ca-c92d-45ad-b288-4b4f0382478c", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237f07a3-76df-4b64-9754-a49e8e611773", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970c5bf4-b084-404b-9969-241e773ae492", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.109.175.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e6b0a1-f2ba-4fcc-b7b4-0245470879ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.181.112.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696f3970-4262-4723-b980-f9f6f9bf2c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e90aec8-57dc-43e5-ada6-47bfb31f122a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dae6285-37f3-4c4b-8f74-a52bff1fdcab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16f77b1-9bff-49dd-9c3b-c6f7ae0a6296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8486165-7973-4d44-ba5c-bc5c9364d285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4862582c-e483-4922-af5f-62719a70e3e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67251d36-eb22-41ff-b2b0-1ddfb673e762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af5f1f5-721c-4610-8782-62b0169a98e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333df2e9-3bd3-4289-bd18-a55269ca4260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0087174e-7b06-495e-9152-b621f954d02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f44a240-8beb-4821-8c8a-fa28d118b4ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4182236-532b-4284-8d71-b70f0f0230c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b50812-99ec-4a02-9ac1-e72c1415e488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72823ebc-4821-481a-9d42-5582c2055fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f229e12-c63f-470a-b529-c0841fe0d6d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630e24b6-7e55-4d2e-9855-177b3b1ea8d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7086f5-c21c-430c-b7ec-1cd387eb10f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac91bf46-a745-429a-adce-7e677fba97a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9c15a3-48d6-4bf0-b997-86cadd8120ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3a81ed-abda-4ee8-87cc-e4c745377a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcdadb38-54bd-4cf3-a8ac-7eac288c8380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b772d8f9-4e13-427c-a8c7-b4d040688472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9582e38-7bf6-422a-822c-73f18227315e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b5a65f-a73e-4ea2-a305-b3a7034027ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141de925-1d0e-4b2e-bd98-a9a98616c3ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7026ca-1056-4068-9885-f5c2258f7dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36035c1c-20e3-49c9-824f-72979e8e3fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb54f54-1a19-4abe-9686-addd4ca22406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747e6200-792c-4be9-81c6-7a02fef01f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb05252-47a1-4e38-98d2-6baecf28d32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8c1c8d-514a-4bb2-a43e-c3a3c44aeb64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780e851f-dfa8-49cd-9279-16d8af28864a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b60feb3-7fa6-4036-b402-e31cdccddf7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec5993e-1342-4340-9acc-7a8c3236ea37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5dcfb0-6a88-4e11-ad97-df78299813b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4316d744-ad6d-4916-a619-cdaeca122bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a878a797-7782-4848-8eae-0da4417b60b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05609c3-e79e-4262-8a68-c10e1c68cbbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5f7cef-e5f2-4994-80e0-ee6d863f2a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb482039-29f2-4d66-9823-47667c500b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053f5924-b0e5-4d22-af55-49b449919b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65a717c-c66a-42c6-be52-cbf6220a4307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad93a4c7-6fba-4a54-962b-974f60db1ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805f49cb-0fa2-4c10-90de-1880de29129b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1825e183-ced2-46e0-9403-fd6ed9e81aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f1b1b4-e429-4511-ab89-5f09d9bab6e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a58a831-ebde-41d6-8ead-08187a741c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e01c72-043f-4743-975b-8e54479f6c41", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898476e2-e37e-4329-a86a-74029f4dbdd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5688a30-488d-46d0-89ea-d16c24017007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d0bf2a-af1f-4c53-8b71-5b8541d7fe99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efd0987-6c23-4ba1-a420-5138f7203cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c543474-52a7-4cc5-93ee-26f9b4bec852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ccd384-5c89-485e-91ba-29cfb23dcae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac92dbb-6ec4-4936-b019-6db95aa52f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cfa3d2-cf05-4dad-bd2a-620afb9ba7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0be054-637a-4396-9829-05cd79ab770e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb6236d-9440-4731-b61d-2a7db636da0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb3055e-58db-45eb-9a3d-13b99d65f1d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aba6fd6-7b77-4c68-87a0-13322d44506b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedba65d-01b3-4391-8aac-f51ee172ae2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97504a2e-8e5e-42df-a376-c82ceca5689f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395ae790-1b5e-4b01-8ab7-c71a3e554bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25df8b5a-077a-4753-bcec-44c00dd54093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4309c9-e1d5-497f-b5bd-68d4ddb70ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2133ae1a-b627-4deb-b6cb-9402ad68458f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d848ea97-977a-4cc2-a2d5-0db752cd435c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d143e8-174f-451e-bfae-257695aa62cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a770f2e2-7961-4d31-bf1e-94cab8ba1d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52a93c7-a7e9-47f8-b9df-0def11f110be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72119a35-6909-47c4-ad39-246f38361ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e189b1f-8ff8-41e7-bd79-5a3e72af23ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd34d7d5-b1d2-4834-a017-99760930a803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43ac939-7bcd-4874-832a-b589173c7d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e0259a-206e-4fb1-931d-86d4a393f906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b139f5-61d8-414a-afb7-9eee52c16aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f705767-c6e5-429b-92dc-30b55755fb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337c723a-922d-43c7-87d6-7556d460c964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdd7613-db98-4b91-bcbe-faac9442fc59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ccbc41-4e3f-48b3-88b6-fbda55051786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de79c3ab-de7e-4560-8d35-58f4c9f9b370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7eba6aa-a7a3-4417-928d-ea15ac58d75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13ac9bd-fa72-4398-bfed-af4266338855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9735c2-0569-456f-add9-509c87289045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ea0958-6048-4d42-8e68-7e694c9eb8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba5e6a5-338c-4f19-bcf1-943f3a7160ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca1cf1f-cbdd-4352-8453-de8ec3f988b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d62fb6-71c2-4798-89c2-824fa6f232ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c782ff-31a4-46ff-aa0f-d08694b9036e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480e6ac6-e01c-4dc4-a543-c7a1cc602e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62ef1ce-a6d3-46f9-b689-d108319bfc10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14feaea2-7538-41fe-9332-f01c2b0b3de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2148f97-0999-4b8a-93ca-f294c25cddcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb653ef8-fd05-4804-afe0-a91b25547857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32333746-f79d-48c3-9e8b-3ef5a4a4c35a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862fe6de-b644-4e44-ad44-1444880ce16c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbe7668-bd12-4845-84d5-8807b354f3af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb5ebc8-cfdf-4d1b-ba6b-c024863037ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb3d296-b651-4467-8df7-3f2620a2aafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db166965-3ad5-403c-b694-f3fe9b09594c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e81c465-1be2-466d-aba8-337e7a900358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa26b09-a764-4a49-8f3c-0907e744bee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42f455d-3209-4177-9b9f-e403824331f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4165bd65-c6c0-4155-b2ac-c6f64a569fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722e03ea-c1c5-4293-9fdb-9be8dd49d21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df45694-c69f-40ab-ad15-52dbdde762ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c792f35f-498f-4222-a58c-b4d6beadf65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73734c2e-5ac7-48fa-bfb3-7fc16d8e3863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5f6044-92e7-49b0-897f-f2785f44f2f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125907b1-c045-476a-9f7a-3f1cc8ffe504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd36345-7978-4a5b-811b-32173405eaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab8c68d-9a1a-432e-98ec-78e230dbc341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e807c55a-0da1-4aab-98b0-4583996df9af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7984eb52-6107-484a-93ba-3f969c3c10b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5159cded-ccaa-47d7-b31b-89d0776af81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e973b3-705f-4281-8c90-6abf5743199e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06083f06-30b8-4359-a32c-eeb91937e82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b46a30-ce8b-4120-92b2-c30d3644e151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf46685-c50e-4f7c-8f8e-a60adedd5708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec370491-061d-4bed-a420-721c46267eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7990e6c6-6977-4d2a-8c45-a244c685a9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4c504f-7f71-4321-861e-1541e2de0fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d474a7-0a56-4c6b-8312-d3d6eca3ec04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada45ebb-064a-445e-91c8-c71641ca736e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c638c1-4d8c-418c-8890-d05da6691175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04237d9-6fdf-463c-a7f4-034530af3047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749f3005-f088-42bb-a438-8759cf2f0637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e244081-4dd6-4a9e-84cb-da418be47194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f89cc81-f1fe-494f-9c6b-04968f000d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee847720-a46b-4e87-b0d6-df521343fadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba639d4-f1fd-41b9-8460-7cad80922842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5380f66c-d1d7-43a9-be65-4f8880d31bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b22d374-8fb9-4f94-b465-517ce108e5cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b01302b-3780-42cf-9ce4-48fedaacefdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc044491-ea7c-4b37-ad76-397c9ce5c11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1e9190-bfb1-409a-8d5a-c40c65a9e295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d57f3d-ba3a-4150-be7c-29e2008ca426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd44c7c-53f8-46cd-80f5-e92f1ea7f6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6642a507-03cd-4f82-a14d-97baf2f2a84f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a209b4ee-29b7-41b6-848d-53030ea8e774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7314ce92-b19d-441a-9eb2-8fb2f8fba226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa18c1e-3702-43d1-beac-f2cb4942a32f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28363ab-a006-4940-a9c6-71346643b963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42be8849-5de3-4700-b478-e5d1ca154b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a35f7e-c0c6-40ab-8bab-fee0041b8179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30093940-490a-428d-9df0-7aeaeb8b0734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218f290e-dc66-49e3-ad11-bd009d64da89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35c735d-ad1b-49ef-8f2b-585be083cd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56b3cca-8079-4755-8a7d-b856ba8e67e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7910a8f2-10f1-4863-911e-b2ae7f2b8d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d83e82-8f51-4859-8ed8-862e08a0dde5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3f3a6d-5ae5-44c3-a40e-c986899493f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d1dce6-ab80-4d8c-b5a8-894015140430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208ffa5e-b5cc-4493-8fc6-a58717517618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad8204e-111f-419f-ab3b-1062be9e18bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98250f4-3488-48f3-85cc-4aae8747389d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef385bcc-9bf0-4ea6-b973-ce77a7330230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2070af-5958-419c-b5bd-1e3b8910be09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e33e7b-0d22-40ba-9298-2d160a5cf066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374f2a3e-3e58-42ac-9c6b-b730d2503822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b011618-a418-450a-b8fa-7a50f74caefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60510969-e1b4-40b1-a877-1dd73df3b497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcd87bf-61c5-4093-b203-5de63df5c73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d470f948-8931-47da-a44f-b34a5dfa911e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44eba7f-17f3-471a-ad0b-e2496cbcb210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1306ec-5a7a-4062-b99b-de677dba7eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0865f1-1dc3-4511-ac27-7e884b205eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e20eb71-c571-4c7b-9ffb-8721c8bd6b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b8d5e2-21ea-4944-83f3-163f952364a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb62b6d-66d0-4591-a220-2f26e0388129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d2bb5c-fb8f-4a9a-a565-fc25877dc6f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28884af4-c638-4f75-ac8a-c3d710999a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46d5bf5-212c-413a-b585-73d9812b971b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf0f7e4-d79a-455a-b276-9c6a9d44ee8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa54a552-e452-42e2-888a-e40651c2142f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca911b30-68d4-4814-af19-32feb132dd52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b96db7b-57f9-4a37-ae39-ea281f51f835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb8c6e8-c44b-487c-b46c-882c0ec2b038", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80f496e-738f-4a04-a7ec-0beb6ca69180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd0d59e-d05e-4286-9dee-a6812a1e8a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1913676-c994-43ea-9a89-c20735159f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09987869-8fb7-48e0-be9a-e3c58d3d9a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13826fc-ac92-4b09-96a7-f5014fc74f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6069c0-e29d-498b-9e7a-8ad284b186c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d21295f-d886-48d8-a5f6-94d248fbabc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e509df92-60c8-406a-8b32-2c44abcd38f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1802cac6-883b-49e2-aae9-4362a840b98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7bd7b07-efbc-4960-95b7-1197317f3b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71604a89-cbdb-4f09-b855-09fa75e779e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef7798d-2e18-4fd5-9bba-8f23d87b0bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417fe994-2e2e-4b4e-8e4f-8e7c0890e46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c2731f-e52f-47a1-b246-f6e200c80be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c80bd6-786b-4c91-8898-9ae27f3537f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30598c43-c931-4977-995c-8f8f45b4f692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7774f00f-0a4c-4c8c-8c2f-f8ef1667c02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a44ccf2-3a8e-4af4-956a-84cec5f527ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea9a064-227e-4e1e-a683-63e72cadd197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.11.124.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbcb9dd-fdfc-4419-a2fb-6ebe9be70f74", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.116.205.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05a4178-b77e-45b0-8037-944f584dcf1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b75fdaa-5a14-4395-87f3-504ec348ef0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4408224-f44b-442d-b83b-5b22c312d7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649180a7-64f0-456e-b2f9-db8b7c76206c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64540f85-678b-4297-a61f-1b819eaeaef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28910e00-cd37-4a9e-b51c-59e624cfdbd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7fe48e6-87e1-44a5-a46e-63986e9753f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80494d9e-6ab9-45be-9f8d-0229b90d2e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c74346-6986-4761-8ea3-34b53aca2277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818a216d-7307-4b2f-b5b1-0e2fb86f83e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761b80ce-5a12-467e-a82f-81e1a22fdb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab7d2ee-5e6e-4c79-a891-ac03c5ffdd27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71cb12b-f384-4a46-b340-3affc1f201d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0bd8a77-9898-4bb9-90fe-b21f3be58026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a483c79d-826e-43b6-87e6-62d68055a959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52368489-63ab-480c-86ba-831cf67bff9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81456c3-2e3f-4e07-989d-2e897f14ef76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7823614e-cca5-47a7-b0e4-dc80f92b6e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1231b646-640d-437d-bc54-52f1a687af4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222c4866-9b78-4979-b031-072076cd3aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0a65f6-643c-4437-ac6a-9ff4df85a9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fcadc3d-2876-4da1-852a-5830b43f4768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffc3ec2-61e2-4ef3-9e73-d1f170573686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088482b9-c986-492c-ae47-cb2ba337ca04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68363699-fb19-4e5e-ac91-c7aefa1b0dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e48c92-ba5a-4d26-9482-305c1da27898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba4afc8-911c-4cc3-94d6-1be164b3ca99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c18a10d-767e-4f53-8953-e4a7a3f78c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a57e33-b4d4-4554-a258-3d7ec5f2c2d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc0b18c-042e-43fb-a582-989075405401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c528ad52-1491-4aae-b9b7-74c742c8ea66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b174bc-93b3-491c-af14-5216c62efcc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f233690c-c34b-4e2f-b8b3-2794e652f1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd52d0f-36f4-4832-a6e9-bd2adeb4f37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--becd7809-bcad-489a-bfdd-33086cf6fe57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d427d8-78d7-47cc-a671-9dd9cc6157ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bbb9bf7-d830-4940-b99b-74355de8b8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e030646-248c-45fa-b246-295fe4cb6a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0fcbe7-18b0-4f93-b87d-3654c8e3ecfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5735b8b-c5c7-4326-97b0-2be9c8c6064a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f134cd6-04b1-4a11-ab3b-001468a0deed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972e7f00-7b01-4e01-a6f7-6fdca04c799e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab3da0c-85c4-4fe2-afee-644596de0f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd9f609-b115-4b82-9e44-5682af590c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e59624-1dab-4a0b-9644-236fccd2ebfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcb7d71-7342-448e-a1bb-9adc36ed9672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64553c99-7330-418e-ac24-e261c2b77ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0393d1-f3a8-4911-9898-434ab1639992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc7bd91-83de-427d-8ee6-8411bd7f77f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c793a1fb-d7e2-43b9-a321-e392d26e3eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a710724-0569-400e-9b26-f7275203554d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac7cda2-7bd6-43fa-99a6-bc689bce0625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917c5fef-adcb-434f-bcac-db5cb8fcd65d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d97706-6f8d-456f-b7b2-21a41361bcbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de4d416-f4f1-4622-8c6a-d7bdda17d391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d5641a-f58c-439f-9b86-a00d26da39c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e2fcc5-71e4-4787-88fb-54208987cd52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f27891-7e5f-4adb-a8bb-25dde36721cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eac4dc7-4aae-4e25-a3ae-40fa40680ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81e3caa-cdb5-455e-8b3f-399e050c926a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1246c45-0db4-48f3-a5a0-e680e83278e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f55035-e521-4fbf-ba45-ac2400832872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6122d52f-6a87-412f-8e6a-296910ae36e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b892b1-d6d9-4032-a747-aa88e96d30c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185e13e9-f3d4-45b8-91b0-1770a4fda96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78893c8-83a0-48d6-be03-f56c3eb68739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72981e8f-482a-4a1d-b18f-a761806495dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536c5fe3-2e9b-4117-9b28-8f5e02a4df95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c84b2ee-c3a5-4a3e-aff2-4f203cb8a004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b3d87f-47cd-4a2f-aab9-8d1d2cea6de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5312bad4-23b6-48ce-b90f-5f5761a02339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611c8fe6-15f9-40aa-bc72-1aa299e4b552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3dd1b1-c640-4ef1-9d32-49cfee7eafd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21fba818-f258-409a-a619-430f500cbc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076dda53-74ba-41b7-adf6-d074e8adb781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113c1bba-547c-4bee-adeb-511a0e1986b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1b27d1-6902-4356-bdf5-1df13f426ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6c83f0-99b5-4316-bf53-203cb00971c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4664afb6-defa-40cd-a44c-4f811f51dc52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d05070-9d12-428e-9ac3-bdd705d2c5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0343ce0-f948-4b6f-96c3-a84426d390fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c15c13-d43e-4e20-ace6-fc0c4385b814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f95946-09fb-41fb-b31c-571da8b58563", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826dcde4-6aed-4c9f-aee0-2ca005cc3485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6aa6313-e842-45fe-825d-f0d2b645f8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7de98f-c0d1-4dc8-9992-cc4ecf74f76a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a27852-e221-4e73-a638-234d51b98ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24bea93-17cb-488b-b06c-d5389f4ceb15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3338511f-b869-4aee-9cb5-da30247bc7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b564de15-b805-4df4-8773-13ff07ef6d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cabf4545-7315-4a9f-ae81-8216b96a7d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d58b803-ab0e-48b0-8379-9071f6b8ff1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a67baa5-a3da-4630-8e2a-8ac95a373755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ca2ed0-cd81-4104-8d4c-f9e9833a4fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92aabb91-93aa-473b-ad24-08c62e13e690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b35b64-b243-445b-a235-04f22b3682ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e1c48f-a01f-4cd1-bbbc-f58fcce9145b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1913341a-1bb2-4fdc-be38-24b3c2ce6f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa8a97e-4ae7-4a79-aaa9-e3724f40ee86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b080901-bbd2-490c-99c1-3419186d04ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd8292f-8388-492e-bcb2-bbd6f256c66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a435826-58da-4e7b-bfe5-ccf3e4f568b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b843e087-6c4c-45d9-97d6-3307e5bcb60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29d56a9-56c1-4003-aed7-ed92d0a1590c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24de467a-16c4-4bb1-b41c-34e7f78bb2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee3148e-25d9-40f7-8b8f-b39509ac96a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0dad3b-44ad-4834-875b-eb1a3ec60eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e377fa-8c77-4b82-97b9-11845c3cc581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430bd99f-19dd-4e16-b374-1f26279c0494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bc45e4-fa29-4787-b408-7f6a271145b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9eafab0-aaaf-4383-ad35-6c9a36f90e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8baf84a-591f-4e7e-a583-0762e0d07106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fe4e00-304c-4f9e-a9fa-9a6734430e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3fd52a-54a9-4065-8114-e2f02ce5a63e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b590e948-5587-4254-8e4b-1311fc29d15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04ed3f0-1196-47f1-88ff-2bf894eeaceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209d9207-af8c-40b6-95d8-361b94f185cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb086330-44dc-49ef-8f87-1a761a8f5da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c1e1b2-5029-473d-814d-936bcd8e5042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fafc93e-a880-4898-8df3-4779f207ff29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c44164-3683-47d5-9569-1d6f86d4ed9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd22552-026b-4488-88a2-abe57f928038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b006f19c-ebd5-4aa8-94d3-ee64d9f14b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be15f4b-f267-4b69-a823-a4db803e8578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614b0312-f2f1-4c08-a728-f330ebc2fb81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c125fe4-3472-428d-80f8-4e17a2808fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645d9d5a-98b4-4706-8f2c-2aecf3629aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7367f80-c44b-465d-86a2-e28b016590dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19179ae5-db00-4227-92b8-4027ace97552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15296c06-5790-453e-81b7-616a864b6456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64707bcc-dfb9-4433-a207-fddf4993a753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725b7a0f-0360-4ebb-b489-cddadb30ba2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdd0616-bcad-4b39-bd6b-cb6cc51290e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4f20d0-fe6f-4a28-9a29-eb1dac42f4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26af066-425e-4be7-815e-399ab6db6bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294f21fa-16f1-45e8-bfa8-37de8bdee51d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301a4166-46db-40e7-8829-d7a88ae68262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e62bb4d-06ce-4fb4-b305-96db7e68a2b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40a4d24-d5f6-4cef-b8b6-7e0938422094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4cfd5a-f9a8-4e08-929a-85f6a8121ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0eebcab-0d56-4620-a201-e655da8ef8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa7676d-e93a-4d27-88fc-f1773b88004c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbfda7e-4c6e-47e7-8d20-0c9fc1e242c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60172db6-1df5-4ac8-b410-9de343980266", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d2cfee-0ce4-489d-9024-9036aebbbdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a808b89-0d8e-4fd2-9315-1adc073403ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39fe129-9cc6-4917-9686-cbd9407f6c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe7a383-156a-40b9-bd7a-ec017f00d145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4215ff20-bc37-4d95-b3dc-aa86d54b0e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d62489-52de-4d8b-b516-f167eb1dec48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22dd938-e5d6-48ff-90a9-2c6f76084544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508a7e1a-210f-4b2f-8515-2ada58f47ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d4b6d9-f0f0-4646-8927-6abc200aa094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d1253f-e8e2-49e9-ab16-98a7ed7ba458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5266730d-d624-4a14-8411-a2863c9b6249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30245f7-2568-409f-90c2-d035d586c9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69c5761-9314-40b2-92ae-ad9a467d2cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606b5c2f-577e-4d13-a601-a6961c294d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1081dd43-a79f-4b48-90dd-45cdbd70cd83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aaf782f-436d-4eee-8cc9-fad2cc056e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea419f63-ebac-4388-9fd4-c734665022a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96cbfa62-749c-4c05-8b73-b5d870ab2bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a87599-6f76-4d5c-9398-83691ca7f841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bb005f-12f2-4bde-9a26-fcdf1f213dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d1cb90-a077-4774-905a-21727e1ca2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996eac2c-3894-4362-98e3-38ee5089e2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362abb95-fda3-47ac-9b68-9deebd6465d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0ad06b-97fb-49a9-b7db-9091a8a3f7d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d538f1-7fc0-4082-bade-6bd9d88d7c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eac56ca-5c27-4894-901f-88af0d446288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b549a408-c471-49c9-ac85-b22c2fb7a687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7f139b-cb75-4c53-95f2-e17c7cc2d3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04ce0b1-3c39-453e-b308-a696a029bac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3585c247-d0c6-4a1e-ac9d-484b2007edaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d761a6e7-4491-4330-8f7d-dec8df5d8fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c6a967-8c15-417b-b850-c1408f9594d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be833497-116d-456c-b1c9-5f1c0b5b0603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2509097-cb54-4114-89d4-6828e0140275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f4da94-35a3-4683-a2c3-b93744c06dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02f0cb0-456f-454e-af98-be7e85c611ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384767da-aaac-4df0-9f5f-7167cc97cd2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78b2538-39ab-4dbb-8452-e582bcd14d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b742ff-22d1-40a7-9850-fac3286df010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93769f8-5f36-4923-bed3-44b3d1d5b6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39c5608-96be-4938-b21e-a11e54ec034f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46d7e9b-6b1d-40ea-b0ef-a7b6a885053a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862ca2d7-1cb1-442f-808b-8cfeba958edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0436ffe-a375-4a43-aaea-e748d254dfd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f360f0d8-347e-43a4-9a83-d67e8d32eb93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6977cd18-64ae-4e5e-a0b8-9b5fe3e7a5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ceb4e07-cfca-48d3-b3f0-98bfd4fec459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41fa94a8-6d96-441c-b410-cb70eb36d9b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62cfa4b4-b226-4617-90d8-5ace3e6acfa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e3a43f-ffee-4a64-ba15-2782fed2e3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f1c466-20a0-42e2-96cd-b4399d619cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73bdf6e-28cc-4cd4-9c0b-e83aa39d7825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368fa137-010d-4a76-9366-02c14d29f28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250bb53c-2ba2-4ac0-82d2-6bfcd71f7618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e683d65e-c6ad-474f-98f9-1c77b7acb677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b2e10e-1b6b-4159-8c65-5c2d9af23201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2164a3b3-0ae0-4d7e-b896-296f2f7020c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5bdc00-0674-41e9-8b1c-181f9676047e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2f2a27-566c-4b2e-9002-f9a1501fa260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821f4c8d-31e7-446e-81a2-d132145055b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbefe03f-ef10-4106-8510-4a0b60e222cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4129b0-477f-4b56-9d15-01bdaff0479a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93aedd0a-539c-4c31-acea-03ee3d7aded0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34dc087-f303-4e99-9a97-1e7da85583c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776fd232-5715-4abe-84b2-c614f4e62891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f6749b-2df7-440f-946f-ed9387da77aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab88c14-31ca-490f-b8b4-bd77a4b668fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01873184-6c7a-410e-b03c-a8ac74a8e627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7e22d4-3618-4de1-83d6-46aef3f0aa89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4e356c-d4ec-4d99-9066-09a52fbf9164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956a82c7-a047-43d6-9cda-2025a05152bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7cc0fd4-5fe1-4eac-a459-74fb8e34fb44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a28a6f-b4f7-47be-92f8-d1d3421b30dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1927f64e-9006-47dc-ae18-fb1a5d070376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55163347-54a5-42db-9083-92d66dd3dc37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3147d28-bae3-4439-b5fb-a3e0ba8906cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273282bc-17af-47a2-a0a8-2514a9cb1d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815f4e4a-f188-47b2-9e15-97308ed17077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5a2165-2ef1-4183-a464-4f276ad658b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8e7294-d00f-41b5-9874-9c2184df1935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65969de6-13cb-4971-8cb1-c75685f4df7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec11a58-c615-4a45-b7a1-81b2dabafefc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130dca98-c55e-4f09-83a4-97f4a9ae22da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96eb0e7-7d0c-457c-b633-e4a0cc1600d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f7c18e-d66a-4f4f-9bc3-5b3589c81d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b0a3a1-0ccb-42d3-9ac6-080173f54129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ac77b1-277c-4f1d-899d-18efcb3c475a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18947d6-b16b-4145-b35e-7d29b87c3940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9c3488-3b39-4556-9641-12d2f8556aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d9c845-9f09-428e-9619-acc850fbb656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6acf6b15-d3fa-4ae9-811c-225ac5c4aa24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3514103e-6501-4f41-aa8e-f3d3fc16d578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e29bf3-9ec8-4d8a-8cf7-1b80d6f69d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9e23af-4175-498a-9d5f-ad5309e041e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5985082-59ff-4bde-a3ba-2cd6b830be08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c0b3c5-4762-4038-af8a-6b882060b590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d10d41c-7859-4bfa-a38c-18e8345438ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af777798-ba9f-4d12-a0ff-a261ba1a848d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c79345-27a9-4baa-a51b-020029107e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb7fa1c-901d-4c0c-af1a-a7f93c352bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311d879e-8786-4fb1-acde-fa66395bf540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc615321-01d4-4494-aba0-0a937f7c8fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc104b7-957f-46df-9afd-56bf767b2b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1a6903-901d-4422-adae-f7c6cac107d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d15c10-262b-4bf5-bb9a-fc55e06c6267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7ad19b-fac9-4365-8739-4b03006641be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a74ab3b-55bb-4797-bcad-0548bbf1e4c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5db9386-cd72-43bc-a947-5c1b3740b1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca99717a-d486-4181-8b6f-d81cbe63e5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ad97b4-15f5-4ae8-89d4-e377d5445583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9498aa0-1239-4199-8d2f-45d5a1bf2be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.92']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1b3ab3-4d99-4f56-a322-359130fa2bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9b5ec9-ea5a-4f84-b427-18a254b50af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c28f58-f7e0-44c5-a39c-9e4cc8af3549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.97']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d242d8d1-4783-4cc2-a0dc-70f3eeb27e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2416de-b857-4a4c-a331-50f7a269f1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f637c44e-71f0-4eb9-b9b7-916f414ef0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22cdc259-1a77-45b4-a172-1b99a91dafbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82674425-d63b-46f0-9296-03833004af03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f669e3a-0c92-4175-a624-34509e8dcf49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2ba9de-e1f4-4a8f-be4d-499be2a169bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1728e166-b954-4b11-b878-a1f42e0fd966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b82abf0-13ee-4e8f-a85c-a3884851ef3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4b91f6-562f-4519-bffb-44831e98aa85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b24051c-f1ea-4b1c-ba61-e7cb40495256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ebc2b9-6a0a-443e-b48e-7d32d758e390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6c04c3-5f03-451c-93ac-443b90dbb89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d67f3e-1715-4e46-9006-7f383fa2684c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3a4270-e800-421f-8726-ac0cb784551f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad82a246-c15c-4140-bc91-ca949e065e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e06ff1-13d3-4bf0-8a78-e3a72b999219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1459f7-67b2-4c77-ac76-280f0d312f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b161d319-3c7a-48c3-99d8-4b09cd79fcc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb540c0-979f-4d32-a422-17ce649333b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81001b74-7227-4291-a574-d511ddc3202a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b489b773-d660-4e17-a8a8-722cd6ad078e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5070c215-79da-4338-882e-ec652ba45df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ab3ace-8fbe-4e0d-baed-296a169493d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2cf796-a688-43e2-b87e-94c99924248d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b575226-0ab3-41e2-8dd3-312542e4d50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bdd1650-a5e6-40b2-b503-7ee1c8145525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b43e82-19cb-48cd-8209-68d855233ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.85']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf4ad0a-e90d-4135-8865-193b37fb6349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc9d6ec-67e6-44cf-b3c8-f771f97111e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a08ef1-bae2-4419-82b8-d618b6677463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91046b71-8f30-4a2f-b52d-ad582f9f9036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb0a07b-b68f-4ffe-8631-4a7ff781bcdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eeb95a2-80f9-4ded-97ba-91902b592724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.163.122.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02dd03d9-c2ad-46df-9e56-e304fb9a98bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.171.107.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ef22f4-a812-4115-bcd7-f1088afa1b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2118d399-df6a-4cf0-9b4a-f1ffc2207e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb16695b-9ab6-469e-a3d1-81e295bcbcd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.210.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2686909-87e6-4901-a733-e0ee97b1d82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43920156-0d02-43e2-a0ff-0543fa0595b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42866a7f-1735-4919-a3ce-cfd37a6a6cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0f2fe5-b247-454c-b800-1c4a4a5f344c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.215.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2911a77-d7e4-4413-90e2-d8fdc98c17f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86dbac19-b83f-42ea-b383-5a17d5224c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c424da28-7d77-4785-a755-132acce8c92c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.32.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7cf321d-dd1d-4e8b-b0c5-c54dfee6a48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.32.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c6ffbf-a754-421e-85ff-d6c5ad5885ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.34.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091951c9-38d0-44b9-8fdb-9d777c58a211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.34.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b349d0bc-4571-4d53-b69d-fcd48bb55be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d01cd60-c770-4aa2-ab89-f72459679f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe3446d-981f-4a80-9d72-2ab1f8e591e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8db0b6d-6a25-494a-9694-2c893646a319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f50a049-32e9-4323-bdfb-77e27f66f08c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87f7aff-fd42-433c-bf37-422f9b0d25ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc32dbc6-8ff1-45b8-b4a9-175e62190d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d15836-b192-4ac9-b5d8-adfd6caf099a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26a4df7-56d6-494c-9de1-3dd0e660beda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db500a9c-d9fa-415c-b2df-27061e99b1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735fd252-2f94-4308-8eff-52ddd9cb85c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a97ff7-d4ad-45fe-b58d-c09a64f7fc83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7b0e72-a5c6-4eb8-a8f8-b6e45c601d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3cb3e5-84c2-458d-80df-7c7ddcc88afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5026b0a6-1157-4895-b33e-0d89441ef195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bfc394-58d5-4e13-9db5-872b7f6b8234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85426e4e-d014-4651-985e-5ba18c1a74e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ee964e-7f03-4d57-b812-9084531e4625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.43.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c11aef-50c9-4bf6-b469-44446c2c5d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.45.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92b90f1-8a77-41cb-9672-1982bee23d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.46.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ce601b-bdb8-4922-91ae-d76afbc17239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec6124f-14d7-4abc-b9fd-1d2665e70773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f9d31d-0fee-461c-acbd-21035995c6f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec4b9bc-7031-4b7f-88f4-95e43945d061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.62.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--addda44e-7c38-4aed-9cda-627402bd88a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7fc2aac-c8dc-49f2-9ffa-5fd286b392bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b206a642-d339-4226-86eb-39759d132bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.240']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e5092b-cc7d-421c-86b8-9d388997b0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5499e85b-c6c4-4dcb-87ad-07533c18343c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7177e8-9298-451f-accd-dc7a6b35b09a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.69.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8e6604-28f7-4f94-95ba-975164c83e3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.69.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c990365-d8a2-47e8-9848-339339332c8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.69.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0bb24f-a4db-43b5-9f05-453f33982a4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.69.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e02171-afa9-4165-b836-1bb329053cf9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.69.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d15b67b-df4f-468d-869f-93326ea519f9", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.56.85.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d25647-32bf-4c5d-b52e-43bf4d93c33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.90.98.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c145cbfb-7d3e-40a1-b291-cbd9e2f8551b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.215.236.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04247f6-d806-492d-bd56-8346976a21ea", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.71.55.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0833415-4706-4417-bc26-bace4d69c498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.168.31.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f34ac52-2804-4f30-a24b-335e0f908500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.178.167.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bd083c-83b9-4e07-8f98-613b72deb16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.211.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ae3e0c-0e31-47a3-9bf8-a65a3cc72a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.222.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8162c4-6e07-449e-a844-4516ca703fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f239b1f-7210-4b0e-8639-c6a8d09abf07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.61.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3c1fcd-27bc-4cc5-a4e4-e49a84e48d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.62.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e025407-3947-4c6b-a564-1989016a0cf7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.67.112.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3043b0d-b528-49e7-bf2b-db47ce054fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.69.177.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa84589f-7d12-4855-a2a2-208f90be97ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.69.177.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0dc2db6-ad08-4968-95f3-27ba00b71334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.137.151.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564e0fa0-05da-46f2-b4ce-3ead42743169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.210.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d17b503e-a3ad-4c7e-a082-06f760d3a0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.210.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac63dba-a207-4c53-9935-bd3f028d3954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.212.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1870b9f1-933f-40b9-aebc-1c08fc89cd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5858689-28d6-4f93-a36d-2d10bbb92ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb087d5-653e-4a73-a129-b01c227c6c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.216.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3940b4-ec13-477a-9b11-93ba09650a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5492944-0352-4929-89ef-1b8f5d2c9cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.221.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a7fd39-3bbf-4870-869c-94a5a4c5ad30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.221.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b372e4-8751-4a2e-adec-02f0e95ac103", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.7.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023dc1d7-e7fa-4214-8a01-6cc3fa1b54c4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.6.251.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6865431-fd28-4ced-8e90-1b4235984cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.63.64.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa514a49-5f75-4756-bdb5-03c85d64210b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.74.29.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab97461-9fc2-4ff6-bc70-c2353dbfc1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.87.221.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0346ae-6b02-4863-9ed4-0b7b930ff1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.160.185.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c70c443-b6a7-48f7-808d-e90d551c79ee", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.54.182.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a1e57a-1496-48b5-ae4c-ace51b310332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.178.110.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c06046-9ae0-48dd-b3ca-cb9356186240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.19.150.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2067cb69-9fbc-4017-a9cf-c28aad562cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fec6940-0177-4cff-aff2-e581913d0c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70804c59-34a3-4950-9dd4-849942a0c4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac09145e-f5c1-4678-af02-3a65fc39489d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973c6fec-3a20-4d2e-aa95-9498f64556fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1277547-5946-4413-ae24-b8bc15a9eb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b8ad04-d376-4a0f-a4a5-f052dff723d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df3feca-0fe9-44f4-9755-e41302205f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9c5b8f-53ac-4055-bfa1-6f37e81c12b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38636e5-d183-4814-b384-bb8a68639692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77aef39f-f722-4f5d-98cf-576c6bc0350e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c0b6d9-3a05-4718-95d3-8a6cde77a1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe850891-4da2-460d-bd9b-c7a3c1976963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3bfd4d-0d2f-410c-9929-772dfc0eb10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5b17d3-7419-4db9-a405-9d13f6820702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25a6951-8310-4597-89c6-9d97e3ce69cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55073050-2a00-4160-96f6-a7d7cc47a30a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6115214-3faa-4f53-bbcb-a7d8d1d41419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d685b580-4b79-4891-870e-e77acec1a251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.216']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d13d449e-5835-428e-8949-78a976b07517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1028f1a5-62a3-4ea5-a3b5-21639ca7ac75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.90.30.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc26942-1863-41d3-a0c3-f3050ef8b079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.135.97.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555b903c-df70-4dfd-9f7d-aa73037f4958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.178.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa13f107-ae72-4280-b44f-bb943658a945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.186.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e325e57-1c63-4cd7-9be7-79832a2826b3", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.251.5.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19985d67-fe6b-42d7-b79b-3de31081a16b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.33.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc8a5d8-d457-4e88-aa14-24fb49a29106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.90.88.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efaccbb-b31b-45b9-a22f-9754e86b79a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.141.224.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9279ed9-2bd0-42f3-9a1e-7f7bab57e7d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.204.137.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ee6672-47e5-45cc-a2da-52f3b3d127fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.94.174.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cf1109-7689-4d81-9812-bee91d25f788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.240.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9537e5ce-aaf6-4696-82a9-30a7b27530e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eea3441-8f27-426a-9c76-c1922d1462f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e4b488-f91f-4250-8cf4-acfa587675ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.208.181.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f70d547-cd64-4992-af13-330e7b5a3036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68470118-8a7c-49a7-bced-fdc05b73e1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa803ed-1b38-47dd-807a-c41da34c612f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.108.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44863d6c-6171-4977-85c7-3631e7da44af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.120.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d9b666-3908-41d6-9a6e-1745b7298aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.121.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325564db-977b-409f-b276-8ae6d0b56724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.143.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f377cfa-6b0e-4fe2-8f5e-5df6d9354377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.185.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d5795d-9c1f-4b2a-90cd-ddc026f7c26f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.203.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540b3562-ee86-4bb9-9b9f-c12218e442fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.84.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8112b106-06c8-4af1-b81f-2d2ad790a4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ab61bf-3352-496e-b9ca-d89e4e3dcff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b666853-9ed0-4718-8bf5-6f8cb4a7cf7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449fe2de-7d5c-4bdc-8a7f-2783d4e2a8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f736c38-9b78-4966-a320-7acbb633e2a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.201.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f116a8c2-0f2f-447c-beeb-405862b33312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.105.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78caafe8-f839-462d-83d2-13ccfc95a54c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.227.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98e1971-2695-4d81-8e64-8bc338dc1176", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.244.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e657146-6b8c-4796-856c-9f0d3b038744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b654e3-d3d0-43a7-8162-8d7e85fdfd49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b98b36-4933-4f31-8372-a0a201f99b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d928a4-d68e-47ff-9347-3dc3f95c53d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7563d0a1-7d54-4821-bc23-873d9469ee89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87816cf-849d-497d-a259-632d1af46563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99369c8-7bcd-42bf-927e-f25132113b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9600ea2c-a27e-4fee-b803-ee1723e2fc5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffc479b-5035-4bfe-84ec-f71f9f92efed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5474f12-33b5-4855-8ffc-94f50d9856d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58cf5e6d-8959-41d6-b109-d12233b55fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d402187-348d-48dd-8426-6796ec83a15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4648155d-7f18-46a1-8f61-c6b431e25397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96c7ab2-967c-4b3e-ab3e-0b4371dd482c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9aa0b7c-378a-41cf-b743-69029eed82d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e086af-dcfd-496e-bd47-ace623707a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0492cdba-18a3-4c78-b19e-62516268ea54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fa36f4-1e2a-495e-9adc-a7374071586c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7959065a-4cd9-482c-9992-1286858315ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa2d785-3be8-477d-8f98-603a60edabe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3f17e1-590f-415b-bc19-77e00a906512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90357686-972d-4217-8f36-9313b49234bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a40eb02-f98e-4bd6-857c-3b0edccc87c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bbd4b5-e65e-44ae-a0cd-17347aaf607d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8373fa85-4cd8-42f4-b7c8-8ac03647cc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63016f1-5227-464f-819b-f60d3c3142ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a567af-ee22-48df-a733-3e0273246495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d333a7-6423-40d9-984a-bc86aaeae32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868fc515-5fb9-437c-885c-bb37804221b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8058b57c-b651-4ec4-bfe0-00ee4e4df219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61cdfb21-fc51-4c39-a3e3-cd42b459c381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c33a87-dca9-409a-8509-d1507b69aeaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c0aa07-9f4d-425d-91d3-1e5f47a5e474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041958be-9cf9-4063-b2e8-8bcd41ae9972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408cb091-27e6-4a93-940b-6c7a6e45a000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73295dd8-c804-4cac-b1c3-0f6a6f85b3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f387e9-f1f2-4b32-9779-eacccc5d025c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159b482f-9c8c-43a6-8335-d7164fadc778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302ef587-7d0b-4fe1-80c0-8e65b4ce1ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303ab585-a74a-4aae-bf82-d296121d4876", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.155.128.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58ce9ee-b374-4c20-bec2-c0cddf88755a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.222.99.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed68796-2707-442d-8b68-8ed8c32805e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.246.100.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d996038-cc95-413f-a9e3-8d298bd2d0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.247.88.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80febc6-df99-443d-b080-8421bf0d612e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.31.73.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62af153-d556-42a0-949e-e542e5d5484c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.42.81.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a3d61d-c4f4-43d3-98c8-1f78b4ca7d84", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.78.224.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9417e18e-ff92-42ee-8d7d-3cbe6a81416d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.240.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62789fea-fef6-4c2a-8997-528733024576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd30d56-a958-45f5-9673-2b7b46218d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f17114-329d-461d-b3bc-4ccc2b7646fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70aee231-6c42-4edb-b0c7-784505501422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7843ab92-dcda-4886-9521-370021ca7d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408a6e93-b60c-4c8c-9428-0d4c75008a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d2323a-0a93-4b0c-8471-1ad2b2e9f5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebd2036-2e20-4349-8198-44c540d08f30", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.87.40.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5d9122-ff5d-424d-ab22-7904fabf3241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e477a509-d1b5-4944-8f79-19a6a78256bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ccd054-c7e4-41e1-bfd6-ce429ca85b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eae58c9-f93c-4886-82a6-b1d733136483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c54953-288f-4f09-a441-6aedb860c7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb866ddb-91ca-44c7-ac97-62b77536523f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.118.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afdf1d5a-399b-47f1-96a3-713f69191898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.66.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20071b7e-5b17-43d1-a317-a75316867abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057c4368-867f-43a6-99e2-ddc87612a44d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fddd314-6624-45da-8ca1-ef31d589ab45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f650c1-266b-4593-940e-f30892760465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.94.47.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2055a443-2151-4fb1-be69-587ff23cfd58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.95.203.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44814f5-e285-4e23-b03c-0a3b38fb09bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a626260-b69e-4ed0-a523-923a637abfe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4a71bd-70be-425a-8a43-51c28848b0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed70eed-6c31-45c9-a3da-ca79c485c14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.89.84']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba0b27f-7e86-4052-b587-c7536d67899b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad00a288-dd2a-4545-84cf-037c864f4f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257ea3da-14ed-4594-acd4-8d35521bd54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7817adf-0ef7-41ca-ac66-aab51548edb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286f6369-d6be-41b2-98b5-a95034c4d4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c2fcdf-15f1-4852-a6b0-0709a18a6c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f954fc4-5c13-4f2a-b4d6-bd183d061272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d857d9d6-e20c-4f3a-9400-304937ced604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2521b374-08bd-420e-9c0e-65df4f447b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cea3c2c-1be2-411f-88a3-1e9a90ab51ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77296503-39dc-4875-8aca-7b02a893a85c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17bb2c0-faad-4e1c-b6a1-492facf22e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43db9e7-ad7d-4d2a-84d3-ca9f54efbca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d9e5b5-af9b-4eae-b404-09199509fa5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a12c6e-1c2f-4e0c-80e2-100c937b5877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca5206e-30e2-4df3-a2ed-d27d31fc1daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08eac1c-f900-4d5a-9ad5-081aa3891360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2295bb-d5bc-41a3-9cec-f1b6c351f9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56999f12-8fa2-4614-b610-c6afb4a69813", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.165.252.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0186ae8-2da0-4b50-af50-824aae77afe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.190.177.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df34867-73bb-4393-8186-6d7cc89f2838", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.47.163.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3818f96d-38dd-4eb1-898d-900cc5744cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ef10c0-610f-4802-b11c-57fff88cd459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d75fd25-97af-40fa-a6d1-a119ecd95768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebda44f6-3bc1-490e-ad5f-37ccdf519388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36f7f3b-e8bb-41db-9871-52244ac43adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579f16fd-24f6-4069-880d-fc5f80479a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa92dbdb-87a2-4de3-bbf0-0bbd530c6a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2021-26855. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd883557-e8ea-44b2-b687-5b535993e912", "relationship_type": "indicates", "source_ref": "indicator--aa92dbdb-87a2-4de3-bbf0-0bbd530c6a3c", "target_ref": "vulnerability--21469e18-4bba-40be-9147-213a16600fc0", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c2d638-2d89-4344-b476-979f8370c4d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3bf702-678a-48c9-b4d4-0ee155e99c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.82']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d0e1ff-3d96-4db3-ac0b-2e63f056aa06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcc0a70-b1a3-407d-9220-426f3cd8a574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9bf7b49-fac2-41a4-8e6d-1bdc3760548a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2e1b96-2af9-4bf9-9427-9e9699385fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df762daa-c950-438d-82e0-12948c14ac7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d24895c-3832-4451-8c66-6e37ef122188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1619049-665c-4f27-be73-7052d0a9caab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ebac60-e4ab-4cf1-b95e-3f2930bba4c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306338da-6bd6-429e-94f2-32c78025d8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc168d2-f8c3-49c4-9a88-795d7e81b881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47cf92b-416c-4de8-a984-92a0ab9c01df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0f37cb-95de-406a-b4de-b05077dbe540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c2a6a3-533c-410b-ba5f-81121b562b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce44922-4fd0-4da0-92c8-0cb49d17b7d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.127.222.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d688ad-6db1-4349-9738-4934b631af01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.81.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad3f453-fa8d-452d-bda8-84c6e0676bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.152.160.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d654af-17e5-472a-bb17-ee4ec421627e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.152.161.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79456d0-6a7e-4806-bfbf-346ba0b118c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.152.162.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c79dbaf-4f9d-4e67-9de6-249a69ec189f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.100.130']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8aaa0a-bfee-41b0-b22d-aea2ecc42e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.112.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c93b3e5-495c-47ac-a8f6-5fbe28bf5d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.116.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30e1fee-4111-4e3a-98ce-9daecc6a4d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.126.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dffa901b-64eb-44c1-b8f3-282c9e7d3ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00938cf-e5ef-4b54-a95a-7ea96e095f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.212.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4300ef-a649-4f8a-9f7e-edd1ce2cf2cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.229.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6342b90a-5002-464f-9231-52d1fe726382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.232.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b36272-264d-4011-8e26-ffcf59291da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.233.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ae6549-ddcf-4464-be07-b5b88c6e14e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.239.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d6e3e3-ad4e-4aef-a1da-ee347f7aeaa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.83.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd2640f-e138-4a1f-80ce-67c2b6d6aabd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.88.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ef6718-f94d-44a4-9a40-137f925388e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.90.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d420cb-838d-4d54-8f5d-7080dbfaf800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.96.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3022655f-1ada-48eb-9988-41d1e60974f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.96.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20beb0d9-f1fd-45e6-ae67-036555e6a808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.18.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968fcd1d-1f22-4033-8a63-0c70d6c51017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.0.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebf2961-436c-49d6-9232-eba1fe0ae602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e778b29d-e9eb-47dd-a7c3-5f9484937a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae00600-ca99-4470-b9f9-89525667d95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.144.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a47764e-afdf-4dca-8939-97abdd2e852f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.145.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafe0665-089d-4dfc-875c-3ce4f5797739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.149.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51374765-cdfd-4eab-aa0a-4a32a34513e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.162.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b647ab28-0f15-4b1d-8c9a-43e996514cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.171.136']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ba86ee-4a32-4678-8d9e-4347867674be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.21.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cf58a4-2e26-4a08-a5d3-699fcd84e44e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.23.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa17c77b-24a3-4762-8b06-98d8f3cd9d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.26.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67eef342-1fe2-4ab0-8edc-1ff1580e2f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.27.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6735a37d-86df-4a67-9702-c98ef076d063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.30.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4124d398-620a-432a-8a70-a2c3bee27ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce6c28f-6e76-4495-b816-86371edf69dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640de68f-b390-4806-820d-576811a14fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.37.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17fa891-a17e-40b9-9d4d-b69913cb3098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.37.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c87f7e-b927-40f9-8780-647ca33a3c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4798d80-4a50-4fd8-b404-2526fe7845cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0921d81c-34ac-4492-9f04-c811c0e6ee2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b857c3b7-9740-48d5-80ef-614c7e6ce502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f67bde-d5a4-47e7-8bff-5b836087702f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d6546a-0bf7-4509-8764-9310f9545c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f7fd7f-de96-42fe-bcd4-1359955552b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0debd781-dd65-4ef2-944b-74c99a632bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7595028-d56c-4579-b7e9-2a64067b315e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8538e063-ed04-4ddd-a59b-3c039addb2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a668d082-3204-4f21-88ba-7f319d71f4c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.213.229.126']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da40a234-7c6a-4d86-847b-3f5f1f15cf84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.213.37.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40243dc0-47e2-472d-8df4-894dc48c78c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee0a32c-4e28-4b44-985e-3a988aec3d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372af996-07fe-42d1-a2a2-5c445cc1a1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9697273e-7cb2-4efa-8413-ebb0591c791e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45345ad6-f2ab-4123-8462-2a2b96b16666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541f70d2-3eaf-4916-a0f9-80c0a373a198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9316ff-50e4-4190-ac3b-eaee25708791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ac4ef4-3b26-4826-ab24-41ea32d4c4d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aaa0ae2-36bb-4252-81ce-74ea1eea7907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0709a19-b52a-4cbe-aec5-452537e148b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c620202a-14eb-46d0-9e8d-464345e4f092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be79a68-dd73-414f-8491-a21ce00db3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9d2f0d-5181-426a-8efa-03d8a3b65ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c0d430-9148-4c5e-8562-6a8f54826fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f9518a-993d-4cdf-8445-77fd3499ca49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c783bd96-6427-434d-984a-f48dbd38fe6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7c03ca-5b72-4a54-bbb8-d5217d8284f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bf6bcb-6ae2-4bfe-87b7-e02a8c45c364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfa22dd-2d8c-401d-ad18-8461568c3167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c466c1d-4fa3-4e8d-86ce-895a6c6baccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141040d0-f8e1-4d4f-95e0-800aaf7cef5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3858e71-7775-414b-9a2d-57554113662e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dad2b85-e552-4f24-8aab-bcd9f5d49578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203e08fd-f398-4d83-be86-5f15a459d8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07a1ac5-6295-456d-ad06-cf3418254f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.81']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77039da-b82f-4513-8658-fc3d9d26b5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587fb66a-6609-4b3b-80a6-62d48df32872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846d825a-add4-4c86-a5b0-42eabf6446f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e85cbb0-b709-4d0b-9259-2e4222314b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b44651-9c8c-45bf-8c96-e76f84dd92f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92990f0-6647-4a4f-bcd8-1ab2d373d036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f31c97-3691-4350-9b2b-7e1decdb68ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ac6b4a-c956-4e89-9a71-c1f60a908c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2bd901-8b7f-4a94-a853-605b557c926f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4617b771-fb92-48e4-af99-901cd9c76aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.78']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe89642-c15c-407d-a35d-083cf7c959e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660b1e09-2037-42cd-80b6-0b6ccd2efc51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.122']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495de675-ab9c-4a21-8aad-9030687dca4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6c9cdf-4fb4-4ce4-aa98-2b8b47ef7299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e5102e-0fd9-4285-b15c-c40f0e86b158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecfb817-4e63-464f-92a8-ceb5d1c2e17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca93f93-4e66-41a1-bf12-e928af692da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7674c1-6493-45dd-a1d0-62aa533070e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bfc8abc-7101-41f4-8147-2439ba5826b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.0']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23535343-09e0-4e16-85ad-6451482aa1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466ff950-8d53-4bcc-b2c9-d8449f29f037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8744a7f5-e0fb-4741-bb71-657acab35711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.220']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be5d67d-70c4-42e6-adad-9213dbe2f33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.222']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d0d635-f943-4d9a-bc1d-0046a9a0f95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1347e518-97bc-488d-92a3-281e2a1461c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20070038-4b74-43f1-8859-bdc10b8a28bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8ff751-0ab1-4d4f-bbc6-d657a09e2e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c000df9a-66cb-4127-8e63-13722e71d631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f32b2c-c51f-4582-bd98-a610f4edba2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728de72b-10b8-406e-b9e0-dfa310c228b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07805a1-3391-4281-bde9-3a57e30fc6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c028e5-609e-4c01-8e2a-f287c073ec58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e29f2e62-a4de-4d3b-9628-6ffae3bca880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76490f34-d9f2-4065-95d4-6d95d6128c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504cd38f-f44e-4875-b468-21c57c978c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbbbf0f-dede-4d71-aa3e-4e576886e7ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5f97f8-e435-4583-ae8f-88657c6a6d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33c8f4e-bad5-4eda-83f7-288282a148d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b4741b-47f6-4af0-8e9d-3ce03cb3accc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b474c47-0f15-48e8-a824-8c628a55f1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e27565c-da77-4f51-842e-8ae9e6939406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bfa678-5cd7-40e7-9f0e-51e922ed5a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a65ac10-436e-4c28-b743-5fecc1e616bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.112']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92c50a0-2a51-4808-81d5-42b672c863ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdfbff5-aab8-4024-9ae1-bf64e08bf204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf61bb9-7a5a-49f0-848c-0d172d7dcc39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.184']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d9b0fd-691c-4158-81d7-2a2a2608a611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ca82f2-7402-4fa4-9e42-594259511c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eeb36c7-969b-409a-82e8-a5befed733aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3d9353-1295-42cb-8260-ca916528c045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e538f5c9-d349-45a3-ba8f-feb5bef31b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50c347d-3f5c-4976-9ed8-2e34be30faf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.90.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f88781-8a7f-48f3-a49c-47b40988dc4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.0.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da9b799-1c24-4b64-9ae0-fa48b2a67207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.120.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dbed78f-1f25-4c22-8c28-d74fdea81a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.100.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429f2ddf-97c4-4da9-8073-452b52eac828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.11.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e30f90d-5c61-4d6e-b93b-5c1e62dd04d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.142.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de344aa5-a385-4efe-8fb9-217be2cfb247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.182.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3463a1db-1d2c-4179-88de-45ed17908b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.2.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1906eaa3-8779-4317-866f-879767e05b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.222.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7eda8c-177c-410d-b1f3-5591789f4a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.139.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01669b7d-3aa2-4aa8-bd25-9bf14698c9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.140.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b48cc0-54a3-4d6f-8c6a-1fb08b138f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.135.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b295d0-2b8b-4a8c-965e-5935626e25fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.149.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a06384-38c3-4cbc-9404-b0f95ca33ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.154.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3315a886-cd5c-4c7b-b829-b94c4ea0b0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.188.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f6134d-af53-4dfd-9c69-5aa479af3ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.242.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9decc9-649f-4987-8220-1c8aae98587e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.39.235.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c150cf-b521-4b60-9d5b-13f34a0107ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.102.218.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44741539-40f1-466f-9f26-5807c9788135", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.158.109.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d676aaa0-e408-411f-af62-c77a21a575d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.248.225.154']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed62d53-ecbc-4748-8686-5d3fa2bc14ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.49.39.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d428c02-f89e-494b-869c-4dad9cebba1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.65.208.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9795a185-c287-4633-9042-52f6972914ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.66.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10213363-c9c9-4f68-bd12-b98f29c68d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e897cd-8a10-4372-a3d7-b2c0059a16a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6305fe0-1bcf-4d90-b7fa-85947bc243b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.85.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe2cd49-6c64-4963-8107-ecfa44a871d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.69.186.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321fb32e-42a8-4646-ba15-9af401361d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.70.96.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abb51e9-723b-4289-b99c-c77de53143f8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.37.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69a6874-63d4-4761-bc68-ec46f279e04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.65.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f806e07c-821b-4231-a826-59a4a66055d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed0b89f-b6ce-4737-b23f-4fa86b0f1385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588a86c6-a629-4797-b12f-e1f7828dccb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548eb53e-4495-4f7c-b342-f501caef5acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae90cf52-c399-4da7-aaf9-27dd6bfa7938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.85.84.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cba91a-9d17-4407-91d6-cefded0e8f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d065aa3-8131-4684-85e8-258f2f04a631", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80a89fd-f87b-4a44-a2a7-52fa611557c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.165']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee00b78-239f-4859-987d-6505cd93200c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b404b6f-2a8b-424c-935e-f729ac18c90c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.167']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9068fbc6-a8dd-45c7-b098-387b7e9efcad", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.168']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a8a8ac-64c6-4d78-974d-ab1b0eddadcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0153def9-b180-48bf-a4a0-758eece6dc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc324a39-5136-42e5-97ed-0974cb0de511", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.177']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d3b469-01c5-4055-9cd3-7a637bf0e577", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d3a183-96b8-47cc-8a18-a25e3b57c5d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d74088f-13bf-4eb9-97bb-539629656424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eeb0d4f-1b72-4264-893a-fba5fc7f0361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c3848f-bdbc-45d8-970a-c64e1d97c215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751f1d92-1994-43a6-a515-c623b944f7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f459b98-70e8-4bfe-8a57-25d9a913b1e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.97.44.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47008558-1421-430d-821a-bbc58f6ed7dd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.17.88.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf1df29-0bcd-487c-b616-69c75ef7b9ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.192.53.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcbdf77-f1bd-4b2a-b382-e94f3e3ea8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.215.195.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097c4d86-2f93-4192-a442-6dd434724a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.23.151.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bee79c4-bd04-4e9a-aaf0-a17fa0394092", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.71.51.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1162d37-17a1-491c-93c7-b7b5cf46dbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.112.55.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96358761-f20a-413e-9206-7c11e51e68f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.118.30.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc00776-ac21-43cd-a6b8-6c630aef40c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.118.30.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3f3ae0-7189-4865-821e-cf60e1dad55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.22.184.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135f8102-78f4-474e-9d30-f647fd22e67d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.223.71.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5db96a5-8904-4d47-969f-06850daf352b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.49.137.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab73a6e-5cba-4793-b68e-b98eca50737a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.59.46.116']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc68a6d9-7c04-47cf-be6b-d3036776ad14", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.64.252.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4879f5ab-2cf7-42de-a0e6-1d8be111ce50", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.64.38.234']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4128b201-b8fb-4bae-9876-9cede373d10a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.65.16.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2363aa8a-f146-41a8-9e4f-ef96c8bf25d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.65.85.236']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1b3cb7-0542-4e25-b47a-2e3f0d0ea42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.110.108.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7501cbe0-833a-4076-b9ac-1cce08645ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.111.83.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01763189-e610-4a18-9244-7ed71cd7acd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.136.182.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f4e40b-9ecf-4a71-b0e8-f91aff049d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.209.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499ff6ff-f54d-4eef-ae2c-2e35bac1c814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.209.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a94594-703d-491e-86f0-626233ac5196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.209.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb772e4-91cb-4fcf-b5f4-7ea028df41bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.209.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5781084-914d-443d-8679-3c9d9f8263e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.110.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9b9b8d-c452-4dc8-9a3d-3024b707ec92", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.235.16.111']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1c84e3-164c-425a-967e-01222a9608ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.21.190.140']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1faf13-c698-4a82-8567-4bb38e4ceff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.22.62.247']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6124f3c6-1582-4178-8466-77c8d80235a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.252.92.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b362a21d-62f9-412d-bf52-89f1867b8514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.42.46.76']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cee885-c6fb-437f-996f-e1814b5648ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b38666-c214-4bc9-907a-b64d4cc46a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43fd8dd-3de4-4141-b1b9-a83d291ce112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbdd8ea-0781-461a-8820-3d14124da1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894b7dd5-5623-4514-891d-c03aca675b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.111.68.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752437a8-1cb6-4ad5-8251-45834ece2d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.112.201.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a56d15-fbf7-408d-91ee-805649cc1242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.117.239.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd0c38b-9a1a-4f9f-8570-b8a14ad4eded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.120.81.241']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c729e7-f27c-4d1e-ba79-b0d13933da23", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.132.42.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9a0c83-8e1c-4612-a8e0-4dbeb5005342", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2707bd-513a-4a31-9b8f-6761d19fe425", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a6d5d1-5dc0-4329-984c-c17b7e47848d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094477ef-34d7-4525-81f6-11ce90e12e92", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc30cf30-cbf5-445e-b771-ed2a79c7a170", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34083029-c19b-4058-a0aa-54dc7aa27203", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d63f02-dae7-4880-a975-75f6f9287f21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960eebe5-ca70-419c-8066-982f38efe396", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eac9521-ff4e-4630-a556-9fe3b8044e09", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f4adaa-c5d9-476d-a246-eb185399e395", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68853dd1-6adb-4e77-8607-189759611324", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebe835b-5fdc-48c3-a1be-99f58c8c4849", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ab38c7-a6ab-4f59-9716-50118f54a879", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5931c1a0-a86f-41e7-88a5-2919d511100c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08bb0a7b-7522-4897-9854-15c24fdee9ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7401fbea-4f2d-4e5f-bd9d-7832eb20681d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7498e5-d010-4be0-b5df-062ca5f2810e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7704eaa-3923-424e-b8ec-35844f3f0fde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f74523-1849-405e-a020-a5a80e039879", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8dd781-a0c9-4ce0-bb7d-27faad04efa0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cee498e-f701-4565-b11d-e098a1183d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.181.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96436c9a-b7ee-40e0-baec-6a2b4ef47087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f3cc81a-5770-41a1-a012-452028307fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ccfbf8-f7e2-4915-9920-751160c3434a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d1161b-a307-4c9f-bb7a-2c287eacf3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4765a3-ba2c-470a-84ff-853af1dbe207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0acd33-3742-403e-8c32-408c4f1dfd67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c0e8be-70e8-48e2-873f-9725ffc3b92f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a48e6c-5092-4e19-9d5c-165dcd5c297f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e4e916-9739-473c-a4d0-a7a8da47fe83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4048047f-a4e9-41d2-b6d8-bf9c538891e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1274ef25-1948-4f6f-bfcd-c486379c40cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1b8c70-f6cc-438d-a977-9fd6f92e39f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d1597a-7d2e-488f-928f-957f81c12662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827d11ab-1d30-46d5-9f6e-983907a44083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1d15d3-76d3-446c-b2c8-0a25aa2a953e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5767ff-8579-487a-990f-6769d57afa9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84d29f7-abb7-4477-a5ca-320ab6411415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b89e519-2f96-4ca6-add6-992197dc894e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb497f08-91a7-4ed8-9bd6-40c367a5fcb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33451ddd-da5a-49eb-bc69-885ea3893a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418a1a24-ddd5-4f9c-8db8-b9936b7da3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c5401e-8c2f-4cf0-99e9-da5892c170b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6927fd3-0e4d-4c69-a70a-5aeb7d28ca30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb58ce8-7204-4f6d-857b-db0b7cb307dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f51b53-af8e-460f-a564-5c72f5deb470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3851a00f-d421-4881-9485-9a8e5494e1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d5953ca-6e2f-4d39-8bad-f08dc7f45475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c9dede-7589-4394-8126-31d824a9d2fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3a86af-8d9e-4aa2-aaa6-dcce4bf43ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d7c414-77b0-4bd6-96cb-89204c57c424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5902559a-f83d-46f6-987f-a8dcedc88eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8538704-975b-45ab-bf8e-8ef845c69e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c767ef-cddc-4459-8abf-a69675857e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade394d4-c141-47f9-bf71-240483ca3542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043c25f2-cd95-4d76-bd0e-c27f4f131e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2527d11-0e5f-49e5-b4c5-937beaba348b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7bed36-8dc7-4ce0-af43-c24f43a6f895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9aee2c-bcbc-4ad4-b5f1-f86c576b9f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c1eb43-053b-4f42-a03a-6ac8d15621ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1fdc93-c67b-40df-a992-fa99bc13372d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a22ec7e-59bb-42c7-9685-395f415bf8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86b98fd-9af4-4791-9408-78369de0f8d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5394af17-db35-43f2-95a3-6b852068af86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d14829-40c0-4eb3-99b1-c87eb1eba932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb33a1cd-259c-4e82-9012-6c3561d6026e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1c8842-5bfb-46cf-a287-83d17b1de97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8276f515-af66-43fe-b0b2-bbc95f9ceffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46947af-67ad-4f65-ab18-0e4960a4f1ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94364f6-9527-460b-9e3e-638ef5c3262d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b00495-ca39-4f3b-9c61-d98103968cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ab7789-3f72-4738-ae8e-f681d3021814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.0']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--638ba679-bda9-4f1b-90b5-bcbaa0d047ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe49b45-ae46-49e4-bb57-bb16025e3fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c238a266-16c2-4ce8-808b-1f9125a978b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68447d37-96b7-4ae1-8b81-3c7770c94934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37b943f-5d1e-45ad-abdd-9e188ba1bc81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8196eae7-a2d8-4054-a47d-0375cf304a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eec0735-485c-45f4-a167-519fcda83b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.15']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9f8028-1656-402a-9439-5fc7f53bca46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571c0a8a-6d0e-41f5-9a1a-22a0a0a15d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874be406-9817-4326-8e2a-dd679702d421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.18']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b739e50-fb75-416b-8d8f-4bc84fb06f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb32a6d-ab02-463b-8025-f8b5cd0371e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8d1179-5432-45f1-ab0e-fffe6f3033fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c4a983-dbde-45c4-9395-1b3dd057e800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.21']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efed5f0-9c3b-4f9e-b6d6-5ea9eaf32dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a41b1a4-ac6a-44ab-a503-83843200af48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c17579a-1d8a-40eb-ba2d-4f6053a14997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd448b18-f4bb-465f-9240-01c77cb71f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e47e968-2d5a-431b-9ed3-087c843e8532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.26']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1119f61-992f-49ec-ab2e-5e8f74b94edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95fa7cf2-e995-436d-ae29-e3abcd2584ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac7e24b-e9cd-4469-939c-650ae92eb84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1a5e64-b949-478a-8558-c37417415e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acbe812-1c88-4db8-825b-6b34fd6723a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.30']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9e98b8-2ae5-4744-b575-43ddd79d7695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5755d7-c0dc-49c2-a4cf-dc02b28a28b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd19d2c-ca39-4adc-bf57-2687b2171736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec6cad0-7df1-4a9a-9825-ae205cdfaeb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edf0b16-193e-4c80-9504-d63b98ce50bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.35']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d16b28-edb9-455e-85aa-ac61d6cc7946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c307c60-3244-40b6-b08b-a7e984de1cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f900c1-ce68-4984-b320-bcf3dfbe21df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.39']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62b3bd7-6b08-47c3-ad8b-b5fc65c48a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c971190f-3e70-4f2a-ae5d-98ca91daa128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49a1aee-8d12-4265-933a-2c371a1c7bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.41']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e16eea8-e528-4a28-91a6-d5101195bf65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7509bf-48f3-46c7-96b1-3c46f42f2cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.43']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482618df-3f31-4d2c-8b4b-d161db7a348e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2801b3ea-716b-4d56-95a9-f23d8208db3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb94978-3222-4066-9be5-b64783a070cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59620ec-9e30-4171-9ae9-cbaa61a9e460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4f45fd-149a-4ae3-87b7-1b02f18661d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e172ee35-f6c7-4c2a-8b3f-f68fc13e5080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7750c5e1-eccc-48fd-bb2b-13b141822666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec01b2e-d561-442d-9466-3522cca8c32e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0404413-530e-4b9f-a7fa-959f6f649a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09104cb0-5121-4991-b02e-63d47e167ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0baa56ca-52b4-40f7-a1af-b8c0b3b725b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006bc123-00b7-4525-a916-8400164c10ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5c9030-4fb5-485e-9457-9ffd5904fefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c80bb3-dc38-414d-8486-20cfb60e1676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.56']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91457e78-5227-4daa-9f14-2567e0b0c9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c43aad7-2c7c-416d-a049-d953f474cd1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87cb8d26-189f-4cd0-8f3c-c0c95c85dbe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7991afb-8b15-4995-aede-8899b2611a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc89877-ea7c-4c1a-8135-28e01a11fe1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e86424-b965-49ed-8eab-1a237ee11bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260e8e49-0c8a-407a-af35-7fdbf47804ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929dd9b9-8890-4989-a6d1-5cd25242a881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.63']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--957c89f9-1577-4ea5-85ff-ce902da64a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe8b96e-f484-4acd-a891-2a874edd760a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac13456a-3c10-4e90-b7ba-4118a9896fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a6be5c-8b72-4865-8b60-b4c3b6a29379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635bb491-2993-4c89-a414-c079a442f8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e0c2fb-7262-491b-be76-5492063e1551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e65a08-3638-455c-a6c4-79ab2b4ec1b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1f6f2d-2d99-4064-bc49-48f848392d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d586c58f-2ae8-4816-a681-32aa942cb318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a98c93-7dcf-45a4-81b1-7788f4fc5f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab29c84-afdb-4e9c-b46c-60b6ebed3315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e345d7ae-70c5-405c-a9f3-f6d9996c9719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2102777c-5469-4d2d-887a-aaa55649052b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9447aabb-5139-4763-9d68-e801daa2a8bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cfcd459-c23c-4d92-8d8d-5d5b63ad52af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.162.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f26d85-d0e8-4152-8640-7bed01bb7a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.163.180']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0059a6de-76af-44d6-9383-732aa07eea70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.221.186.48']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48b4ff9-c2a7-4249-81d6-cbf1f038d321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.147.7']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db213d44-6084-4ac9-854f-d9fd057ef916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359fdf20-54e4-4401-a0a7-a17732295c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.244.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1f99e1-2345-4c54-b851-bc88edee0fba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.65.70.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f2388a-957d-4230-a0b9-a182604ca1eb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.95.166.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c313f74-dafc-4692-8523-110afe61b8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.96.242.57']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c947805-7002-4ed2-b49a-1e3920f97a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.109.75.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1323b6-7732-4027-90c4-f3243eba9ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.176.100']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b56166-f49b-44f6-8c07-0bf86c4bd169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443713c6-a26b-40e9-8e95-a20f2a98af41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78e7783-f33f-4c5f-ac1c-3eb6727a0d10", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.217.21.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43146995-a8b5-42b2-a58e-0f8b256e2696", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.30.206.246']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8caa9c4e-4a20-4a53-8b17-cde1116b9502", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.48.0.182']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6335c381-df34-4543-91a3-98976ce86917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.48.17.60']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f0c6b6-13d3-4ba5-9997-d5017ecd0146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79160348-77d4-48c8-8ec7-e0a9d6678ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf3dac6-5043-4505-a5a8-8cf82a2e584e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f6aa6e-7e9b-48ed-b708-8a0231c62cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78beec73-82f6-4324-879d-8e3d82eee973", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6890b7d-6a76-4081-b0dc-ff98fa5aba15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9047bbe-e951-4dd8-b8d0-cc89498fe392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.69.138']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722afe71-1559-4e28-b904-19ac456ccaab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.226.190.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab388f77-b4b1-45b4-b7f6-c726bc391b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.14']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16b6f48-4a5a-40f8-9579-4784a37c94df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.152']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a365ba-76c1-4b9b-b3f5-ea60269527c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ebadfd-19ff-4975-b822-db3b1b9b3595", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.249.134.4']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1bc628-218a-447f-ab1b-a5f950230d5e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76600a4e-e843-4e8a-af7d-8ddacb1c67c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfe2c11-7cdc-44d3-916d-932bdaa84932", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a7e3a8-25e9-430d-96f0-cd9821881293", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45cc2a13-994c-436c-878f-2ee8da782e11", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d34224-bb29-4a98-8d9f-d0a7008e8bdc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.120']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee1a7d6-3236-41dc-8de9-6a7a9f483090", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037f1ae0-c6c5-49c3-b307-8f051a8396da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21fa180a-54dc-47e6-99ad-71a5aee58a53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d312e6d-a3b9-40dd-bee2-1a406b382582", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b0d6eb-70d2-4ba7-82d0-833bd3c93c99", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb87ddf2-6604-4000-8e87-549bf121c629", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494f496c-e40d-4bf9-8a29-7d66da83243b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.208']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40db5e00-146e-4f05-ba38-03dbcb82d89b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16726c81-1c38-4db1-a79a-18d3276e68e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3609f2-adaf-4d8b-a95e-57dcd684ea25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7910c72b-5259-4ab1-8925-61c4ccedd199", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.228']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeca2e1f-b2cb-4a2f-be45-9d8a77432b80", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.23']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c328de-32d2-4f0e-8d22-ba9ec9df5dd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590b91bd-0c1f-4d46-8c51-ad0a3e0b6441", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ad4421-91c7-48ca-8013-66cfa464bb85", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508600d4-5484-4852-b781-67bef4da85a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cef5450-388f-4044-ad34-93cc0b33234b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c0955f-da1c-4208-82d3-50c847a75c17", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92abbbd4-9383-4f10-842c-f483797bb64f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.31']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3d2b1d-ab91-4f15-9e8e-9c71e79e49f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02350688-b78e-47af-ad46-c50ff3513d4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35058433-e35e-4870-a659-4ffda16457e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d14d059-e119-4be3-af2a-b8ec1524c4ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ec2567-b7ac-471b-b294-65ee72a50ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5637dcce-3e0c-456c-aee0-fc66c1d9b14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8430a759-afa1-414e-b020-998b15cb2d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.79.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5451cf-da38-4620-9b7c-c813dea43a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.27.225.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45076732-40c0-4971-9e89-2f25b6e857b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.135.73.16']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1190ee93-3315-4a1c-8e84-96b3e8e451ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.147.30.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4664d815-2610-4d14-a145-db18f0dbf073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.151.33.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9515c763-487b-4b21-9c37-d0047116add1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.208.213.212']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044054e6-45c9-433b-a365-f34acdeada54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1244a6ad-24ec-4609-9600-2d6b100cceeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.24.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f52a429-d9e9-4203-a0b2-68842aaadb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ea5df3-34d8-48db-8217-ae3cbfbd2832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e04b42c-b24b-4e0c-8d55-02b085aeb39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.142']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed86828d-a8ef-466e-9859-756e96a33eed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.216.42.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc6dc06-1fc8-4733-bac4-8f8ec48067e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.234.105.199']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7938a98-a81c-42b2-b605-894c8df05c6a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.249.51.80']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bcf41e-5826-4dce-9c64-12091e78b802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.189.24']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee564bac-2510-4468-be97-8598510c645a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.20.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d051b19-b4b7-4b1c-b0cd-cf6a78ef437c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.145.166.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed03ba32-aeca-46ed-abde-3ec4b66f4bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.145.38']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c293efd8-241c-4ff1-bb99-9a1254fdefa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.206.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bbb9f8-5dda-4c3b-99d3-61e22c5e8242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.169.97.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04264a6f-a39b-46bf-9f64-0daf8c78c92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9804b24-cd85-4603-998c-79f5a0cba338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a9cb1d-6d47-4f81-aa76-520e164b3032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1201be50-758d-45ce-af64-3733e1e2c66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.23.98.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1437b6d9-5ab5-4d84-b193-79d4411409e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3634685a-5ae5-4f26-abba-cd9e94f8e299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff18bd1-d245-42e0-991b-5775d3a52bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c5e5be-28b6-4448-83e5-1afd71a92a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.251.8.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e4c83e-9371-4f7a-a8fe-072354290419", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.152.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f001fa0a-572c-462b-b96e-ddcbc221157f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.63.25']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95fbddd-f549-4988-89d5-7756e95615d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.39.208.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7911c7-df2e-40e1-8cba-d9615d86f8ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.42.231.160']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0898f41a-8a5b-4039-9817-4aacda38c90c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3f2b35-15d9-4787-9058-de33818de072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d78b586-409b-43fc-8ec4-5c0f8c4a1bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4180efd9-b3e6-4c9f-9e6f-642d4fb58513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.151.171.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074924f0-33cc-4f0c-b113-82bc614dde9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.151.171.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6595d7-dfc0-40ba-887d-202475578722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.217.112.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbfe810-ce09-44d0-9022-21909a69ac88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.227.134.176']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7224b651-3f0b-455e-9e7b-80449f27f938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.106.95.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eeccb05-f4e8-424e-86c5-56536d8776a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc12f25-824a-42e7-b97c-828636695852", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.189.155.62']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba7900c-7c54-417d-a0db-6c901bc00cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56acd7f-b249-402a-af39-603471fcf0c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab32d33-ec51-4cdd-9125-033d4cedeccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd04acf-956e-4a56-b470-a48bf7781d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d996793-e77a-4a9f-b1e7-8ef2a631c167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47139b3-5bca-419a-b5f2-57bbdcdd1cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f906c2-8592-4fb1-97de-5ef90981c0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75056f9d-6e51-425b-b61a-b10adf0427ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee812aa-f144-489c-bc5e-8d538c9fa296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.109']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6101d9c0-9e31-4590-b62c-893025c81873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b4977d-3b1f-4967-bbf4-47bfd0d5f59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35dcd81-1532-4f52-8d87-992d0f573784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b89ded0-2a19-430f-afac-83f1e442e1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9937d0-6595-4710-9e99-7ed13dab4368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.117']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7b3cca-226d-45fb-92a4-2b828024b58d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c92a38-a764-40a9-9b82-f9214d291188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4adb37ca-a0cc-40ae-b1f4-ad09b29e7020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.29']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a157486-734c-48c8-9a51-e4f6fb0f5646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4bbac88-c42f-479f-814c-6ec603c225cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c451a8a7-5338-4f76-9bae-babbd4565805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cbe923-4313-4bc7-aec8-d7fb90d1ff76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f260a485-bf66-4dc8-aeac-12470b5a2aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4147299f-914c-4609-86bc-2b9be7b7431d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7dd649-5288-4c05-8d3a-2203f34ae1e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.233.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1f2cbd-e27d-4484-ae97-5d3bfd6b5209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.184.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1253b2b5-edf6-48ed-867b-29ef791d4c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.197.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472c6aae-73c5-4e24-bac4-919d6f3eb3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.85.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac91a65a-fa54-45ff-a6d6-85b194a53bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.218.66.47']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9f2449-4004-40f7-a527-c4439603a787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.223.69.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51bc8db3-656c-4753-bcc4-aa8cbe858c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da19280-2132-4016-97a2-6726a433ff54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.114.132']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c8ca12-2cec-4872-842f-cd433a96da33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.105']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a14039-6322-4b79-9802-845455929ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3059ea2a-a563-48c7-a8c4-9eb157522a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.108']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010f31b5-fadd-4eae-98fe-cf3991642667", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.114']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be319fec-8d57-4b66-ba20-ab1d5a6aa11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776ac657-af0f-4290-9f85-6f0cb4ae695a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea7bf7b-b9cb-4b07-8a62-a531838654ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e54dc38-cc67-435c-8a55-c525769dc209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cca1d15-4163-4d34-8ebd-bcece47e07a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4df094-6648-464a-aa39-c87ba6cb6184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3eb1f17-d18b-4e66-a9e6-2c5657eb71ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6d9345-4b25-405e-b15d-04883930ee21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6074e5c-1df8-4963-ad38-367bd6bd1dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a35f9ca-8104-4a8b-83ad-b02ecc183b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3eccc77-e518-49b0-ba5a-2a89b930e13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a814b7-b461-4e88-8d0b-05448e5d434d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd085d89-c07c-40ba-9128-40a27189a657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85174752-3d72-4929-b93e-4790936c20a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd3cda0-93fd-4a79-b727-fa0bf2db04d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666a63a7-c811-4382-aecc-1a85f0dcd099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e801615-ccc8-48a9-bb2c-b95e0d22c881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2bec0e-62b7-4d41-96d1-b68f6a15a00b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9841f534-40da-4b66-8912-13cccd7bc306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef30d80-4690-4551-a5c6-8a5ef3e1f9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3697cb-c0a5-4523-97a6-648a83660b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84892a66-14d5-4c72-bfce-04cf65f492ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b0bf92-2fab-4ba2-9be0-27e4b0636503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.186']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a856aa6-607a-474c-9767-87257bc5b2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63dee41b-aa18-48a2-a7b5-7aa5f7288f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bf5bea-66df-463a-a6ca-cfb8ca8e3f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390d5cc9-c05e-423e-9f11-bc23ab08a021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2ebd51-ff06-4788-bada-b9bb3a844acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.202']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f688589b-10e5-43d6-81c8-0c21aee87448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026cab0d-5262-4648-9f94-a4eb1326bd01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c170a667-723d-4a90-ae34-e816473e618f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46120cf8-a059-47d8-8e51-1e4dffe547a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6610ee-c6be-4e39-96e8-697127d7eed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d428a80e-be62-4fe8-bfbc-0f7ff4cc6a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.226']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2b8bdd-4e1b-4675-885e-096e3af4374a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a078188e-de3c-4603-ab29-5a81a2e52829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c69d0b-90ed-4292-b7c7-7373a5450067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae69f1cc-07ba-4602-b0ad-d73f41689433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835aaa19-3f20-48cc-8def-7d4ef0e2e92f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec5001b-9bb4-47b2-b61f-9a9ddb6eadf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.242']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72b1cfb-7ec3-4311-a5fc-4e2fa390bc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.245']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1c2128-bfe1-4a40-8177-b716504cc2e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdd57dc-ba3d-4bfe-8b58-98b3b00fe04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e942fe-3b5a-4d27-ad06-aaaec9ec49d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91517607-bfbd-4e49-98fd-05a6929354b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d031bc-cc0f-4bd9-b41c-43be4504c579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bc776f-45c1-4fa4-8d38-7ca95a0a2689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed4139b-8eb4-47cf-9667-a3f008f2dae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190b90b1-a997-4c87-9f3a-ec30e511ba56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5e2ebe-3ac5-4dd2-94b9-67a591881e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.83']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a08e95e-665b-4c41-8c23-6a41f9e4ba4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50969b27-bf89-425b-9fd6-88c29bb1bd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517908f8-8f8c-4293-8bd7-2075054c56e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e933385e-0925-486d-bc6b-206a020ebc96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef07c67-bf15-4858-9a65-d853add16f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf073a2-9fbd-4387-a12f-3a26709c0d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0daa7a21-be0e-42d9-95f7-78cafaee8276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7073f1e-bc83-4fa5-8bb2-f20c542c71cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb070343-4a81-4e97-b61b-01984441b74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6835e88e-f0fc-4849-ba35-d56f5ce3397e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f201225-961e-410a-ae70-fdf4e20112eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6761cf-286e-4938-a6fa-829e3ac0dd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4536b680-37bb-4ef3-ad1f-a5799ca2d4d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10d9143-06db-4b51-beec-6787d584d8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ff1931-cc2b-4dd7-a9c9-d72c4fcdfc3c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.162']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3067d1-3f0f-441b-a4b5-4aa8896b52f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cd6635-979b-4697-9bb0-ab291aa95f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65b84bf-8432-42ed-8874-4a5af1987a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1319e269-ca35-465b-a640-4888d86a65b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d7a860-ad1d-4cdd-9a13-400aad71406f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057a4c96-493d-49f8-af99-380f495a965b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.181']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84687c56-a426-4e1a-b52a-77fca1b82027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.185']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac76c50-85a6-40c6-a475-6063644b3ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0bf915d-bccf-472f-a767-c803194750b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27cad8c2-9ad7-4de8-b2ab-191e007af348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.197']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970e3e86-812c-4106-91ae-2202adf4c107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2545d1de-3798-4fc2-a459-c998ffcec2de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4004140c-e194-4193-ab45-ec96a40919ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62fb40d-7c1d-4b1a-8d9a-11698d992e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bda990-64cd-4119-9518-83b811cbb716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87874abe-4a09-463f-bde7-a9484b145df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2486f62a-fad0-4717-b6fb-d73eb13c6aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9da45d4-a437-4ae5-b98e-0eeb625be139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dbb4a97-1698-4cfb-b3bd-0297913e4c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4dcd98-b654-4c98-aa8a-954fefb32e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9409f3d-7f93-4f2a-a926-cd24978e1d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6009fcfd-784b-4251-9f42-ccb48a0972f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685ef7fb-b298-4fab-b666-55ac1af6807b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1ab853-320f-4968-b059-f7549ba8631a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58233287-54a3-4fec-ac09-92c6121106cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1acd55-ebda-46d1-beab-4764c9241eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ff7ecb-aac0-414a-a136-420b94514784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd7588c-6cfb-4b45-bad5-e4d30da9d7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e9ddf7-9b8d-4703-beb9-c8cd03404315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.51']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5922829-c271-4ab2-bc93-2bcd30b62866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.59']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b55ba7-ff6c-423b-9217-6a84d5ba848b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9823fa66-99ef-45f7-8550-a7fcbe8dfc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db9e9d2-6de3-471b-a888-3e48126d3546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0c487d-a497-4cb0-ac63-0cd9bcd500e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d46a06-d64f-4ec0-9d1e-9eb13d235549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea74f45-e7d3-468f-874b-d6ac6c91909d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34d4b7e-7c95-4fa1-b45f-3d57eade9fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c5246d-2fb4-42be-900a-b91e642689cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c3ac2b-dde3-48bd-9054-96d5966ad4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.8']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443fa33b-8bbe-42ad-a01c-caab0b88dddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326a7edf-a638-4a74-ba7e-08eaca7eb08b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.239.206.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e8102b-95e7-47a5-b517-ba7817a49402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.81.149.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81691c4-8f34-4139-9874-333912392776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.153.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffba0cdd-5597-4c0e-b241-912171b9220d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.199.36']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30531466-c173-4df8-950d-f18b1f5fd111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.240.2']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fedc105-e9ba-4a7e-9a03-f5612430b869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4c1e82-3675-4332-957d-a8ef3e8fca0b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6bfb10-b8d9-4233-a3eb-a56e18f52b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42ef215-e794-4177-9d53-9726fd46ea2b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.44']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf280ce-ed9c-46c1-8f5f-b93b6ac70199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.58']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33993117-295c-4fc0-8ed6-6c147e58b331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.243']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08882679-25aa-497e-8964-af2186e8098a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8cd7b0-1368-4f0b-aabe-65288ef65c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.98.151.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6065a7bc-a3a3-4acf-83b5-9b4bbe7c0b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9962a2-ef21-4b74-b2a2-6985f6382812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.96']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25ed8c9-e077-44a8-872e-c1b87e5b42ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc09e44-483b-42cc-9f53-57d5b40f3c33", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.119.124.123']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfc66f4-7177-46f2-ade6-41d597bcdf9c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.168.45']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378a2bf0-0248-46ab-90dc-8edcb4ab8519", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.27.101.99']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05e4eaf-f720-48f6-bc29-94d74d8c529e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.47.46.174']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fcda78a-942d-4b14-b050-435c278fd5ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.62.251.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab80b733-eafd-4474-9f13-10cef5157792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a043a4-b763-4178-88dd-fe22a6671f93", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.163']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88947f9-a80e-4361-86be-02fcebf266d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.192']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcaf77ef-303c-4269-bebe-cbe70006a517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09d22d5-9762-41dd-a8bd-e39a08efcb7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8b6336-4419-4a62-8f1b-118540bd9866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bdc2a5-1ac4-4257-9e3f-d65884ed1679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.185.165.148']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b18e1ce-9b2f-4055-8b07-5912664666b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b444d4-903c-4e0e-b976-df22e66624d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33558785-3019-454e-a6dd-f312e133d28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.136.186.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf2cb61-5d50-49ba-903e-6e532f9af693", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.156.33.203']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63acd973-8b1b-4e1d-81e9-be182842a104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b2fc5c-7e05-4f28-a77b-7bdf84558053", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.230.136.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2bac4c2-4bf7-482f-a955-83e3be4eecb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.1']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486ea633-a432-42a1-a86a-73e1114a9628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfffa63-682f-4be4-9f80-209e7df29ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.11']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b67784-2eb9-4125-8aec-8d07cca88025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.13']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e3cbdb-4b62-4a9f-bae7-259deb2b04e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d53ba4-a8f1-4249-b59c-4fa79743948c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510c595d-3956-41a8-b53c-a5e181f515a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.253']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034aa3f3-afb3-4c16-962e-eecb5d20a0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.3']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c544627-24ff-4d20-a37c-826ed3cbabc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.6']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf789830-ea4f-44e3-b807-06a1903a06bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.9']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a4de99-ef7a-4b42-8f07-5e02af517843", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.13.128']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24a5400-7399-4094-a639-cbf75e686ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3875d23-183c-490a-8c7d-3f028ef3a1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.19']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea9fdde-dc98-4810-9387-c300e000c2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.252']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ea4bcf-94d2-4cbf-92d0-79f0978bd35f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.27']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e317310-757c-49fb-b84a-538dc2011d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.33']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930bd02a-4de2-45fa-814d-a6839013fd4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.205']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112ba171-e2f4-479d-a77a-994e73d6508d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.206']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae5fb90-78fe-4563-9cff-a3e2beead778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.209']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3622ca-b966-4553-a424-05fd2203cb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e80c82-b5e4-4724-b59f-3574135aa2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.55']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f17f200-27da-4455-bd39-25bccc2974e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.72.102.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432d2e82-e3c1-4f45-93c1-2c1814d6e4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.104.122.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33cd6107-94e2-44e2-8c72-f1b51c0d24ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.102']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a609c45-6746-47d5-96c2-cd7bef718c9a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efa4a17-e025-4840-be67-b815d5ece5fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.118']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886e7953-8205-44e9-bf0e-c994eb486d85", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.125']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b098d6b0-01bd-4f03-a1e0-6cfff78bc737", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.159']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8b14ad-b8bb-411c-aa35-c42f245ef383", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd45b518-2285-4fb0-8ecd-c19e21ac4cb8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.166']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65cbf22-a80f-4376-a329-2988a103597d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.175']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c450876-ae75-4d81-8892-50776e2a4a19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.188']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc981c1-abb8-4c59-98d6-8cf210782340", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.189']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef11d9ba-6766-4d92-b686-fad4263239f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63b7390-1b23-458d-838b-1c61fd0aead5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36ed8dd-55d2-4f83-a306-1ddd53ff800f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.214']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee7135a-e395-4c81-b4b4-783fd61ba452", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbc96fb-c297-42eb-9fe7-52479119a93c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.225']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13cbbfd8-6f24-49d8-9936-d3210375148d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262141ff-ac17-46c2-a573-7061a17490e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.244']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b71fa73-c805-46bf-840a-d00cd6e29a66", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.249']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33629523-6b37-4a00-aabc-75dbb9a64a9c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.79']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02725118-8b60-4a32-835c-f5af197e9f03", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.87']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f631b1ae-4156-41af-bc2b-28887e207d12", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.88']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee1cd22-163f-449a-89b2-bab132875264", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.90']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae7150b-3758-4fed-b220-a3c02e0f3174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.111.199.201']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1aa5ea-9471-4f90-b63d-e75ec43624e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.179.162.250']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d909a55-a6d4-46c8-b791-4cc20e2aed9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.179.170.200']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e85af88-4ba7-44e0-a731-094f4a9da0c7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.182.82.67']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b607640-89fb-4ff2-8b15-0ec8e4605f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.188.91.101']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0876c8bf-6356-4c67-b818-a7902daeef87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06462011-f0c3-4a7a-904d-df9e407d11ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.54.37']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c4346a-21e2-4003-8806-d45bf4995d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.54.54']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d01706-9b2d-4009-97fc-a8a1136345df", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.216.252.68']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322be96a-20d4-4cc9-b19d-ff480a6e4801", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.58.255.251']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f371448-3f98-4cca-bf68-6b4df06faec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.6.48.75']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41332419-11e2-4081-9763-0536f848e96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.238.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891e184c-b50c-4a8c-a216-e25b8fe230d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.97.67.190']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccee4c3-80d8-48d6-b4ed-4b37a0ddf84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.183']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331e4059-b161-4786-a039-6586687f8833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7bd7de-09dd-4033-9b81-9523aa69a647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.195']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85505a33-3a3a-4259-8f0e-a69fd0efabc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ff970b-5839-4483-95cb-3494a8227058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.223']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65560b3-ce23-4fdc-a7c6-ff7fa0978d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.232']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eafb1e7-b562-4961-a7a8-e504ddd6652e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.95']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483ca904-838b-4d27-94b5-f31ce4c17753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.110.124']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc615cc7-32de-4e10-8ae9-960eca68326c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.172.215']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62e295b-bdc7-41d0-b165-2c9fe76f0d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.44.174.248']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9462387-c6da-4359-b83f-024d5fc03bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.129.191']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964894d3-80e9-445d-b752-f032a1bf7e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.129.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a27e5d-dee1-4721-b686-4fa1226cbedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.129.217']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9923fe-174a-4922-bf5e-8cff1722687f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.131.115']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185ed67b-40b7-45db-ae8e-3741dc7ea9cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.131.230']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65803d76-bea8-4d18-928f-7bf6181d940e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.131.50']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381c1305-4dcb-4562-be9b-de2323da4d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425edb02-0ec1-4648-86a8-0028ddd1ba1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.134.103']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d423933a-de14-4025-8f83-a4fb2ef3a3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.134.64']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7ec2ab-b35b-4881-a175-0d93ad205c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.134.86']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7744c9e-62e0-4ba8-b456-ef26a11aef09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.172']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7158d299-027e-4bc7-bff1-8dec907c97c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.136.107']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36872705-ea5e-4271-9746-dd9bd448001f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.136.196']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37cc5497-74c5-4829-8009-73969e78aa30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.136.207']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381788f2-7743-4a1d-b8dd-446da5413626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.136.238']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630104b6-e7ff-4c07-a5ce-2390c3e2937e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.137.157']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d0b8d7-7ba7-451f-8a9f-aecabb3198f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.137.161']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b042ddf-4e7d-4098-975c-5ce1bd5342a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.137.218']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a08c8c-d554-4b7e-a2ff-234011a68368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.137.219']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fad777a-99dc-4e1e-b620-e657eb0457c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.137.61']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e65b63-b205-4f5d-80eb-727afd52f9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.17']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7dbdd8c-00e6-4fb4-95d1-1079657d1ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.138.20']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b196a5c-6e27-4dc7-b78f-c7ccbd0e7d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.179']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d48a06-0125-4147-896b-20845adc1bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.28']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762ec45b-5db5-46c8-b220-4e379e2684c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.65']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09f374c-e9a5-497c-9b8d-ff3878e5ef7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfb506a-bf5c-4ebb-9ad1-720222382d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.142.104']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773bceff-bf10-4a34-a1d6-d4281e116b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.142.221']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a89efd1-fcaa-4920-b8b9-f336bd477bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.210.227.145']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bdc168c-f2b9-4dd5-9da9-c6dd889284c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.235.53.164']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0780e9-6387-42a9-bb4d-525fdf314a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.101.34.22']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bfda122-d65f-4e42-9fe8-3713cf01e349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.142.247.113']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7315ea-b697-4313-a4b4-79f850e013a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.70.35.40']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09ac0bf-1439-4dd6-85b2-73154344be9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.62.246.93']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79107b8-2d0e-4c59-b1f2-4b2382748c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.9.155.49']", "pattern_type": "stix", "valid_from": "2026-06-13T00:00:00.000Z", "valid_until": "2026-07-13T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-13-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3dfd0b1-0c96-402b-af8f-2b281fa0b4c2", "sighting_of_ref": "indicator--738c8108-c03f-44d2-a40e-eb8fd820db8a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19b2c0d-bb0b-4ce3-a37e-1807cb1dded0", "sighting_of_ref": "indicator--a85b5e9a-726d-40d1-85bf-8477d874e333", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fb3107-6e8a-4228-b0b2-bc5ec296d66e", "sighting_of_ref": "indicator--eb6b0943-ea8c-44df-bfff-2698e23e336c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4a2388-e6d5-4010-acc2-98630519d3dc", "sighting_of_ref": "indicator--b151f9ae-7cdf-47ed-a0f3-2ff9c077bfa9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3a2415-f137-46bf-91de-2de101135572", "sighting_of_ref": "indicator--5c685f27-9136-40d2-995c-dd1b66d7738e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8f4a6e-9cfe-485d-bd55-055efd124c09", "sighting_of_ref": "indicator--69fd9d17-1e1b-4677-867d-e0782733dc9a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e156ecc7-cd18-48e9-8a9a-42a12c618088", "sighting_of_ref": "indicator--b8c55553-dc68-4061-a749-53e6274ddaa8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5924dd-d0a5-4c98-9692-270ace363d99", "sighting_of_ref": "indicator--bb6b10bc-c63a-41ff-9f62-ff8014f45779", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1c104f-effc-4e04-ba39-3475bb5261cd", "sighting_of_ref": "indicator--6966254a-cba3-4aff-b687-ff0358297675", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1fe19b-479d-401c-84b9-79776dd28334", "sighting_of_ref": "indicator--5b8e699b-bea5-4af7-a0b0-0a3afe42e70e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4db476-70c3-4ccb-a278-13a72a4a7b2c", "sighting_of_ref": "indicator--8d8f1700-8562-4cb2-93d1-7d5cc98b5b33", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8e1e04-1b77-47b3-bbbd-e28cab931cef", "sighting_of_ref": "indicator--ea30d690-7370-415c-bdff-a222a7c12950", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ad21f5-543f-432c-81df-afb99a66d455", "sighting_of_ref": "indicator--dc73ff72-38ed-476a-a8ae-066f3c2eda69", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1017bb7f-3092-48c9-8619-53978e8aaec6", "sighting_of_ref": "indicator--c4d48e65-97ff-463d-91b5-a17851816217", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3c9489-3b03-465e-b43c-5348b38601f8", "sighting_of_ref": "indicator--c4d48e65-97ff-463d-91b5-a17851816217", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db780aa2-07ba-486b-9335-75c17b8e244b", "sighting_of_ref": "indicator--c4d48e65-97ff-463d-91b5-a17851816217", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b09e9c-b4d2-410d-af14-1ce1c12a2dd8", "sighting_of_ref": "indicator--63d88254-aede-42f3-a35e-cc7c6f90a9d8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11032bd7-bad4-4e72-8745-529945c4b725", "sighting_of_ref": "indicator--2259e2bb-cff9-4e22-9cc5-f7bbf5306d42", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefde089-05ea-4849-a5b1-38a05d4eff4c", "sighting_of_ref": "indicator--2259e2bb-cff9-4e22-9cc5-f7bbf5306d42", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cc4b78-faee-4656-9e51-db9782c16d37", "sighting_of_ref": "indicator--91efb665-e302-4aa6-891c-e86f8ab921cf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e427689-d367-4580-b3a8-20116dce01ec", "sighting_of_ref": "indicator--deca284e-32ad-4ae3-a7f1-dd364ee82e06", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4fb853-2815-4c43-aab2-72a2c87620eb", "sighting_of_ref": "indicator--e655ffa6-dff2-49be-af4d-de0767116438", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28a4fa5-1057-4596-8d75-849a16f234be", "sighting_of_ref": "indicator--e655ffa6-dff2-49be-af4d-de0767116438", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a9890e-6b82-4f01-836f-8394964380ed", "sighting_of_ref": "indicator--e582e015-3176-4faa-84d1-3ce8f037701f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f4bf76-9a0b-4a84-9c9d-7cc48ecf291c", "sighting_of_ref": "indicator--a34302aa-8f51-4c68-ac32-9dbc56529144", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6204c00a-34d7-4217-970d-f539312ee89a", "sighting_of_ref": "indicator--ede672cc-15b1-4449-8dcc-26243d4f12b0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54fc632-c89c-41b7-8ecb-73f0208e62e6", "sighting_of_ref": "indicator--ede672cc-15b1-4449-8dcc-26243d4f12b0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1169a4ba-8342-4f4e-a237-227672cf8a90", "sighting_of_ref": "indicator--1d6cf04f-eb4e-4216-b32f-855af2169da8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3800537-5334-488e-ac94-2a53c712759b", "sighting_of_ref": "indicator--1d6cf04f-eb4e-4216-b32f-855af2169da8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548c094c-504e-4a20-bfe2-ccc82b60bbde", "sighting_of_ref": "indicator--9023df53-4345-4b90-8014-3bcadf3d1952", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f827d0dd-e168-46f2-879f-16076352537f", "sighting_of_ref": "indicator--1d108a6a-0ba0-4e70-9be9-e0b26ad3ceee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c25b1f7-b32f-4779-b695-c0b9c7e8ed8f", "sighting_of_ref": "indicator--daea939f-b91e-437a-836d-e8a84b596006", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93e96b7-629e-458c-84ec-5b5c19122bca", "sighting_of_ref": "indicator--6b578b8e-42ff-4c4b-a293-e3bedf3cd8c9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb99469-9122-45c4-94cb-eb4c83883c45", "sighting_of_ref": "indicator--6b578b8e-42ff-4c4b-a293-e3bedf3cd8c9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d12d35-6d44-4b09-8c6b-889631e5307d", "sighting_of_ref": "indicator--6b578b8e-42ff-4c4b-a293-e3bedf3cd8c9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98542385-a392-45d3-a3ce-81aadc07237b", "sighting_of_ref": "indicator--b7c69da1-7be6-46aa-b80f-6028e7d9af27", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afdb44d-93d5-4a05-a946-3e078ed21707", "sighting_of_ref": "indicator--1612c666-1b57-4109-8a45-9501545f3bc4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ce2e6e-b8a5-438e-906e-68d6c9a47788", "sighting_of_ref": "indicator--6226d017-2440-4c85-9e62-2f499edac0ea", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd95822-0408-447c-bdd9-24fc9791de10", "sighting_of_ref": "indicator--6226d017-2440-4c85-9e62-2f499edac0ea", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1505f7-b0f6-4822-a01d-54790954aa8c", "sighting_of_ref": "indicator--c9b37291-c185-4bb7-b190-0434e508ac0d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2fcc67-4e10-4f34-9542-f665921cc838", "sighting_of_ref": "indicator--8ffc9894-b6e8-4e12-b4e3-ba0e0b79cc20", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59b019f-9c4e-480c-95a9-f776821802f6", "sighting_of_ref": "indicator--f0a43a28-95ae-4d76-b6d5-56eae98321c3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccee9ec8-0c6b-4aa5-b708-26363e8d09f1", "sighting_of_ref": "indicator--c1644a26-126e-42c2-b3b2-fa0a90eda525", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea09eab7-f143-4b8d-b8c8-2f6bb80a6084", "sighting_of_ref": "indicator--90f2f1a7-63b8-44c5-9dbd-5d6c18f12520", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1024888d-b4b0-41fa-9020-43d17fcef5c3", "sighting_of_ref": "indicator--90f2f1a7-63b8-44c5-9dbd-5d6c18f12520", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5fee89-2568-4a3b-a2c0-bdf5cb0bf3a5", "sighting_of_ref": "indicator--40f54fc8-3b34-483f-8914-37a14caf7f8a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ed7c63-6b50-4fb3-84a4-106589a59889", "sighting_of_ref": "indicator--555d4371-b883-4500-9ca2-bd03acb80221", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8007f045-6805-4e25-9a77-8236eec8e929", "sighting_of_ref": "indicator--fd9d2952-207d-479a-8af7-8bf5ffc68626", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7221df4b-49ea-45be-a065-3beb7dc4ab00", "sighting_of_ref": "indicator--21d1d45b-8b35-4a9d-94d1-0e2303cc4220", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bf6d6e-43d1-4e7d-8253-9e17148e4a11", "sighting_of_ref": "indicator--005613f1-2311-49c5-9e48-1dcadfb1a70c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ca042e-e272-4c9b-9741-4f1b0f594dcb", "sighting_of_ref": "indicator--81929042-1764-4b37-ae33-4b061434db13", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586c8600-7a95-4211-8d84-cc2ea413c3bc", "sighting_of_ref": "indicator--86cb8c84-419a-4bb4-8a62-515223a5cc81", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56211fd4-b924-4a6e-b6d8-fbd8e974e848", "sighting_of_ref": "indicator--0fc0f9c9-af8f-416d-8afd-d731396c08ba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8ff870-3493-448c-ab1d-8eeb1bb3959f", "sighting_of_ref": "indicator--41d9a0f5-2ccf-4f9e-9bc0-b4acb77ad2af", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e701869-847a-4e28-b4ce-e795c1c31a79", "sighting_of_ref": "indicator--ee5d71a8-6416-4b12-911a-71ea360349f0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c8c801-24ea-4419-8625-3cd577443b16", "sighting_of_ref": "indicator--cdd74fca-f0a2-4792-acc3-65de6737900b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527736c1-a34e-4ed6-acf2-c13afdaac6a7", "sighting_of_ref": "indicator--b0838d54-c20d-4f65-ae5c-6de2c123dbf8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d8a232-deab-449a-a534-eb896ca68a39", "sighting_of_ref": "indicator--b0838d54-c20d-4f65-ae5c-6de2c123dbf8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721b902e-1903-4228-8c7a-fb7954887111", "sighting_of_ref": "indicator--30f1c4b0-8a83-449e-90d2-fd53e4155203", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c578cf-1a4a-4387-aa51-a363e8b9308f", "sighting_of_ref": "indicator--ca116102-6733-4dab-9b38-1acc8c5f8ad1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d7f59b-4826-4238-bd9b-5c9bf8d594ed", "sighting_of_ref": "indicator--ca116102-6733-4dab-9b38-1acc8c5f8ad1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb7b014-b09c-4411-a75b-dd1559c8c3e0", "sighting_of_ref": "indicator--df0ac857-9586-4b13-9cf4-99977b931564", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac49be8-2688-4530-8510-0e0400f56d52", "sighting_of_ref": "indicator--3d34ff11-c37a-4cfa-a12f-fe7b1434dba2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfca6e09-6a7a-4b10-95fe-d27806927036", "sighting_of_ref": "indicator--16a970b0-9682-4cd6-918a-a344f2bfcdc5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7cb7b4-7682-4158-8383-aef6490f87a5", "sighting_of_ref": "indicator--9502f144-286b-40d3-8bed-edf1d7347c84", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0b0f60-b9f6-418c-9df1-b24dd6614c9d", "sighting_of_ref": "indicator--c80bf7ef-89ec-46ca-bdb1-514cb5cf1972", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251d4400-9202-4453-8d6e-7ee3f2b036d5", "sighting_of_ref": "indicator--c80bf7ef-89ec-46ca-bdb1-514cb5cf1972", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0cf0f02-4ea1-4fc1-bde0-462d9682b60a", "sighting_of_ref": "indicator--9ae45c01-2bb9-4386-9261-9ef4e9cffbe3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef69719-cf06-4b14-a91d-8b4d7588fdf4", "sighting_of_ref": "indicator--43194dd6-562c-4521-9711-842d8b262894", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513bbd18-adb6-434e-a940-93443154281a", "sighting_of_ref": "indicator--60ad5238-1bb0-4d1a-9d70-50c1b27f88fd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad842b7-9e8f-404a-ac2f-6451ac7b4729", "sighting_of_ref": "indicator--dc1c3982-5263-47b2-86ef-f886cb55c638", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88e56df-d12e-46d3-8bb1-169aa5a5be6d", "sighting_of_ref": "indicator--dc1c3982-5263-47b2-86ef-f886cb55c638", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a703cbcb-5393-4d12-b8ce-8a171948cd25", "sighting_of_ref": "indicator--d36ebe05-b022-4e92-a58e-37c4d93a4f7b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92164c6b-e00d-4b43-b5d2-58dcc2a7948d", "sighting_of_ref": "indicator--d36ebe05-b022-4e92-a58e-37c4d93a4f7b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58c0890-fc40-4f5e-8a9a-d6bd65e94009", "sighting_of_ref": "indicator--2ad9e54b-f04a-4849-b7ae-9a1ace6e48a8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303449bd-e119-4847-8e04-dbe487c4b043", "sighting_of_ref": "indicator--2ad9e54b-f04a-4849-b7ae-9a1ace6e48a8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166f59cb-e502-4ef6-b442-6f5eeacbb1aa", "sighting_of_ref": "indicator--2ad9e54b-f04a-4849-b7ae-9a1ace6e48a8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd12296-8cdc-4918-8c0d-e30a3fe32ad2", "sighting_of_ref": "indicator--dca33bba-a88a-4ee4-8c84-32096ee08078", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7262e959-01c7-49ac-a43c-5371cf49e0cf", "sighting_of_ref": "indicator--dca33bba-a88a-4ee4-8c84-32096ee08078", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8829042-a022-4cf6-abf1-60d07d0fec38", "sighting_of_ref": "indicator--dca33bba-a88a-4ee4-8c84-32096ee08078", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006fb744-bb9d-4e1d-a9ed-c9d012af4743", "sighting_of_ref": "indicator--bd2a416c-821e-41ea-bff0-4e0ff86154a8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aff4448-0faf-4b8e-880d-877dd93729c8", "sighting_of_ref": "indicator--bd2a416c-821e-41ea-bff0-4e0ff86154a8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3841a64-9408-4da6-8e64-8c450dff1617", "sighting_of_ref": "indicator--bd2a416c-821e-41ea-bff0-4e0ff86154a8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5466510c-80ff-4f5c-a46e-47760abf93fe", "sighting_of_ref": "indicator--5bc4a9a2-6978-4598-8eb9-6d11a2309d30", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c363f0-8102-42d2-b4ae-39566d022f79", "sighting_of_ref": "indicator--9418f3be-db08-4b1f-b1c4-1da0e70fb391", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86e9c97-745b-4c2d-ba87-0fc509fdd3cf", "sighting_of_ref": "indicator--0279096d-9017-49ea-b71a-c20554a8b1de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad5d9c5-daee-4905-8042-6574af255669", "sighting_of_ref": "indicator--576172f3-ca9e-4dd2-90e7-ebdb6fe232e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406b4e65-7de4-4147-9c42-2e4f8abd4b7a", "sighting_of_ref": "indicator--b22a3fd3-35e1-4477-bfb0-ab890aff230c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685c2e39-866d-4faa-ad5f-6033470f47d5", "sighting_of_ref": "indicator--b084c9bf-43c9-4b57-8921-cf278810fea9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c71abf8-0214-436b-85cc-29c1a3ac366a", "sighting_of_ref": "indicator--f3d99768-3ac4-4aeb-a37f-0ac544d5c8f4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfe9507-0b0f-4907-85bf-cf636d0da7ab", "sighting_of_ref": "indicator--f3d99768-3ac4-4aeb-a37f-0ac544d5c8f4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b38e2f-e036-405a-bc61-45ec6fba8907", "sighting_of_ref": "indicator--f3d99768-3ac4-4aeb-a37f-0ac544d5c8f4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d9258e-0aa4-4e20-8e35-35de69f876b2", "sighting_of_ref": "indicator--0f630a4e-5dde-4ecd-a109-40a8b725e764", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ade047e-af4c-4da8-938f-8cbbe3c304e0", "sighting_of_ref": "indicator--0f630a4e-5dde-4ecd-a109-40a8b725e764", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8778c2b4-6443-4912-8617-7a01cdd775c3", "sighting_of_ref": "indicator--3abb5ab9-2554-4ff6-a798-98452ce671ae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57c5160-51aa-41a9-be83-8ad9b3aefd63", "sighting_of_ref": "indicator--3abb5ab9-2554-4ff6-a798-98452ce671ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998b0e1a-a2fb-4110-bb47-c032b9e4ba99", "sighting_of_ref": "indicator--3abb5ab9-2554-4ff6-a798-98452ce671ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0135d3a-df88-4049-ac43-4d66ac690ea2", "sighting_of_ref": "indicator--7bbc7a85-1f76-4718-a8a7-3e393a697c62", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48422a6-5545-43d8-9065-e893b0eeea0a", "sighting_of_ref": "indicator--8589646c-2ae3-4be9-adea-8fddb4affba1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a58643-1c92-40f1-98c8-d7afc8849f19", "sighting_of_ref": "indicator--8589646c-2ae3-4be9-adea-8fddb4affba1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6a6eca-46dc-4bf3-b79d-bf4c5a1ae508", "sighting_of_ref": "indicator--8589646c-2ae3-4be9-adea-8fddb4affba1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4755fc83-4c80-4c84-8527-a3887012f214", "sighting_of_ref": "indicator--e2906450-5b7e-4937-b1ee-5e83fcaf07e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7faf07a3-652f-4b8d-9717-82c92408e95d", "sighting_of_ref": "indicator--db3f3d74-d410-4b69-9a8c-96562a8ad5e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47ee1fb-e8bc-499a-8b56-95f4c02cd815", "sighting_of_ref": "indicator--493df506-9036-42fc-af99-7fd2fde7c14c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cfa2ac-f3c8-41ce-af1e-b7bf36b44e9e", "sighting_of_ref": "indicator--493df506-9036-42fc-af99-7fd2fde7c14c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9c5b71-430a-4614-8f28-cc52d8ca56bf", "sighting_of_ref": "indicator--7dba121c-d3c0-4d2e-85cc-ee28348b82e4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06837a4b-6e61-4e54-9627-9e3df9880d8f", "sighting_of_ref": "indicator--f8d3a725-677f-4203-903d-885df1a0af0f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae43d69-48fa-44df-b643-e60a02463aef", "sighting_of_ref": "indicator--074e946c-0c64-4e09-90c2-58c2e443f25d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99706e35-8f34-45f3-84da-18b594bce48e", "sighting_of_ref": "indicator--ad3d974d-4401-45e4-8ec0-15182949efe7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f433a9f-0fc9-40aa-95b6-bbbb68d3a358", "sighting_of_ref": "indicator--ad3d974d-4401-45e4-8ec0-15182949efe7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4155ff6-b61b-42da-90f0-81ada11bf692", "sighting_of_ref": "indicator--ad3d974d-4401-45e4-8ec0-15182949efe7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04993e0-7b29-4e88-9847-7ce74e3ab075", "sighting_of_ref": "indicator--1f44754a-cf3c-4e69-90e9-decacb6ff6cf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9180b3-99fc-4654-be95-b8a470e3b4fb", "sighting_of_ref": "indicator--bc8a8828-95d3-4b4d-85fd-55716a345ed9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8d0ce3-5186-4c46-9f62-0878217adfc8", "sighting_of_ref": "indicator--542e92a7-1082-44aa-8baa-0111b0df5d6d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1257f7e-9282-4759-9475-de2aef6eebf9", "sighting_of_ref": "indicator--b465781c-ca58-4740-ab74-3539205131e2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298e13e7-1c88-48b7-bce5-de25ebbd2f8c", "sighting_of_ref": "indicator--39310025-60e0-40ff-b0db-b810e8343f74", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924b5dbe-bbd4-420e-9bef-ecfee408eb93", "sighting_of_ref": "indicator--39310025-60e0-40ff-b0db-b810e8343f74", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d752aed-8ca0-4a88-bfc2-ded98f6eff73", "sighting_of_ref": "indicator--12d51ab4-157d-4b0c-81ec-1a59c9ea4b1c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e82d28-0541-4c74-9de8-a8ccc3d022a7", "sighting_of_ref": "indicator--12d51ab4-157d-4b0c-81ec-1a59c9ea4b1c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db993bae-2eb2-43da-8e88-b3d7dd878de4", "sighting_of_ref": "indicator--e76ad1ce-cc87-4768-9f3d-7090db800e69", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28027fe-63de-42ba-af1b-a0fa90629291", "sighting_of_ref": "indicator--e76ad1ce-cc87-4768-9f3d-7090db800e69", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bf7812-cdeb-4d0a-a38c-28345e7d63fb", "sighting_of_ref": "indicator--4722bd1b-5caa-49eb-aaf7-46206012312a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80fa0c3-e8b2-48ae-a2da-49d902f7805b", "sighting_of_ref": "indicator--4722bd1b-5caa-49eb-aaf7-46206012312a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb865ee-9405-4867-82bf-b0948a519f2a", "sighting_of_ref": "indicator--f93a9af7-936b-406d-9947-a3a1fa810546", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857ac138-18a5-493d-8819-981e1cb781ab", "sighting_of_ref": "indicator--f93a9af7-936b-406d-9947-a3a1fa810546", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f4bb57-02e5-49c3-bb88-009cb973426d", "sighting_of_ref": "indicator--58c7dc33-bff1-491c-84f2-828e5e01c6fe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6919fc-7726-440d-9041-93546eccb122", "sighting_of_ref": "indicator--385dd1d5-9107-4952-8c79-b568fa18b878", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bab3a1d-02d3-4986-a4cf-435ac9ba4b61", "sighting_of_ref": "indicator--9810e1e2-97ad-460c-ac66-3b17e785676c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d925e051-192f-491a-97a4-bc2dfe2ae163", "sighting_of_ref": "indicator--9810e1e2-97ad-460c-ac66-3b17e785676c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b0837e-fd5b-492d-87dd-1c95da93aaea", "sighting_of_ref": "indicator--d29689b7-d2a9-4f6c-8aa9-da0221f30428", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34cad76-5c64-4984-9594-30bcec493bc0", "sighting_of_ref": "indicator--0be83a61-264e-4aa5-b206-e872f72845d3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621fc538-ef69-488e-b9dd-27beeebafb00", "sighting_of_ref": "indicator--6a1895a6-bb42-4373-a579-e3a6f87dc1b0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ef2669-6bd1-4fc1-b031-ce52a9ce3f01", "sighting_of_ref": "indicator--69b35fc5-0d50-43d5-bb1b-8511b7a09678", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6295ab35-3071-4511-af16-755bd7af764d", "sighting_of_ref": "indicator--906901d9-e000-424f-83b3-b2a77fd34827", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0888a314-8ac7-47e2-9237-743684960b0e", "sighting_of_ref": "indicator--e3274c42-ce29-4d94-ae64-db65f8c3b9ca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a892d91e-897a-46da-861d-12bea19c6c92", "sighting_of_ref": "indicator--176969cd-ee05-41c2-857f-1201a9e27824", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac42deb9-5d26-45c7-ab89-5f6f1bed62ad", "sighting_of_ref": "indicator--921797a7-95ae-4b70-8ef6-cf5371955364", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5ac7cf-ccce-44e9-a91e-801c009636d0", "sighting_of_ref": "indicator--eb552585-976a-479c-9087-ad107f82a035", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f456f3c-718b-4eac-9fc7-94095b16883b", "sighting_of_ref": "indicator--063f8b40-75c9-4734-a694-1c19df439fef", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0e9885-6c9d-410c-b191-0557b49b6671", "sighting_of_ref": "indicator--9c531fb3-4124-4d7c-95e6-c61066c55143", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef26e497-d33c-44f7-8413-1c6d67947309", "sighting_of_ref": "indicator--8daefb63-4bd6-4fb9-974a-06f663e7e610", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69653761-9aec-4e82-953b-8c3d0ff128e9", "sighting_of_ref": "indicator--9d44c667-402e-4dc0-8b51-28f914c4d868", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17dfc6d-5422-4152-8d29-fcc50e65347d", "sighting_of_ref": "indicator--9d44c667-402e-4dc0-8b51-28f914c4d868", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06955edd-fa86-4c10-857c-0abbe02a78aa", "sighting_of_ref": "indicator--0c62e41a-aa36-4e0a-882d-de9dc96b5b0a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52c6af0-2207-43b8-82b2-4d631f61a13d", "sighting_of_ref": "indicator--0c62e41a-aa36-4e0a-882d-de9dc96b5b0a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655151d6-c570-4dff-89e6-2f1ab0bf3d1f", "sighting_of_ref": "indicator--0c62e41a-aa36-4e0a-882d-de9dc96b5b0a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec2f2e7-db8e-4cf3-8b68-72fa1c60295a", "sighting_of_ref": "indicator--ecab51e9-b417-4fb1-82f5-6c5723140068", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83267ad-21ac-404f-9d34-641a915490d2", "sighting_of_ref": "indicator--ecab51e9-b417-4fb1-82f5-6c5723140068", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15cae19c-51b8-423d-b264-41cc99206edd", "sighting_of_ref": "indicator--71c5a8fb-a175-4d09-b7b6-1ebea92f17b9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad0dcf0-c5ba-4f0c-9a97-b237163fe15a", "sighting_of_ref": "indicator--3caa6d21-6fe2-4dce-ac4c-16f94cf93a2d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266516ad-83ef-4d7f-81f6-58e0d88539b4", "sighting_of_ref": "indicator--c32560c0-36fa-4308-8bbf-6a611c245aca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da56e2f-d9bb-4ce4-988b-8634c09c87f6", "sighting_of_ref": "indicator--cf2dea9f-8b06-4b8e-b4d7-b7279016f673", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e14512-0a38-4a78-a045-923ff894e54c", "sighting_of_ref": "indicator--cf2dea9f-8b06-4b8e-b4d7-b7279016f673", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261af6e6-bfda-46a0-bcf7-b62e4cc6becd", "sighting_of_ref": "indicator--cf2dea9f-8b06-4b8e-b4d7-b7279016f673", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf0df8a-4cff-4fa4-b35d-820bf60c2364", "sighting_of_ref": "indicator--24aecc2b-7933-4147-b21b-7dc86367b614", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ee5258-e792-4f56-a2f5-295d9ebc24af", "sighting_of_ref": "indicator--09e5436d-53cb-4f75-bdda-f484cd1d4c23", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef49fd9-8e01-407b-8fdb-734405e9cd99", "sighting_of_ref": "indicator--a83692be-e6e9-400a-8152-60f07caa6912", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3690a5b0-d005-43b9-80e5-83b19a4b81f8", "sighting_of_ref": "indicator--d394d4e2-74a9-40bc-ac15-0bfee31efd32", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53eca26d-9e2a-4ce0-a712-a5325434c6d6", "sighting_of_ref": "indicator--dd8a41af-2ab5-49c0-ab94-fa61aba305b4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c08d63-d1bb-47bf-bd49-537abf64f409", "sighting_of_ref": "indicator--256b043f-d182-4659-89a6-18ce2044df52", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce585bc-8e6b-4b6b-858d-bebd70d52a47", "sighting_of_ref": "indicator--f5ac9995-3a83-40ad-b723-649d73a892b1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985630be-454d-43a1-81e1-f808239432a1", "sighting_of_ref": "indicator--196132ca-7a03-4d4c-a8b4-ecbaded65af5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4742e8-7803-47cf-98bb-743386fbf18d", "sighting_of_ref": "indicator--ccd9b522-108d-4833-befe-5953484fecf0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980b63c3-d1cc-4fb3-858e-2fbd9a877290", "sighting_of_ref": "indicator--f7f349dd-d1d0-402b-8e74-50c3601388bc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2882a4a-d8e8-43d0-90e6-06ea5ebeef19", "sighting_of_ref": "indicator--204d53e0-68f6-4ee4-a1a9-4daf69ebdf18", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1b2a76-755f-4a1f-bea0-5f17bfc9b8c4", "sighting_of_ref": "indicator--9c6dda4e-8a29-4fb9-8dcd-a64d2ee6e645", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ddb8f3-eb45-486a-9909-6b7e0e24fb2c", "sighting_of_ref": "indicator--9c6dda4e-8a29-4fb9-8dcd-a64d2ee6e645", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a06c0ca-39f4-4e4e-92b4-4c18027cfedf", "sighting_of_ref": "indicator--9c6dda4e-8a29-4fb9-8dcd-a64d2ee6e645", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2848bb91-7fa2-4259-9200-131e409ef09b", "sighting_of_ref": "indicator--1524ea5d-c996-4c3c-a932-757571e26d92", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f9a527-355e-42f5-b263-0be4edc5012e", "sighting_of_ref": "indicator--bda18391-cce6-4a48-85ed-7e3fa6f928bb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fccaeef-f7cc-4f2b-859c-dba09fafd83e", "sighting_of_ref": "indicator--bda18391-cce6-4a48-85ed-7e3fa6f928bb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380b2cfb-f78c-443d-a1aa-1e2c0cacae38", "sighting_of_ref": "indicator--bda18391-cce6-4a48-85ed-7e3fa6f928bb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e13db4d-c0f2-43d3-bd95-115b414955c8", "sighting_of_ref": "indicator--6edbc0e7-cbc1-4954-b4ba-3177a03896d9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e02c5c0-4b9e-4fd6-92ea-35f92d4bc5a5", "sighting_of_ref": "indicator--8b386095-900e-45ed-b430-a7a5c7259010", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f7ed53-ab45-47f7-9668-313341146173", "sighting_of_ref": "indicator--8b386095-900e-45ed-b430-a7a5c7259010", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63dfe71-1aa4-4327-a716-e444aa6db3e2", "sighting_of_ref": "indicator--68d046ea-2d08-4ef1-803b-b9ba7a314b64", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385e7d83-4168-48e9-b4a7-f9c347a2f5bd", "sighting_of_ref": "indicator--286512f9-52e2-4a68-9d1b-5dcced788e2d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fd5733-1a4e-4cc8-8e85-b2239c51ab63", "sighting_of_ref": "indicator--011fd4c2-c4ca-4a6c-bfb9-1833b7fd0f72", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71389b8-af8d-43ba-9ae9-dc0e816b92a4", "sighting_of_ref": "indicator--a09677c5-b5b0-4533-9d3c-d265fa5f731f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ace8a4-fa2c-4491-b1b1-070343a92d20", "sighting_of_ref": "indicator--a09677c5-b5b0-4533-9d3c-d265fa5f731f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d4a279-b1d8-41dc-a249-71e5a2c93d89", "sighting_of_ref": "indicator--92879a74-ec34-449b-943c-ea321a5fb6b4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd27ea5-202e-4cc4-af62-97627602884a", "sighting_of_ref": "indicator--92879a74-ec34-449b-943c-ea321a5fb6b4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a26529-f491-497a-a2fd-84740989dad9", "sighting_of_ref": "indicator--92879a74-ec34-449b-943c-ea321a5fb6b4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e9b19d-c23c-452c-ad32-1c5148c4b251", "sighting_of_ref": "indicator--7b49e4b8-9d0b-4905-87a1-04c4f9f2779c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03149236-def6-420f-916c-6fc2b7518421", "sighting_of_ref": "indicator--7b49e4b8-9d0b-4905-87a1-04c4f9f2779c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a596f533-0c4f-4650-b83f-503621da6f8b", "sighting_of_ref": "indicator--f03cf67d-d576-4ae7-970d-fed7ca522ff6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09aed012-f314-4b8a-bb8e-3e78d34a65c7", "sighting_of_ref": "indicator--f03cf67d-d576-4ae7-970d-fed7ca522ff6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771986d3-3c1c-40b2-8d9a-9f91fe82c696", "sighting_of_ref": "indicator--cab73e86-9466-4e54-85c3-09369d9513e8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b41233-f4f2-4cbb-9849-5c58002f5ba3", "sighting_of_ref": "indicator--e1fae42d-77e3-4ae1-bd5b-f11db3092fbe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989a2d3c-af81-4eee-b0c7-255195b43a82", "sighting_of_ref": "indicator--ad54bef7-0766-4e26-95ee-dadfeee39ebb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89c2e08-d46e-4f91-845b-e15f25a44828", "sighting_of_ref": "indicator--6b1d8218-bdcb-47d3-b054-d0cd4ffbf5ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b048a7f-0472-418b-9f6e-1f5f0b65b0d5", "sighting_of_ref": "indicator--5c824d80-4845-4422-a36c-f509696e6726", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ef1a09-bd10-4b29-b2a0-fe23f9415435", "sighting_of_ref": "indicator--61f559ba-803a-40ac-a6e9-299339010d64", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b003da9-f822-4e5e-8ad6-24f48d4f3902", "sighting_of_ref": "indicator--61f559ba-803a-40ac-a6e9-299339010d64", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4452bf28-b034-43d3-96c2-9adef287c131", "sighting_of_ref": "indicator--61f559ba-803a-40ac-a6e9-299339010d64", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf02d68-759b-49a1-a42f-8af5fae06372", "sighting_of_ref": "indicator--cfd42972-4c4c-4186-ae54-78bd0a33269f", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57980a9b-6314-4ce4-a619-7911aebe138a", "sighting_of_ref": "indicator--b8d8451d-be23-49ff-bb0e-e156a5838d1d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9912e32b-50d1-473d-9002-ccd03ef54bb5", "sighting_of_ref": "indicator--1e7ab968-0082-448d-8971-18ce8abe9a0a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc07b68-d9c8-4a51-8c8d-9fba451721d4", "sighting_of_ref": "indicator--666a9f33-f67b-40be-8767-fd90d0ebe083", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce89bc4-c1f3-46c9-be3c-325eaf4bb563", "sighting_of_ref": "indicator--666a9f33-f67b-40be-8767-fd90d0ebe083", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22921ac-c954-4cf8-b027-1a54fd72154e", "sighting_of_ref": "indicator--666a9f33-f67b-40be-8767-fd90d0ebe083", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf7995f-3c11-409f-837a-26a9c36aefeb", "sighting_of_ref": "indicator--d0c212b5-e578-4d3d-b7c3-8e675cfac1de", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0fcdad8-0ff1-407f-a37f-defd3df8c107", "sighting_of_ref": "indicator--d0c212b5-e578-4d3d-b7c3-8e675cfac1de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660ac997-99bf-4418-a490-0f9367c95ffb", "sighting_of_ref": "indicator--d0c212b5-e578-4d3d-b7c3-8e675cfac1de", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1785d0b1-eae6-43c0-bede-f55bde1d3f2c", "sighting_of_ref": "indicator--3b73e3ca-68ef-4f67-8af7-5a16b533c916", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4410486c-45b5-4a5b-bd0c-b36a924a0c08", "sighting_of_ref": "indicator--3b73e3ca-68ef-4f67-8af7-5a16b533c916", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5695153-0345-49a7-a56e-7721b18e3bdc", "sighting_of_ref": "indicator--b77b19cd-8d40-49bf-94cd-338f08ddfc35", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70474415-f37c-4047-a622-263ca80e7b5e", "sighting_of_ref": "indicator--b77b19cd-8d40-49bf-94cd-338f08ddfc35", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c28cea-0497-450d-835c-d0f2a116264d", "sighting_of_ref": "indicator--88a32b84-3191-4729-a51b-852913cb065e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15f63b2-ea41-4bc7-b647-e0120d55fe15", "sighting_of_ref": "indicator--88a32b84-3191-4729-a51b-852913cb065e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad32fafb-88d7-4a3f-b8f1-f89472a5044c", "sighting_of_ref": "indicator--88a32b84-3191-4729-a51b-852913cb065e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9beb1c55-9133-4d70-b841-15a0ab301b8c", "sighting_of_ref": "indicator--0b8d8604-a5df-4e02-82f7-2fc23fa38096", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2d7e2b-1a47-49dd-b19b-da12a0c7dd09", "sighting_of_ref": "indicator--0b8d8604-a5df-4e02-82f7-2fc23fa38096", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f095ca9-a717-4bc2-aa56-af63b71d1f1d", "sighting_of_ref": "indicator--10364b67-7f73-426e-95d0-c14e9edbbbcb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fc227d-d8ba-46ad-9438-ef6e799cd10d", "sighting_of_ref": "indicator--10364b67-7f73-426e-95d0-c14e9edbbbcb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bc9704-fc9a-4279-9a7d-368cbbe691cb", "sighting_of_ref": "indicator--7e167301-60d2-4e2d-bfff-ae52c5bae156", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05dfbba-5a79-417c-b561-81f3b5788a3d", "sighting_of_ref": "indicator--7e167301-60d2-4e2d-bfff-ae52c5bae156", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0661e5c-bba4-4c52-8b79-d6e3f506d560", "sighting_of_ref": "indicator--7e167301-60d2-4e2d-bfff-ae52c5bae156", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8023a5-0f88-4516-8da8-82c0621a9fc7", "sighting_of_ref": "indicator--b3dd991c-6dae-42b3-b573-f827dbaad173", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca90448-62bd-4b63-bc4c-7257216eb846", "sighting_of_ref": "indicator--33996d47-0f3e-4ec4-bc36-bb864f0f53ec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bee0424-73ba-4f47-83c9-645eba890e09", "sighting_of_ref": "indicator--79a4a2f6-dd05-4efb-a964-9ef425e6dc60", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49ed2c8-2199-465c-b904-f078f6b98ce1", "sighting_of_ref": "indicator--79a4a2f6-dd05-4efb-a964-9ef425e6dc60", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab376926-c64c-49b7-9797-fc3b48795553", "sighting_of_ref": "indicator--9bee9fa5-18a4-44fe-ad29-0f522fa82f2d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f8bd35-eade-4d73-8345-d89247ef4152", "sighting_of_ref": "indicator--9bee9fa5-18a4-44fe-ad29-0f522fa82f2d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762c3939-cbe5-4ab4-9dd0-174be67299d5", "sighting_of_ref": "indicator--9bee9fa5-18a4-44fe-ad29-0f522fa82f2d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5300fd-f34e-473d-a923-00232bebdc85", "sighting_of_ref": "indicator--cb0cfa0b-243f-4d39-b05a-33a4ea27b54d", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be093cde-947b-456f-b318-f4ec9a5f9d83", "sighting_of_ref": "indicator--1d03a00d-2c94-4a7a-9b68-f62f543d0642", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8debec10-7315-49bf-8973-c39c9c481dcb", "sighting_of_ref": "indicator--1d03a00d-2c94-4a7a-9b68-f62f543d0642", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91199721-e31c-40a0-9349-6b137da8c24d", "sighting_of_ref": "indicator--1d03a00d-2c94-4a7a-9b68-f62f543d0642", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd6405b-d4f5-4622-bb1e-12d2dbcef22d", "sighting_of_ref": "indicator--96319942-f70a-4b8d-9aad-d642f3436263", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ab79b4-7c22-485c-89a2-69603303b621", "sighting_of_ref": "indicator--96319942-f70a-4b8d-9aad-d642f3436263", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd269a4c-48da-4cd4-a237-e0baf8f8522a", "sighting_of_ref": "indicator--d77f1c06-4836-477c-846d-e7ca99b9effb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9540d623-5cef-428d-9889-3d6838b45003", "sighting_of_ref": "indicator--3a2f7638-a59c-40e6-97a1-474ad3713826", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7aeddc1-e01c-4923-9d44-8ef84b736fbd", "sighting_of_ref": "indicator--80953d0e-4abf-43df-a448-c9bb7476e0ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5cc2dc-0684-413a-aef4-f8721c121397", "sighting_of_ref": "indicator--60acf340-b4cb-4628-b84e-fc22890a3786", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531c0e73-711d-454b-b5ce-7a29c5a99dde", "sighting_of_ref": "indicator--abbba223-1728-407a-a6f7-ebdde8090964", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34ee32f-ac20-4835-ad7f-0e17e41c2e92", "sighting_of_ref": "indicator--06524e50-dc02-4d4a-bdfe-c46581ca4bb1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dad0049-4b53-46d5-af2e-a5cbeddd4479", "sighting_of_ref": "indicator--766222a9-7b75-43cd-ae1f-df639010f603", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2af79ec-fb89-4a0f-8720-4ca14d16e137", "sighting_of_ref": "indicator--954fcca1-e6a5-4742-880b-d3e82f3db133", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a152a5c7-9f70-484e-90b9-0b606111d028", "sighting_of_ref": "indicator--b922252b-c456-45a8-b694-7bdbb50e059f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75225955-1e9e-4fb6-8bfb-d51d27743bce", "sighting_of_ref": "indicator--a018def8-8982-447c-ade7-5d1bcc6d77c8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c19f4ac-751f-4929-bebd-280d456b4f9e", "sighting_of_ref": "indicator--a018def8-8982-447c-ade7-5d1bcc6d77c8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd594be-3784-46c6-ae26-e04909842255", "sighting_of_ref": "indicator--85fae443-85fc-423b-87a5-d7ab1f22f7a9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7cdcfa2-fbb4-4f0b-b1df-9be7ef705176", "sighting_of_ref": "indicator--85fae443-85fc-423b-87a5-d7ab1f22f7a9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788cc244-fa90-49e1-b988-b26fea898f65", "sighting_of_ref": "indicator--85fae443-85fc-423b-87a5-d7ab1f22f7a9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d3579e-df2b-43c1-85ed-e5d6afb066b7", "sighting_of_ref": "indicator--e2765cba-4e94-45cf-8cd8-3ddde66c422f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a185bb54-409e-4090-ab6b-42137486b205", "sighting_of_ref": "indicator--1b2715cb-6bf4-46cc-9be7-178c4f11f131", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6860eae7-96c9-486a-8b08-ca7387de47d0", "sighting_of_ref": "indicator--55d7da31-7786-4b4e-9981-b0939d5d733c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443112d1-8ece-440f-8dd6-af1979058f60", "sighting_of_ref": "indicator--55d7da31-7786-4b4e-9981-b0939d5d733c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77cc4feb-846f-441f-8fc0-25d681d61e73", "sighting_of_ref": "indicator--892899b1-ff3b-4312-ae69-f43e5439c6d0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510f8dda-ea77-436d-bee6-0234561a3536", "sighting_of_ref": "indicator--34676183-2ed6-40d0-8ff4-193066112be0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d0e49d-a25f-4065-877c-3a8bb6a2661e", "sighting_of_ref": "indicator--1a125f7d-59e7-4980-93ed-d77c049daee2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132cea3b-7b5a-4d3c-9051-7ddd01bbf23d", "sighting_of_ref": "indicator--1a125f7d-59e7-4980-93ed-d77c049daee2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6f641d-6206-46fe-a06a-72340b759453", "sighting_of_ref": "indicator--1a125f7d-59e7-4980-93ed-d77c049daee2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dadd3cd-2d1a-407d-94b2-a56a9bab2fc2", "sighting_of_ref": "indicator--16160609-a1a0-4c93-82cf-3a777430617f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92ec5e8-a9bc-45a8-86f8-e8797a144e97", "sighting_of_ref": "indicator--6f616f97-e2bf-44ea-a468-4cd698b13085", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d9718e-ca24-4749-8512-135fdd3db9cb", "sighting_of_ref": "indicator--94a20798-b262-45b2-8894-5a49e0df4726", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0626cced-0821-425f-b9ce-c38ec2b3f362", "sighting_of_ref": "indicator--0131f977-d18a-48c5-9a94-989c19914ddc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7322a5c-a689-4c68-ba0d-794e3cfd67ed", "sighting_of_ref": "indicator--3f26d1b1-a9cc-4944-b230-e75cbf8c0b38", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed4a426-8169-4683-8dfd-72c4bd730dca", "sighting_of_ref": "indicator--2ffa45a8-07a4-4c76-846a-289ca2e7a1f7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c8eb6d-4a79-4dfd-9d89-cfe768060c8f", "sighting_of_ref": "indicator--8851d13d-0f52-44f8-ad6e-ebbf125b90e7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7cf6fc-22f2-4ea2-8c5e-6763217ed377", "sighting_of_ref": "indicator--8851d13d-0f52-44f8-ad6e-ebbf125b90e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad25ae0f-bae3-4fa0-9ad9-f469b2950b7f", "sighting_of_ref": "indicator--8851d13d-0f52-44f8-ad6e-ebbf125b90e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7fc6d1-61ae-41c7-9f22-9a1dc07ab43d", "sighting_of_ref": "indicator--2a9dc450-69d2-4e83-8231-df518786df97", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851a98d8-0d9c-4f54-8091-e07cccf014ee", "sighting_of_ref": "indicator--2a9dc450-69d2-4e83-8231-df518786df97", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b731faea-0117-41cf-8a7e-858d864d6140", "sighting_of_ref": "indicator--2a9dc450-69d2-4e83-8231-df518786df97", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7cc504-ca86-44d4-a426-3395e60dc8a9", "sighting_of_ref": "indicator--3771be94-bd90-4a83-82d1-b2b2a6e5fef8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8577e424-2c00-4081-a77d-207dd49b3ef0", "sighting_of_ref": "indicator--3771be94-bd90-4a83-82d1-b2b2a6e5fef8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef554dd-1e0d-423b-9721-4a0d0767b817", "sighting_of_ref": "indicator--dacae4ed-4fd5-447b-9339-4ce639589e41", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14d4cf8-3708-4d79-b10f-75c7472e299d", "sighting_of_ref": "indicator--dacae4ed-4fd5-447b-9339-4ce639589e41", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a71800f-d9a6-4070-91bf-2acf7d272aa7", "sighting_of_ref": "indicator--dacae4ed-4fd5-447b-9339-4ce639589e41", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9a3917-6d1a-45a4-851e-09faa6a41b53", "sighting_of_ref": "indicator--de5c35b8-8f59-4c60-a782-2fcf590275f6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e99cdc-2366-4d37-a69a-f9f935083f81", "sighting_of_ref": "indicator--313abe07-6fb6-4e6d-81f7-180df01680cb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9d67b4-da09-48de-9469-86a4af7e2fb6", "sighting_of_ref": "indicator--5c38ccaf-5be7-4478-91f8-8f6ba41e09b1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0170270b-cb78-47ed-af0c-bf38f22b09d6", "sighting_of_ref": "indicator--c5d1444d-f0c0-4337-9737-abb57f98bc44", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b320ed7-7591-4920-9b59-1f4644454b1a", "sighting_of_ref": "indicator--053ea56f-6dfc-4128-b5b7-597fa8bbcfaf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563031bf-cd79-4c58-b1c2-d4bfcaf5cee4", "sighting_of_ref": "indicator--7e1cf04d-0d54-4a32-97a1-992a22abcfa9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd435d9-7f02-4aa8-b25a-35b0d76fb949", "sighting_of_ref": "indicator--edff42e8-2ac9-410f-9467-b2203eaebd42", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1321ea-b84a-4918-bf48-061f4506ca14", "sighting_of_ref": "indicator--f5076e16-4f49-4270-af62-7f729ad6c86a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c2683d-b76c-4713-82e2-e71bef3ac6a6", "sighting_of_ref": "indicator--f5076e16-4f49-4270-af62-7f729ad6c86a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a10be18-bcf5-40f6-9dfd-1c961ecb93e6", "sighting_of_ref": "indicator--a97758c2-f2d9-4aa5-8759-8f35c7870fcc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defd36d5-d746-4175-8f21-aa1ad69b878b", "sighting_of_ref": "indicator--7fba8ca9-3901-4e17-86c3-37eb8bd2708f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c436d1d0-8c05-4fd8-a44b-fd5f8dda3db7", "sighting_of_ref": "indicator--7fba8ca9-3901-4e17-86c3-37eb8bd2708f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceaede1a-bceb-4c08-8988-fc4d063b8327", "sighting_of_ref": "indicator--272d6b68-1389-48a4-b15c-d0158b149760", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041d83f9-8dc6-47db-a473-31df70afbfa5", "sighting_of_ref": "indicator--b92b5e85-0e6f-42f4-b568-d3976228631e", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c8f2e6-cedc-45bc-8505-5cab606c212b", "sighting_of_ref": "indicator--3792c745-4fae-43ec-8089-83770cf67740", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8368acdd-21de-4342-a2be-9ef9644fcdd3", "sighting_of_ref": "indicator--ae7f5a35-c6e6-47c8-8b1f-194434542b00", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f632b7e-f4dd-4873-8cfe-ee163a350c65", "sighting_of_ref": "indicator--ed0e1c2f-07e5-46f7-81e6-2e3dbfbaeb65", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7b430d-7065-4aef-9e3d-8491dcb61a54", "sighting_of_ref": "indicator--ed0e1c2f-07e5-46f7-81e6-2e3dbfbaeb65", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd821a8f-6060-4535-a168-e0d8178c2f58", "sighting_of_ref": "indicator--13ce956e-cca1-4bac-bbc9-9056c8d2f377", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d65d3b7-e2ca-47d9-8a03-2d8b55d6b1fe", "sighting_of_ref": "indicator--90e3a6d4-8507-41a9-a74b-f23385b77346", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6006cea1-f05b-4e4f-b070-1b2e02352f6c", "sighting_of_ref": "indicator--0c9e4d23-bfdb-4d8e-809f-bc79c2be5fd5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49783a9-f817-49db-8f73-91b87202986a", "sighting_of_ref": "indicator--0c9e4d23-bfdb-4d8e-809f-bc79c2be5fd5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f08d5a-d262-416e-919e-5cb9748e7611", "sighting_of_ref": "indicator--0c9e4d23-bfdb-4d8e-809f-bc79c2be5fd5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e305ed8a-2e78-4668-a065-18f79d205dbf", "sighting_of_ref": "indicator--2aa2ba26-0402-4435-8749-1db970ad0d50", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25bc6fb-2110-4736-8149-c593d4b598e3", "sighting_of_ref": "indicator--fea5bb95-d982-403f-ab51-90f012346711", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0ff622-3e26-4ba6-83ec-b5260860a318", "sighting_of_ref": "indicator--9c8c3741-a60b-4af9-ab0c-46053e932338", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fa60b7-1a71-456d-a009-bf940c942f4b", "sighting_of_ref": "indicator--9c8c3741-a60b-4af9-ab0c-46053e932338", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534557d6-f36d-4b04-a8f6-a8a10ddd7171", "sighting_of_ref": "indicator--e26db6e2-cca8-4f48-baf8-174745d1afd9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe085bd-1946-452b-8b2c-c52d105b2239", "sighting_of_ref": "indicator--71e87d25-040a-4c66-9e40-e3f8a883d7b8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068ee0c4-dff4-43c7-b994-9ec433132e3b", "sighting_of_ref": "indicator--7a9239f0-ba77-43b1-9752-f6cee5318849", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349bab5a-6ef0-40b4-9d08-cda888130851", "sighting_of_ref": "indicator--7a9239f0-ba77-43b1-9752-f6cee5318849", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822602d6-f84c-4f24-9b41-1b5209af34ee", "sighting_of_ref": "indicator--9ff69a3c-5f72-4577-bef4-bc4b4a3aed14", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4028468b-58bc-48a0-a653-2d8cdefe966f", "sighting_of_ref": "indicator--9ff69a3c-5f72-4577-bef4-bc4b4a3aed14", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8582f5-e4c3-4b47-b441-8d213b53b8ad", "sighting_of_ref": "indicator--8bb1a2c7-bd06-41a4-85c3-c31d7386ba6c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e40e14a-344b-49dd-81d0-4986bb16b937", "sighting_of_ref": "indicator--0eb21f2b-8a61-4254-b7a4-7538b6da17df", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa49a64-22ae-4af7-bedf-f5614860c0d1", "sighting_of_ref": "indicator--0eb21f2b-8a61-4254-b7a4-7538b6da17df", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55433da-ace8-40bd-a33a-705d39030b49", "sighting_of_ref": "indicator--523f5f53-df9a-4ec7-9a8e-3034a51617fa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac769c78-67e5-4c77-9dfd-61bc4c629d53", "sighting_of_ref": "indicator--df4dd7e0-aaf8-4b21-a2e5-34a52f2e495c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204f0710-f1a7-4059-aa00-5139a6269373", "sighting_of_ref": "indicator--78e428d9-d442-4392-ae28-586d2184f36a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0b496f-a9e7-422f-8b21-95848c71d04c", "sighting_of_ref": "indicator--78e428d9-d442-4392-ae28-586d2184f36a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f553f7f-884e-4b69-9c8e-9cd6a646a0b8", "sighting_of_ref": "indicator--150620e2-ed99-4862-bfa8-b37f057f33a4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49b0746-1980-41fa-96d9-52313f7995cf", "sighting_of_ref": "indicator--150620e2-ed99-4862-bfa8-b37f057f33a4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08900b5a-5311-4070-9031-732ad4b6e8e7", "sighting_of_ref": "indicator--0c0ca6eb-952b-41b5-a0fa-aac988d46369", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a501c356-f0c7-46c3-ae01-dbca2d10f4d7", "sighting_of_ref": "indicator--f3db639f-2a1a-445a-be5e-54b63e1450d4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d61ebe-036c-4cfa-a2d3-62d80c89e8ef", "sighting_of_ref": "indicator--dd9371cd-2783-4731-b61d-e16183272629", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fae08e6-4dd0-445f-b8ee-7176a702f663", "sighting_of_ref": "indicator--121ad815-8dbe-4b6e-adc3-e85c050158b7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677ebdbd-59b3-43f6-bf05-2df3417389cd", "sighting_of_ref": "indicator--63449030-0a0c-4741-9de8-b33e67f4e81e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6d7247-f3a1-440c-8ca4-d21edb553cef", "sighting_of_ref": "indicator--63449030-0a0c-4741-9de8-b33e67f4e81e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe39edf-9f1c-4d53-ad37-0432fcb81aab", "sighting_of_ref": "indicator--57972192-6705-447c-adc4-b1554e8c88e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5a9782-db60-4406-b138-2b55da38f0e6", "sighting_of_ref": "indicator--57972192-6705-447c-adc4-b1554e8c88e6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb0ea0a-b848-4ea0-9344-eb0cea6c3ac5", "sighting_of_ref": "indicator--50813ca0-e36c-46b5-af3f-9d4f154421fb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a22be5f-c881-4d07-97cc-c851db0d56f4", "sighting_of_ref": "indicator--6ea81d17-db1e-4aeb-8ad4-e30bdb6b40b0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2532f1f-2468-43cd-bac5-29cda176c650", "sighting_of_ref": "indicator--8944417b-755a-429a-a486-19dec127dbc6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd28e66-4fa4-4d0f-b1f7-b35bec476b67", "sighting_of_ref": "indicator--8944417b-755a-429a-a486-19dec127dbc6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77386e36-853f-45f3-877b-5e767e73b500", "sighting_of_ref": "indicator--4b0b5c58-ccd9-4a78-b2c2-4487bfc9f4a1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071bb697-5d44-4ba2-ad06-10e19c9b67bb", "sighting_of_ref": "indicator--476c26fc-2970-447f-9f94-59258d6cf2ac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0571ed3c-0b32-487f-a68c-43dc9003f8e9", "sighting_of_ref": "indicator--8680323e-4f8e-4379-91c8-5ef0b7a3ae2b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2c221c-3759-4960-8ced-f0653fc7518c", "sighting_of_ref": "indicator--8680323e-4f8e-4379-91c8-5ef0b7a3ae2b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db6e572-21fa-493b-9afc-2c52e1604261", "sighting_of_ref": "indicator--b2e19b6d-2e8c-4a03-b0ed-804b0b3fe6b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b317b22-4fde-434e-abe1-257f3a28d50b", "sighting_of_ref": "indicator--ba04ea40-ed55-429d-a38c-d9696349b770", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3d9f9b-ea63-4282-9794-01fbd37e11ac", "sighting_of_ref": "indicator--89685825-b6af-4064-afb7-6db03a5efb40", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2884b4ec-44e1-4d75-83b2-9d1b701c8b75", "sighting_of_ref": "indicator--89685825-b6af-4064-afb7-6db03a5efb40", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1ca77a-f864-49f9-9f57-f90e33a9f719", "sighting_of_ref": "indicator--13a7898a-3846-40bb-8a5d-ddbf342eb86f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96e39f0-e862-40b9-a43d-0bf43f7e8e96", "sighting_of_ref": "indicator--6de658a3-f4e0-41a3-8f6b-a641136c09e9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da61540-f486-4abe-912b-1973ffe472c0", "sighting_of_ref": "indicator--3bac1bb2-8f47-4921-a907-ebdb6955a12f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a07b9b-3f0f-4c50-aab5-4c7a684a87dd", "sighting_of_ref": "indicator--3bac1bb2-8f47-4921-a907-ebdb6955a12f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1bdb27-3664-448e-baa1-fd0dc57f8813", "sighting_of_ref": "indicator--d72fd814-c293-4216-bbdc-6f189fc8d3ab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb0f7b6-0d27-4324-aed2-cd67e75d0e21", "sighting_of_ref": "indicator--d72fd814-c293-4216-bbdc-6f189fc8d3ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3794103c-030f-4027-a706-434cb8908d41", "sighting_of_ref": "indicator--1de1cd1f-eaa2-490e-b144-0ddbb1ada1de", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c557d6e-8487-4e8c-864a-b9b0a14b5353", "sighting_of_ref": "indicator--1de1cd1f-eaa2-490e-b144-0ddbb1ada1de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4d8c4b-1143-4cdd-8f41-1a177665ff7b", "sighting_of_ref": "indicator--2c4833ea-b2e2-4d1b-9fc8-72b0760b7a8d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d7dbf3-a2e1-42e6-9a13-0efddcc95f28", "sighting_of_ref": "indicator--2c4833ea-b2e2-4d1b-9fc8-72b0760b7a8d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a34fa1-ff6f-4a6d-9afb-c9eb8fb71499", "sighting_of_ref": "indicator--d8844077-7c60-45d3-9d86-63b45a85f112", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842a76e2-6560-4e57-8b08-cfdd000c6c61", "sighting_of_ref": "indicator--d8844077-7c60-45d3-9d86-63b45a85f112", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7717ddb7-0d22-4cc3-b00c-24cb62dea989", "sighting_of_ref": "indicator--9733dcb1-b805-4969-a470-c3eadf12f39c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79afebc-c1dc-40fd-b9bf-94a63087be0d", "sighting_of_ref": "indicator--9733dcb1-b805-4969-a470-c3eadf12f39c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019dc4b8-f7d6-402e-a0ba-65f4379588e9", "sighting_of_ref": "indicator--6815c2ac-99a7-404d-bd62-f6d0449bc797", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d852b1-ee20-4020-a3b0-c74bda639f65", "sighting_of_ref": "indicator--c0765649-5b07-4c29-bcfe-73716cfed155", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125c2818-c2ea-442d-8ed9-96e401c7163b", "sighting_of_ref": "indicator--c0765649-5b07-4c29-bcfe-73716cfed155", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8161a071-e04d-44ab-b4da-feea9a088e18", "sighting_of_ref": "indicator--c0765649-5b07-4c29-bcfe-73716cfed155", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6abc973-0422-43b2-9721-bb7581e006fc", "sighting_of_ref": "indicator--3925579c-7843-4b0c-9e82-826f85fe270d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b426cd-cac5-45b5-bc80-eefaa1b158b9", "sighting_of_ref": "indicator--25cfd846-493a-48d1-a2d5-67adc0e922b4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7fa087-ee5f-41e4-bb0d-fd24c03c3c3b", "sighting_of_ref": "indicator--25cfd846-493a-48d1-a2d5-67adc0e922b4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a55fa7-a32a-4c60-bbc3-d1f42d14f0b2", "sighting_of_ref": "indicator--3b1647d8-3dcb-4fb1-af80-d87adb81dfbf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144104cf-9911-4503-9254-cb7519f736a6", "sighting_of_ref": "indicator--0ad6533a-4ee0-4ba9-bc06-9b23dcd0fecf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cb7aec-61de-419e-8915-dbbb8caace86", "sighting_of_ref": "indicator--0ad6533a-4ee0-4ba9-bc06-9b23dcd0fecf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9f2c70-79c4-4a38-b299-85418d64f026", "sighting_of_ref": "indicator--0ad6533a-4ee0-4ba9-bc06-9b23dcd0fecf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788caa26-2335-4aee-bc1f-c2722cb9ea61", "sighting_of_ref": "indicator--82092b96-69ed-414b-8e40-31ce2354d229", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7f8963-b6fb-4c60-bd38-0528a12ef585", "sighting_of_ref": "indicator--9e31d85a-192b-4031-8a01-006abab83629", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d651337-c988-4d99-be79-1bd9412278fa", "sighting_of_ref": "indicator--9e31d85a-192b-4031-8a01-006abab83629", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3693d90d-9f7b-4e65-8c32-191b1a0a21a0", "sighting_of_ref": "indicator--18ac05a0-51fe-4a38-9437-0413ac4edf59", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e4e423-64cc-412a-8e26-2b1b2099e66c", "sighting_of_ref": "indicator--cc3c5179-b7aa-48b1-9cec-7123874bfa5b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22537ba-f903-4c3c-af15-1365ff754ca3", "sighting_of_ref": "indicator--cc3c5179-b7aa-48b1-9cec-7123874bfa5b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0869bc6b-9145-4bd4-8bc7-b90c170bf925", "sighting_of_ref": "indicator--cc3c5179-b7aa-48b1-9cec-7123874bfa5b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e193b7-879a-49a9-b946-d4cc2ef06710", "sighting_of_ref": "indicator--9bdeb0a8-7602-486c-8e10-9418a35c6095", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67712d49-1ce6-4239-940b-8417e9dcbd96", "sighting_of_ref": "indicator--9bdeb0a8-7602-486c-8e10-9418a35c6095", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033ff120-4992-4a7b-b2f4-382082140d7e", "sighting_of_ref": "indicator--94d62ed6-e159-4d5d-9d79-368faa78c35e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e34cd7-bcde-476c-97cd-5402a68542d4", "sighting_of_ref": "indicator--94d62ed6-e159-4d5d-9d79-368faa78c35e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444ccaa7-fe79-46be-933e-e6e153497b95", "sighting_of_ref": "indicator--eb0a935e-858f-47d9-ab2d-c29629fd7540", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a20995-bf5f-411f-a535-3bdcca4838e0", "sighting_of_ref": "indicator--eb0a935e-858f-47d9-ab2d-c29629fd7540", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295da916-c83e-479d-9486-f27196e431a0", "sighting_of_ref": "indicator--8755e28c-b42d-4d94-8361-34ed57ba9bc3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b870348-2509-48b6-afbf-cdeba80dfd16", "sighting_of_ref": "indicator--8755e28c-b42d-4d94-8361-34ed57ba9bc3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88a725f-19ba-408c-9743-91e9523d0b82", "sighting_of_ref": "indicator--b53b5d37-1ff5-4ea6-921e-e6ba68436c8b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5144a50-8b75-43f6-9cee-03dddc279512", "sighting_of_ref": "indicator--2e327c91-cec4-471f-a31c-3cceef4fbd35", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc83bd88-faf4-4c7a-b48c-64c3f0af804b", "sighting_of_ref": "indicator--ca76a68b-b368-4826-b278-e7aa68e14740", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913b87e5-aab5-4c1b-8878-bdf14981e892", "sighting_of_ref": "indicator--ca76a68b-b368-4826-b278-e7aa68e14740", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4218e84a-1767-488e-8d8a-367b087dd743", "sighting_of_ref": "indicator--d53a3e93-ba1b-497e-91d2-e544f6af795b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0ccf85-56fa-482b-a894-06fe68929626", "sighting_of_ref": "indicator--d53a3e93-ba1b-497e-91d2-e544f6af795b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e11a61e-a4d0-48f3-81b2-9ca3cd47675b", "sighting_of_ref": "indicator--14dbeb93-3f9e-4779-a996-233b99dcced9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8f0729-efa0-4983-a993-9c518b68bfb6", "sighting_of_ref": "indicator--c26ceaf9-05b6-41aa-b2fe-33f718e40cee", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a4f4b0-354a-4c9e-be1d-12eae1abd3ec", "sighting_of_ref": "indicator--fc8e0631-df73-4d27-9f33-8117d660c8d1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aff7583-7d6f-40aa-9909-b5736b02d0a2", "sighting_of_ref": "indicator--fc8e0631-df73-4d27-9f33-8117d660c8d1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1b1bcb-a81a-4e5c-89ac-875dfddbf0ba", "sighting_of_ref": "indicator--128f470c-06f0-4c5d-91b9-36f570950a0d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a37e576-8b14-4442-9a30-8547765a6388", "sighting_of_ref": "indicator--128f470c-06f0-4c5d-91b9-36f570950a0d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e20ef87-d678-4db2-ab6c-fcc4c822b8ba", "sighting_of_ref": "indicator--dbeaefa9-463b-42f5-bdf6-40ffdd7000c4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50038a4d-2bbb-4b50-b933-b2a7c819858f", "sighting_of_ref": "indicator--dbeaefa9-463b-42f5-bdf6-40ffdd7000c4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12041d8-0630-4794-a9f6-5aac3d9cf39c", "sighting_of_ref": "indicator--68848176-cee7-4075-813e-1177900276a7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fc8aea-1968-48d5-b78b-7d7bf0e587e0", "sighting_of_ref": "indicator--68848176-cee7-4075-813e-1177900276a7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65aad7f-3c80-4ac1-be49-41f05931dd13", "sighting_of_ref": "indicator--17b2beed-8d09-4f1e-b6dd-3d18f0cf334b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51270722-a4fb-40db-aa7b-459718d087cd", "sighting_of_ref": "indicator--17b2beed-8d09-4f1e-b6dd-3d18f0cf334b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668eaab3-7f38-4ffc-a51a-0468127c2aeb", "sighting_of_ref": "indicator--9aed747f-0936-44f0-98d5-e504cf91e677", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b018c8-aff9-4063-844a-81c4160944c7", "sighting_of_ref": "indicator--9aed747f-0936-44f0-98d5-e504cf91e677", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930797f0-c287-4491-81aa-2ac1d6149453", "sighting_of_ref": "indicator--3d10f375-d348-4206-bfdc-6b59ce1d52b6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce09907-3324-48c4-b854-9cfdf4e92221", "sighting_of_ref": "indicator--3d10f375-d348-4206-bfdc-6b59ce1d52b6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506ed6dd-4e46-42cb-8068-b6fb5043da31", "sighting_of_ref": "indicator--a857d620-606d-4f25-8bff-e7c7e009e0d1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9b7b36-7711-430c-beb5-994ae2121aa6", "sighting_of_ref": "indicator--a857d620-606d-4f25-8bff-e7c7e009e0d1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d9dfd9-407c-465e-92e4-c34ee02ada25", "sighting_of_ref": "indicator--650ac42d-d321-4ac2-bc86-1dd21308363e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe562a4-e93b-4f4f-8061-ddb23491fcbe", "sighting_of_ref": "indicator--650ac42d-d321-4ac2-bc86-1dd21308363e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4440915-63f9-4e0f-be15-dcecaa416028", "sighting_of_ref": "indicator--ccb11ec2-0840-4387-98e3-236489e76a4a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a849ae6c-33a8-404f-8968-67612d76dc0c", "sighting_of_ref": "indicator--ccb11ec2-0840-4387-98e3-236489e76a4a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f8d2d8-c4f6-4c68-af75-9505246860a7", "sighting_of_ref": "indicator--0fdbe8bb-d899-4221-b44c-c48f65d88b80", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda1780d-2af0-4db8-962d-d5908eef9a35", "sighting_of_ref": "indicator--a41d1f78-57ad-4833-ab38-5562b3daf0da", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8aa893d-dfe8-48d7-95b7-c192c84bbba0", "sighting_of_ref": "indicator--a41d1f78-57ad-4833-ab38-5562b3daf0da", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6205a537-0bd9-4a11-b430-74df0448d56e", "sighting_of_ref": "indicator--a41d1f78-57ad-4833-ab38-5562b3daf0da", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0364bfc2-9827-40d9-ba33-731da186311f", "sighting_of_ref": "indicator--b428561c-e321-4a39-875b-417e45750e04", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2535bf-6ca9-45ee-b0b9-f65d3e430a2f", "sighting_of_ref": "indicator--29b7e399-ed14-48bb-8946-93a23b4d7d2e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f251e0-4072-4c95-a0e1-bab61ee798fb", "sighting_of_ref": "indicator--29b7e399-ed14-48bb-8946-93a23b4d7d2e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb3f52b-d73d-4606-95ab-e91ef35ac3da", "sighting_of_ref": "indicator--29b7e399-ed14-48bb-8946-93a23b4d7d2e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883a3e9d-e482-4a46-86cb-eaa123c79c7d", "sighting_of_ref": "indicator--d6dd8cf0-cec3-4b5c-abdb-78b6d363d27c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca04cc0-5a9c-4901-9da8-7207fb92a874", "sighting_of_ref": "indicator--3ac1bd71-de2f-468b-8f62-e7dee75ba941", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63976938-a28f-461d-8cfe-02bd882607a7", "sighting_of_ref": "indicator--13946441-49d6-44cf-bda8-84637444ed41", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1575b5a3-2d7f-4eba-ad47-5b9ec837ebfd", "sighting_of_ref": "indicator--70037a15-ccf7-4aa2-8f69-faf953434da5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811f6206-8c13-4cda-901d-6aa37791d784", "sighting_of_ref": "indicator--b86c3c26-9e62-488b-869d-b8cf0b4314ca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267e4638-8df1-4653-a57c-16d05bb2a069", "sighting_of_ref": "indicator--0a1f414e-b566-4eb7-bdfc-bc3246105c20", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbabe0f-6091-4e9e-8671-f7b3a3d022d7", "sighting_of_ref": "indicator--88371ff2-2940-4835-abb6-12d1ac474c02", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befd0ba8-2dd0-450a-bd5f-3e3e4c45466e", "sighting_of_ref": "indicator--d62bd335-d104-4d16-b7df-dcdc0c2f5455", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c52cb2-53cb-4f25-af94-df456df9eb73", "sighting_of_ref": "indicator--7039e986-70d2-4f6a-a223-a5c7f4648ed9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b9825a-c29c-4ef8-bced-2eb124f64e18", "sighting_of_ref": "indicator--569da213-c781-4912-b33d-ccaa7a24d1ee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0335e6e9-4423-406b-963c-595081f71eb7", "sighting_of_ref": "indicator--2d147dd0-ad78-46d9-a283-3fe686787c6c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852c357e-8c14-4f52-a3f6-c5b559ccec92", "sighting_of_ref": "indicator--57e69262-5fca-4352-b3bb-3044db0bb869", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22cc5415-eaea-443a-b11f-a4600ca4c759", "sighting_of_ref": "indicator--e0ae8274-13cf-4165-9169-1abf7981102e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9d9bab-72d1-4b12-83c6-fe28175b2c69", "sighting_of_ref": "indicator--f1eb1a09-27c7-4d04-b9d7-72bc8639d752", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be60134d-2322-4c0c-a887-9759d0c8bd72", "sighting_of_ref": "indicator--19e56c10-e828-4f6b-b24e-0bd3e07cc2ba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0981e81-cd50-4530-8602-acc77618b763", "sighting_of_ref": "indicator--66ba7f9d-30ef-40e6-a5c0-ce33bb763a8f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ee2573-c880-45f8-bcca-71b85581a25a", "sighting_of_ref": "indicator--66ba7f9d-30ef-40e6-a5c0-ce33bb763a8f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87aa80ff-2f3a-4d52-b4de-374721fc5f12", "sighting_of_ref": "indicator--66ba7f9d-30ef-40e6-a5c0-ce33bb763a8f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a309f60-ef29-4aa0-8100-1d8ac274e661", "sighting_of_ref": "indicator--ac79a4ef-32c3-4d3b-bfb0-42fb02e6eaaa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c23bf8-9571-44e9-98b2-1e38e9f5f473", "sighting_of_ref": "indicator--7dae3b6c-4abf-4939-9b10-e6272f542a1f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd3b7e5-dcce-4346-9b41-a0a07e86276b", "sighting_of_ref": "indicator--7dae3b6c-4abf-4939-9b10-e6272f542a1f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ba28ad-6583-4345-8cd7-fa1cb897e561", "sighting_of_ref": "indicator--6ae453eb-c455-4316-a506-18340ce7da10", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6e1194-746f-4327-a002-1bfde056ee16", "sighting_of_ref": "indicator--9ead50f1-2061-4c60-86b3-415220b22601", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66ee628-7046-4a0e-bb89-8244bfb5bfbc", "sighting_of_ref": "indicator--9ead50f1-2061-4c60-86b3-415220b22601", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1fa210-d3cc-4957-a622-8e53813f52f4", "sighting_of_ref": "indicator--d9f313f0-d2f2-492a-8f44-433e7c054cff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964e8340-d92a-494e-95fe-8a7ec9e85c8c", "sighting_of_ref": "indicator--d9f313f0-d2f2-492a-8f44-433e7c054cff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4d30f8-041c-49c0-bc86-7ff98f3bb0eb", "sighting_of_ref": "indicator--6850be42-59d8-4cfb-9bd0-34dcd73a3219", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a68fc14-0424-469f-9e89-184e6b632e28", "sighting_of_ref": "indicator--de8cfd12-485c-4066-a819-2773f63b919f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cb1d42-954c-4657-8a96-d64cc686a2b1", "sighting_of_ref": "indicator--0f215dbf-f72d-4d0d-afcb-e3ef3c98cb0b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53051971-1ae2-4d2a-a6e6-c252d1f8f282", "sighting_of_ref": "indicator--14d11665-de1d-4235-a10c-a9a692d973a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9061a17-bf44-4d3b-a1b5-14a8e7140a05", "sighting_of_ref": "indicator--47f19e7f-79ce-4be2-ad1b-a9774c8142f3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b95e563-f381-4fd9-a7aa-f52a32533289", "sighting_of_ref": "indicator--c42d0962-43a1-4cfc-99ee-1f2fd9105a6a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1bd6eb-ee63-407e-94cf-e140628e9547", "sighting_of_ref": "indicator--67ebfd43-1067-48f7-8a3c-1659d5d041d6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4abe10c-a9cd-45d4-a9a7-0aa4daec58ce", "sighting_of_ref": "indicator--c26385f0-bf44-4640-abed-c9cd748ade1e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cf7ebe-ba66-476d-9c86-571a9a2edb72", "sighting_of_ref": "indicator--6a225470-c768-47bd-bd7c-1090778da66e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d17c1d-da73-49cd-862b-4cb2d93c7274", "sighting_of_ref": "indicator--6a225470-c768-47bd-bd7c-1090778da66e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91320878-c2fe-4480-8cbf-9e07112390b1", "sighting_of_ref": "indicator--e77580ba-62ad-4334-a0b5-5f20c341d57d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a221ae08-7a36-4672-993a-e7b0e01b73f4", "sighting_of_ref": "indicator--a909597b-05f1-442c-a7c5-8f3360bc2c98", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f87fe9-3d89-47b1-bc3d-618604f15929", "sighting_of_ref": "indicator--a909597b-05f1-442c-a7c5-8f3360bc2c98", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0f38ea-a66e-40b0-b0bd-f5e54d27a189", "sighting_of_ref": "indicator--c7c1e97b-c911-46f7-bc8b-1fd60a749ee9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8e8910-f391-4fb3-a892-6260f189070f", "sighting_of_ref": "indicator--f22ce7fc-2459-4630-a645-7730990b6bd2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927e6c7a-aaf3-4a24-8533-65784b83224e", "sighting_of_ref": "indicator--f22ce7fc-2459-4630-a645-7730990b6bd2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588359fd-d087-49fe-9615-b46af91a1cc6", "sighting_of_ref": "indicator--239f41dc-3c7e-4503-8f76-bc7512bfad61", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ca8688-eb10-46c4-b480-a12a7e0a91d6", "sighting_of_ref": "indicator--239f41dc-3c7e-4503-8f76-bc7512bfad61", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c143f672-719d-4bee-886a-d4aae87fab59", "sighting_of_ref": "indicator--8a827c25-4eae-490d-97cf-ef099891aeb7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ca15ae-d617-47e6-a4c1-7f0eaefcc223", "sighting_of_ref": "indicator--3ce3f6c4-a165-4a51-83c8-c10ea9fccdb9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1bc870-9da8-4a59-a190-906919d70954", "sighting_of_ref": "indicator--6eacc84e-a41b-44f7-9ff1-07c18acf8204", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed29326-6a4b-42bb-9b24-43bb23bb62a2", "sighting_of_ref": "indicator--af4ee3d2-e0f0-4555-947c-194038376419", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a6eccd-3d81-4880-811d-fa85528bfc77", "sighting_of_ref": "indicator--af4ee3d2-e0f0-4555-947c-194038376419", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9922011-ddab-4f81-9b74-e8bcd0b12f2c", "sighting_of_ref": "indicator--a870cb24-e671-4e21-8b92-9129f7fb378f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae196a9-2bab-47ed-a955-85abd1eb837f", "sighting_of_ref": "indicator--abde8f51-6799-4218-924d-618fe64f2fc9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefc8497-d3e9-4b14-8e71-8d746a7fd4d5", "sighting_of_ref": "indicator--abde8f51-6799-4218-924d-618fe64f2fc9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b886f8a-a526-4510-aeb6-8c0d97675319", "sighting_of_ref": "indicator--abde8f51-6799-4218-924d-618fe64f2fc9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9115e9a9-ab14-4ae5-a822-43eb7705e624", "sighting_of_ref": "indicator--e7e8d113-fbdb-4c24-9026-8127169d2192", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a702c525-fd4a-46d3-a926-7ee7bd66964e", "sighting_of_ref": "indicator--4c5fb70f-accf-476f-8967-4e473accea05", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7014f57-47ba-42a9-b9e2-0aec01b571ba", "sighting_of_ref": "indicator--4c5fb70f-accf-476f-8967-4e473accea05", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5807a259-95c2-4670-bc80-751641dbd2bc", "sighting_of_ref": "indicator--4c5fb70f-accf-476f-8967-4e473accea05", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c594a2a2-701f-4516-bdf5-650c16b78923", "sighting_of_ref": "indicator--30cbcf8c-ced6-483b-afc1-637b66e1e2bd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f377b040-d31e-43fe-b839-4e04f94aefe4", "sighting_of_ref": "indicator--30cbcf8c-ced6-483b-afc1-637b66e1e2bd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf071cc-040c-4017-a2e8-b8e26fd23890", "sighting_of_ref": "indicator--30cbcf8c-ced6-483b-afc1-637b66e1e2bd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b791953e-88ab-47f5-b079-34b13fbc8bac", "sighting_of_ref": "indicator--01fbf129-344c-4af1-8da0-caf34fcd029f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228c382e-964f-41eb-96d4-ac86f3f3dfda", "sighting_of_ref": "indicator--01fbf129-344c-4af1-8da0-caf34fcd029f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada577dc-5794-4052-a49b-cd4b3832400c", "sighting_of_ref": "indicator--01fbf129-344c-4af1-8da0-caf34fcd029f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd39f024-28c4-495c-a4d9-f400c330eea9", "sighting_of_ref": "indicator--cc420074-9a99-4ae7-92e4-b3933afc1e60", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c92ae9e-ecd9-450e-a824-483acd22690e", "sighting_of_ref": "indicator--1882bb9d-da4a-47ff-9f59-0bca415d9344", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c235683e-147c-49fc-80a1-24014952d52a", "sighting_of_ref": "indicator--77ac598f-26bc-48cf-bf54-043eac6d7a3d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acee42fb-85b3-402b-bd78-e99ec908078d", "sighting_of_ref": "indicator--1ab08c4e-9985-423f-ba7b-49416f752953", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57982e13-f435-4c40-8726-cc676f9f7c4c", "sighting_of_ref": "indicator--1ab08c4e-9985-423f-ba7b-49416f752953", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d8fce7-d39e-41d7-89df-f104b7d7b55d", "sighting_of_ref": "indicator--2867e74d-9f05-4ad6-bdba-0916c7c3ced1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5bc3a5-8dc0-4a6c-a6e3-d1c9f114aca9", "sighting_of_ref": "indicator--c2179700-9bb5-4a34-9d33-0f3095238a29", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833a9a93-a065-4dc0-ba66-d400cd7fdacb", "sighting_of_ref": "indicator--c2179700-9bb5-4a34-9d33-0f3095238a29", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2369407f-e240-41a3-9a48-747a97db81bd", "sighting_of_ref": "indicator--02e8d09f-4129-4a05-bc35-e0ade95b8cbc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e3b8a6-b808-406e-b872-649d4dca8f88", "sighting_of_ref": "indicator--02e8d09f-4129-4a05-bc35-e0ade95b8cbc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397b8b67-5ff5-4e1b-9b84-b5e0e8211f5c", "sighting_of_ref": "indicator--4ba01d3d-820e-49c1-81a5-465688f477a5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97326299-b05b-4536-ab73-c7e0000b1ef5", "sighting_of_ref": "indicator--9209e550-cf37-47ad-8605-6b601058fcdd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e8d170-972b-4f5c-8144-9dec7c584119", "sighting_of_ref": "indicator--147eeb76-94fb-4406-9cca-b78dbf78fb53", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6aaf92f-357a-467c-9119-9ae0f2654564", "sighting_of_ref": "indicator--cac8a0e8-7503-49a3-a0cc-740145a169c2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd230a4-46c8-4597-b0a9-a59b109a4f3b", "sighting_of_ref": "indicator--ac684dbc-568a-49d5-826c-ddc1874dec68", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f732216-1da6-4a0f-aae8-0463f559ee2d", "sighting_of_ref": "indicator--2020cf0e-7514-4edf-9cd3-1e7bbc452e8f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db916edb-76b7-4540-bf54-047451c741c0", "sighting_of_ref": "indicator--5e1640a2-54fe-440e-bb13-de98df4c76d3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf45843-9fc5-4985-b30f-854781b5db35", "sighting_of_ref": "indicator--b339c668-94f8-46af-8cf5-7831f39c92b4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa6d1b0-e725-489d-b20b-eccdf4bb7c8c", "sighting_of_ref": "indicator--69312562-1fb4-442a-910d-7ee64f81c872", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e4eb2e-78fc-46df-a29b-199a94aa4e8b", "sighting_of_ref": "indicator--69312562-1fb4-442a-910d-7ee64f81c872", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad7dc22-e1ff-4b1f-a402-d6a2b14d3ef5", "sighting_of_ref": "indicator--f18afa19-5d10-4305-a1bb-ae24bef1c48e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdf2633-b97e-4a1d-bd87-93fa5b244c14", "sighting_of_ref": "indicator--f18afa19-5d10-4305-a1bb-ae24bef1c48e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794e625e-b938-4ed5-b76e-3b068cbc0e11", "sighting_of_ref": "indicator--fdc79926-944d-4add-bd29-964230a3534f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78872a45-d79f-47be-a43b-46c8cb88f9c0", "sighting_of_ref": "indicator--fdc79926-944d-4add-bd29-964230a3534f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de38c9a-8894-41a9-9a32-61f5f90be7d5", "sighting_of_ref": "indicator--fdc79926-944d-4add-bd29-964230a3534f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9e63e5-1646-468c-a37a-db3de2b735db", "sighting_of_ref": "indicator--a5f30041-4352-431b-904d-f6b2bf7013e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d325f380-8de8-454c-af08-0cdfdb1e85cd", "sighting_of_ref": "indicator--e4f6f2fa-14aa-4192-b968-133f750782f1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b0c6a7-78fe-4743-aaaf-2c5ba60a7f02", "sighting_of_ref": "indicator--e4f6f2fa-14aa-4192-b968-133f750782f1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def98e91-d07d-4e9c-9e09-0cb2cf579065", "sighting_of_ref": "indicator--f5af5dab-e63a-4aa6-b0f8-cc791d26b6b2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dba44e9-1da8-4818-b35d-3ab605b03a79", "sighting_of_ref": "indicator--2cabf021-3309-463a-8aff-cd4af82e692e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1301ee55-b1a2-4ff6-815d-a0a6ae3e07ed", "sighting_of_ref": "indicator--5b2e285d-a342-41d2-9c53-23e46c9c0fc7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd4548f-448d-4d28-a7a4-02ac2078227e", "sighting_of_ref": "indicator--25b8f17b-8e86-4a75-b18c-215b58e0c11b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b39bc25-5db4-4600-b229-090dc8b9fa0e", "sighting_of_ref": "indicator--fd715815-1ca8-4a2c-8a3c-15c0328d75fe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1749b452-31cd-47c3-b999-9b2a328a0b1e", "sighting_of_ref": "indicator--e3ef6a99-d50c-4360-91cf-883072d99d13", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf642a1b-65df-4beb-8fb0-9a634443811a", "sighting_of_ref": "indicator--e3ef6a99-d50c-4360-91cf-883072d99d13", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e5ed8f-6e0a-4fbe-ae10-0530901a16e8", "sighting_of_ref": "indicator--e860404d-90c7-4d46-9a2f-7a425b12abd1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399643e3-3b9f-4371-91d0-c7d1978a5e1a", "sighting_of_ref": "indicator--acf1e0ac-c063-40cf-9a21-c72f950826ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fa02e4-0a09-49f0-8f41-342728c8cabe", "sighting_of_ref": "indicator--305c9e68-7930-43bf-9256-f90521316be6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cebe8c-932d-44e3-a123-dff23aba8d67", "sighting_of_ref": "indicator--329ac6e1-ea8f-4c6d-98d5-cf21f6eb6e33", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a8213e-2d3a-4a09-9ff0-50863273f96b", "sighting_of_ref": "indicator--03d372bf-72c3-4ac4-9972-ed48c6fdabfb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196e6174-4a75-4d7c-8fb3-da7d00e851ca", "sighting_of_ref": "indicator--2aeb7864-e52c-4441-9912-3a154a992887", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a90baa9-3812-40b8-b948-015e656bfd56", "sighting_of_ref": "indicator--b471f394-b693-47d6-a986-370de479ec6b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220c5c81-3363-4ffc-967a-8db5728ec94a", "sighting_of_ref": "indicator--f5b3736f-ea6f-46f8-9063-bf5939a1e960", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405c5e1b-2f3c-478d-9e2e-e401e0ff51ba", "sighting_of_ref": "indicator--966a385f-4abc-4aa1-8a5f-52636268f3e4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0afce19-40bc-47d9-a4d5-968b620e9e1f", "sighting_of_ref": "indicator--b09099fb-406c-43ed-8a51-56b7256f183f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de7f753-7262-41d3-bd97-a827c023f18e", "sighting_of_ref": "indicator--c1e9b5c2-7bd0-485b-a80c-f69f705d809b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a5b224-6d89-4ac3-9801-3a2002b58fc8", "sighting_of_ref": "indicator--89c238cd-8102-4560-8708-d291fcc66ebb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef42d74-700b-41fc-b2e4-0527cac098d8", "sighting_of_ref": "indicator--b0a5d6ff-be0c-46e1-844c-c05306528c25", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb2fc3a-b630-4abf-a1c2-9e78f2f4a332", "sighting_of_ref": "indicator--763e9fa5-d3bb-4f6c-bead-e7b57059dacc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2493a30d-c7c8-4b65-8727-3dc0e48c16bb", "sighting_of_ref": "indicator--658d445b-bd42-40c8-8dfa-030b0eb28caa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8b8c38-dd6d-49e9-b28f-e41cb6b446f6", "sighting_of_ref": "indicator--658d445b-bd42-40c8-8dfa-030b0eb28caa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a98a8b-c36a-478c-afe0-5daf1b6de725", "sighting_of_ref": "indicator--a0f8b86e-212b-44b2-84c1-07e4c332a3bb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92bff4a2-378d-4db3-bcf8-502ac4bdf208", "sighting_of_ref": "indicator--73645018-0f19-4a98-89d3-9b8ccf622898", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6910c6-f631-4cf2-ae4a-e27f89493f3c", "sighting_of_ref": "indicator--540f514f-e7f9-498d-b299-47c9d6c0413d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a52a946-04d4-4d83-b47c-65c2b892075a", "sighting_of_ref": "indicator--540f514f-e7f9-498d-b299-47c9d6c0413d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cd02ff-48e7-4194-9d13-6dd9e3669cd8", "sighting_of_ref": "indicator--bb9643b8-30c0-43cc-a87e-3164a8b52ed8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80312c73-d3ea-4df8-96be-2c03b0578f0d", "sighting_of_ref": "indicator--3bb53fd5-ebd1-4332-8632-56911d449c79", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f40760d-90a1-40c0-98ad-12f8a14d9944", "sighting_of_ref": "indicator--eead8f1e-abfe-4065-a072-ac61beefda3e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f055c75-63d6-4652-b5bd-6520ebd4a7d4", "sighting_of_ref": "indicator--596846fc-ac49-48d9-b190-dc97d506dfc4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcfbb57-30db-4995-bb11-47ea5ee2ca3a", "sighting_of_ref": "indicator--8c82ce8c-82e1-4772-a1f1-dab779216514", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685a86d4-09f3-4811-ba18-fd9448bd13c8", "sighting_of_ref": "indicator--cd4501e0-8eba-4fe0-8fbb-84206f29a267", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403be21b-097d-481c-b52e-373ade50939b", "sighting_of_ref": "indicator--0bb551b2-e635-44c4-9c81-1b1fec60331a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69739224-ac43-4790-b070-03c5c11297f4", "sighting_of_ref": "indicator--6d05b0f9-18a1-47aa-b947-3452454431d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df22f2a-45b7-490e-b204-4b6004e86859", "sighting_of_ref": "indicator--9dad8cc0-8d37-4c27-8813-7b81fd1aa221", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7be7be3-0f8c-4f21-93ea-526573e4cd0d", "sighting_of_ref": "indicator--6a3ec502-1a8d-4791-90d4-cfef2702856e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c705199-c736-402e-8d76-f5f8773a1ec4", "sighting_of_ref": "indicator--6a3ec502-1a8d-4791-90d4-cfef2702856e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93003651-7b16-460b-b58d-43f6e715557b", "sighting_of_ref": "indicator--0405f267-26ba-49fe-8589-5d9207343cdf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b72bf3c-60c2-4332-adf9-904fcb131872", "sighting_of_ref": "indicator--06758b7e-b062-40b3-adf6-5b62112a7e37", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9777a09f-ad65-4bfa-984b-8f176076f4c6", "sighting_of_ref": "indicator--ff6a7395-1c6d-4ef7-bb05-3bc1e14eabea", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755a0247-9913-4c48-a08b-3b78073c9c71", "sighting_of_ref": "indicator--ff6a7395-1c6d-4ef7-bb05-3bc1e14eabea", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae91f560-ae96-4146-a815-354f5aca8aee", "sighting_of_ref": "indicator--73b0a50d-2edf-419d-b0fb-e700bfab8ceb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e55fca-1e05-4c26-b9bf-37751d2996eb", "sighting_of_ref": "indicator--17e5ddc7-d998-40f6-b6c6-85358b40db48", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00b84f2-e3eb-4f63-81b3-3ba85bb4da8c", "sighting_of_ref": "indicator--cc534143-9f8a-4721-a7e7-ed2c7e5b2ca4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7f89ea-7aaf-48c4-875a-d23461250eae", "sighting_of_ref": "indicator--cc534143-9f8a-4721-a7e7-ed2c7e5b2ca4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730900b5-badb-4948-9f0a-d841f4799246", "sighting_of_ref": "indicator--cc534143-9f8a-4721-a7e7-ed2c7e5b2ca4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750c742d-ba3d-4374-9b26-a70ca1a11110", "sighting_of_ref": "indicator--94c523ae-8227-4fce-b9ac-074f54cda7a2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae2fe3e-9a35-4a31-8eaf-ba29a0f7c109", "sighting_of_ref": "indicator--94c523ae-8227-4fce-b9ac-074f54cda7a2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a2d43b-c81b-4b24-8a5c-8c4e2d4ae326", "sighting_of_ref": "indicator--aa829503-018f-493a-b0b4-55ab9834de89", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce8ac72-0fce-41a9-b5a2-c4e82841ce6b", "sighting_of_ref": "indicator--dffa4452-3751-4fb2-9048-d686bab40fb1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e7fcd2-3883-4bb4-9afe-02eda6a3b4fc", "sighting_of_ref": "indicator--dffa4452-3751-4fb2-9048-d686bab40fb1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2619e9-7e9d-4f4e-9782-0a6c96491601", "sighting_of_ref": "indicator--dffa4452-3751-4fb2-9048-d686bab40fb1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d430519-7d2d-47bd-8d4f-ff937c1fbe9e", "sighting_of_ref": "indicator--4d17189e-885a-4c39-bc80-e672a959698c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a72bea0-b068-4c76-b666-d4d8bb3d2068", "sighting_of_ref": "indicator--4d17189e-885a-4c39-bc80-e672a959698c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52c9d6b-b712-4d8d-8ae4-2019772bed60", "sighting_of_ref": "indicator--b7bc6328-4136-4dcd-a2c7-5ba2ecbe8bbb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a33af3-8140-480e-9917-75d1b09ab3e2", "sighting_of_ref": "indicator--63e873af-4314-4f76-9938-9d8f360a25bc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed75615-b5b5-4c15-aee8-dad94f0a16b7", "sighting_of_ref": "indicator--63e873af-4314-4f76-9938-9d8f360a25bc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49ab2af-73c0-4b93-b516-a33f444dee00", "sighting_of_ref": "indicator--63e873af-4314-4f76-9938-9d8f360a25bc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b385238f-7a69-4214-90b6-744e4142d510", "sighting_of_ref": "indicator--fbec6d8d-3315-486b-8025-a381117aecb5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5efeb24-23ae-4123-ac9c-f1376f875e86", "sighting_of_ref": "indicator--fbec6d8d-3315-486b-8025-a381117aecb5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16eeb7f6-8125-4b69-87fb-0d0dbab884ca", "sighting_of_ref": "indicator--0792c186-1828-4ba1-ba1f-a52caf619928", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256ccf62-f5a6-4287-a83a-ac0548a0178c", "sighting_of_ref": "indicator--c4496ece-2261-4ec6-a577-a695fbab683f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584b0559-802e-4fcb-a2f3-0ec9e53741c8", "sighting_of_ref": "indicator--21bba19c-b478-4bb6-af9f-f60248389450", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce47064-f289-4cac-abb4-fda8634637d5", "sighting_of_ref": "indicator--21bba19c-b478-4bb6-af9f-f60248389450", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bde605-c19c-4749-91f9-698552cbff73", "sighting_of_ref": "indicator--21bba19c-b478-4bb6-af9f-f60248389450", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b653c35-d4a8-4a9e-b917-c293c9608566", "sighting_of_ref": "indicator--6301938e-a950-4a9c-92d9-66bf824febfa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b397b38-3766-43b1-8980-73d92316a9cd", "sighting_of_ref": "indicator--6301938e-a950-4a9c-92d9-66bf824febfa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8896efb8-fba0-4814-8219-ecb031507189", "sighting_of_ref": "indicator--6301938e-a950-4a9c-92d9-66bf824febfa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c35ccf8-c45a-42d1-a895-b97e4015a592", "sighting_of_ref": "indicator--11c76280-b25f-47d0-9916-50108825869e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7c946c-ec7d-4a0b-945f-4694c1b49894", "sighting_of_ref": "indicator--a2f30e4a-1791-409b-b7af-9f8044601570", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51659141-3c27-4773-bdb0-7385e04aa103", "sighting_of_ref": "indicator--217a4a1e-652a-49ac-8606-f65dde2ef69b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3fe48c-f952-40c5-95dd-adad3fa6f356", "sighting_of_ref": "indicator--04bd52b3-7f1e-43f1-85c0-5da115b5f19a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218a9451-3b31-4ac6-9a5a-04770db9bdfa", "sighting_of_ref": "indicator--44b15d26-d8f4-4555-80aa-013699c83a9b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bd952b-0aea-42d1-bcaf-e5278178192f", "sighting_of_ref": "indicator--9964e789-8d4c-404e-b3ee-8f21cf23a845", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76542f19-d5fc-4016-b2cc-5220ddd23bde", "sighting_of_ref": "indicator--b8196e2b-5e81-452c-a387-fca0ee08c1c7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9484c91d-b1ed-4049-a4da-1817a0c12086", "sighting_of_ref": "indicator--b8196e2b-5e81-452c-a387-fca0ee08c1c7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1407ef9f-f207-4ed0-a8c2-f431478e3e9e", "sighting_of_ref": "indicator--6256b980-3e9e-435d-9992-d08a8a56265c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73b481a-059b-4429-92f9-67bb36a78dbc", "sighting_of_ref": "indicator--4ed17729-759a-4b8b-ad93-eae3de36faaa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0543b76-abd6-43d3-927a-aa0e3831254d", "sighting_of_ref": "indicator--6e94c792-e71c-4767-aed8-684838736c5c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73541ef3-71fb-4fc8-86c7-69cbd30bee7c", "sighting_of_ref": "indicator--a97da387-235b-4780-9ad8-cf33ebef802b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201f8558-bbf0-4adc-af68-70c1e51d25de", "sighting_of_ref": "indicator--7eb2cfb9-fa22-4a15-9501-b54f462b3202", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b961ed89-599e-4278-b20d-1dcaabbf35a7", "sighting_of_ref": "indicator--94d922b9-6351-4f39-93cc-458b3a0d92a7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64dfcea-cdd5-49fa-9ab6-11fea8d32433", "sighting_of_ref": "indicator--94d922b9-6351-4f39-93cc-458b3a0d92a7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79f004a-0e8a-444b-9551-81a6d1fca639", "sighting_of_ref": "indicator--34bd9d4b-a92a-4bce-aed7-08183afeea93", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6982bca-1c5c-4385-8cfe-369c3ab816f7", "sighting_of_ref": "indicator--34bd9d4b-a92a-4bce-aed7-08183afeea93", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8341eb1f-25c3-4ce2-aafe-2089d12e3fe8", "sighting_of_ref": "indicator--f0efd8d2-206a-482e-b518-34355067ac53", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334010f5-485f-4e26-8e8c-6ffd4cabbcb8", "sighting_of_ref": "indicator--f0efd8d2-206a-482e-b518-34355067ac53", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0beb0a17-2cf3-410a-b023-39b5721d9a2a", "sighting_of_ref": "indicator--f0efd8d2-206a-482e-b518-34355067ac53", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069c99c5-dc20-4a6f-9f33-a8475962123e", "sighting_of_ref": "indicator--d3f13529-cbd8-4c4b-a838-9003a87495cb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7999d805-9a10-4e0e-9b26-c701858070af", "sighting_of_ref": "indicator--84398307-23e8-49dd-b86a-809b708b0003", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aca0d1c-440e-464e-9bf8-9198108db984", "sighting_of_ref": "indicator--84398307-23e8-49dd-b86a-809b708b0003", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23a7803-14d9-445a-a8d1-c085057bd988", "sighting_of_ref": "indicator--84398307-23e8-49dd-b86a-809b708b0003", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9766d9f9-f7f5-4e70-90fc-951de40c983f", "sighting_of_ref": "indicator--44a70ba5-bf1e-4bc9-958d-0698e215989d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2d7d3b-b329-4179-ae9f-09da2fe07b0b", "sighting_of_ref": "indicator--03c35472-6db6-43c1-a8f1-97b70c46abf4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0089222b-429b-4222-b90e-eec0e01ea983", "sighting_of_ref": "indicator--8a42d7f7-8400-43ef-b812-e88323faa597", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6b21eb-2ff3-412a-b72e-eda8e18be430", "sighting_of_ref": "indicator--66a818dd-28b3-4261-9d35-040d4b3a4654", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa48dc90-25b6-4803-a13a-4ede442874c2", "sighting_of_ref": "indicator--77e127d0-0497-4100-97bd-6a3a0f0c89c4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fc291b-4762-4729-bf2c-a3e84af7b1d7", "sighting_of_ref": "indicator--abccb789-b64c-4095-9f67-e7bf4bb0ee81", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6779b1-36f4-40ce-9c23-36a1438162df", "sighting_of_ref": "indicator--3c3c090e-0590-493d-8fb7-e60f9a6423ad", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103d9d51-66f4-4833-af7f-150342a58f1c", "sighting_of_ref": "indicator--3c3c090e-0590-493d-8fb7-e60f9a6423ad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3590bc5-a3c3-41e7-b566-62a7b342d7a7", "sighting_of_ref": "indicator--daf03a45-b338-4cf9-abbb-00bbc8593577", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c35b674-febc-4464-872e-d2fa4f86fb32", "sighting_of_ref": "indicator--daf03a45-b338-4cf9-abbb-00bbc8593577", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010942ab-9a5d-4ab2-92f7-26fa70720a13", "sighting_of_ref": "indicator--c3202f56-0c53-468d-94c0-2f751fa752df", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409335e7-8262-4311-be8a-cea8a8ee138b", "sighting_of_ref": "indicator--c3202f56-0c53-468d-94c0-2f751fa752df", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b36ad9-1cab-4209-8079-50e7f8c96602", "sighting_of_ref": "indicator--2f2feda9-1484-4a04-9f22-7556aea03f91", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23bbf51-4bb8-4001-aa0f-2fa36f6f2478", "sighting_of_ref": "indicator--4862ac40-dc34-43c9-9f37-2eb06c5ae556", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbed550-667a-4d7b-bcdd-e4262d809223", "sighting_of_ref": "indicator--bf547d45-7020-42a7-978a-d0c3edf7d3d7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e169a3b5-55a3-4eb9-9411-aa7675b8c0fc", "sighting_of_ref": "indicator--5f0b8b4a-e0ee-4585-8c44-4b45526f3586", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d93eb7-67a3-49e7-96bd-da955fa68f15", "sighting_of_ref": "indicator--c13b1c38-9ea1-499b-bfad-cdc76f01e895", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdfbf49-d9f3-47cf-ab29-0602d5d3586f", "sighting_of_ref": "indicator--c13b1c38-9ea1-499b-bfad-cdc76f01e895", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436f9bf9-7b79-4c34-b63e-afc645bded79", "sighting_of_ref": "indicator--6ba3ec10-70d5-4b7e-9f96-261bb5e644c4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f72e9c-635f-4eb9-bdac-9065a52806db", "sighting_of_ref": "indicator--1ec91a9f-776a-4c3c-8392-df46d3b8cd82", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44deb189-6a38-420a-a05e-dad5780cd01e", "sighting_of_ref": "indicator--1ec91a9f-776a-4c3c-8392-df46d3b8cd82", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02993b9f-24f1-409e-9568-68b2239e5b8d", "sighting_of_ref": "indicator--dce5c1d4-6a31-44fb-8640-9e248ab7ff53", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15371150-d7e4-459e-aa9b-0eee6547df62", "sighting_of_ref": "indicator--647fdc84-b8d7-4337-95ff-67252d51275e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40321540-842a-4d6c-8307-2de05d6aeca2", "sighting_of_ref": "indicator--647fdc84-b8d7-4337-95ff-67252d51275e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e5e1c7-f055-4e1c-a041-14fc872ae242", "sighting_of_ref": "indicator--36f4fc9e-8f1f-42c1-8256-74d46d5f7b72", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd261924-973a-4610-9bbe-0cb66a62976b", "sighting_of_ref": "indicator--5730f1ef-47d9-4356-be63-965787babb16", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e80862-3ae6-4ad2-95d6-dfaaa4d9de12", "sighting_of_ref": "indicator--5730f1ef-47d9-4356-be63-965787babb16", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1b2cb8-0f4b-48a9-90b2-a2474583cbd6", "sighting_of_ref": "indicator--5730f1ef-47d9-4356-be63-965787babb16", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbf1e85-8669-41f0-8e68-e3addcd8b4bc", "sighting_of_ref": "indicator--5f4b02fb-dcb5-4c6d-9364-67b1e63a1e86", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c69d97e-7a1c-4784-bcad-810bf24d03b8", "sighting_of_ref": "indicator--5f4b02fb-dcb5-4c6d-9364-67b1e63a1e86", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547457cc-79bc-458c-99e5-557569c8233b", "sighting_of_ref": "indicator--5f4b02fb-dcb5-4c6d-9364-67b1e63a1e86", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e864609-54d2-468c-b866-00c704b0a088", "sighting_of_ref": "indicator--6b61adbc-94a0-4948-8b8a-24f06b24ca36", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3979da-69cc-40ce-b4c7-ae4be969914e", "sighting_of_ref": "indicator--c922d13e-705b-4e4f-b625-78ced58e4ab8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12026afc-f948-4463-9953-62fbc9f9850a", "sighting_of_ref": "indicator--c922d13e-705b-4e4f-b625-78ced58e4ab8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea52e591-3458-423c-830d-aeae11aef093", "sighting_of_ref": "indicator--1d3fab99-575e-4154-b63e-942d1598879f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343ac5d4-043b-494a-9ee1-b51c1cea9b44", "sighting_of_ref": "indicator--1d3fab99-575e-4154-b63e-942d1598879f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3af8ea-1d93-4cc0-ae02-658b1272fb12", "sighting_of_ref": "indicator--1a54da32-693c-4749-95d6-0c3a513a95dc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac92c5d-36d0-4aa7-af73-12c0b2e008a5", "sighting_of_ref": "indicator--f3c9b129-1ed8-4786-86c7-f5c73291b3b5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84f975c-a643-4cfe-8b8c-3cbc98c3fced", "sighting_of_ref": "indicator--c6118008-a18d-4713-87b4-a66070d5c221", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00b893b-f0d7-4152-8653-82705c9d33f0", "sighting_of_ref": "indicator--c6118008-a18d-4713-87b4-a66070d5c221", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ae1555-9ad2-4e3a-ac47-8da6ce777783", "sighting_of_ref": "indicator--49c3b123-fc05-4685-ab7a-d52e881b2997", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27254418-4996-4b0e-9806-a367860b055d", "sighting_of_ref": "indicator--be705e48-4570-4ade-9bf0-127c06e4f688", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c073e83-ad63-46f3-b03c-89c4ff7b7c6c", "sighting_of_ref": "indicator--2e69208e-ae46-49ca-b245-9f12cc08a9d9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb1f0f3-838f-4fde-b22a-a09085f571ca", "sighting_of_ref": "indicator--0bc4db9a-4cc0-4c22-8529-bb82f80f2547", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73faad4-3b69-4879-a2a9-2ebcaecaa375", "sighting_of_ref": "indicator--22e4fc4a-97a0-453c-a55e-fab8adc14acb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63175c58-6f1e-4524-9853-9345f667c5cb", "sighting_of_ref": "indicator--22e4fc4a-97a0-453c-a55e-fab8adc14acb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfb9003-77ae-4807-8191-89e605036860", "sighting_of_ref": "indicator--22e4fc4a-97a0-453c-a55e-fab8adc14acb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9a2a97-4b1e-4504-8627-6cc52e329388", "sighting_of_ref": "indicator--407cab9e-8270-4639-a998-34230c7e1856", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cc286d-e5b2-4d38-ad6d-8c8d4bd27b56", "sighting_of_ref": "indicator--407cab9e-8270-4639-a998-34230c7e1856", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b8e675-9fee-43f9-a0d3-6f6729edd0ea", "sighting_of_ref": "indicator--5900f9f1-9ce4-4640-85bf-2b1a81766205", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9291c2-4503-47aa-8dc7-a8cbe8b4a473", "sighting_of_ref": "indicator--5900f9f1-9ce4-4640-85bf-2b1a81766205", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177cf111-3ab7-4af0-8413-8e9067eab110", "sighting_of_ref": "indicator--5900f9f1-9ce4-4640-85bf-2b1a81766205", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c17f982-09e9-40b3-9843-6d2339f49773", "sighting_of_ref": "indicator--2f0c801b-6ffd-4b04-90ea-2dc253311957", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c56ca5-59d9-45ea-a8b2-315d5750b96a", "sighting_of_ref": "indicator--f4503aad-1242-43a2-8bc5-65bb55d9d8c4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba93a2b5-73dc-4c7c-a9af-63fef0c03451", "sighting_of_ref": "indicator--6325731f-e9ec-4a9c-80ee-823a2eab3c44", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e5a325-05f6-41f4-8f2d-b462b753406f", "sighting_of_ref": "indicator--7c39ae47-c12d-4c03-9790-1efe754226ea", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8465d754-c8d1-47b7-afa2-7362f4e76985", "sighting_of_ref": "indicator--be286df6-c45f-4214-822c-d6b91fdb3dbf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9792dd-6f2c-4d9f-89ab-ba1cfc2794e3", "sighting_of_ref": "indicator--ed0617b2-3317-41fb-83e8-4dd989b1079c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a793a4-9e48-44fa-b3bc-86c6159c738e", "sighting_of_ref": "indicator--e9bb0395-5955-45be-af96-4e91024fbebd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf634a14-e824-4ef7-b8ee-b06ee11c8fdf", "sighting_of_ref": "indicator--afeaa288-5e63-40cf-908f-531042de7b0f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cdf4e94-c429-4e91-9255-a8fe663714ef", "sighting_of_ref": "indicator--2deb5ec6-8f83-437f-b3ff-569f4fea5d04", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d339182-f769-4f03-b1fe-025b2aafb7ac", "sighting_of_ref": "indicator--2deb5ec6-8f83-437f-b3ff-569f4fea5d04", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50b8e19-1acb-44e2-83b8-44751c2f5ccf", "sighting_of_ref": "indicator--b9fafa86-1d40-4cae-b6f7-43101640955e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb3e792-d409-4c23-a107-7bde96ff5346", "sighting_of_ref": "indicator--b9fafa86-1d40-4cae-b6f7-43101640955e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5b8fa9-8121-4a68-8542-c697b6f5a563", "sighting_of_ref": "indicator--ce958fa7-bddb-4428-b7f0-24e5e3f8306a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63abb643-683d-40c4-b990-9f2e9baeb25a", "sighting_of_ref": "indicator--a27b3a2a-9163-4b4e-afe7-633fe2f90953", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33762542-e954-4633-9cd4-75fb41a39a48", "sighting_of_ref": "indicator--e1b6c9c5-587c-4d86-864e-d62744c76e9f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecd482a-9627-4777-9f8c-9b465a4e8921", "sighting_of_ref": "indicator--d6e287a6-af65-42a0-8423-759f4182b92c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcb22d1-28ce-40fb-9cae-a7833e197826", "sighting_of_ref": "indicator--75d08321-dba5-460b-8fde-7a716647e0f9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195b8921-8943-4170-9ce0-bdd04bc569ca", "sighting_of_ref": "indicator--6eb6e29d-6e43-4199-bbae-03e7dd1fad7c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169fdc17-30bd-4c99-8059-ea4addd551cb", "sighting_of_ref": "indicator--6eb6e29d-6e43-4199-bbae-03e7dd1fad7c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb23518-15e9-4d97-b4cd-df574206d9d4", "sighting_of_ref": "indicator--eaf75947-29ca-4b9c-b33b-8abf533285c2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebab6c2-0f21-4e18-adc3-978a64e2ec23", "sighting_of_ref": "indicator--1e3e9390-9088-40af-8135-d713b3890fbc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5cb6a2-9636-45f5-a726-509131a612fe", "sighting_of_ref": "indicator--817997c2-dbaa-4b97-b389-bc919280f52c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a94a92-d583-470c-af29-9204fe3e3f52", "sighting_of_ref": "indicator--49a3032c-b056-468d-a79c-6e6a813f9915", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01257d2b-97d3-4da2-b4b6-580333bca436", "sighting_of_ref": "indicator--8c93907b-dcaf-4620-b0cf-d480679abfa0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10209f4-95ca-4bd1-858b-46df7860425e", "sighting_of_ref": "indicator--f2a30858-9429-4a7f-b00c-7771e4358544", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898154a8-42ad-4277-81b2-e0beb1384807", "sighting_of_ref": "indicator--f32a5a6b-ffbd-4285-b2b0-03ab7e5fb28a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6cb69ef-c9ca-4008-b02f-9b6fd2799fb2", "sighting_of_ref": "indicator--d108f0bf-2775-493e-bdd2-ec7ed5b3b1c7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c615a4-4e35-4435-b6eb-37ea4caff8cd", "sighting_of_ref": "indicator--e811f956-005e-4f4e-bf4f-d5bfd2a9f816", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b2d3f9-00e9-445f-9111-148d8f411641", "sighting_of_ref": "indicator--a8515838-4054-4f09-ad29-b27d2840b634", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86364d33-38c7-4c0d-be5b-778c9fd0aa76", "sighting_of_ref": "indicator--af5e0b6f-929e-43da-a372-43d182fcc6d6", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafb727e-21f8-4aa3-b792-bde14438fc9f", "sighting_of_ref": "indicator--175f1402-75f9-4ef2-98ff-551ee6b2022b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa7d90b-5d57-4927-8df4-de2bd32ad2b5", "sighting_of_ref": "indicator--e92773f0-b6fe-4f3e-a7b1-f4b3c75e994b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172a88d4-7ad9-487f-b5ae-fea53dea3838", "sighting_of_ref": "indicator--e92773f0-b6fe-4f3e-a7b1-f4b3c75e994b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be76654c-71e7-45f4-829b-0e1ba50d2adf", "sighting_of_ref": "indicator--bdc57a72-b134-44da-8aa9-2b8f4a8c9689", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983265ab-163d-4701-b398-2dbfd80c33b4", "sighting_of_ref": "indicator--c9d18a75-282f-43ee-b4d4-ebf065d8fac6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c09f1be-4fc4-479a-bf0e-7d75d612bfdb", "sighting_of_ref": "indicator--c9d18a75-282f-43ee-b4d4-ebf065d8fac6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4520742e-a605-48da-80b2-a2d7d8ffd295", "sighting_of_ref": "indicator--c9d18a75-282f-43ee-b4d4-ebf065d8fac6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6caac58-7c84-4d0c-a86c-dbaeacb8296f", "sighting_of_ref": "indicator--812f1fe1-df97-4610-b7eb-420b60560f3e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f863564d-6209-4950-90bd-75cd7d13e7fb", "sighting_of_ref": "indicator--aab0eaf8-7dad-4715-a480-bb605a847d4f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6477b0a-3e37-404c-8e6e-51aaecf64fab", "sighting_of_ref": "indicator--aab0eaf8-7dad-4715-a480-bb605a847d4f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d763d2-15fd-4eac-a5c3-05d2085e6608", "sighting_of_ref": "indicator--afbe2a93-a039-45c9-aea2-8163de1610e9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80888464-c17e-4f87-964c-3c8226ec0b46", "sighting_of_ref": "indicator--afbe2a93-a039-45c9-aea2-8163de1610e9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b270ce-5bf6-4dcc-aa1a-28ddb193e336", "sighting_of_ref": "indicator--3c069661-2a6f-4d06-9cc0-811421908fe1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b38b06a-ba19-48e0-a48e-6aaa3021d930", "sighting_of_ref": "indicator--f9103aad-14b7-4738-8d21-26a8a49e7ed2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707c5288-f473-4612-86a6-7452459fc297", "sighting_of_ref": "indicator--f9103aad-14b7-4738-8d21-26a8a49e7ed2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19da78ee-3502-4e2e-a100-fc902470eac0", "sighting_of_ref": "indicator--f9103aad-14b7-4738-8d21-26a8a49e7ed2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e7946f-0ce7-45da-863f-ab38249c2c13", "sighting_of_ref": "indicator--327bf51f-2a78-4926-84f3-bf690351c220", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8606ff76-8435-424f-98af-0cddcdf85995", "sighting_of_ref": "indicator--eafbda7f-6c47-4609-b427-d878ae6dc512", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74797341-214f-4c29-9624-cb72652a1ffa", "sighting_of_ref": "indicator--a48b066d-c9b7-4c12-8430-e7a9b197a145", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8e820c-8a4a-4b7f-b214-327faad63cc5", "sighting_of_ref": "indicator--49235b85-84be-4608-9789-e63a7b35b0e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6beb13-04cf-45c0-aab4-cc995e624f3b", "sighting_of_ref": "indicator--404ec330-074b-479d-9305-c0dde701146c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa121ae-34f9-4adf-b546-f0e9750bf433", "sighting_of_ref": "indicator--68de820a-1641-4a77-bc37-96b7b2a4317c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bea699-8df6-47be-ade4-b35db74e7848", "sighting_of_ref": "indicator--28262d97-38e2-410a-b3ae-841b4c39a521", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e06f498-6d72-43a9-b63d-28600d92794e", "sighting_of_ref": "indicator--87fab305-135b-4550-8631-fb7ddb5e9d46", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5dcde58-98ad-4a92-9ea6-8fbd3e2a477d", "sighting_of_ref": "indicator--0511125f-f821-4805-beb9-5f7201eb7b9f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b159c569-78b2-4842-9b0b-6dec4eb42aeb", "sighting_of_ref": "indicator--dbf8c900-b16b-48eb-8648-f2fffa1b4149", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c976f3da-0fc1-4978-bf53-aefabb45d630", "sighting_of_ref": "indicator--273202a6-c6e3-440b-8aa4-989b4091f7b2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a81309f-bb0d-4a67-9f06-7789601e8567", "sighting_of_ref": "indicator--1d432cc9-be76-49fb-8089-731bb73a6666", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb4f037-b46b-46c2-8f26-e68150a2ac60", "sighting_of_ref": "indicator--31206bf9-7ca2-42d5-aa71-9c1f1a49f9c0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5f7d04-989e-4bf1-ab02-e55588b1b250", "sighting_of_ref": "indicator--a2de329f-f0cc-40e9-8919-37a5665b6103", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191c4621-19e1-4a32-9169-2beb21b2fc9c", "sighting_of_ref": "indicator--a2de329f-f0cc-40e9-8919-37a5665b6103", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1538f0-c272-4472-929f-ac37384074d2", "sighting_of_ref": "indicator--e15d8480-7b60-4745-91a8-e50a7ca4af53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd43e79-9a66-4472-ad0e-d04a0ac2a087", "sighting_of_ref": "indicator--6bf7844b-7118-47c7-9236-c19eb69c7a8d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8720144-98f8-4c2c-909d-ba2d951fe636", "sighting_of_ref": "indicator--7eb55310-f87b-466b-9666-c60754d03c3a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922a72c8-38c1-41a4-8342-3938a9fbebd3", "sighting_of_ref": "indicator--e6844b4d-5e65-4b3a-bdc7-b02d5c4bb75a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e5e412-a727-4f87-9dfc-a6fc6fd5fce6", "sighting_of_ref": "indicator--78e1ce3b-5559-480f-81e0-84b176093773", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fef7e8-7d01-409f-ac65-159c040f5b54", "sighting_of_ref": "indicator--b48f1c36-a761-4c1b-925d-533d018395e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a76bbf-992b-42b8-a565-42167d3c585d", "sighting_of_ref": "indicator--353653c4-3451-489b-996a-bde8f8eba196", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e916feb-84ea-4352-bf8e-7a2c828764b6", "sighting_of_ref": "indicator--d875b31e-8204-40dd-bbe0-7527a872b2bf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021e2cd5-6a9d-4c3b-b055-c1e898e7584a", "sighting_of_ref": "indicator--38c9e8b7-7d9a-4061-8253-a3d7ed7f1b25", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1e3eb8-ff9e-4aa2-bf9c-2b48576bb6d0", "sighting_of_ref": "indicator--e1decee3-aff3-45b1-a0ff-826ab80883ec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86accc7b-6014-4836-a1bf-a1206c07c96b", "sighting_of_ref": "indicator--da511083-607a-408b-8f25-326663359693", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7d8d59-63ed-4d04-9dd7-787f7c481244", "sighting_of_ref": "indicator--8d97d09a-81dc-4ac6-b7cd-259cc17c4c32", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6fccd4-81c4-4797-9f81-df4966a41923", "sighting_of_ref": "indicator--19092012-8c59-45fa-985d-3ba9bb215d38", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21476af-6d8e-4523-8fd5-9d732aa03a1d", "sighting_of_ref": "indicator--b7c6ed88-fbf7-415c-b358-33bd146e72d9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9862eaae-236f-431a-ac83-63083adcda44", "sighting_of_ref": "indicator--00d26596-4f3c-47c4-a436-4a86cc60e113", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6307d1-cc46-4b06-b50d-6cf6f7e2d967", "sighting_of_ref": "indicator--2aa4112f-c701-4e98-ae6c-2f25b4eceb03", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6436109b-355f-402b-ba28-41da43b42ed9", "sighting_of_ref": "indicator--558b6513-d4fe-4be6-894f-9b051e309c09", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55f29e5-8c80-4a6b-80f1-31bd77fdc857", "sighting_of_ref": "indicator--8c3c650e-3852-417e-9b5c-7fb58dcd0146", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05f501e-a358-49aa-98d5-091b67550c2c", "sighting_of_ref": "indicator--56da111e-88f2-4990-8f8f-6b9a8684175d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5cf56b-5300-4c2a-ba86-7a8c03721dbe", "sighting_of_ref": "indicator--23e80121-8cde-4623-91dd-86f7b96eed63", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ad4c6c-17c0-4a79-a842-293316202db5", "sighting_of_ref": "indicator--23e80121-8cde-4623-91dd-86f7b96eed63", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1258d81-64fe-46b5-8f39-efef112f1f1f", "sighting_of_ref": "indicator--23e80121-8cde-4623-91dd-86f7b96eed63", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1014e55f-bd4f-4cab-b59a-938f9b8d0735", "sighting_of_ref": "indicator--4b2be16f-6704-4b88-9c6f-74987452986c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b3223d-058e-4add-8cfb-6f09620af56e", "sighting_of_ref": "indicator--49932f7d-cbe5-430d-b966-e8e6b419a339", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b56963a-0e58-493f-b20b-c6cf8cb07c5b", "sighting_of_ref": "indicator--539df660-ec7a-427d-8bff-33458fa128b6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e7f70e-8898-4345-a796-022281b49c65", "sighting_of_ref": "indicator--ede7d630-a1aa-4dd8-85a6-3dea18ff2d09", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dfa5dc-55a9-4fdc-af01-9afbfc1cc971", "sighting_of_ref": "indicator--ede7d630-a1aa-4dd8-85a6-3dea18ff2d09", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a8949f-5b37-48c6-a072-8664e8897e7a", "sighting_of_ref": "indicator--ede7d630-a1aa-4dd8-85a6-3dea18ff2d09", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a024ce0-75f3-412a-ad2c-7719afd88f6b", "sighting_of_ref": "indicator--fcc02b4d-9c1e-454c-85db-90886d257d8f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30dcdd2-d204-4ebb-ae92-03f5366cdf7d", "sighting_of_ref": "indicator--438b2ea4-b8eb-4bee-8f60-629dedab4fbe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f53c0c-63b2-4067-8adb-6b133c6d5dcc", "sighting_of_ref": "indicator--dcb4a0ff-d2a3-4db0-a9a0-ce3221a0dd98", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfad30a-4cc5-4af7-b0f7-625e99c8e67a", "sighting_of_ref": "indicator--51feaf65-1c20-4b4c-b515-276e06f1cac5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d3b541-04b1-411f-9c97-549bc91b1aeb", "sighting_of_ref": "indicator--bc75e004-1e88-48f0-8085-5bdf124eda87", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32036d4f-0baa-4511-8a1d-00df9a5ee2c5", "sighting_of_ref": "indicator--89e6490c-8435-4655-96a6-7dbbd87c3aad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a8597d-0beb-4616-8951-147d94a5d607", "sighting_of_ref": "indicator--59a149e9-e6aa-441e-bb38-5a0a99650444", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af0346c-83a3-4341-ab7c-8286996dbd1d", "sighting_of_ref": "indicator--452232a2-43d4-43cb-bd31-66853119d255", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c0b941-440e-4b1f-8062-6792e588d8f2", "sighting_of_ref": "indicator--e9d4752f-7a62-42ee-a8db-31e3ff735ae9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aeaec23-95be-4930-bda4-5482110ecce1", "sighting_of_ref": "indicator--e9d4752f-7a62-42ee-a8db-31e3ff735ae9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e9b27c-2e5c-4a86-a2e0-71e72833d48f", "sighting_of_ref": "indicator--1d9a548b-b750-42e4-a881-2f8980c355a6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be259a8f-ce83-47a1-9ae5-d368df5cbecd", "sighting_of_ref": "indicator--b28ae891-5f86-4935-a6b5-e91ba5075391", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c492b1f9-f736-4489-908b-30f9b08cbc23", "sighting_of_ref": "indicator--e868eb78-f7ea-45c2-8f83-4e8d14e6fb61", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc241aa8-e9f0-49c2-8e1e-95b6d98dd6fa", "sighting_of_ref": "indicator--aa5a7059-76e0-4b17-9503-d88ca569f374", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdd9217-081c-4bc9-ba8f-1a2a0492cede", "sighting_of_ref": "indicator--d90573a7-38f3-432a-8dcc-d825cdf28fc4", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0683a0a-99e7-4e08-993c-c571b728a29e", "sighting_of_ref": "indicator--66aa2653-bbf6-434e-9c91-9ed3d0c57e73", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53ad5e6-4390-4a19-8c25-6d38e5c2403e", "sighting_of_ref": "indicator--66aa2653-bbf6-434e-9c91-9ed3d0c57e73", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3c6663-eae4-4ff6-b47a-c7c8a1d7d4a8", "sighting_of_ref": "indicator--66aa2653-bbf6-434e-9c91-9ed3d0c57e73", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7392d2-0992-4147-85e0-73eba034895f", "sighting_of_ref": "indicator--f336bd2f-5a32-4ecd-805d-28025ad661ad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cba338-7008-4586-90a4-054b833ef34a", "sighting_of_ref": "indicator--2459e233-5e04-4281-a2e1-b5d41f64189a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2258572c-a6d9-41a7-adde-91e78508b9a9", "sighting_of_ref": "indicator--9176a78e-7c0b-4221-aa1b-8a391d321417", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0744570-b9cf-4fae-996a-ee3efc9d7d4f", "sighting_of_ref": "indicator--949847c4-84f7-43f8-a3ff-3a8551d49dd1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0960309d-10e9-44d5-a3c3-c20c6f4a3a0c", "sighting_of_ref": "indicator--949847c4-84f7-43f8-a3ff-3a8551d49dd1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17818431-7060-42f7-beef-5fd6bc8c7b0d", "sighting_of_ref": "indicator--949847c4-84f7-43f8-a3ff-3a8551d49dd1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc569fec-431f-4a5f-ba0f-e0c7c0696998", "sighting_of_ref": "indicator--59d92837-41e1-451d-810e-782880a6d4e1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ef56ae-a787-43b9-832c-c40c4ccaf91f", "sighting_of_ref": "indicator--59d92837-41e1-451d-810e-782880a6d4e1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d145bff7-c75b-488e-8c73-aa4af6f7016c", "sighting_of_ref": "indicator--fdf526e7-deff-453d-b984-a40938a4eaf5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64748fdd-431b-4ed1-acdb-ff09acab8a94", "sighting_of_ref": "indicator--b2efd564-f7eb-42d4-b99a-21d5d5169f9c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd76dbc0-d1d9-4d5d-bca4-94d0f91a8a54", "sighting_of_ref": "indicator--aadb6fee-43a2-4116-9f89-480119b42890", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab08ec3-8d28-4cf2-aa79-c9eba8766b90", "sighting_of_ref": "indicator--09e6d66a-7a5e-4068-9116-f9be1e01375c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3a6960-c6d0-4432-9a41-70fd2141f822", "sighting_of_ref": "indicator--09e6d66a-7a5e-4068-9116-f9be1e01375c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8757a8-39ba-42e3-a2b1-ae75d73ae218", "sighting_of_ref": "indicator--09e6d66a-7a5e-4068-9116-f9be1e01375c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf6e093-9b39-4c85-989b-6b71e0a7a38b", "sighting_of_ref": "indicator--00d7933e-afa0-4e78-832a-eb9054b990c5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dcbe9ba-f8e7-4ea9-81d8-471c4534b12a", "sighting_of_ref": "indicator--37218869-438c-4cf1-8bed-0eaf087c8a0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b85e02a-f95c-42f3-8293-a9795cca71e7", "sighting_of_ref": "indicator--c219db8c-6b0f-424c-b070-464a413fd0ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61e9001-f273-42c4-9163-ee8f74d992e7", "sighting_of_ref": "indicator--e2627284-d00d-4853-8533-b31f5b456c04", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d009eb8a-9d55-4c2e-8557-89c810c35d60", "sighting_of_ref": "indicator--de8419c4-36ca-4264-8970-84915c46af9d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e30dae-eb08-4058-b9a2-7b26ca1f5132", "sighting_of_ref": "indicator--e169a148-6d93-430b-aa3f-92da18364dd6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b75a65-bc44-46d1-90b0-ad17408f24f1", "sighting_of_ref": "indicator--e169a148-6d93-430b-aa3f-92da18364dd6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d76edf-5226-4611-b538-8569381ccd74", "sighting_of_ref": "indicator--e169a148-6d93-430b-aa3f-92da18364dd6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1381df98-78c3-4e9c-8c58-2cda2e80202a", "sighting_of_ref": "indicator--ffa48fe7-4662-47ba-a4d7-5c8e12e42a61", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc86cda-418d-466f-8059-520c978b8bf2", "sighting_of_ref": "indicator--954148c2-f305-4093-9614-289477dcc14f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6e8c85-7de8-4cb8-810f-73fa0fa12226", "sighting_of_ref": "indicator--ccff881b-7187-4541-9442-a7e2ccd18253", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4b8a47-4c70-4b9d-b8b1-342ff792af7f", "sighting_of_ref": "indicator--7d2b72bd-b50d-4fc5-86e1-232d9e0d62ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b06e4a-e559-4954-a85c-a2ff8f9d6a01", "sighting_of_ref": "indicator--5926337d-1938-4ca5-82a3-29b06d72415f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb2a541-7c3f-433b-9aa8-40946998653e", "sighting_of_ref": "indicator--71f18d93-a37c-4de8-a3aa-c5d6fae56afa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b21420-7698-4e13-afff-0be1098a2729", "sighting_of_ref": "indicator--a114f0af-2ca0-46c8-8d0b-86642e2bc328", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415c15e0-f8fd-4d2e-beb4-35600d9ece7b", "sighting_of_ref": "indicator--a985b6f8-8cf6-4c1f-90f7-6c9581f88795", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a02928-2354-4776-a640-a7d0f9f7282e", "sighting_of_ref": "indicator--e1e58b99-07d6-4d1e-9153-dacb6d1d41bb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af19486-8489-487d-a3f5-79cac508716f", "sighting_of_ref": "indicator--4600212f-8523-4467-99e8-ddaa30e01d70", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3339f9de-4dea-4d8e-b22d-f2c7f62f8499", "sighting_of_ref": "indicator--4600212f-8523-4467-99e8-ddaa30e01d70", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3237dafb-13b3-4049-be6c-9ba274f86c1a", "sighting_of_ref": "indicator--4600212f-8523-4467-99e8-ddaa30e01d70", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7539516-0aec-4c3e-acc5-10adafd4bcbe", "sighting_of_ref": "indicator--cab917c2-bd9b-4f06-adcc-d63e9f3b8e6c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5085e3-cfed-4531-83fb-12e563b91f85", "sighting_of_ref": "indicator--ae525ee8-f5b4-40ab-93f2-12810356c08c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746e83aa-8eab-429f-a9b4-e09366c8aa6f", "sighting_of_ref": "indicator--a4432a3e-5f16-4f12-b7dc-3cde2e6eae20", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce12869-5eaa-4a5a-a0f4-a5e96b0ad0ec", "sighting_of_ref": "indicator--4250ce5a-917d-4b26-9264-44ba8ca870f7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be9e76e-da59-4018-82e1-6309a75203a6", "sighting_of_ref": "indicator--57927330-1819-4210-a723-34aebc47f9f4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cffd11-4c03-4bab-b60b-549c2e40b46f", "sighting_of_ref": "indicator--57927330-1819-4210-a723-34aebc47f9f4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa8aa46-07b1-496d-a38e-618539259945", "sighting_of_ref": "indicator--d6a36c69-b8dd-4b83-927a-22735fb611d4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b21e78b-042a-4f2c-85fc-e16f7f946536", "sighting_of_ref": "indicator--d6a36c69-b8dd-4b83-927a-22735fb611d4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2ca193-d780-4ecb-ba47-4d8d4b2db2b4", "sighting_of_ref": "indicator--253f2d5a-9a3b-4c1d-a476-305d030fac7e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45114a80-c2bc-4257-ae9f-f808db567ec8", "sighting_of_ref": "indicator--77b20e17-ee6d-45ab-b643-9cfa78ed0ffc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbccd71d-ed6b-42b8-8476-e73129a310b9", "sighting_of_ref": "indicator--77b20e17-ee6d-45ab-b643-9cfa78ed0ffc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811b439c-04db-4bcc-9b0b-47640229b574", "sighting_of_ref": "indicator--77b20e17-ee6d-45ab-b643-9cfa78ed0ffc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ca598b-b3ed-47df-a012-939d7d500f2b", "sighting_of_ref": "indicator--6fecee3c-6a6f-4e79-b5cc-07ea1e9e8d3c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f615b701-f4c0-4235-8335-9feb81d6036f", "sighting_of_ref": "indicator--6fecee3c-6a6f-4e79-b5cc-07ea1e9e8d3c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d34c26-2fab-4484-9ebf-cb661953ff0b", "sighting_of_ref": "indicator--1f046fe4-b92c-436a-90e9-dfab3e5abf0b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ac86c6-2823-4641-9179-550072eb6488", "sighting_of_ref": "indicator--1f046fe4-b92c-436a-90e9-dfab3e5abf0b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b8e550-664a-4a56-bd8d-4945a00e638a", "sighting_of_ref": "indicator--8565fe47-db62-4453-89db-66800dac23af", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3428911-dc4c-42ff-8c80-b396ec713794", "sighting_of_ref": "indicator--16a6cd84-5397-4813-8389-e0bd562b2c64", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f181032-b33f-4fa0-9f93-85bff7d4b3e6", "sighting_of_ref": "indicator--16a6cd84-5397-4813-8389-e0bd562b2c64", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49487ed4-a5eb-4929-8416-0f2b3cbe5b58", "sighting_of_ref": "indicator--8c7de98c-2c83-4e05-8bf2-b5aa38b2a764", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b596e3b-cbbe-4026-8d47-49057d2b0c1e", "sighting_of_ref": "indicator--1afbe6d2-269a-44d1-a643-7ea4d861af5f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256ddb08-f897-4e8c-9346-62580d8ee175", "sighting_of_ref": "indicator--1afbe6d2-269a-44d1-a643-7ea4d861af5f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6822c29d-dfbb-4d04-b5bd-08ae8f2f37bb", "sighting_of_ref": "indicator--1afbe6d2-269a-44d1-a643-7ea4d861af5f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1347d0e7-af16-4a9e-9a78-aeb647eac7c3", "sighting_of_ref": "indicator--7928be54-53a4-41ca-8e59-3b285cad213f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc113cb-6824-45a7-bfa8-efb155394016", "sighting_of_ref": "indicator--7928be54-53a4-41ca-8e59-3b285cad213f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7725a025-25d2-492e-a636-2abfb8963e01", "sighting_of_ref": "indicator--4e2cc993-7600-4cbd-969d-87c3efac2494", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8d24ca-899f-4407-bb15-bcd8dcff3d78", "sighting_of_ref": "indicator--64178a33-7cc9-4221-be71-f57c2a4c3b57", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb4c0d5-e67e-4544-900b-90b537775b2c", "sighting_of_ref": "indicator--0a4b223e-3c1f-497e-9f2b-95e0694da64c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be09bc2d-6172-4ad1-a0b8-123238e044bd", "sighting_of_ref": "indicator--0a4b223e-3c1f-497e-9f2b-95e0694da64c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265ff30e-4c5b-480b-ab1a-d7d69dd63b12", "sighting_of_ref": "indicator--1f301e69-dbb3-484a-a9d9-f9b9e941f80a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8918005-3254-47fd-8b91-77fe4e67072a", "sighting_of_ref": "indicator--ac8b0ee8-4805-4699-9de1-d48dea5f297e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509a8a81-e89d-4ae5-9d1c-26f00f9cd3a0", "sighting_of_ref": "indicator--962be54f-d7a6-4cef-9199-06a1255ce4e9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82e1faa-99b3-443a-bfff-9f102ac57dcb", "sighting_of_ref": "indicator--962be54f-d7a6-4cef-9199-06a1255ce4e9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc9f5f1-03cd-4791-b48b-6369c4f1a9e0", "sighting_of_ref": "indicator--962be54f-d7a6-4cef-9199-06a1255ce4e9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c547e470-7190-4e83-a067-e51d8246b970", "sighting_of_ref": "indicator--46bff3ed-55f4-47b6-a123-1d07ded7ff2c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b787e3-5263-47e8-892c-e51795bb934b", "sighting_of_ref": "indicator--f52696ea-adec-466b-95c5-1ce1dc84497e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edfc0ec-1e8e-4855-8956-8a76b0c8b3d6", "sighting_of_ref": "indicator--18179273-fda0-4903-80fc-1d1157d65540", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee66d284-9b8b-44c2-a884-ceef6fbd90a8", "sighting_of_ref": "indicator--6857190d-7b95-4a48-8805-025290f99ec9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c18caf1-be44-44f6-b22f-153b10826816", "sighting_of_ref": "indicator--1b4449bb-8543-4e2d-8237-ef695e6686a0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b85210-ffbc-4b1a-a92e-8886fc310904", "sighting_of_ref": "indicator--1b4449bb-8543-4e2d-8237-ef695e6686a0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad205d15-1247-4204-ab24-a052b0b00fa0", "sighting_of_ref": "indicator--1b4449bb-8543-4e2d-8237-ef695e6686a0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9055f13f-26a2-43bc-ac6d-613a1dc8a4af", "sighting_of_ref": "indicator--15cc342b-4a9a-459d-bfb0-4984f3fc91b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fcb51e-e4ca-4b26-92ad-d80759ddfe8d", "sighting_of_ref": "indicator--f6be87ff-0ad5-4f7c-ba83-ae3f6cc03559", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb2c1be-930d-4338-811a-11347f96b4d4", "sighting_of_ref": "indicator--f6be87ff-0ad5-4f7c-ba83-ae3f6cc03559", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75f63c1-6f1c-4be0-9348-c38f5a5e8e30", "sighting_of_ref": "indicator--f6be87ff-0ad5-4f7c-ba83-ae3f6cc03559", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4fbb96-49e2-4010-ba10-143ef1b65543", "sighting_of_ref": "indicator--68ed6422-d486-49f6-be11-c5d82aaff7dd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6caeb267-2044-42ea-8198-4bdbdd896d66", "sighting_of_ref": "indicator--8cefc4b6-ff03-4ce6-9f41-1249190d9a78", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66da78c-7e88-40c2-8e6a-aa34350dd33f", "sighting_of_ref": "indicator--423927fd-4633-41f0-9e09-041c6d8ded70", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfc6004-a4aa-459a-af4c-23ba6d362d9d", "sighting_of_ref": "indicator--23c04590-5e47-4a96-b0d8-385f1815c7ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c551a8af-7420-4db9-a811-7103611ab1b1", "sighting_of_ref": "indicator--ccd7a276-d17f-4c77-8676-8d02b631072e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbda767-5298-4a09-8786-b4372f624be0", "sighting_of_ref": "indicator--e638381c-48c8-4734-9388-e70ea718227d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3656ad-6946-4a18-ad84-d6266143e0a3", "sighting_of_ref": "indicator--9b183b38-b65f-425b-93fe-3120a4b4f11a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a2cb46-911f-4ae6-9d1d-ba8bd3dfb323", "sighting_of_ref": "indicator--916554b3-a9c9-42a4-882b-d125bffb9585", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042219a8-72ca-4392-8d40-e0e529f8c344", "sighting_of_ref": "indicator--ee8fb597-b1af-4ea5-b8b6-4c61a226122f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e051f93-3a0f-4f86-a929-0611fe23cf48", "sighting_of_ref": "indicator--0787b869-b114-4f97-a2a1-b828f1cca6ce", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2ebd2c-3fe1-44fd-aedb-47aab46ad4d8", "sighting_of_ref": "indicator--c64387ed-9b77-41df-9ac6-26b36546965b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9f16f8-741c-4209-9e79-a8cccd313eb4", "sighting_of_ref": "indicator--2ca550de-3483-4645-a67a-06c227a45042", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c8f936-afde-48f8-aa5b-ad95867cd486", "sighting_of_ref": "indicator--f2b65739-0af1-4cec-80c2-fef751021a90", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46433a4f-6689-42b2-83db-5d7887f030c7", "sighting_of_ref": "indicator--fcefd546-0e2e-4a8d-bbea-e3d9c6f6f8a0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f97739e-28cc-497d-8512-25006a2cb2b3", "sighting_of_ref": "indicator--3a52d1ad-be50-4d93-a2b7-b968ba092363", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f188be30-e523-4fd1-9003-bf4d402edd17", "sighting_of_ref": "indicator--44a543c8-6b9d-4689-b6e9-4a2e28aaa80b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a5e984-16f3-48b0-90a4-5b49cf0cb3fe", "sighting_of_ref": "indicator--12c0dc92-1c3d-4fc5-8be9-f6c202090ed3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602f3818-7cbc-4f4c-8dfe-ae1f180fbda3", "sighting_of_ref": "indicator--c9310cb9-d43d-4b73-ab8c-8f3f87601d32", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9919638-feb3-42f3-833f-55029077c5dc", "sighting_of_ref": "indicator--7c25ccbc-40ff-4a8f-98d6-3edaa3cbe17e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31a41d2-1689-487a-970b-5351eb01c561", "sighting_of_ref": "indicator--72860c32-359b-4e9a-9809-a088db8e6165", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280c1817-dc51-44b1-857f-728709d36d1b", "sighting_of_ref": "indicator--1e370071-11ee-453c-8a63-23aec127e18d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5523951-92fc-4ff0-8e52-87008e367997", "sighting_of_ref": "indicator--79cc50bb-08a8-4d95-aa10-ab811c590a99", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114f7229-cf39-472c-bac3-bb6e956c2f5c", "sighting_of_ref": "indicator--62ad2b13-d765-4a28-8b36-1c0c3117c398", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977bfa15-6771-4e6e-8359-f9e50cbad775", "sighting_of_ref": "indicator--d9a9690d-6cff-49d9-a02c-4d118290ff8a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c217a76c-a564-48ae-a02d-c5675f8f48ee", "sighting_of_ref": "indicator--a8f22986-ffcb-4095-bd68-c902b4d84542", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418effee-b3cb-498a-b9f6-f07cbc53f49c", "sighting_of_ref": "indicator--8ac99104-a13c-4362-8778-7bb62d05a3f8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bb3705-78d1-4cbe-bd59-f55fad16a8cc", "sighting_of_ref": "indicator--3a72eb54-f700-4dc3-b576-b6ba9e0d4594", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00463bfb-b289-4d31-9c1d-e1b09e6ac488", "sighting_of_ref": "indicator--3083ff16-ae2a-47ed-8ba3-8407b342c930", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1c3a0b-ba94-4117-8492-c5c601a569a2", "sighting_of_ref": "indicator--9225abae-012c-477c-a733-652fe2cd7d04", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9651d84-fccd-433d-86e1-29b3130e6d58", "sighting_of_ref": "indicator--3316c46c-4f55-4bed-989f-0df7eb337744", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082add15-6005-4469-bfc4-d99d376bb4d6", "sighting_of_ref": "indicator--3c060f22-3f94-4d14-8f67-32696dc28ef4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c43bc1-fd67-46f4-8806-034711f97537", "sighting_of_ref": "indicator--abce2fc6-9874-440b-8c49-ca573da4c778", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6a5712-a387-4e05-aad8-59fdae4cfeda", "sighting_of_ref": "indicator--05f3471d-15b4-4a93-a937-a33b652aeb47", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1f06bd-7046-49a7-bce9-4b474a83883a", "sighting_of_ref": "indicator--05f3471d-15b4-4a93-a937-a33b652aeb47", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ef6258-7baa-4f48-bf7b-0e5545a49c7e", "sighting_of_ref": "indicator--a5b3bc93-429f-4efd-8f4e-6fa51a8ed972", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2f0a19-f471-423c-9a95-3fd23b91e39c", "sighting_of_ref": "indicator--c14d5832-33a1-49d2-bfb4-2bf2a29b24a6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68973bbe-df67-49d3-9280-281bbf2c5604", "sighting_of_ref": "indicator--c14d5832-33a1-49d2-bfb4-2bf2a29b24a6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3844427-3984-4e1c-b6a6-16c401927ef1", "sighting_of_ref": "indicator--c14d5832-33a1-49d2-bfb4-2bf2a29b24a6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1c152c-c654-4241-a7b8-ddad1ddbf700", "sighting_of_ref": "indicator--e573aec3-a2cd-427a-8698-71c91061757e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769f8f20-7701-4f9d-bd9c-378fb5af2479", "sighting_of_ref": "indicator--e573aec3-a2cd-427a-8698-71c91061757e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41918d5d-1c06-486a-998e-96ec8c0554e1", "sighting_of_ref": "indicator--e573aec3-a2cd-427a-8698-71c91061757e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1bbeb63-d532-4e5e-9212-de13aea6d18f", "sighting_of_ref": "indicator--3479a112-3dbd-469d-a52d-eb7af29be554", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd554424-c83a-4f38-a16b-5b4f82374026", "sighting_of_ref": "indicator--2dd372b0-bedb-42a5-b329-2c1dada64989", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965806b4-1ca8-42a6-949a-6c9faeb078b1", "sighting_of_ref": "indicator--3530b348-80b7-4cff-ae6f-c53efd810be2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad05b15a-335d-411c-a709-c8fa18b87aac", "sighting_of_ref": "indicator--7d94cee1-0224-46b3-90d8-29fbf704e921", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ab95c9-95c2-4d99-b392-4162992dcd02", "sighting_of_ref": "indicator--42588175-a173-4bee-99ef-18c735dee7e1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43c7efc-759e-4d8d-a495-d52199bb7a48", "sighting_of_ref": "indicator--42588175-a173-4bee-99ef-18c735dee7e1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9f73cb-af00-4d3e-a418-302fc980cc01", "sighting_of_ref": "indicator--42588175-a173-4bee-99ef-18c735dee7e1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f0c759-cfea-400c-9535-ec5d1d105668", "sighting_of_ref": "indicator--992a6021-bfa3-4b9a-adc5-27628bd39fac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e2f11e-15ec-4b28-87ed-d5a12dfc8961", "sighting_of_ref": "indicator--9f845e35-d57e-44a0-81c3-2399c162358f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52af609a-d793-433d-9d43-324fb56a004c", "sighting_of_ref": "indicator--03672e2f-9b9a-42b4-b477-200002777b65", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bee5fc4-d52e-439b-8af9-6aea07018815", "sighting_of_ref": "indicator--c4400513-7aa9-46d3-a3fc-fd192d36218e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ba676c-ed74-4682-8890-19698b0e2d80", "sighting_of_ref": "indicator--c4400513-7aa9-46d3-a3fc-fd192d36218e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea443b31-8531-4c2d-992b-12ccb6cb583b", "sighting_of_ref": "indicator--c4400513-7aa9-46d3-a3fc-fd192d36218e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82f8041-d797-4837-a68e-af83c7c9efec", "sighting_of_ref": "indicator--c8f09ceb-f7eb-4464-b3ad-6dd503b1d0a7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2f6eaf-895d-440a-973b-591c903abd05", "sighting_of_ref": "indicator--134d9862-2101-4c9c-b90d-e5fc9346560e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72888bd8-4d55-45ea-ac25-de21c1eb7eab", "sighting_of_ref": "indicator--273ef102-bab0-442a-9512-936f226d2c76", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87390868-ac5d-4e92-ab5c-b07c41734571", "sighting_of_ref": "indicator--c81ca92b-a380-4874-8a27-038738b46f7f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0773cd-ac7f-4b64-bdac-9ba5fc7f90a8", "sighting_of_ref": "indicator--4eca7ecf-3152-4a5f-9da6-1e25f34ccf8e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab24611-1eba-4e2c-b911-923e532fb871", "sighting_of_ref": "indicator--4eca7ecf-3152-4a5f-9da6-1e25f34ccf8e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dabee87-9139-40df-81d6-25339fd79812", "sighting_of_ref": "indicator--5c5d936a-62c5-4bbd-aa1a-02b0848f5a08", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c52955-7985-4671-b95f-fe4ef9f10022", "sighting_of_ref": "indicator--99821b3e-7b40-4394-a3d7-a55ed217deb9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e3ad94-69e7-4b89-adb1-3e543606850a", "sighting_of_ref": "indicator--99821b3e-7b40-4394-a3d7-a55ed217deb9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61dd9487-5a12-4cd9-9e37-d37d745515b4", "sighting_of_ref": "indicator--adca6a71-8a77-4d41-8503-03eef6538d3c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcba4ab-c64e-4191-859e-162920321797", "sighting_of_ref": "indicator--9d39b281-db7a-4412-87af-172faffa218b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4568b445-3daf-4f43-95a4-ad16520344df", "sighting_of_ref": "indicator--924ce950-1d1f-4885-81ff-e4cb86dba169", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4585344-0009-42a4-b1fb-388421438fc4", "sighting_of_ref": "indicator--3b51d3f0-f72e-41f3-9aa7-82c186c164d5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba51e61f-e12b-4d1b-a33b-68c6c51fd751", "sighting_of_ref": "indicator--93a59a82-094d-4963-bb1f-8df75b9b66de", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e0e364-23c2-461e-b921-0b6cf40d8b6c", "sighting_of_ref": "indicator--aaeb2f11-497f-4cab-a656-9e45e12287b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ae9bdf-f180-4081-aabf-4576c9859e81", "sighting_of_ref": "indicator--aaeb2f11-497f-4cab-a656-9e45e12287b7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11f3f98-2022-48d4-b56d-3363af2fac50", "sighting_of_ref": "indicator--f4fbcf87-d83e-4719-a21d-9d0a710ad5c0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10142af0-bf87-48e8-ae95-2a494e6a8ddc", "sighting_of_ref": "indicator--007ebc5d-c01d-424e-9d48-86c55ab6a531", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da56dcd-195f-49f1-a8fa-27f3a4812bd6", "sighting_of_ref": "indicator--a2b4e94a-7c7f-44a9-914c-093728946218", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a700289-bc15-48e9-920e-42d3b3e6c32e", "sighting_of_ref": "indicator--455ac648-73bd-44f8-b595-4db0fc5c3c49", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a18b5f5-8474-4419-879a-237b4b24043c", "sighting_of_ref": "indicator--04db8cbd-7ec6-4fbf-830c-48798ed7b200", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccd4ae9-5498-42cf-8780-7c0254bbee9d", "sighting_of_ref": "indicator--04db8cbd-7ec6-4fbf-830c-48798ed7b200", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7b0475-9efa-41f2-a627-10d32e0639ab", "sighting_of_ref": "indicator--04db8cbd-7ec6-4fbf-830c-48798ed7b200", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9cbe98-e003-4e70-8da4-eb26304dfdfa", "sighting_of_ref": "indicator--d8ae7932-fd7c-4c65-a226-431a69cec9e3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b662d3a-ee58-4225-8111-b6ca8201fe2e", "sighting_of_ref": "indicator--d8ae7932-fd7c-4c65-a226-431a69cec9e3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f92771-2525-4ea1-844b-5243bcbcf487", "sighting_of_ref": "indicator--d8ae7932-fd7c-4c65-a226-431a69cec9e3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff55bcd9-8d9f-4ff7-8638-afd95601f2c3", "sighting_of_ref": "indicator--05fac5e0-d08c-467b-b069-83006f9392f0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc57e9d6-e5c3-4f1c-bb0b-532ca683a7cf", "sighting_of_ref": "indicator--05fac5e0-d08c-467b-b069-83006f9392f0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878208ae-3e98-4d9d-b79b-1c3d64fa7da7", "sighting_of_ref": "indicator--05fac5e0-d08c-467b-b069-83006f9392f0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0933e6-70e1-4d68-9260-dcec166af795", "sighting_of_ref": "indicator--71e41666-b2fd-4a27-81c5-326cac6a7e8a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ed7e3a-a3cf-41e5-804b-cc86e60677dc", "sighting_of_ref": "indicator--71e41666-b2fd-4a27-81c5-326cac6a7e8a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6e9854-bb2b-4d72-b741-b53fe3f6746c", "sighting_of_ref": "indicator--984d5c62-fe6b-4ce5-866d-7d95272cb36f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25b2ee8-d210-40fa-b53a-4a17b0cf27ac", "sighting_of_ref": "indicator--79623c0a-af66-44f6-81cb-60f7fe637781", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade5b638-4a37-4d60-8ff5-906aaf841ef6", "sighting_of_ref": "indicator--85bb071f-6407-4b1c-9ab9-ca3b7e014297", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25de851-3a5b-4462-a047-8c0bbeeee1d5", "sighting_of_ref": "indicator--fad13786-2fcd-40a3-b529-cc3ee078f00f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2811c244-4b92-4d6f-bf3e-3205834da4c8", "sighting_of_ref": "indicator--6121da4a-209a-4276-9097-9dd70391618f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16fd6fb-3045-4274-b6a4-4953f0756788", "sighting_of_ref": "indicator--4782baa8-8d97-46f2-a580-ab6b90044959", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba443e50-204c-44ba-9138-957fcc8e789b", "sighting_of_ref": "indicator--497c6305-3a06-4fe6-adfd-69858c5ab304", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f79a3f6-c592-4ba1-92af-8d4d6d88121d", "sighting_of_ref": "indicator--497c6305-3a06-4fe6-adfd-69858c5ab304", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc44d59-61b8-46c0-83fe-e03e23df3c75", "sighting_of_ref": "indicator--497c6305-3a06-4fe6-adfd-69858c5ab304", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fd7681-4369-4672-bb99-c0af0d7152c6", "sighting_of_ref": "indicator--2513c0fe-23e0-4553-8b6a-f24447fe6d52", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08416e8f-bf55-4ce0-8a8f-65cb72d7d4d0", "sighting_of_ref": "indicator--2513c0fe-23e0-4553-8b6a-f24447fe6d52", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1419862d-f660-485c-8c79-443755f3e4a4", "sighting_of_ref": "indicator--8a10e288-3182-4700-8624-93ca8886a4a9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586cf275-bf14-45e5-9473-e9bfd9fa15f8", "sighting_of_ref": "indicator--d0606f9e-7dbc-4f1d-ac1a-85239563d1bd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65392e9c-c95a-4322-8fe8-1e7cbcaaa59f", "sighting_of_ref": "indicator--5db93c01-e278-47cf-8e08-8cb31c798c3d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403bfbc9-2ca7-431d-ac51-173cbcb5b975", "sighting_of_ref": "indicator--4c9b4a6e-bc8c-4c45-97e2-3e119ce374d6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45514a89-3f28-4efd-a900-e6141419ed16", "sighting_of_ref": "indicator--9f6a2391-66cf-40fc-bdd7-41b58f21d5f5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2e53d6-de29-4cf3-9a1a-18b7ee721741", "sighting_of_ref": "indicator--8fc12096-cdfd-45be-8bf5-1abc00b77232", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716ec015-600f-47dd-8648-d2492f4dabc4", "sighting_of_ref": "indicator--500e179c-d315-4a96-a5fd-d778f40fc257", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0ab2fb-5245-4b0e-a168-a2c339b54d76", "sighting_of_ref": "indicator--dd8e4d4e-6d4a-473a-bc72-0199870ef1fa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c582dab-08a6-4bd5-8a07-1ed52ac70ba5", "sighting_of_ref": "indicator--dd8e4d4e-6d4a-473a-bc72-0199870ef1fa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81db542b-fb58-420e-ac6c-49423c1cf1b6", "sighting_of_ref": "indicator--dd8e4d4e-6d4a-473a-bc72-0199870ef1fa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab780894-94ed-4f0e-9495-04352ff7915d", "sighting_of_ref": "indicator--aa76a55b-a28f-4df8-8e66-5dc353d59955", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e177284b-e5aa-4ce8-a341-3ebe689f85a8", "sighting_of_ref": "indicator--fd9d70d1-0fff-4a93-8cd6-6a5732f6bd7a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9653991-8dc1-4a31-9856-1e1775f3bfb3", "sighting_of_ref": "indicator--fd9d70d1-0fff-4a93-8cd6-6a5732f6bd7a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487b70e7-9ff1-4e24-b68b-0061660761ce", "sighting_of_ref": "indicator--fd9d70d1-0fff-4a93-8cd6-6a5732f6bd7a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0972ac84-99b3-4743-a37b-7d03c6796fb5", "sighting_of_ref": "indicator--05c4c36b-7995-476b-afb0-da7638db934d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6de537-8be0-4a1d-ac27-768480778da2", "sighting_of_ref": "indicator--041c53ce-e455-4a2f-bca3-b88c441fcfe1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c349301c-474f-4d69-819a-e05a3c5d7c89", "sighting_of_ref": "indicator--a81f7361-86d8-423a-8bd8-b2049e8d209f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a9a5d8-b055-481a-8c31-958b46e5fa76", "sighting_of_ref": "indicator--a81f7361-86d8-423a-8bd8-b2049e8d209f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43980c6-4e7f-4865-a9ce-a941de84148f", "sighting_of_ref": "indicator--a81f7361-86d8-423a-8bd8-b2049e8d209f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fbc934-2fda-448c-b058-8a7f29ca81ad", "sighting_of_ref": "indicator--53f971f5-1197-4b5b-85da-3c1462c28368", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c35c60-7a44-4142-be0f-cb4736ddaea1", "sighting_of_ref": "indicator--7fae8d15-1943-43f9-9c83-932d8236b703", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982b4f69-8fb7-4f06-a967-6e2ccf834734", "sighting_of_ref": "indicator--7fae8d15-1943-43f9-9c83-932d8236b703", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09996175-5634-457b-8a09-880c788d144c", "sighting_of_ref": "indicator--7fae8d15-1943-43f9-9c83-932d8236b703", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40098070-7c15-4b5a-ab64-4544688935ed", "sighting_of_ref": "indicator--132ef015-cfe3-4a9c-9e13-2b117e4e1a78", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5940dc14-df15-40aa-91fc-2652cddd4661", "sighting_of_ref": "indicator--bd47641d-60a1-4a9f-807e-2e82e9abb74c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e601c367-37de-4883-85de-9851d42df934", "sighting_of_ref": "indicator--bd47641d-60a1-4a9f-807e-2e82e9abb74c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429ab1d0-ca0b-47db-a782-0f9ae14303e1", "sighting_of_ref": "indicator--9d8345d2-21f0-4ac2-8e14-ac2b6722b838", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a968dbb7-0cd8-495e-bf8d-a25a44999fd4", "sighting_of_ref": "indicator--22d4c2b2-54ae-4b6f-a927-86b28a0052bb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263fe6e3-6411-4b2a-a5ad-bb4599c5ec48", "sighting_of_ref": "indicator--22d4c2b2-54ae-4b6f-a927-86b28a0052bb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78c1886-8fb0-425d-aeac-fde104776741", "sighting_of_ref": "indicator--ab98a053-6c84-4b62-a421-a3545a352749", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6fd3d46-2afd-4c52-85cb-595e8f3723c8", "sighting_of_ref": "indicator--1b26b106-9e42-4370-8242-27fe9e970bd4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72462a35-a8a9-469a-a4c6-d47898590a94", "sighting_of_ref": "indicator--1b26b106-9e42-4370-8242-27fe9e970bd4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74780e92-9c7d-4889-a9ed-9c0d3e749074", "sighting_of_ref": "indicator--5645cea8-2dee-4a5e-91b8-513b8091605a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c0c8ba-f4bb-4259-95a6-021f0b2154a6", "sighting_of_ref": "indicator--7683bb3a-43e0-4e2c-b04d-b92782857531", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545e3001-de64-482f-9eae-9d1b34ba920f", "sighting_of_ref": "indicator--7683bb3a-43e0-4e2c-b04d-b92782857531", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2804c7-68ff-437e-8672-aed2c1a8169f", "sighting_of_ref": "indicator--af726576-9e34-4cd0-881d-217aacabd85d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab1c365-9e73-4ade-a8a1-6fcb172b04f3", "sighting_of_ref": "indicator--af726576-9e34-4cd0-881d-217aacabd85d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766d4b2d-b8fa-4ee3-a715-4c204c461824", "sighting_of_ref": "indicator--494bb858-91b3-4ff1-a6f1-93e84f50823e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee12a2ea-888b-47a6-a9d3-cbbcc94bf893", "sighting_of_ref": "indicator--3fd02022-3471-4163-8b13-5f0757f5376f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b871b695-2d76-47bb-a12b-94229851111b", "sighting_of_ref": "indicator--3e8c44ff-af3b-44a3-815f-400676ea1096", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057172d2-5fb5-48ab-bf07-486450c5e0bb", "sighting_of_ref": "indicator--3e8d09d1-35b0-42e7-b28b-a3785347f1fd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20e14ee-e5b7-4492-91e2-29c1c2e49409", "sighting_of_ref": "indicator--c8bd2cff-0808-436b-99a5-9135b09e9e5d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4fc6c6-65a5-4b5d-bfaa-14c2f5ac5407", "sighting_of_ref": "indicator--054f0da2-64c7-4383-a776-56007b8f0d71", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4526c45-f817-4204-8e65-ff8e5de431af", "sighting_of_ref": "indicator--054f0da2-64c7-4383-a776-56007b8f0d71", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200473b4-098f-48c0-b3cf-396354e35a2c", "sighting_of_ref": "indicator--0e0ecc00-6bf9-4980-847a-55af27933566", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfa78a0-6d3a-49fb-ad7d-4cae0486574f", "sighting_of_ref": "indicator--0e0ecc00-6bf9-4980-847a-55af27933566", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07e70dd-3b17-49cb-84ad-5b63ab46ac9e", "sighting_of_ref": "indicator--0e0ecc00-6bf9-4980-847a-55af27933566", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc96674-e05b-4ab1-b5a4-1a890f8e9382", "sighting_of_ref": "indicator--a4803a23-c6ac-441a-9c43-26d8beed0c8e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500d5cc4-2e3c-487f-8405-ce8d62b90119", "sighting_of_ref": "indicator--a4803a23-c6ac-441a-9c43-26d8beed0c8e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6c5a11-7a49-41b2-a5b1-d0987543567b", "sighting_of_ref": "indicator--a4803a23-c6ac-441a-9c43-26d8beed0c8e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70fa8b23-d228-466f-996a-711198fca416", "sighting_of_ref": "indicator--a7618b26-3039-4ff5-9fc0-10c4e54b9f90", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764d3900-ea7f-4bae-bdb6-e61ca5a01d40", "sighting_of_ref": "indicator--a7618b26-3039-4ff5-9fc0-10c4e54b9f90", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ff77ca-09f9-4ba0-9d16-75af9427366d", "sighting_of_ref": "indicator--a7618b26-3039-4ff5-9fc0-10c4e54b9f90", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe68991-d122-4a05-a79a-9c2c5925177a", "sighting_of_ref": "indicator--07baa4b8-3cb9-4bae-9da7-fbaf51df6707", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c072e7c-41a8-4c86-bffe-9d2ca0498dc1", "sighting_of_ref": "indicator--07baa4b8-3cb9-4bae-9da7-fbaf51df6707", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96578ad4-7111-4d8b-8380-09c55b9b60a8", "sighting_of_ref": "indicator--07baa4b8-3cb9-4bae-9da7-fbaf51df6707", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256cfef2-cedd-45d1-b54d-b93a23d5c5e3", "sighting_of_ref": "indicator--77b13a8a-5af7-43db-b387-40c99039c7b3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac932cc6-acd0-4adc-b1c9-886b931be8d8", "sighting_of_ref": "indicator--77b13a8a-5af7-43db-b387-40c99039c7b3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd4732a-7e7d-4752-ac22-f9680a8e7690", "sighting_of_ref": "indicator--eb69a825-5325-408e-9a12-dbc2fd84a0b5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c256f6c-59f5-43e9-8ba6-a4826e260c07", "sighting_of_ref": "indicator--bb017685-24a9-451a-a57a-d113116b764c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7639bc-3f1a-4b32-9888-b75b6c9e3100", "sighting_of_ref": "indicator--04cadca0-d95b-420d-af5c-7b78903c76f9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2dc3947-9ebb-475c-90b7-a360d4a08a08", "sighting_of_ref": "indicator--97f9bfd4-1140-49ad-b212-486a369d9613", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1125d4-7a99-48c8-aae7-9f10fbb808c7", "sighting_of_ref": "indicator--bb2006dd-9160-40ff-87c7-4613a8aec852", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5d741b-1cb6-4917-8f0a-a56a5e661340", "sighting_of_ref": "indicator--78cb988c-5529-4b8c-811b-9ef4614c98b3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49939d15-ae1b-40c5-8e34-94c14cca503e", "sighting_of_ref": "indicator--e1c8b9dc-4ee2-4c47-bc28-5b8078e25eb1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29d3879-1143-4963-b1e6-9d62fd6826a1", "sighting_of_ref": "indicator--bbe42011-95bf-4778-abbd-26673a96690d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602bf168-fc5e-4c0d-8d96-60d0d4949f4a", "sighting_of_ref": "indicator--527d4fbd-9a0f-401a-a3b8-686316fbff2a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d62a42c-252d-4e8e-b479-1935845929e8", "sighting_of_ref": "indicator--5820e52e-55e0-4665-88b7-38396e2573c6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094cfb13-6dc5-499e-9fea-d6b6ece58fca", "sighting_of_ref": "indicator--ff4c1b82-81c7-48b2-8f43-2992b7dc6eec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3451b603-9b73-49e4-984a-fc9f56f67915", "sighting_of_ref": "indicator--5f94dfc2-966c-49d7-bd4b-0af49f4a98f2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a35113b-b24c-4faf-8563-f5871bc590a5", "sighting_of_ref": "indicator--41c2e18e-3d3c-43aa-bf7c-9c8b246b3555", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233209eb-a085-481e-a5c1-0340f702ae6b", "sighting_of_ref": "indicator--a64b4bb7-3ce8-4a7a-81aa-282e6860cef9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9780998e-2880-4e81-8040-724ed03f788b", "sighting_of_ref": "indicator--09f1a1e2-45bf-45f8-a569-988c6ff5da12", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c2731a-8145-48cd-8576-25b320a3da90", "sighting_of_ref": "indicator--0844b2d3-77e1-48b9-913d-4834b68f8d11", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600a54dc-7ed0-4e3c-823a-8d4ec683b104", "sighting_of_ref": "indicator--9d8d59ea-fd90-48f1-b98e-0b922c5acbba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c611c0-0674-4afd-a8b4-9690ecc71bba", "sighting_of_ref": "indicator--9b49e607-f5be-46e5-bda4-a84af42b0edb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf1c94f-45b9-4f8a-a41d-68fef05e3da2", "sighting_of_ref": "indicator--480ffb0c-ecc6-45c6-9fda-2368f003ce98", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0c8456-ddcc-4b23-8635-d4ed98072f4c", "sighting_of_ref": "indicator--8bced0b7-02b3-4561-b09d-6d212aa137ee", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5107f08d-859e-4575-9d75-63ac0f2f74b6", "sighting_of_ref": "indicator--05b99ac4-f3d4-4d6c-8188-c92bd3af79df", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ccb859-dce5-4e37-98b0-7caf48ed4f0d", "sighting_of_ref": "indicator--d00e3729-122f-40d7-9aca-89bfd37ef355", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778ec86e-384e-4897-abbf-5d971690db3a", "sighting_of_ref": "indicator--5ca03cbb-5939-4fba-ba63-9418f8380a0a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4f17be-5fb0-4d03-a95f-20ca54624c88", "sighting_of_ref": "indicator--c1834788-32f3-4c60-abf4-5e7c7ea57bb5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc47985d-3824-47c2-8cb7-ce0a6faca099", "sighting_of_ref": "indicator--c1834788-32f3-4c60-abf4-5e7c7ea57bb5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e705b919-7e37-47ee-a9b0-1f6b77e7fa3c", "sighting_of_ref": "indicator--c1834788-32f3-4c60-abf4-5e7c7ea57bb5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d48baf1-5dfd-4eec-937f-4335d1d32be7", "sighting_of_ref": "indicator--d653c120-2116-4066-b8e4-0825aa817694", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17ea596-e50b-4cd2-b153-62c5fca66e3a", "sighting_of_ref": "indicator--689b3f45-7713-4a6a-bbd6-c2fd73104393", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9a9826-0cf6-48fc-9317-73aa14636229", "sighting_of_ref": "indicator--2aa3e13a-a4a9-4e98-a581-3e691e461ca6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4727993-976f-47dd-a06c-85865878c41e", "sighting_of_ref": "indicator--ef49199f-c017-49e4-87f0-ee1f1afbfd41", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70c0c3c-3492-4a45-b830-c1f1ea0a6eac", "sighting_of_ref": "indicator--ef49199f-c017-49e4-87f0-ee1f1afbfd41", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667ab80e-d534-4f4f-8e20-b65941dc6fe7", "sighting_of_ref": "indicator--56836f35-c1d3-40a4-9055-8d27b1ad12a7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e4c6f5-e32e-4822-a957-432a4ca3c8dd", "sighting_of_ref": "indicator--efc8b1d8-60e1-461f-9b57-9fad39018077", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd7ac85-9355-4db1-8bf8-7c143eba0ce5", "sighting_of_ref": "indicator--06c3f140-d412-4697-a169-ef1b387c5e45", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fb76c9-e53c-42ba-a653-71eedbe007b4", "sighting_of_ref": "indicator--9bd8b470-0bee-40c5-95f6-daa47d7dd258", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baaa3629-7cfe-4fcd-b20a-9840a4238044", "sighting_of_ref": "indicator--735bed6f-0fb2-4473-bb12-1232ec9de944", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85339c2b-863e-4e10-9e45-57ad615b847d", "sighting_of_ref": "indicator--735bed6f-0fb2-4473-bb12-1232ec9de944", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2306871-6d58-4b6b-8650-abcd53b0d35d", "sighting_of_ref": "indicator--3664fc3e-4709-43a5-bac6-a8e59505c19d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0067670b-fb9b-4a72-91b5-868050359b47", "sighting_of_ref": "indicator--50cef7d7-7bda-4718-ae50-2ee827e16dc2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87025320-136b-4ddc-a95d-791824c4d73b", "sighting_of_ref": "indicator--50cef7d7-7bda-4718-ae50-2ee827e16dc2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9cda0c-049a-460d-b336-dc665151389b", "sighting_of_ref": "indicator--50cef7d7-7bda-4718-ae50-2ee827e16dc2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ffbf6f-1a29-49ea-ae07-2235c10bc22d", "sighting_of_ref": "indicator--a4341fb6-72ab-4d24-b204-cfecdff9f53e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050f8ea9-b34c-4a02-9bc8-78eb4b76d3bb", "sighting_of_ref": "indicator--23387c28-0d69-4023-9d1a-cc04f435f01d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6734c56e-dfeb-49d0-8fab-80408f1ab0b9", "sighting_of_ref": "indicator--23387c28-0d69-4023-9d1a-cc04f435f01d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6a3267-5731-4aea-a00d-dd068bcca2ba", "sighting_of_ref": "indicator--9aef96cc-0310-4ecd-9a6d-089b8240854f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dca935-3119-4878-97eb-858babb519c5", "sighting_of_ref": "indicator--d6354580-653e-4a8d-8962-64d992588391", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8059bd-b037-474b-864a-413bb2f49288", "sighting_of_ref": "indicator--feeeb8df-4363-4241-bd4b-53f1b780b291", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b414c565-1926-40c9-b817-e33c81b61f89", "sighting_of_ref": "indicator--1a56d54e-0370-4b9c-b94a-8ce89042e28a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cff6c3f-b6a6-478c-9ba5-7f39112c8ce5", "sighting_of_ref": "indicator--1a56d54e-0370-4b9c-b94a-8ce89042e28a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766948cc-16a6-4505-a93b-c1ce925e92bf", "sighting_of_ref": "indicator--1a56d54e-0370-4b9c-b94a-8ce89042e28a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe945112-e324-4074-ac05-2d6f6026608b", "sighting_of_ref": "indicator--dcba04db-3912-4657-baf2-3c55e3eefd05", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fc52a7-08be-411a-b4d9-3867dbe44409", "sighting_of_ref": "indicator--7d3de245-a31f-490c-9900-d8fdd8417b41", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552f3f70-dda8-4303-8abc-39b0defc74c8", "sighting_of_ref": "indicator--f5834c16-f289-455f-abcf-ce6b7008444b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f79a72-4124-483e-beea-fa88843a4e18", "sighting_of_ref": "indicator--f0a097a2-f81f-4610-a04e-17c5f01b03b8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd39c87-f1f5-45c3-a9b8-b8206e205e7c", "sighting_of_ref": "indicator--522043a3-ef8b-4c7e-b1fb-c933690f4ecb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a825353-1e12-4964-a8f2-6eec6e3e9d40", "sighting_of_ref": "indicator--50953766-66d1-40f9-9328-5b3d931735b3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fb023d-93b9-45b5-a0ad-5da58799f42d", "sighting_of_ref": "indicator--7227d897-5ef8-47d0-91aa-bb66c6b29809", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aefc4dc-1e01-4855-ae90-db45e2737559", "sighting_of_ref": "indicator--c1ab770d-72e0-4f43-8ffa-a94dbe828052", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22fce4c-d3d4-4481-a568-b3ed1a3f46aa", "sighting_of_ref": "indicator--bb3bb032-1716-46bd-8451-639350d36a1f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177a04a4-077c-43b2-974d-37d704ade0ba", "sighting_of_ref": "indicator--7eb2c3d6-fbbc-476a-ab2c-353724cc6a11", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4072d1f2-137b-4e5d-908e-c99bd7c1a5d2", "sighting_of_ref": "indicator--480f108c-c4e8-4ebd-af19-54c15ea67cb5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd3b215-2924-4d97-aaa1-c92eb72a7838", "sighting_of_ref": "indicator--917d89a1-e584-4964-8ea2-e10a915357ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4ac2cf-04b2-4f7f-8f48-04cac1d61812", "sighting_of_ref": "indicator--12b68fe0-e918-4269-bc1c-f1090d8cc629", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ec56c9-260c-431b-959b-c612ca6b1d43", "sighting_of_ref": "indicator--722b2c71-ea53-431e-8091-e16808509692", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5322222a-c2f1-4279-9a53-9d9846f478d7", "sighting_of_ref": "indicator--ea3bb99b-fd70-4213-9ba2-c4858d660e97", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0bc545-36ec-4c88-a4c9-b65229f6e4ae", "sighting_of_ref": "indicator--9e93eec3-705a-4caf-927e-4c5940364d73", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b31339-c519-4992-a2c9-0e8e59929ac3", "sighting_of_ref": "indicator--9621a3c2-32fa-4d6e-aafd-c0ce922b49f7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb62850c-7d80-488e-9441-85b786bdeb2c", "sighting_of_ref": "indicator--b4b9dc95-f7d3-42eb-8a94-0a2759ad11da", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cd1dbd-d84e-43ae-9ccc-7cdd39ee502d", "sighting_of_ref": "indicator--be3081eb-f998-488b-891c-5a4e23d5e1b0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ac775f-5d3d-464c-a7fa-bbbd8a1c782c", "sighting_of_ref": "indicator--fac76184-50f9-402d-8718-468b3c3dd016", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd273772-ebec-4cce-a1d1-da0ea0601a6a", "sighting_of_ref": "indicator--4155e8df-417b-4e31-833e-2fc01cc1e981", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab573e9-82e0-4c5f-b62b-0fc6eeb3da61", "sighting_of_ref": "indicator--6dbf5086-33f8-47a1-bead-6e84ac6a61e9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59f643d-cc5e-46fc-b575-c45aa2b4af19", "sighting_of_ref": "indicator--cb8d0616-d59f-47df-834e-83876d33c803", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f824512d-a410-4e55-9d40-a795877af0f0", "sighting_of_ref": "indicator--c83fc763-13d4-472c-960c-76573d0b64ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a44a59f-d54a-4a46-aecf-fa1251aadb80", "sighting_of_ref": "indicator--67c948c2-a58c-4de5-8c83-0b0ac29b4a15", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3c83f8-5ad8-4e4b-ba31-de86697ebf51", "sighting_of_ref": "indicator--46774be0-05b7-4da1-8cb5-20e85414c48e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58be4b5a-04ff-4aef-ad8d-0006080b8e4d", "sighting_of_ref": "indicator--76030bce-828f-4042-b602-c16cc8a7f0ac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daca910d-cb1d-431b-8fca-91027bff4204", "sighting_of_ref": "indicator--8de89a31-9189-49b4-b55e-0890346bc979", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853b9c6d-db39-43c4-b72b-875afb4047c8", "sighting_of_ref": "indicator--b1348b44-a425-4c09-be04-3b4d0a224084", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775ede5c-2fc0-41fc-b13b-246f3481c923", "sighting_of_ref": "indicator--904ee84a-ff93-4f61-84d8-cb85413bf8cf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57eedaa0-7684-4cef-aecf-8ead71728a84", "sighting_of_ref": "indicator--7128cfa2-091d-4e48-ae07-c4c81e866eea", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118177a0-fa68-4768-b6a1-7fa234cca57f", "sighting_of_ref": "indicator--2858ad2e-6793-4a06-90da-1d58b471334b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33cc4693-13bb-4aa9-a818-ff8b5378e1ef", "sighting_of_ref": "indicator--fb35b7cb-993c-43bf-a068-4d54d6e07c92", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4533537-1172-4886-9665-d532b4681abe", "sighting_of_ref": "indicator--3b8ec514-e1f8-40f6-978c-9baf8632b974", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f2c602-b7c5-4b43-971b-c4713e19e82b", "sighting_of_ref": "indicator--4d27e591-176c-41b2-acd9-a04f6d2a310d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b154ce83-2f59-487a-b336-32f0721f2ae9", "sighting_of_ref": "indicator--764b9d72-0d8a-4bfd-94e0-84ac1b2b0db1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dc218b-47be-40b7-82b8-e6724bd34111", "sighting_of_ref": "indicator--ebe3842e-f4ba-4876-acac-f6498db4c3e8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df43ad79-b8cf-4020-ba2a-a6422c3ab3b5", "sighting_of_ref": "indicator--e7c09c0d-2e42-4e9d-9ce8-c516bbe1162a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa89952-38cd-45c0-8e6b-447aae1c3e7a", "sighting_of_ref": "indicator--a2f59b82-b4e0-4ab6-bc40-3dac8efb9abe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055a2f29-bda9-470c-920a-ddde34be7806", "sighting_of_ref": "indicator--887e6a68-7d56-4d4d-8766-3c062cd592ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0cd05a-74b5-461a-8b9e-33c0ae6b6ea5", "sighting_of_ref": "indicator--2b2712b2-061b-4428-801c-b6fab8bae623", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcb42b1-c30f-4707-a2b8-441d6ce411c3", "sighting_of_ref": "indicator--2b2712b2-061b-4428-801c-b6fab8bae623", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ffd49e-6c6d-4e14-9e8c-b32d47fed137", "sighting_of_ref": "indicator--6f3f14d5-694a-4e1e-ae05-0234f6ca6c44", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9e2e76-3152-4a62-8008-ae35dd93e904", "sighting_of_ref": "indicator--6f3f14d5-694a-4e1e-ae05-0234f6ca6c44", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f2c583-a8e9-4346-9a9e-e03ea871e2e2", "sighting_of_ref": "indicator--62ec14fe-8fff-42df-ad01-32ad65bfdb43", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29327723-9964-45ac-8221-cec284cc9ab3", "sighting_of_ref": "indicator--87c0a388-aabc-49ac-89ba-1fe392648ab6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde256a3-4240-4e7c-a6ca-6ebbfba5c439", "sighting_of_ref": "indicator--85d8388f-9f0b-4c26-91b4-41a86d86eedd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb19d37-133b-4849-bafd-f6daeb2731de", "sighting_of_ref": "indicator--55101d8f-5c1f-4cdf-beeb-3cf05e581848", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc358028-4355-43d2-b12d-03e36086228d", "sighting_of_ref": "indicator--55101d8f-5c1f-4cdf-beeb-3cf05e581848", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d0612b-5d5a-470d-8808-2cb2b3df2d78", "sighting_of_ref": "indicator--55101d8f-5c1f-4cdf-beeb-3cf05e581848", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5497d7-1d50-42c4-9e01-1336686a55ed", "sighting_of_ref": "indicator--9f947d89-2ea0-4b4a-a8e7-4bdd5f34d8a8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d79f6d9-b048-4493-820b-f4adf975f34f", "sighting_of_ref": "indicator--32e74a2b-a1e1-4316-a761-1f310daf5639", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7a554a-ac0e-4692-ab7d-4edbb9aac3a3", "sighting_of_ref": "indicator--32e74a2b-a1e1-4316-a761-1f310daf5639", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8631b6-848e-426c-862a-be35c750addf", "sighting_of_ref": "indicator--32e74a2b-a1e1-4316-a761-1f310daf5639", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679e2d81-abda-475c-ab2e-d56441b3d79b", "sighting_of_ref": "indicator--cc43c917-9095-46ee-9434-13baf2ed2863", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca26bf2-e73b-4020-b217-367b6ecdb80c", "sighting_of_ref": "indicator--7dbe208e-c8b9-45e5-a999-a01d9c04806f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4c1e61-4f45-4815-aa96-3df3e7c1ebb3", "sighting_of_ref": "indicator--304d4c16-0afb-46a5-97a0-8ef049a5f417", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d260eeee-e123-4a1e-aa90-407d13abb813", "sighting_of_ref": "indicator--d8d1c959-95b5-45d3-b2da-3ad4aa2e4958", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328a8b37-dba1-4319-a0b4-7d4d3d4ffebe", "sighting_of_ref": "indicator--5d8666be-55b4-426d-8caf-c451d637426a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd28ab7b-07be-4f6e-b346-96fb9ad7de8c", "sighting_of_ref": "indicator--f857b2ab-77c3-4c56-b361-4374b681c5c6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14bd99c-1f1c-4bb2-bfb6-3c683352179d", "sighting_of_ref": "indicator--82fbeea9-1941-4dde-b6aa-1d68deac5a62", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e89777b-7db5-4702-8137-725ab88fc9a2", "sighting_of_ref": "indicator--82fbeea9-1941-4dde-b6aa-1d68deac5a62", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b7a071-58c2-44a1-9c81-5e7175bdcbc3", "sighting_of_ref": "indicator--ddf022be-9137-4ad3-8208-bbd35f8f2c37", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db85905-7cea-42a6-93ca-e1890c9f0d20", "sighting_of_ref": "indicator--ddf022be-9137-4ad3-8208-bbd35f8f2c37", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044f77f1-1b26-44ad-ae33-927f6383c9f3", "sighting_of_ref": "indicator--0da25401-f7f1-45f9-8de8-79c6d241d1f4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1bb5d6-fe19-4761-abe0-a233af439ed5", "sighting_of_ref": "indicator--971bf806-0d84-42e7-bade-d76b5c1293d0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b099f761-f98f-4841-b08d-9efa8858bb33", "sighting_of_ref": "indicator--9fbe81a0-21cc-4765-bcaf-22d5d748c69b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2755057-ad34-4334-8eca-e8ee7e581fb8", "sighting_of_ref": "indicator--75a16b57-5f97-48b4-a837-92a81fc69289", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9c782a-5eca-4a5f-a5ef-f06e448f4342", "sighting_of_ref": "indicator--96b2572f-6724-4162-9ad2-179596d1580b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09550dce-c712-4e55-a32a-cb051c32798a", "sighting_of_ref": "indicator--751d8fd0-429e-4a36-aae9-9dee121a9194", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99cbd307-6ace-4bc3-b3a9-d9c1d11581a4", "sighting_of_ref": "indicator--f46bf5f8-1dd4-44c7-8250-51552eb627a4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f180a3de-8f4d-4883-897d-b1d504991ab6", "sighting_of_ref": "indicator--f46bf5f8-1dd4-44c7-8250-51552eb627a4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830ca334-6ddc-4a44-9710-5766870b6a18", "sighting_of_ref": "indicator--f46bf5f8-1dd4-44c7-8250-51552eb627a4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a089fd39-8910-4233-9d53-1bfdcf81d38b", "sighting_of_ref": "indicator--aef8b6e9-432d-40cb-83d9-b3ebe96aab1d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad36fa43-109a-4579-8b69-f9612ce2ca6c", "sighting_of_ref": "indicator--aef8b6e9-432d-40cb-83d9-b3ebe96aab1d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32ecf3d-935b-4aa7-84f8-2ddc26ebc70b", "sighting_of_ref": "indicator--aef8b6e9-432d-40cb-83d9-b3ebe96aab1d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f88bdd-cbb3-45ce-bc1a-28afbd74d6bb", "sighting_of_ref": "indicator--3b9ca9ab-4fb0-4327-b13b-653bc22c33f4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e82d57-7d25-4944-972b-73fd69f16913", "sighting_of_ref": "indicator--5f6a230a-5fce-41d0-a86c-c1d6ef165633", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbfbf6b-1ce9-494e-91c7-31450c7db95d", "sighting_of_ref": "indicator--6d0062b6-b946-4aa2-9038-209b4bc67a14", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f8b307-61cb-4aab-8340-5600fb9bc196", "sighting_of_ref": "indicator--6d0062b6-b946-4aa2-9038-209b4bc67a14", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47dbd8b-ad93-4b58-b649-f264553d6f8d", "sighting_of_ref": "indicator--408b2bc7-d4d6-487c-a572-4152f6bfd501", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee83736-fb91-48ea-8384-c07927e0fe39", "sighting_of_ref": "indicator--43aaa12c-36c2-4cd1-a4d2-9ae9f9652ed4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5aeca77-d29c-4642-b2ec-c17c94b45847", "sighting_of_ref": "indicator--483dc6b1-781e-4f91-8ef4-1c5055213714", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205b808e-c780-4b21-bfc0-4900464b195a", "sighting_of_ref": "indicator--5240945d-c098-4e3d-b246-ba9a158b9de2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edaf1eb4-a5b4-4539-8d3e-3d3e1a95cbfe", "sighting_of_ref": "indicator--aa036cc7-8c68-42a6-8960-e478953e0faa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b9e6c8-13fa-4759-a7f4-c28f97d26b3a", "sighting_of_ref": "indicator--878e4e87-7a91-4122-9ea5-8c4a4e3401c4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be1bfcf-b1b5-4494-80fa-cfada1b488e1", "sighting_of_ref": "indicator--b674ad5b-561d-4374-82db-f8a98b2c921a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed979578-16fd-433f-8dfa-85055fce6f56", "sighting_of_ref": "indicator--18aebb3f-bcc8-441f-ac9e-7a348db5a138", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e334d33f-d39c-4c19-86fb-20c691b2c12e", "sighting_of_ref": "indicator--b58de3bc-2eaa-4ff7-a60c-d13a24de51e8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1e9fdf-1391-4dee-ab26-29a20950b7dd", "sighting_of_ref": "indicator--ca7ddf25-df23-40af-aba3-2a64e248db8a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a122183b-b24f-4b3d-8788-c3b30caa75f4", "sighting_of_ref": "indicator--badce491-fe47-46d8-b502-fb126f4b8e16", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e1e600-412e-4c24-9a68-c3f5d06b499b", "sighting_of_ref": "indicator--2350770e-9111-480e-994f-4d6877580e14", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86019b70-614e-4460-8ab8-a7ac3ea88b2c", "sighting_of_ref": "indicator--cb665d23-f326-4803-955e-63fc3a73be7b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa7efc9-6bf9-41a7-bc3c-bfdbb230ca33", "sighting_of_ref": "indicator--9fc91cbe-ad4f-4fdc-a38b-db52d9fff476", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890580ad-1fab-468b-a633-32f523a0bde5", "sighting_of_ref": "indicator--9fc91cbe-ad4f-4fdc-a38b-db52d9fff476", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31300db-97c3-43f4-9f95-eaeaa16d30c8", "sighting_of_ref": "indicator--9fc91cbe-ad4f-4fdc-a38b-db52d9fff476", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224faaf0-9d58-422e-be19-204a848425ed", "sighting_of_ref": "indicator--1506d381-6116-43d2-8b9e-2e50cf2b0339", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b493bc27-4c97-46d1-b939-b99459a16df8", "sighting_of_ref": "indicator--53a03020-db20-4023-875f-fff432b0a8e1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14a9f90-9873-4691-9bde-b6b3905f3bb0", "sighting_of_ref": "indicator--bec48022-9488-4b74-a52a-68bc73527efb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046829a1-f2a5-4e7b-bcb8-5579f4cd15e3", "sighting_of_ref": "indicator--e3786d8b-c9d5-408b-b2b4-439f5e28b398", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03ff3f6-0b3c-466b-ae6a-3c090587404e", "sighting_of_ref": "indicator--e3786d8b-c9d5-408b-b2b4-439f5e28b398", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d4aea2-70b1-40f0-afeb-8bccf55cbc04", "sighting_of_ref": "indicator--e3786d8b-c9d5-408b-b2b4-439f5e28b398", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9f4cca-7906-4ab5-a55a-c1f51019bbfb", "sighting_of_ref": "indicator--1dff3a89-6b02-44e2-8f0b-5a96b5449c83", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1374144-4608-494b-9c01-adaca7445eba", "sighting_of_ref": "indicator--04a1e99a-4361-4d68-9a3b-1b6bd5747b9d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbae3b0-2b72-4428-906d-e7ce29f1158e", "sighting_of_ref": "indicator--04a1e99a-4361-4d68-9a3b-1b6bd5747b9d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e21e63-c980-4bc6-849d-ab8447c11ec7", "sighting_of_ref": "indicator--04a1e99a-4361-4d68-9a3b-1b6bd5747b9d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91c79a5-d237-4ac0-8175-6d0b77918a76", "sighting_of_ref": "indicator--7fbf5a38-01bc-462f-a9d4-12516959bf50", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e42c4b-d46d-4d4d-8571-15e1c317b690", "sighting_of_ref": "indicator--2fc586f4-7309-4815-b7e7-bcb00e7db852", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396c562f-b248-490e-95cd-151119816ad1", "sighting_of_ref": "indicator--2fc586f4-7309-4815-b7e7-bcb00e7db852", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4add52c4-a07a-447b-ab2d-8f705d765818", "sighting_of_ref": "indicator--2fc586f4-7309-4815-b7e7-bcb00e7db852", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66092dea-9e40-4441-9194-4e5faa3a349e", "sighting_of_ref": "indicator--610b1ba7-9eb7-4407-bdf3-7b78f84f6542", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f7691e-4fa6-4754-82c0-7603498cb1aa", "sighting_of_ref": "indicator--610b1ba7-9eb7-4407-bdf3-7b78f84f6542", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1345b7b-07e0-4886-80b4-fb01de66789b", "sighting_of_ref": "indicator--39ffa99f-519a-414c-8734-43c4d1e98d78", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c01032-f9f4-496d-8827-030fbe44d6fb", "sighting_of_ref": "indicator--39ffa99f-519a-414c-8734-43c4d1e98d78", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ff121a-161a-4d1f-b7a9-1a945a0cbc85", "sighting_of_ref": "indicator--39ffa99f-519a-414c-8734-43c4d1e98d78", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f817850b-66ed-4538-a300-c978de0b5fe2", "sighting_of_ref": "indicator--13201e46-2c0c-466f-85df-3f97a77b1eeb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcef099-68a1-491d-96c2-67ad01a1a8f0", "sighting_of_ref": "indicator--81b420f8-de36-4afa-b27e-7cf958a9404f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb4e261-120e-4d8d-83e2-117f61b2be8e", "sighting_of_ref": "indicator--e8e44bb6-9ba6-419f-82f3-15c48ad17f12", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a548184-5b62-4fb9-8c63-d9beeb562431", "sighting_of_ref": "indicator--4dfe58ac-2a12-46c2-85a7-ed5315e0f619", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ea8150-3f6e-472d-947e-467748e47164", "sighting_of_ref": "indicator--3cb2fe89-a4d0-4592-ab70-210b889240d9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50337068-cbbb-4feb-98d7-93881bcf8c6d", "sighting_of_ref": "indicator--3cb2fe89-a4d0-4592-ab70-210b889240d9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61debdf6-2f74-44fa-a44e-c0b6ff04cc9a", "sighting_of_ref": "indicator--3cb2fe89-a4d0-4592-ab70-210b889240d9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3454be-901d-4e48-b5e2-494190cc8ce0", "sighting_of_ref": "indicator--3dd31612-c858-4758-a86e-1531670cedfd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c216d4-456b-418e-83f3-c3c62dbb5fe6", "sighting_of_ref": "indicator--5df133c3-654f-489f-b5f9-8a68f20812b5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93dff11d-7855-4285-b93e-c87128f18600", "sighting_of_ref": "indicator--ff1b8394-14a4-4a6f-bf68-5ef98c8189bd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffcf3d1-2683-414c-8adc-d0afc8eea8a2", "sighting_of_ref": "indicator--ff1b8394-14a4-4a6f-bf68-5ef98c8189bd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d4b59b-05e6-4755-9f05-e5f94e265e07", "sighting_of_ref": "indicator--ff1b8394-14a4-4a6f-bf68-5ef98c8189bd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f947ac-6bcf-4a39-87f1-6616723ebb85", "sighting_of_ref": "indicator--7b8aa55b-c7c4-432e-afbb-79ffd135ad49", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4216e9-652d-4742-9cce-f8fc70599692", "sighting_of_ref": "indicator--7b8aa55b-c7c4-432e-afbb-79ffd135ad49", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5925e58-66d9-47bb-b7c6-dfc5e425f527", "sighting_of_ref": "indicator--7b8aa55b-c7c4-432e-afbb-79ffd135ad49", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09f98bb-ad12-430f-b25c-f26c135ab5a0", "sighting_of_ref": "indicator--b3211e41-4c4b-483b-b6be-4873077ecbab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf0ca23-7dfc-4d9a-af7e-b2c87931e697", "sighting_of_ref": "indicator--b3211e41-4c4b-483b-b6be-4873077ecbab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1edbb6f5-2453-41d8-a8ed-aad801fb79ea", "sighting_of_ref": "indicator--b3211e41-4c4b-483b-b6be-4873077ecbab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76de8236-33fe-4c25-95c7-4ea9bca84003", "sighting_of_ref": "indicator--c06de8c2-b7a6-4d01-96f0-bf0ac80f0e2c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d30b963-d683-4bcd-ba9f-2f07e2175cd3", "sighting_of_ref": "indicator--668c75a0-589e-4dbd-af56-62d2b35c1f07", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e9f8eb-49ec-4521-a255-ea23b390e1c2", "sighting_of_ref": "indicator--b9515eb2-ee60-44da-b3d1-f116b07c244c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17382680-07ab-41dc-b0ba-e2c58a4835f4", "sighting_of_ref": "indicator--b9515eb2-ee60-44da-b3d1-f116b07c244c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f86213-2502-4a4f-8735-919d6fab1a0b", "sighting_of_ref": "indicator--af7263be-67f2-4e52-9dde-2c7f3cdeefd4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8ab081-f4df-4805-b61e-96017d21d095", "sighting_of_ref": "indicator--af7263be-67f2-4e52-9dde-2c7f3cdeefd4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816494d3-8568-4880-92da-afa5a55c1d68", "sighting_of_ref": "indicator--af7263be-67f2-4e52-9dde-2c7f3cdeefd4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d09fe3-a56e-44fc-96a4-f178edc43cb9", "sighting_of_ref": "indicator--9df099b0-d191-4bf1-ade4-4c30ed588559", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b8139f-17e0-47bc-848c-fa3dfc2bc932", "sighting_of_ref": "indicator--fe30e70e-b525-4a8c-9ad0-68f882577207", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3350fdb8-fa81-40c4-af8f-2c730cb8abf9", "sighting_of_ref": "indicator--fe30e70e-b525-4a8c-9ad0-68f882577207", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b2be84-d328-4649-ba09-a292140aaa04", "sighting_of_ref": "indicator--fe30e70e-b525-4a8c-9ad0-68f882577207", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369969e6-1e8c-4770-828a-6f16c7c247d4", "sighting_of_ref": "indicator--7fa1dc55-75b2-4773-bcd8-f63c1b1b55f3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cff2a8c-cd7c-4b14-ad20-4b89caa06089", "sighting_of_ref": "indicator--fb3f30b2-7423-4c8b-b890-a460f603c4eb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86083ab5-e817-4958-b804-ae9cac811e8f", "sighting_of_ref": "indicator--fb3f30b2-7423-4c8b-b890-a460f603c4eb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1423a69b-d505-4573-9e49-4c401984475f", "sighting_of_ref": "indicator--3ba70a31-e541-487a-8212-ccaf9febb96b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5ae163-e7b6-4810-ae36-9dd28e53aba0", "sighting_of_ref": "indicator--3ba70a31-e541-487a-8212-ccaf9febb96b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40dae730-0af6-40a6-9c8a-cee6599b85b6", "sighting_of_ref": "indicator--2757ea1e-e5c2-4600-96ef-15e1ef6bb916", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e45fe4e-8f9e-4d23-8c9a-e744b92eff69", "sighting_of_ref": "indicator--4263987b-df67-4792-aeff-177e65d7a490", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae31a66a-67d1-45c6-b3f9-3f4f295cadf1", "sighting_of_ref": "indicator--f687304c-370b-4158-bb34-d865f969ca98", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1b88e5-dd27-4036-92dd-f2c20c3d0b8a", "sighting_of_ref": "indicator--44d7dfd6-2676-4f70-b4ef-1ce37e2d216d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9782bbd-34f4-419d-a17a-a7a6ada081b4", "sighting_of_ref": "indicator--d8046647-9df4-478a-9160-8e8b2081cfe1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108de711-db54-4bdd-bbc3-2a99c1c8bbe4", "sighting_of_ref": "indicator--fdc87169-2cb2-40e2-a0d8-5f41be7b3ecd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6423a9-b53e-40c1-bb76-5f472df0887c", "sighting_of_ref": "indicator--61666116-c116-40cf-b1f4-da673d8e65f6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929a9b17-3f24-4a94-be66-fa5851bbd68c", "sighting_of_ref": "indicator--61666116-c116-40cf-b1f4-da673d8e65f6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06436fc8-0398-44cc-85d5-ed575eae79cf", "sighting_of_ref": "indicator--42c06cd4-a01b-407e-8ac6-25e321905200", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec3ce8d-fbdd-48a7-9801-017381ed8c96", "sighting_of_ref": "indicator--8c7e288f-0db5-4905-b5b2-9dfc2dbbc580", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca72d3e-38f4-4456-9ed0-9e9b97b46c81", "sighting_of_ref": "indicator--e8422780-795b-40f8-8c85-05c63890f4f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c7788a-a31c-4f8c-8c7e-d3fd630a4ad7", "sighting_of_ref": "indicator--fed360bb-06d8-42b9-b770-73d7e0396cc2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569d79f9-2c2e-41e2-aa02-fd48d17ce68d", "sighting_of_ref": "indicator--79a07faf-c467-4451-a4fe-c1b1b8de7df8", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb4f1e6-6c30-449d-babe-b373f7ea75bb", "sighting_of_ref": "indicator--675fe07e-29d3-47e5-b107-15995a7b68a6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9483920-b117-46bc-8a77-c0a6e502da0d", "sighting_of_ref": "indicator--f197d0d2-6778-4a03-b32e-8cf2b28f1420", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7254a4-f1c6-496b-b86e-01949292b54a", "sighting_of_ref": "indicator--246e21b8-4bfd-4c00-ac9a-679b0632cb1a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afeba08-5d4c-4246-978d-e17856c8f46d", "sighting_of_ref": "indicator--d9410989-4c28-42c0-b76e-3351d40457be", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5f96a4-2f8c-4a74-878f-25c18ca6f091", "sighting_of_ref": "indicator--08aa27d4-95f7-4fdc-9350-0c27240c4d47", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8022aba9-32d7-4646-810d-0a98c9402f61", "sighting_of_ref": "indicator--c6046a14-0627-4ab4-9887-451613f001bc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84f5d37-0229-4af7-a8b5-83f0aa0a1e08", "sighting_of_ref": "indicator--c4ae053e-5995-4f70-8d4e-08dfd58f7885", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad617ba-8957-4fb8-a9ee-6976e863092b", "sighting_of_ref": "indicator--233e25a4-8747-4837-9aac-bccefc85a37d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcee0d62-cd45-45c2-ae50-f8b90f76003d", "sighting_of_ref": "indicator--6ff5acd2-9cf2-479b-bceb-f3c5a049bc66", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77eb3380-0842-4a9e-b5eb-f6404fa03254", "sighting_of_ref": "indicator--6ff5acd2-9cf2-479b-bceb-f3c5a049bc66", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a8f85d-752d-4186-a3b4-02d81108186f", "sighting_of_ref": "indicator--8633e443-0d79-4200-8162-01e0ea711594", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4546e8-e074-421c-8f7f-81bc9f997e85", "sighting_of_ref": "indicator--df87f1a2-5547-483c-b5eb-e833a5dfd2bc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5926d2-6c3a-4de0-ab01-4b6c923caa3a", "sighting_of_ref": "indicator--efa90d8c-5c12-42db-8491-17606dac68ac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7c917d-8bfa-4565-b1b7-97758eebff7c", "sighting_of_ref": "indicator--f1e70fd6-9d95-4402-ae0f-254f61c3113c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabb581a-390c-4656-b81a-b6962e94651a", "sighting_of_ref": "indicator--5c8a4447-d9d7-41a4-9299-cbae67a5ff6f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef117af9-9be1-4323-908c-72910e49cf1e", "sighting_of_ref": "indicator--47cf7948-d474-4639-a29a-48c26f746df8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9480b0da-1d82-497d-a4e4-b05b54437a06", "sighting_of_ref": "indicator--00b3fdaf-b936-45e3-8a99-b28a843a2a72", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b119f181-4bdd-407a-af7f-a0cc7f621e09", "sighting_of_ref": "indicator--d49d15e8-b16c-40d6-8f13-a1486dc91c5a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff954069-163e-44ea-8749-9872d17bc86a", "sighting_of_ref": "indicator--e3d0385c-87e9-4676-8d01-f94559380cbe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48388a7c-3e89-4910-aacf-aabd291e4590", "sighting_of_ref": "indicator--e3d0385c-87e9-4676-8d01-f94559380cbe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc023aa-52a5-4a65-b582-e5efa1d95a13", "sighting_of_ref": "indicator--4618d23f-a5fd-4101-88f0-601f05f9c5ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6653c46c-8194-4e00-912f-71107527a07d", "sighting_of_ref": "indicator--6383c43d-8c27-48d0-bfa5-a0a2b89bd895", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee18c25-95a0-4d9f-aae7-179ef879aa77", "sighting_of_ref": "indicator--e003105f-8a16-4887-84d4-c6bf75020c54", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3bcf70b-a97f-413f-a163-6d206f99d28a", "sighting_of_ref": "indicator--0d81600d-4f4b-485b-9433-e1ca61123c47", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1c3758-ee4d-44d3-a168-25c8d8f7346c", "sighting_of_ref": "indicator--b7dbb142-5e36-4285-9c23-c73690012db6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0834e184-18b4-4ced-8501-b939ff68dc68", "sighting_of_ref": "indicator--b7dbb142-5e36-4285-9c23-c73690012db6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63968908-a92b-4d60-a36d-daa5fb85f7f8", "sighting_of_ref": "indicator--b7dbb142-5e36-4285-9c23-c73690012db6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff914f3-297e-40da-9c44-3c574ce3f290", "sighting_of_ref": "indicator--269c4dfa-5def-44c0-b0ab-9fcfb86a35e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610eb0e5-b9d5-4dfe-8296-7284adc2f7a1", "sighting_of_ref": "indicator--18e7b09f-e262-49e4-aab3-4f830f26bcb4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be3f703-7cad-400e-8d1d-36c290247f4b", "sighting_of_ref": "indicator--18e7b09f-e262-49e4-aab3-4f830f26bcb4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfacd30-5e7c-4bd7-bc35-71450edfe4fe", "sighting_of_ref": "indicator--18e7b09f-e262-49e4-aab3-4f830f26bcb4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ee0395-9d48-4dab-9262-af085954babf", "sighting_of_ref": "indicator--88cf2147-89ed-412d-b241-294014d72351", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c81878-803b-45c4-851d-fd647ca40e0d", "sighting_of_ref": "indicator--5cd0c277-9ea8-4cd7-be9a-17213da20758", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e67205e-3b78-4b95-af5b-900faa7bd3c6", "sighting_of_ref": "indicator--c9c9f8bb-c2eb-4c33-aa36-95ed6205bf8b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa072bf-f4f4-47bb-9c31-46d0d1d2573e", "sighting_of_ref": "indicator--c923522d-a66d-4ab6-9a22-69dd3e87e800", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348610ab-3cba-4ddd-9576-31802ea2a908", "sighting_of_ref": "indicator--a8308d87-805a-451c-9b74-f982e8978cf9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e279de-9088-4f9b-823c-03471135bd2e", "sighting_of_ref": "indicator--2cdd5448-52b3-4ab3-b9db-b9941e5ca693", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e128c9c-576e-41ec-bbfe-6b5a7615d8a1", "sighting_of_ref": "indicator--330962f4-394f-45d9-a564-2eaed7d6b011", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495d7edb-0e2a-4009-83df-4d9b98c306c8", "sighting_of_ref": "indicator--d7fd4fa1-462a-4b06-bd6c-181594c3fd8a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b06955-c372-4438-bb06-e15794f58524", "sighting_of_ref": "indicator--af2468ef-aec4-4ad4-8e0f-e4195f8b4c55", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ef6850-d1d0-4834-9c3f-d28bbeab3a15", "sighting_of_ref": "indicator--163404b2-6335-4b80-9f49-5e7c275026b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab8ca80-2b2f-4693-ab39-fa2091b9e42f", "sighting_of_ref": "indicator--18478602-8ac9-4a29-ba77-08978db8678d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e76638-8f9a-49dd-9c91-1d52d87aefc4", "sighting_of_ref": "indicator--3fd88c8f-5ced-4f3e-9cf5-bd8ba7e4a2ca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05d97a7-c4fd-4134-ac4a-4d2356bd5377", "sighting_of_ref": "indicator--27d627c3-58c2-4144-ae1b-32635afb9185", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1867c2-227e-4dac-b2a3-815a40122247", "sighting_of_ref": "indicator--666c9ba7-78ec-49a3-b0d2-e8cd1ed2b491", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af67f8c-1a01-4919-a108-e88d01ef49c1", "sighting_of_ref": "indicator--666c9ba7-78ec-49a3-b0d2-e8cd1ed2b491", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60852939-cb98-400e-abfd-8a8cee17cef6", "sighting_of_ref": "indicator--666c9ba7-78ec-49a3-b0d2-e8cd1ed2b491", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28039ac4-c802-4b7e-8de4-f29ca188368e", "sighting_of_ref": "indicator--5f776be6-8ee3-4097-a038-591c0d6c1199", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2920fa7f-acf4-400b-a519-daa667ddddf7", "sighting_of_ref": "indicator--5f776be6-8ee3-4097-a038-591c0d6c1199", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179799aa-6215-4c31-bd28-e8d1c99a9f12", "sighting_of_ref": "indicator--5f776be6-8ee3-4097-a038-591c0d6c1199", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426d9d0c-5532-45eb-9f12-f8b7a869a481", "sighting_of_ref": "indicator--4529e385-b12b-4d2e-acbe-8657b7a67143", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2862f804-d370-4a67-aa24-8a5d74c6ae32", "sighting_of_ref": "indicator--4529e385-b12b-4d2e-acbe-8657b7a67143", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df8b94e-9766-4250-b1d7-a7f7b4cc5845", "sighting_of_ref": "indicator--4529e385-b12b-4d2e-acbe-8657b7a67143", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c88c035-0e75-4330-9931-7ba9aecd5e3a", "sighting_of_ref": "indicator--27f39b35-27e6-4796-8459-69610cd2eb72", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73235fcb-7084-4db5-9e47-39ca2ea5e50e", "sighting_of_ref": "indicator--28cbf861-902f-4700-ad96-6519f780832b", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976a90db-df40-4e0c-b625-a701a1de1fe5", "sighting_of_ref": "indicator--9666edc1-930c-471d-9951-6d8925d336d2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f79136-77b7-4b9f-818a-326bc4b2f961", "sighting_of_ref": "indicator--f8f344f6-4796-4fcb-aea7-a4c5cf1c8b29", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c4df4b-e7a3-476b-8c49-24ede395fb4c", "sighting_of_ref": "indicator--22af99ab-ac2f-4eb0-9f7e-ec3ba438a4ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7269e852-717d-48fd-9bd5-a0e805e5f44e", "sighting_of_ref": "indicator--af080a04-b7dd-43d8-b015-5fa418aee715", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca395a6-5fc3-4ea0-9a01-d0822f01e923", "sighting_of_ref": "indicator--d943774c-aa49-4581-b9c5-e8232be6cb18", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4eca8fc-2d2f-4365-b972-48f91c8ceb28", "sighting_of_ref": "indicator--d30f8f8e-80b1-4375-af80-372efa17d736", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62ce79e-b0ed-4637-a4b2-d6dd632f471c", "sighting_of_ref": "indicator--3a68f81b-4327-4dab-8f2c-f4f7d8c28767", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2419f6-560f-4f23-9f28-3adf8096e714", "sighting_of_ref": "indicator--75499260-9cc3-42ca-97d4-814239cf31fa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56df0a17-6bf2-4cb3-99d2-1c0045e63f40", "sighting_of_ref": "indicator--b424232a-4124-400a-a740-b5536740354c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04012dc-b969-45a1-8f68-c6fc8c609d32", "sighting_of_ref": "indicator--b424232a-4124-400a-a740-b5536740354c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c31bd39-ac5c-45fb-9d5e-33b5e92d26a6", "sighting_of_ref": "indicator--007c63a8-49de-4a52-9210-4ce5ce3ab445", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d450fc2d-85d8-4f1a-9263-68267455fe24", "sighting_of_ref": "indicator--3b4b0d68-0d17-4e7c-aff6-92c7dd152406", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388bc2d7-aad5-4d12-b0dd-3fafc3e3a86b", "sighting_of_ref": "indicator--cd6f0165-f7ce-42af-84f6-75d7a6ca888d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41a53ba-4f2e-4a29-a724-316788ac8596", "sighting_of_ref": "indicator--ee0bc2ec-d3b4-4572-8912-b45eb48ac28a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f0b29d-ec22-4e41-8feb-2c5c393921ba", "sighting_of_ref": "indicator--2153d76f-bf89-4ebf-9cf8-b140d1b1a095", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7322c0c4-2152-4add-aaf9-72d091ec6472", "sighting_of_ref": "indicator--2153d76f-bf89-4ebf-9cf8-b140d1b1a095", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca63a31-5a60-40ed-af1e-759425cade92", "sighting_of_ref": "indicator--0faf8c1d-a7ce-45f4-b169-bd992ddf574a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0d7a30-4485-4646-a07d-a3cb392ed561", "sighting_of_ref": "indicator--7ba44bd1-b572-41d5-b176-ebbf7690dfba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7278318-6ccc-4d79-ad9a-c81ebcdfbe1a", "sighting_of_ref": "indicator--9a0cfac3-18f8-41dc-9c32-2c4bc9a652b4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9eecf72-ddb9-4ad9-bfdf-f396569a4ef1", "sighting_of_ref": "indicator--84bb4e0c-c832-4001-bd37-51606e8bc3a5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9901ece6-33c4-4c0b-b084-3399236eca05", "sighting_of_ref": "indicator--5496d0a6-78f3-422a-9495-6889af98b274", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1f3d07-1e9e-4764-94ec-d44142298f2f", "sighting_of_ref": "indicator--39a34155-7289-4ffd-a568-0325d799b922", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc87a82-4f09-4787-a0ea-63b1ca60ae44", "sighting_of_ref": "indicator--a7a42fc4-5a81-4a7d-b4b6-c9cad761b543", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82782934-7733-450d-ab24-f25aed5cde79", "sighting_of_ref": "indicator--f1f13c38-1118-4645-a618-ff25f602e592", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db629903-2b14-4400-98c7-a1cf72ecb7e2", "sighting_of_ref": "indicator--9ef4abda-9a00-485a-aa3d-11fcfce33ff6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c928f6ad-df61-47e5-84b4-cbc0e81c8887", "sighting_of_ref": "indicator--82f1d9b6-42e8-43ae-9491-dd9e7636f3c9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f6555e-f780-4031-9821-30e9fb53194d", "sighting_of_ref": "indicator--f8e3610a-194c-4539-b649-a4aebbbf4c00", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d2cdb7-6cb0-4916-a1a5-815e61882b04", "sighting_of_ref": "indicator--0037d99b-c0de-4da2-aaec-1fbf585824c2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605613d1-f618-4097-ae2c-1dfec8c0f0d3", "sighting_of_ref": "indicator--3df2bb8c-53a3-4a21-950d-46a8573e7201", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95eb56f6-d440-417a-b643-34bd321cacb1", "sighting_of_ref": "indicator--3df2bb8c-53a3-4a21-950d-46a8573e7201", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bad041-fa27-4ccc-a947-b9211245452a", "sighting_of_ref": "indicator--70189a6c-01be-43f4-b888-d1ca8e8688c6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b34459-9af1-40fd-8602-d8bb5ec816b6", "sighting_of_ref": "indicator--2e8fd8ad-3d87-4f90-979f-f7f040c6476f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d70ed1-5066-48e6-b516-61e58ff15623", "sighting_of_ref": "indicator--2e8fd8ad-3d87-4f90-979f-f7f040c6476f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dffcb8d-5c0c-4a3f-b6be-ef40f881c86f", "sighting_of_ref": "indicator--64e486f4-4ce2-4e5c-94e4-8f9c312ae698", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b057ed-f31c-437b-86d1-b9d07d1dded9", "sighting_of_ref": "indicator--79558d31-d672-41e3-a360-f4cd9ccccaae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9496bf07-da1e-4b29-b6a6-02d1b513deb1", "sighting_of_ref": "indicator--210c7114-1650-4c04-a52a-804570c15c09", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb995ff-3cf3-4156-ad03-b09c4b5ddbc3", "sighting_of_ref": "indicator--e0211c01-8894-4493-9d4d-376774cc88f8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8d88f3-15ff-45cc-b4d2-f326d4fe501a", "sighting_of_ref": "indicator--e0211c01-8894-4493-9d4d-376774cc88f8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9021363a-130c-4235-ab08-bb7365267d15", "sighting_of_ref": "indicator--fd9721d8-b07b-4d35-a063-5f16b8761deb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4bfdec2-d0d7-442a-b77b-c6fec507cf20", "sighting_of_ref": "indicator--5423ff45-66f9-444a-bd2a-2bb5faddc6dc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4476b859-9741-4705-906c-5335c88b8615", "sighting_of_ref": "indicator--20907606-7903-470d-a389-19b046270e87", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac971d32-eb69-4853-b68f-f71cb042ae5d", "sighting_of_ref": "indicator--41d80549-23e5-411a-8a97-c439f3b4d08e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9c4eae-3b02-439d-a35b-a19c476ca535", "sighting_of_ref": "indicator--c1a55d14-42e0-438e-b13e-faeb75665cbf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e475b6bc-41f8-481e-b48e-4706847595f5", "sighting_of_ref": "indicator--d7f78d02-f837-4fc9-af3a-1b5bba32f1db", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af48ea31-1420-4206-ad84-a572320d5901", "sighting_of_ref": "indicator--d7f78d02-f837-4fc9-af3a-1b5bba32f1db", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf8ce1e-f883-4348-9955-78de7dcf0aad", "sighting_of_ref": "indicator--7cf19c3d-7e9f-44cd-baca-0149bc457597", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a5f4db-d690-4d7b-ba24-e97a22375a1d", "sighting_of_ref": "indicator--d86b20f9-39c6-411d-a53e-dbc9da854806", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acfa56b-f5c6-42bf-a21d-15333cc34ab0", "sighting_of_ref": "indicator--813e5f34-4ce5-41ec-9eb0-ddf62e385292", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba8402e-3574-46f0-9964-443bb7c2eae9", "sighting_of_ref": "indicator--813e5f34-4ce5-41ec-9eb0-ddf62e385292", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d471d51-367f-41f4-b242-e46cf1c1d163", "sighting_of_ref": "indicator--86ac225d-76ce-4e93-8640-1d36ecf55c98", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6377940-2ead-4ded-bbd1-9b5000f7419b", "sighting_of_ref": "indicator--861fc848-bfc2-4d2a-bdb2-56749bc25e0f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31edc11-506f-4021-aa60-614874fb5b75", "sighting_of_ref": "indicator--1fa57bc5-fece-46da-b3f0-535ab12974af", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed917e8e-1111-4979-88b0-9f26ba757dbc", "sighting_of_ref": "indicator--e519abe6-c4f2-4949-a9e0-5565378f1cf7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a75048-a845-4617-9c1b-3887430c3a62", "sighting_of_ref": "indicator--94df03e7-cf04-42e3-89a0-603f9eafa76a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95949070-c081-4100-bf2c-a0b6a6c3b32c", "sighting_of_ref": "indicator--af1a3c51-54c9-4591-b64c-274e269998e6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981f45a2-8b5b-47bd-8737-633713fcd9b2", "sighting_of_ref": "indicator--04585dc1-d1bf-48e4-b2f6-cae127e80cd0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dde0607-d2da-4815-9d85-9cdc7bc1609a", "sighting_of_ref": "indicator--11726d69-d06d-43a1-a555-69536fc49dc8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5dd459-a499-424a-b768-51348eea2f32", "sighting_of_ref": "indicator--fe716ce1-0bab-46eb-934c-74ac01d01b40", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a9762a-341e-48df-b614-e0290fd264ab", "sighting_of_ref": "indicator--34b02fe1-679d-44ee-a6fd-848a785a3bb1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc911b4-450d-4500-b19b-d3079f6037d9", "sighting_of_ref": "indicator--086db9d5-3024-4a05-b613-c81b9d5764df", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f09a81-ef10-4d9d-b1d6-ac87f417f409", "sighting_of_ref": "indicator--086db9d5-3024-4a05-b613-c81b9d5764df", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06ac2c3-02a3-4b95-a262-35cfe9c17f8f", "sighting_of_ref": "indicator--87bf5261-4ba7-4387-ab17-f7a819d35a62", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9a3c99-014e-457e-9be2-6d7258b93e82", "sighting_of_ref": "indicator--87bf5261-4ba7-4387-ab17-f7a819d35a62", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f87347e-46a9-4040-b9dc-c5d09d0787fc", "sighting_of_ref": "indicator--bbe54940-c810-417f-bc8b-6c8fc3e81357", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be6a719-337f-48d7-8a1e-705058706a75", "sighting_of_ref": "indicator--073493ed-2ac3-4eae-ae03-966934c176dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef9ed69-7d02-4ae2-ac44-29c3ea9529b5", "sighting_of_ref": "indicator--073493ed-2ac3-4eae-ae03-966934c176dc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54f0f6b-8a41-4b8e-81b5-ca55a5e65607", "sighting_of_ref": "indicator--d901007e-564f-42ab-8c71-08ac9c255964", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5339a1f8-6b2b-4c4d-8511-2d24d0f722ee", "sighting_of_ref": "indicator--177f59ba-ff54-4b64-9196-97c22671f5b8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c874c1-c039-4940-8e1c-22767c4876df", "sighting_of_ref": "indicator--177f59ba-ff54-4b64-9196-97c22671f5b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391ee0b0-eba1-4d8d-8cb9-2da148795713", "sighting_of_ref": "indicator--bd6c1549-1b59-435b-aa13-c26897b9bd20", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f735f1-363e-4315-a7a6-b4d5e5735eb0", "sighting_of_ref": "indicator--c537d87d-bddc-4a23-9c63-84648e1f793f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b13a13-d361-4474-aa0d-8677badec3f7", "sighting_of_ref": "indicator--3b613aae-8957-40c1-98c8-396e679bc19b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a829c28c-554b-41f4-a158-fb8ff4e9f0de", "sighting_of_ref": "indicator--f25fe90d-bd69-4f0c-a9a0-c82fd8708ec0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fff5db0-548f-415d-aa03-5752f5c3efaa", "sighting_of_ref": "indicator--79266d3d-96f5-4fc8-9a69-18e9dc26aa85", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2058cac-cc09-4576-926f-6df42a52ca34", "sighting_of_ref": "indicator--ae1df018-67aa-4cfb-b61b-a0ab592fae81", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14f1645-40f8-43fc-9598-7265a9fac330", "sighting_of_ref": "indicator--91eab096-a936-4edd-ab94-c2fdc72e8c0c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbd89af-8919-429e-88d3-3c3d49f3b330", "sighting_of_ref": "indicator--a0c789c4-5110-46a5-935f-bb3031b3306f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46475ad7-5f2f-48e8-9b19-bb79c23c2a78", "sighting_of_ref": "indicator--00c037b7-905e-4e67-9f8a-a388c2fcd2c3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b8aea2-e00c-4a42-9f0c-8daf95089448", "sighting_of_ref": "indicator--f1706a98-6e71-43d0-85fa-2b807cb278bd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b06035-42eb-4807-ba08-ae2f1cbdb2d9", "sighting_of_ref": "indicator--7e2d30be-975d-4edf-8e46-0ed6dee00a3a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f928ee3e-b30c-4f01-8416-476235dd68a6", "sighting_of_ref": "indicator--968ca341-ba49-4979-b990-37fd12585680", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ec6899-dd3a-43dc-99e5-81b7fd448c8d", "sighting_of_ref": "indicator--dabf82cd-dbf3-4190-8506-86ac1feb19be", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24c5afa-fefb-464a-bc31-a8edca72422e", "sighting_of_ref": "indicator--97d29546-b7ad-42a5-9695-42775909ad8c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07f2c77-97b9-4cd3-a89e-735fd6d4a514", "sighting_of_ref": "indicator--f4e38371-24df-4bb9-a637-2c9efc4e357b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4135627b-6fc7-4af1-9214-8b3d8210be0b", "sighting_of_ref": "indicator--fb9406cf-d1b6-42cf-b047-f21a9b538e16", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba8bec2-1d5a-41d8-806e-045421a38ff1", "sighting_of_ref": "indicator--02598c60-3abf-4b9f-80a4-08c136fd26cc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4b124f-14b3-48f9-ae8c-7e2de085f0cb", "sighting_of_ref": "indicator--900a0c0f-54e9-4d6b-bde0-3867292699f4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b486d161-b996-4844-aa45-9f9bfbcfd669", "sighting_of_ref": "indicator--6bdf40dc-5183-4c29-9471-169767aac638", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ac914b-74d8-4e32-9030-cf1becf0482a", "sighting_of_ref": "indicator--6f31e0ab-8c41-4fdb-84f0-77bbcdd326ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b49a036-3d31-438f-8d4c-37ceafc94f5b", "sighting_of_ref": "indicator--ad8fe746-9879-4f24-a812-5e69b05949f6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccce7925-7c43-4d09-8b09-3ceb6954da71", "sighting_of_ref": "indicator--4c57d49a-4e32-461f-b9e8-93b479277ff2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e73a5d8-9987-4000-bcd9-f4949c517350", "sighting_of_ref": "indicator--39cbc9e4-9d9b-44e1-b26d-c75c75e163e1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388d3158-019b-42f6-a547-c500f28afb9b", "sighting_of_ref": "indicator--21dcb0ea-7eb8-49af-9e2c-b360410029ad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2a42a2-712a-4d22-a705-085db4ac4820", "sighting_of_ref": "indicator--6f6b1b53-313f-4295-8089-f3e4a25e3e4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8043bc-ef10-4bf1-824b-2b8dcce12b49", "sighting_of_ref": "indicator--2b82d2d0-b1a6-48d6-9665-0acfd5566067", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d090f2-2efa-4834-a45b-53b3754cf703", "sighting_of_ref": "indicator--e41bfde3-ca14-478f-a4b1-1d3cebd2c147", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c868a335-e5f5-4de3-a5e3-3793962cf894", "sighting_of_ref": "indicator--b7672250-ca59-44b9-9a8e-216ce95be1b3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559bbb26-a71c-45e5-9245-2374dc816917", "sighting_of_ref": "indicator--7e6fbeba-7ad8-48a4-88e0-0365e7734da0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6dcf116-c0e4-40ce-a0ba-e66686154869", "sighting_of_ref": "indicator--25f662cb-b61d-4a2f-9cbe-bf3dde6d7126", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5e8840-9e91-487c-970f-76ce64e2a6b7", "sighting_of_ref": "indicator--9d708304-44ce-428e-b024-3de00c322e5f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79e2eba-6156-4f53-85cc-6cb54a176812", "sighting_of_ref": "indicator--9d708304-44ce-428e-b024-3de00c322e5f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c09bfae-c3fc-4899-91e3-f2c6095f64d8", "sighting_of_ref": "indicator--8d63751b-1d16-426e-9f48-cb0efcb5ff02", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fede196-ed59-4326-8236-7696ea4a48da", "sighting_of_ref": "indicator--8d63751b-1d16-426e-9f48-cb0efcb5ff02", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4321df3-b5d0-4be6-8c57-b3fe94b0d655", "sighting_of_ref": "indicator--8d63751b-1d16-426e-9f48-cb0efcb5ff02", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041f0b40-3b33-41c7-94a3-d7af3644071c", "sighting_of_ref": "indicator--747f093d-74ec-4668-bab3-a5e9da7cf1ed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70727c9-aa71-44bc-867c-4fddc326b0c6", "sighting_of_ref": "indicator--5a5dcf8f-65de-4efe-8569-8c1ccf514ea9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9f2559-ea9f-4392-b357-59bee7b33f39", "sighting_of_ref": "indicator--d1151735-d889-417b-bc5f-9961fbf16a8f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34030fc3-7449-4602-89e8-ec4a92bfdbe7", "sighting_of_ref": "indicator--6ef52f46-3806-4dcf-a1b0-db205bd54f8c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e69a97e-c836-4ff3-a612-a3beab48d29f", "sighting_of_ref": "indicator--b283e3f5-33c2-435c-a625-0bb20fc518b0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261aa0e6-6bb4-4675-bd97-f3848d71708e", "sighting_of_ref": "indicator--1f4065f8-e306-47e6-881e-3e23055ea5a7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef42558-97a8-42b4-8eb8-cda702c57779", "sighting_of_ref": "indicator--0c4f7e3b-92e6-4201-ba55-49aa93e88103", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6b5c28-d5e9-4801-9a08-4a62e305d31f", "sighting_of_ref": "indicator--0c4f7e3b-92e6-4201-ba55-49aa93e88103", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc7ae4e-d936-4c0f-9289-28bbf85ff6ca", "sighting_of_ref": "indicator--0c4f7e3b-92e6-4201-ba55-49aa93e88103", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ee1cdf-384b-4a58-8208-a3e28024fb95", "sighting_of_ref": "indicator--c5b4aff5-21c6-4491-aa70-f5ac508ac740", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42edc51-71de-4d2b-aa0b-84bf340c0761", "sighting_of_ref": "indicator--70f90cdd-e6ba-4f28-af85-1b3ac3822d1d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f022205-8b5a-4b3d-896e-2c48afcb00c6", "sighting_of_ref": "indicator--febbb2cc-2326-49c7-8a69-5713a7be73cc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fa35d0-c8fd-4c7e-951b-0be22ecb2a73", "sighting_of_ref": "indicator--86583dfa-ac09-471f-8742-00c1716745a8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faee8e78-52c0-495b-a84c-e5182838e365", "sighting_of_ref": "indicator--d3c125e4-c7d4-485a-a870-b5be5f63120f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4843a8-f5a0-42e0-994b-d7f9e88b4e0c", "sighting_of_ref": "indicator--e7d465e9-b3e5-4023-acfc-c9fd45fdb7e0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439c8789-d41b-42ab-a4ad-5c5bab05cec9", "sighting_of_ref": "indicator--c6bee0e3-1a7f-4c9e-99d2-43ccbc53e4ae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f94884-b252-433b-b2e5-bd38caf5c65e", "sighting_of_ref": "indicator--c6bee0e3-1a7f-4c9e-99d2-43ccbc53e4ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b700b73e-58f3-4385-bcf1-4a067cd5241e", "sighting_of_ref": "indicator--c6bee0e3-1a7f-4c9e-99d2-43ccbc53e4ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0977d01c-9699-45fb-89f0-5221c8289326", "sighting_of_ref": "indicator--9196f0d1-0e41-44f0-a9ed-f55ca8a30d65", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8308be2f-9454-4076-908f-658d0881e83d", "sighting_of_ref": "indicator--9196f0d1-0e41-44f0-a9ed-f55ca8a30d65", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0d1f1d-ae07-4824-b578-24ff2929fc37", "sighting_of_ref": "indicator--9196f0d1-0e41-44f0-a9ed-f55ca8a30d65", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f33305a-ac7c-4a47-9b4e-7f0099b60bcb", "sighting_of_ref": "indicator--7cf965ad-7261-4903-896d-c21706c33626", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017c4347-b37f-41b4-96f3-6fae4b3c9f53", "sighting_of_ref": "indicator--7cf965ad-7261-4903-896d-c21706c33626", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a5f079-96b7-4870-887f-c94bb343c314", "sighting_of_ref": "indicator--7cf965ad-7261-4903-896d-c21706c33626", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c07fbe-f492-4068-8274-9ed3c4356872", "sighting_of_ref": "indicator--abeca387-7d76-4bff-b21f-51f3f337edfe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc72471-bdb8-4dea-ae52-6e573c999f74", "sighting_of_ref": "indicator--69827e25-76b9-47de-8324-9b76a627ef9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309e9c83-9b1f-43dc-b8ba-6957b7533f83", "sighting_of_ref": "indicator--507ba5cb-5fee-4206-88d6-c1809b7a935e", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2e8016-94bc-4f7b-9c25-2e9685e1dc32", "sighting_of_ref": "indicator--7418ae2c-ee5f-4860-8382-82d9a25922a8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ac8cdd-e187-41dc-8dba-0938c94bba49", "sighting_of_ref": "indicator--03192e92-412c-457d-a458-734283b7da7d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e931705-edda-43b1-9a0d-f4ccacedee15", "sighting_of_ref": "indicator--88edce0e-f9a3-4868-8747-23d37459d318", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e368f0-f28c-43cf-b899-848ebb611d03", "sighting_of_ref": "indicator--c0830607-05a3-44ff-99cc-d1dbb4c1a06f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5675b7-1a8e-44da-8566-e132a5ba4866", "sighting_of_ref": "indicator--21533f2c-cfc9-4be1-9705-4fbfa70cd85b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f491ce-5a1d-4764-b794-4a414cd3f151", "sighting_of_ref": "indicator--23d214b1-ff05-4030-822e-0da8c8bf4e99", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3c530e-4719-4cda-929f-85037d0170e6", "sighting_of_ref": "indicator--23d214b1-ff05-4030-822e-0da8c8bf4e99", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8513bd1-0fda-4006-9cf1-8f8047a56b37", "sighting_of_ref": "indicator--23d214b1-ff05-4030-822e-0da8c8bf4e99", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e0f9ae-9e9b-43b3-bc67-75baf6a67e9a", "sighting_of_ref": "indicator--193c929f-0f26-4800-b543-8aa217e93187", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dadee4e-aa9e-48ad-aaff-d0ba8bf7d52a", "sighting_of_ref": "indicator--5640be92-ab62-41d8-9f35-643e4396d586", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a77b0a-c632-4512-8bba-9a1c964f4699", "sighting_of_ref": "indicator--9caed8eb-402f-4ef2-b6cb-98d4b9848293", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b898510-38c4-49eb-a9a6-af7c1a43a4df", "sighting_of_ref": "indicator--40b90ee2-46a7-4331-97c1-cfc3ea45a6ad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433575a0-3cb1-4a42-b95d-749a0d2be849", "sighting_of_ref": "indicator--40b90ee2-46a7-4331-97c1-cfc3ea45a6ad", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f54d305-502d-40f2-9cfe-3e6fb01d96b4", "sighting_of_ref": "indicator--40b90ee2-46a7-4331-97c1-cfc3ea45a6ad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfbab1f-bcbe-4e65-be31-6539c326e4bb", "sighting_of_ref": "indicator--7d8888c6-c7b2-4c64-82ba-5cf4ab25c366", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a6d7d7-a73a-43ac-bcfb-494cdd778fd3", "sighting_of_ref": "indicator--7d8888c6-c7b2-4c64-82ba-5cf4ab25c366", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd0b6cc-84db-48f8-bf92-a954a16def04", "sighting_of_ref": "indicator--7d8888c6-c7b2-4c64-82ba-5cf4ab25c366", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dd8ed4-6364-47cf-b811-c97b36bb829f", "sighting_of_ref": "indicator--32cc4549-170b-48e5-b0a6-9435e17ea91d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e816eb-f0c4-4ad0-b3b6-be1bb98d9195", "sighting_of_ref": "indicator--32cc4549-170b-48e5-b0a6-9435e17ea91d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fc2b13-0771-4744-b0d6-ed0466498c96", "sighting_of_ref": "indicator--32cc4549-170b-48e5-b0a6-9435e17ea91d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9736121e-8804-4884-9813-794aa471d3b7", "sighting_of_ref": "indicator--acbae8fa-7c75-4016-a50e-0146b2f790b3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19359eb-3966-40df-aa5f-50c2d577f3b8", "sighting_of_ref": "indicator--acbae8fa-7c75-4016-a50e-0146b2f790b3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32ad417-251d-4027-b31c-885865ad5d58", "sighting_of_ref": "indicator--10b539d0-4b88-4ac7-9ebe-d044eaf5b7fa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6dedf4c-9f26-4ba8-9fb5-333dd333353c", "sighting_of_ref": "indicator--ee64efb6-48dd-4241-9871-cd4230687ba1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd07ce7e-d782-4311-ac32-918a28fa58a1", "sighting_of_ref": "indicator--2eff2b63-384d-4248-9530-41ff8b000851", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab00fc62-3b7b-4dcc-ab92-aa3ee7aef8a1", "sighting_of_ref": "indicator--c8d30388-6382-48b3-bc6c-26a884f0bf14", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a76aa9-4974-4751-9595-85421fb93b4b", "sighting_of_ref": "indicator--8b763e7f-55d2-4a0f-900d-5411003292d3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b42d0be-ec9e-4930-9b0f-5071d6319749", "sighting_of_ref": "indicator--124ed399-10e5-4f1b-b1e4-9448e67f599a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101d0ec2-3d8a-4b1c-ae4c-f6a7d4a18567", "sighting_of_ref": "indicator--124ed399-10e5-4f1b-b1e4-9448e67f599a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c8a696-5558-47d7-86e6-899ee8a229c1", "sighting_of_ref": "indicator--090858ad-b497-48a7-ae91-38377bc6149f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0707dd2a-ab64-496f-bfe0-ff7863ddd889", "sighting_of_ref": "indicator--2cce554b-0809-4911-892b-9c53bb33faf1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652d3cf5-bc76-4796-91e1-1a6b080b0b50", "sighting_of_ref": "indicator--bc02309f-041d-4b68-8b1d-f9a31c03126b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77884f06-8895-4e64-b795-df7c536cc5b0", "sighting_of_ref": "indicator--d0e28d49-02fb-41af-8d9a-470b9c0229f0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4850a10f-ebc9-43e3-a5c4-bc7b7f13e5a1", "sighting_of_ref": "indicator--e382c63e-a7dd-4f64-89f3-0a5d520fa4c4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79e06ae-e862-4390-ad50-b6dc6692e260", "sighting_of_ref": "indicator--0b5b41d9-4ab7-4483-868f-80f2f923b9af", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2371baf9-1b2c-4701-acbc-116284d87fba", "sighting_of_ref": "indicator--24003444-4d8e-42a7-82dc-50d400efaca4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae591af-1035-47a4-8087-ab93e868d225", "sighting_of_ref": "indicator--09951c21-3a30-476d-8212-0119a9afbe88", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048f1956-c97f-4f01-9ca1-2f42a1a0b8c8", "sighting_of_ref": "indicator--1e4e0a72-df9f-48d8-9ee8-1ca4b0c69748", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a616bc31-bfed-4eb0-b6b8-752b90ae1547", "sighting_of_ref": "indicator--02f196d2-0ff7-4643-becb-118895be63ba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e5c35f-0026-4335-bb9e-6fbcfb5ac2c5", "sighting_of_ref": "indicator--558a588e-3234-4509-a96c-18a41c9cf978", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e992d2f-5e21-4ccd-9639-d6c66c1e7d88", "sighting_of_ref": "indicator--9c407935-80b5-4ca5-a22d-f6b442b439a5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973b8d2c-0c26-48ac-b973-0b3816b4aa96", "sighting_of_ref": "indicator--43607fae-a1ec-4445-ac8b-732f1602ef14", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b12294f-8ac3-4e16-a802-1cd61949ef33", "sighting_of_ref": "indicator--43607fae-a1ec-4445-ac8b-732f1602ef14", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65fb57c-2255-499c-b355-c3c9f4a070a0", "sighting_of_ref": "indicator--4ed19e31-bf80-4eaa-b964-7bece2bb1ddb", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a50d83-0586-40e8-9071-f031390c5992", "sighting_of_ref": "indicator--53138c78-4cba-4854-a54f-9146161a9685", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b47a42-974a-4c9d-8164-fdc3eb526951", "sighting_of_ref": "indicator--b31a13b7-6bda-42e7-b3df-cbb971112bb0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cde71ca-2aef-40a0-8f40-21f28b0854b2", "sighting_of_ref": "indicator--b22ff16e-9ec1-4d1e-b608-5b3609ef189f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca70b8ad-e3ba-4ca3-b8ca-1f3f29f74147", "sighting_of_ref": "indicator--87f1aedd-b6a3-434e-9d4b-1ed097a39f05", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4c1003-a1cb-4573-85e4-4c47bfe61402", "sighting_of_ref": "indicator--8a2109e8-72ca-4b79-bade-c6603e6e0cb9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f8081a-1f50-439a-b1d5-c9a857a4d14a", "sighting_of_ref": "indicator--8a2109e8-72ca-4b79-bade-c6603e6e0cb9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d0fe6a-c374-4ca1-934d-de2a2c9ede43", "sighting_of_ref": "indicator--ba398cc2-d927-461c-b0ae-fa6b766ac0dd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ce89ff-4bc3-4505-b873-618de402118a", "sighting_of_ref": "indicator--ca7d7793-56f1-47be-90ab-b2a61b4afd73", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21292a7d-0e42-4dba-8a04-21e4ff91406f", "sighting_of_ref": "indicator--f4b2d0d7-1d2d-490a-aeac-c97cfcc56637", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf0c4b2-9da1-46ca-a756-ff0bb1ba65af", "sighting_of_ref": "indicator--3cc5f719-3938-483a-8398-990367fdb25e", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cca06b0-eb22-4b13-92d4-cdf8fe0905d1", "sighting_of_ref": "indicator--0da8078e-58a9-47ce-b903-9a14d5ab0628", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2842182-77e1-4be9-9e38-21d0982e8ffa", "sighting_of_ref": "indicator--f8834d49-8397-4684-a564-9e5bd9eb9639", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c47af0-8de7-4663-b7b9-8ef41c645435", "sighting_of_ref": "indicator--3d7937f0-7960-4fce-998b-41947d8be26e", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84a51dd-3e56-4e74-9b0b-6940e162a73f", "sighting_of_ref": "indicator--0ce4b826-c4a8-4df6-8a1f-b43be17b8c71", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e2d72e-fd35-479f-94c3-385db20a6443", "sighting_of_ref": "indicator--f2e3963f-04d5-45c2-bf15-2f9c2f398807", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da10fabf-e00d-4e79-9d64-89cfd7d3080f", "sighting_of_ref": "indicator--14fd5ebc-1adc-42bf-a7c4-b12b2fead496", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fec12bf-1d87-4858-83ec-13ad584ff87d", "sighting_of_ref": "indicator--acd1518e-036b-4d26-ae59-dc301c0006d8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e898a7c1-b0e9-481b-ac3f-d44e0f2ad6b0", "sighting_of_ref": "indicator--f497b42d-48f9-4cf5-b24c-ae60e8b80cbf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ca2fb1-5765-4a9d-b26c-5cf41cb5d8f9", "sighting_of_ref": "indicator--47fd23ec-4cae-49ff-a170-5893f921159a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8b09ec-29b7-497f-bff2-aa4a00831341", "sighting_of_ref": "indicator--40651a58-76fb-433e-9027-43d1fc4155eb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b22dff7-b895-40d8-a00e-f4d236573ccd", "sighting_of_ref": "indicator--e1769c1f-1a68-4243-af3b-694f30cf9bc0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6803bd46-5c01-44c8-bd9f-9c32ea1afe93", "sighting_of_ref": "indicator--e1769c1f-1a68-4243-af3b-694f30cf9bc0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520390c5-d977-4d40-8f4c-d026413ff97d", "sighting_of_ref": "indicator--e1769c1f-1a68-4243-af3b-694f30cf9bc0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f54b4ef-dd6e-41be-b167-d0d06d2578f0", "sighting_of_ref": "indicator--1316a342-eadf-4737-b6d1-38951da079d7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49168ad-f281-4534-b067-a361b63b3032", "sighting_of_ref": "indicator--1316a342-eadf-4737-b6d1-38951da079d7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63572830-80df-4460-a211-6f64ed34bce4", "sighting_of_ref": "indicator--b8ca28d0-ebf1-44ee-80d3-74c633fef1d8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85cd040-507f-48b4-b093-cc0302df703c", "sighting_of_ref": "indicator--b8ca28d0-ebf1-44ee-80d3-74c633fef1d8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef13059-fc63-404e-b1df-9ec142299644", "sighting_of_ref": "indicator--b8ca28d0-ebf1-44ee-80d3-74c633fef1d8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd5fbfe-d7ab-4da2-84aa-1388c83996ff", "sighting_of_ref": "indicator--37fda150-4101-4dd7-b871-ce857f89fcbb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba72b6db-8f63-4068-acf7-c0325899609f", "sighting_of_ref": "indicator--3cba2f1e-c119-4fd6-b05c-317b15969390", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64f1753-406f-497f-920b-92a8158c10cb", "sighting_of_ref": "indicator--e47407db-0f30-4a8d-a23d-1c80e6737bf0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ec420e-cec5-4bfe-a39d-7086e4d90bac", "sighting_of_ref": "indicator--96c7fdb3-8cdd-4a91-a40d-5643ea29e532", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92039f35-5b63-4fbf-8cd1-f5edeacfa100", "sighting_of_ref": "indicator--96709a63-ac4a-49c3-9863-289df8ae7b12", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbecb91-02d0-4f39-8e98-e4b3f58e9eb9", "sighting_of_ref": "indicator--96709a63-ac4a-49c3-9863-289df8ae7b12", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44c6ccf-0a7f-4bdc-af55-e55852221a70", "sighting_of_ref": "indicator--96709a63-ac4a-49c3-9863-289df8ae7b12", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b244b814-7fd2-4275-a39d-c1eb8231c550", "sighting_of_ref": "indicator--23dca463-50f4-4a53-98c2-11ae6d3dae1d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70107b7a-9761-4756-b711-34f105471487", "sighting_of_ref": "indicator--e30135ec-e4c3-44f5-be41-fa2079406d7d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a98514-7c43-4d1f-94ec-88613b788130", "sighting_of_ref": "indicator--9ef2efdd-40f7-4053-aefe-77f932ddd0a4", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36f902b-226c-45fb-b7b5-c6b7d933b6f7", "sighting_of_ref": "indicator--11e881c4-ba5d-4591-99af-f2c6b77b5c4b", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e6116a-d712-4973-a6ee-3a2e446bf62e", "sighting_of_ref": "indicator--50d3b2e2-74e3-432a-bc2e-3f98caa17d82", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498dd9b8-cf76-408c-8d65-3f1daa001867", "sighting_of_ref": "indicator--3a33d309-120c-440b-8ba1-952486ed9301", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f9e236-8878-44c3-813a-cff0a5121a21", "sighting_of_ref": "indicator--868a51ca-96b4-4920-9a37-b9d0a1958f48", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ddefd2-ab92-42d5-92e2-341305607060", "sighting_of_ref": "indicator--81e0d853-3296-4619-b043-77ecacf825e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a592bffc-b1f5-408b-a4cf-04c3db372737", "sighting_of_ref": "indicator--81e0d853-3296-4619-b043-77ecacf825e5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723864ec-2f44-4b0a-a88d-fa13fe42bd9d", "sighting_of_ref": "indicator--81e0d853-3296-4619-b043-77ecacf825e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6024a0e-0366-423c-a7a6-bc023ca9f5f5", "sighting_of_ref": "indicator--23cdc8b2-9549-437f-b508-ee955522864b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aca91a8-a806-4e31-aff1-c98fdd25fc6f", "sighting_of_ref": "indicator--23cdc8b2-9549-437f-b508-ee955522864b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2e32c5-af32-40d4-9152-c80c4887cb06", "sighting_of_ref": "indicator--23cdc8b2-9549-437f-b508-ee955522864b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3898598f-8e69-4862-a88e-5adeb472c157", "sighting_of_ref": "indicator--88a58dc0-e887-4e73-9b04-eec00aa16455", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89526020-41a6-44c6-98e3-71cf5d5d76e7", "sighting_of_ref": "indicator--88a58dc0-e887-4e73-9b04-eec00aa16455", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7207243-a6f9-4a0a-8d36-41da2db7c37a", "sighting_of_ref": "indicator--90ce0dd2-683c-40dc-bb70-421153a456e9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613cb25b-8b99-45b7-ba3b-066dd8ba9039", "sighting_of_ref": "indicator--90ce0dd2-683c-40dc-bb70-421153a456e9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d33777-6a36-4573-a5f3-7e7541091486", "sighting_of_ref": "indicator--6824094d-3aaa-4700-8618-9ac4bba9e82f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2024fd6b-b0ad-4b28-9a12-adc14cc34e5d", "sighting_of_ref": "indicator--6824094d-3aaa-4700-8618-9ac4bba9e82f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da01a632-c110-46f6-b54c-98d18bcaeea8", "sighting_of_ref": "indicator--6824094d-3aaa-4700-8618-9ac4bba9e82f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0496b04-1de3-4700-b0d7-500195a30ad1", "sighting_of_ref": "indicator--5c447623-8a4a-4313-b5b5-384e08bca7b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e780f995-54ab-4a4f-a701-f8efb96fc880", "sighting_of_ref": "indicator--bbf06fe9-82e8-43c8-8b45-41691f921bb5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950ce009-5b95-45c7-8f8a-2e376149d05a", "sighting_of_ref": "indicator--bbf06fe9-82e8-43c8-8b45-41691f921bb5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f154e4e6-b14a-4b6e-a1d6-fe0f657684cd", "sighting_of_ref": "indicator--bbf06fe9-82e8-43c8-8b45-41691f921bb5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b10cffc-92e5-4389-bce4-7ffefc044d35", "sighting_of_ref": "indicator--63be861e-e6e4-4197-9124-2d1972690bcd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3456f801-88bc-4602-908a-050d789e7293", "sighting_of_ref": "indicator--0db59ed5-a00b-40af-850c-0fcec911c756", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f806e24d-2fe5-4738-8f64-28cc6c781ab9", "sighting_of_ref": "indicator--a36b2a25-ada4-4383-af5b-3bfd8dd8b659", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb48785d-df9f-4152-836f-eb288db2da38", "sighting_of_ref": "indicator--a36b2a25-ada4-4383-af5b-3bfd8dd8b659", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f88560-2927-45c7-8ca5-74c5126000e6", "sighting_of_ref": "indicator--a36b2a25-ada4-4383-af5b-3bfd8dd8b659", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba3f27c-6fa5-4abe-abc5-dbe05009d3c7", "sighting_of_ref": "indicator--6afeb6b7-c5a3-4413-be63-b5b11355ea9a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42b0880-0c1c-4cea-b246-d2209d7269e8", "sighting_of_ref": "indicator--83545da3-887d-4ff8-9c90-c31107ca8a40", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098888c4-e22e-4eff-931e-4b289fa82c32", "sighting_of_ref": "indicator--24e74539-94c3-4420-a95f-3da85e03c443", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16352b7c-9061-4cff-88a9-38d750dec2c1", "sighting_of_ref": "indicator--e8908cc7-5c4b-4a85-a42d-0decce36aa45", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb155b4-866b-4ec0-8dcf-4bb6727a327b", "sighting_of_ref": "indicator--5cdc0394-1e8d-4956-843e-12f947c3afb6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6fe46a-31d3-4295-b8fc-cc1eed54ab6c", "sighting_of_ref": "indicator--302ce204-1ae9-4ef6-b5ab-c957a2a049de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524c0f79-94e6-44a5-95af-6082a0f3014e", "sighting_of_ref": "indicator--cf566619-58d2-41ca-b412-ac2c63be9cd5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e25515-cad1-4fc7-b1e0-9fe4d7663d14", "sighting_of_ref": "indicator--cf566619-58d2-41ca-b412-ac2c63be9cd5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be52d2d-8851-40bb-9aea-a30f2bfa3dd9", "sighting_of_ref": "indicator--40546d57-7255-40e8-aa01-255e2c4bcdb6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb71df9-9c58-467c-a8bb-96e43ff54fca", "sighting_of_ref": "indicator--3589740f-9a74-41c4-a349-3c559a37c41c", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1494ed-f9a1-4a07-968a-a6c1e39297a6", "sighting_of_ref": "indicator--27adeb9d-be08-40cd-a02e-a1ec896aeb96", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74281ed5-de76-42a1-ae11-54257af24153", "sighting_of_ref": "indicator--312f5a14-4a7a-40e8-a84d-dfde55a8d68c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630c22da-9431-449a-a91c-1ecfc1b9d474", "sighting_of_ref": "indicator--acabfb02-10db-4547-9ed9-85030c1c495b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ab9a03-2394-4620-8c18-59a137adece4", "sighting_of_ref": "indicator--acabfb02-10db-4547-9ed9-85030c1c495b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550ab68b-14e1-4351-b625-6242fd613710", "sighting_of_ref": "indicator--acabfb02-10db-4547-9ed9-85030c1c495b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bf421b-8eec-4dcf-877d-6e02db986bd3", "sighting_of_ref": "indicator--09063a82-6451-459e-a998-a73ddc99c877", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3704b10-8eda-4ef4-a415-a3a2708599a4", "sighting_of_ref": "indicator--09063a82-6451-459e-a998-a73ddc99c877", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44ea111-1c88-48f9-8583-02b15a3b4ae5", "sighting_of_ref": "indicator--09063a82-6451-459e-a998-a73ddc99c877", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0aa692-7517-44f1-a489-f7368adbe5a0", "sighting_of_ref": "indicator--352a7f53-1a5a-40e9-969e-91df349ec822", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dea3e4a-2ba9-4a9f-ac69-97d5c4393de8", "sighting_of_ref": "indicator--352a7f53-1a5a-40e9-969e-91df349ec822", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57129353-bdcc-4afd-a647-6105423b4974", "sighting_of_ref": "indicator--352a7f53-1a5a-40e9-969e-91df349ec822", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2aefd92-2e9f-4fe3-9d59-5fd0cdc8b8fb", "sighting_of_ref": "indicator--2186f851-2029-4c56-8b8b-993645ab9128", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9476fe4c-8db4-4f33-82d2-3e2314809669", "sighting_of_ref": "indicator--2186f851-2029-4c56-8b8b-993645ab9128", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdee326-e50f-4ac2-a147-7e4172f3b30d", "sighting_of_ref": "indicator--2186f851-2029-4c56-8b8b-993645ab9128", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052744c5-ee73-4f9e-ab62-5e79a6206cd9", "sighting_of_ref": "indicator--bf83f609-4f0c-446c-9e6f-dc4b1ba2dc2a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5bec926-62e2-4bd9-9aa1-83f7d31bd230", "sighting_of_ref": "indicator--bf83f609-4f0c-446c-9e6f-dc4b1ba2dc2a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd0ee67-1e91-4c01-a53e-48c2e9bb411c", "sighting_of_ref": "indicator--bf83f609-4f0c-446c-9e6f-dc4b1ba2dc2a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a06e708-e2fd-4660-ba5e-ed5cfb75c532", "sighting_of_ref": "indicator--eccd394a-2f55-4e61-bc48-3465c1716e3e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafb73aa-b66a-4045-b305-506fcd2d0fa6", "sighting_of_ref": "indicator--eccd394a-2f55-4e61-bc48-3465c1716e3e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03261061-1d1b-491b-a94c-af1b1a880121", "sighting_of_ref": "indicator--eccd394a-2f55-4e61-bc48-3465c1716e3e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8303619a-5cd2-436f-b474-8a262547e833", "sighting_of_ref": "indicator--879d205c-c0b8-4c99-97f0-9fa758ccae0b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ba8940-4dac-4439-bcf2-a0ddfeee1e58", "sighting_of_ref": "indicator--879d205c-c0b8-4c99-97f0-9fa758ccae0b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e639db4a-950d-48f7-9095-6907841c32e5", "sighting_of_ref": "indicator--879d205c-c0b8-4c99-97f0-9fa758ccae0b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8298bcd-e515-40d6-85f0-86ccda44bfc1", "sighting_of_ref": "indicator--7593cd3f-2604-4a1d-8ead-ffc6b0dc4b5b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e52ff9-c448-4ad6-99a0-a1a868bb3b0e", "sighting_of_ref": "indicator--7593cd3f-2604-4a1d-8ead-ffc6b0dc4b5b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aaac53d-569b-4b9e-b12f-b116bbec41e8", "sighting_of_ref": "indicator--7593cd3f-2604-4a1d-8ead-ffc6b0dc4b5b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc45c17-447d-4051-a547-38f27e4e7d3e", "sighting_of_ref": "indicator--7777b9a5-a861-4b2b-ad40-d2ac63a129f9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d62bf9f-82ea-4589-a4ad-a49281b848e7", "sighting_of_ref": "indicator--7777b9a5-a861-4b2b-ad40-d2ac63a129f9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0f38c0-2691-4a18-876a-3eeb75f95f72", "sighting_of_ref": "indicator--7777b9a5-a861-4b2b-ad40-d2ac63a129f9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ecc22c-939f-4d71-9e91-dffa1944668e", "sighting_of_ref": "indicator--ee325d27-9343-4456-a38a-1eb604429a38", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68f40eb-2c85-4dad-b9be-6061315651db", "sighting_of_ref": "indicator--ee325d27-9343-4456-a38a-1eb604429a38", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd07cd58-08be-429d-8971-cb47b88b3fe6", "sighting_of_ref": "indicator--ee325d27-9343-4456-a38a-1eb604429a38", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d368de-b472-442a-9ac1-84b82a7552a8", "sighting_of_ref": "indicator--e363435f-5f53-4079-8dfc-8db96cd60eeb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac81a8f6-b6ef-49c1-a5eb-c66e6dad0679", "sighting_of_ref": "indicator--e363435f-5f53-4079-8dfc-8db96cd60eeb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e53874-dc74-4208-95ca-bfe0b45f7d83", "sighting_of_ref": "indicator--e363435f-5f53-4079-8dfc-8db96cd60eeb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e4cee7-7bbe-4c0a-8301-ac04477a5b17", "sighting_of_ref": "indicator--bb43805c-235f-4bf8-ac96-47ff262961be", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d895cdf1-86a9-496e-b296-200c80f3b45f", "sighting_of_ref": "indicator--bb43805c-235f-4bf8-ac96-47ff262961be", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5a5ca8-c985-428d-9f3e-907a96c3a05c", "sighting_of_ref": "indicator--bb43805c-235f-4bf8-ac96-47ff262961be", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdcd9d2-656b-4030-9c82-7726cedd0e39", "sighting_of_ref": "indicator--f3f7f355-2244-45d6-b74b-fcc08deef2d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603dc468-86ea-4af7-8ef0-409ab57f91bb", "sighting_of_ref": "indicator--f3f7f355-2244-45d6-b74b-fcc08deef2d0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec13042-1ea0-4fae-a4c6-577630ae6b24", "sighting_of_ref": "indicator--f3f7f355-2244-45d6-b74b-fcc08deef2d0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4258e364-0c68-440e-ac38-4b5fab43e7ca", "sighting_of_ref": "indicator--ec8310cc-4223-4a07-af21-8723f882968e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03572d33-2607-4afc-8bd1-b73e5b522d9d", "sighting_of_ref": "indicator--ec8310cc-4223-4a07-af21-8723f882968e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e361345b-7c93-428a-91bd-dcfcd570797c", "sighting_of_ref": "indicator--ec8310cc-4223-4a07-af21-8723f882968e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2716b484-d679-44d4-ab71-bac1aa674306", "sighting_of_ref": "indicator--26183a8a-8c65-4ea8-a9a1-2652b3ab9f4c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2896c3d-3f50-46ca-b7db-d5bd395f118a", "sighting_of_ref": "indicator--26183a8a-8c65-4ea8-a9a1-2652b3ab9f4c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42aeb76e-f608-4b08-b887-2dad11f7dad6", "sighting_of_ref": "indicator--26183a8a-8c65-4ea8-a9a1-2652b3ab9f4c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef1b29d-f3de-4563-b64f-0952880e222c", "sighting_of_ref": "indicator--35a2d1b7-65bc-493b-ba5a-2dfcd19a3693", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d407f7-d55d-4ee4-aa16-392aa49f795a", "sighting_of_ref": "indicator--35a2d1b7-65bc-493b-ba5a-2dfcd19a3693", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0899f5-dbe2-43e0-b9af-1297feacc7d2", "sighting_of_ref": "indicator--35a2d1b7-65bc-493b-ba5a-2dfcd19a3693", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba202fc-960c-442e-b443-b96d558f6fc9", "sighting_of_ref": "indicator--2648b470-27bf-4e1c-ba51-06d26ec414a5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ff9509-061a-4f20-9e69-b626b7e28f81", "sighting_of_ref": "indicator--2648b470-27bf-4e1c-ba51-06d26ec414a5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d087b605-2574-450f-bed7-d49bf0cc0777", "sighting_of_ref": "indicator--2648b470-27bf-4e1c-ba51-06d26ec414a5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9a33a4-4f30-4f41-8f76-746bf70d0a4d", "sighting_of_ref": "indicator--25f98e36-a705-453e-867b-f7ed19fe203a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5208d5-0ac0-4bb0-863a-b7dad9f368a4", "sighting_of_ref": "indicator--25f98e36-a705-453e-867b-f7ed19fe203a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a09217b-3114-4a2d-a9bc-ed9e4062e6c4", "sighting_of_ref": "indicator--25f98e36-a705-453e-867b-f7ed19fe203a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d6154e-4e17-4534-a44b-b97fc25ed54f", "sighting_of_ref": "indicator--85f6cfeb-1c5d-4257-9a0c-ca161d102eff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e920516d-0d24-4850-ad69-9d7fead9a740", "sighting_of_ref": "indicator--85f6cfeb-1c5d-4257-9a0c-ca161d102eff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617edc08-30a3-4a34-bc42-f0be669c720a", "sighting_of_ref": "indicator--85f6cfeb-1c5d-4257-9a0c-ca161d102eff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e18d9d-b02b-4bb7-86d1-35c3508cec83", "sighting_of_ref": "indicator--d2196117-1f4a-4fe3-9923-cf19ef58fc78", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746c09b8-6547-4832-9803-02114fd0aebe", "sighting_of_ref": "indicator--d2196117-1f4a-4fe3-9923-cf19ef58fc78", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace2cc29-d5ce-4ef2-a113-d28c94759c4a", "sighting_of_ref": "indicator--d2196117-1f4a-4fe3-9923-cf19ef58fc78", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80eed1d7-ac4a-42ca-b905-a44af5086365", "sighting_of_ref": "indicator--246a4dc8-01b7-436f-b72a-d641377f6acc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1496b55f-306c-4683-99c1-3d44971238ce", "sighting_of_ref": "indicator--246a4dc8-01b7-436f-b72a-d641377f6acc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f9bc8f-5361-4f0b-b0ac-c5091911a681", "sighting_of_ref": "indicator--246a4dc8-01b7-436f-b72a-d641377f6acc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b4739f-bd81-4c59-9233-ca72457607c6", "sighting_of_ref": "indicator--cbd5cb70-8e13-46d9-aac2-5e664fea9594", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d36400-5d3f-40e7-a250-2403796e6de9", "sighting_of_ref": "indicator--7c499062-44ba-4abf-a518-3fb6c10404f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8580d3df-1e6a-4164-b4ba-c831c0a61bc9", "sighting_of_ref": "indicator--a8929f50-514d-4d69-a18a-2f661711f284", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c355b2-6b5a-485a-b067-22b2448e5252", "sighting_of_ref": "indicator--09e002f7-50fb-4848-807c-09c03d4dcda6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d455ac-934a-46f0-82d1-5ff7c4d6a3ed", "sighting_of_ref": "indicator--0760fa60-a808-4e0f-a640-712945656d87", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce62249-4ce4-4c60-bea0-3a90a343fe08", "sighting_of_ref": "indicator--8651efa3-fc61-4a39-9c02-324b921d9e66", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397669d7-eabd-4810-a886-eabca613842b", "sighting_of_ref": "indicator--8e057aa9-2621-4750-aa99-947ba10d2c9b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd4f858-e7d8-4cc5-94ce-919bb772f7bf", "sighting_of_ref": "indicator--d0637452-cbf0-4de8-92c8-24507c4e5b12", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536a4e97-3adc-4b5e-a1ea-e7e0c1edfb46", "sighting_of_ref": "indicator--f72779b1-1a3e-4061-bdff-15680854662a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdea40a2-58cb-4737-8e7f-356cf9db6803", "sighting_of_ref": "indicator--f72779b1-1a3e-4061-bdff-15680854662a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d55557-c675-49ec-aea9-a76071cd1287", "sighting_of_ref": "indicator--f72779b1-1a3e-4061-bdff-15680854662a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bc2314-5b3d-4e97-a778-1293cba6a44b", "sighting_of_ref": "indicator--e41c1e14-0959-4be5-be30-ccd8b97d163e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b82571a-a3dd-4c45-a7c6-f53426c7ef4a", "sighting_of_ref": "indicator--e41c1e14-0959-4be5-be30-ccd8b97d163e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcafe754-2bf9-42f0-ae01-01be81b3108c", "sighting_of_ref": "indicator--e702a83e-3767-4020-acf3-15b30e8d7663", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4676fe-966b-40f1-9bd8-25ed0b509907", "sighting_of_ref": "indicator--e702a83e-3767-4020-acf3-15b30e8d7663", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5149e787-405a-4feb-8f7a-b990092ab44e", "sighting_of_ref": "indicator--e702a83e-3767-4020-acf3-15b30e8d7663", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229dc173-d0f6-4860-b240-ebdba6a1c1d5", "sighting_of_ref": "indicator--9e8d1230-e516-4ca5-ade2-d5b6715ee12d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83c3895-5f09-46be-88eb-82febf7ad091", "sighting_of_ref": "indicator--9e8d1230-e516-4ca5-ade2-d5b6715ee12d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4807108f-4c60-4ecd-b2d6-55fa087882e9", "sighting_of_ref": "indicator--9e8d1230-e516-4ca5-ade2-d5b6715ee12d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884223a0-4712-4414-a275-988ea7f75977", "sighting_of_ref": "indicator--09beb6a3-ccf5-458f-917d-62c8d51def49", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc668735-be80-4c69-b1c0-da3a5b91335e", "sighting_of_ref": "indicator--55ec2e8f-224e-45a6-8b53-92a01df88f91", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a5c9c8-f54f-4206-a31b-a7cb6fd96393", "sighting_of_ref": "indicator--55ec2e8f-224e-45a6-8b53-92a01df88f91", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27faec57-b0c3-448f-953b-be44472daaee", "sighting_of_ref": "indicator--55ec2e8f-224e-45a6-8b53-92a01df88f91", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb2d6b9-f106-4b61-8492-1f237a229206", "sighting_of_ref": "indicator--8e5432ac-319a-4199-aa27-58c56cadf909", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406f779d-5424-4fba-a191-d764baa4aff5", "sighting_of_ref": "indicator--8e5432ac-319a-4199-aa27-58c56cadf909", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b223c7-bc4d-4456-8955-59fe8ce7cf22", "sighting_of_ref": "indicator--2660fd45-a027-484d-875d-f336b833bfeb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f22e5b1-3d29-49d1-9186-c10bd81f5e9f", "sighting_of_ref": "indicator--2660fd45-a027-484d-875d-f336b833bfeb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e335c904-a80b-4a22-8b30-7791b6a3aa3d", "sighting_of_ref": "indicator--2660fd45-a027-484d-875d-f336b833bfeb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ce3a5c-8dea-4fcf-a730-f1e3f230f578", "sighting_of_ref": "indicator--2e3de04a-7d22-4438-b2ec-e623d94d69c3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979a6d14-f0db-4eb8-9847-7764d4bafd69", "sighting_of_ref": "indicator--2e3de04a-7d22-4438-b2ec-e623d94d69c3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049a5e9c-2803-43a0-be42-bc89ae0ea425", "sighting_of_ref": "indicator--20ba1617-988b-4b15-b30d-834af69fb935", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ee07da-d080-4440-9c01-422ba28bdefd", "sighting_of_ref": "indicator--0cfac726-0375-40a6-8785-b6763781e5ca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e094eb5b-8987-4982-98a9-d61f0ba7a5f9", "sighting_of_ref": "indicator--e98a46d4-8951-46b6-89b9-f96dc3e513e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e391be0-1201-4c4f-8469-9e051d8fd1dd", "sighting_of_ref": "indicator--7b0ff1e2-7f72-494e-bcb7-40c839b9059d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec61fed-82b5-4693-972a-dc31c077583c", "sighting_of_ref": "indicator--6d7bd73a-4e28-4e41-9dad-20e7b93b09c6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81bab37d-7e92-446a-8f19-2d8ac8a2ea68", "sighting_of_ref": "indicator--6d7bd73a-4e28-4e41-9dad-20e7b93b09c6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1879cf6-bce7-44f5-bd26-0c418eb6e2dd", "sighting_of_ref": "indicator--6d7bd73a-4e28-4e41-9dad-20e7b93b09c6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34400342-16ae-466c-bc31-dccd77b6e1c6", "sighting_of_ref": "indicator--9bacfd5d-c942-4123-b91d-ca89c6175318", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c69142-717c-4fe3-908c-8f9bb0939026", "sighting_of_ref": "indicator--9bacfd5d-c942-4123-b91d-ca89c6175318", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ff9714-a98a-4b53-bfc2-772800d249b4", "sighting_of_ref": "indicator--d0b7b002-1abc-4ca6-b2c1-0695bd19b58b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6b865b-7d19-4d1e-8375-b98baa405831", "sighting_of_ref": "indicator--f8cf70b3-0f5c-4bec-8699-8d1a495be60c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a88502b-ef17-4cbf-887d-3b50c798377f", "sighting_of_ref": "indicator--f8cf70b3-0f5c-4bec-8699-8d1a495be60c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0552f0dc-09ac-4727-92d4-892afe006f37", "sighting_of_ref": "indicator--577ab014-3b68-407a-ad80-a208bf1c4978", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de0cb69-4ec4-4c21-842f-e096ad34eb59", "sighting_of_ref": "indicator--3bbbd113-427c-4722-a10c-f779d3148936", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b67ab1c-fbe8-4217-aa8f-395810be2d46", "sighting_of_ref": "indicator--c3aa4f60-b91b-419f-9524-20b9fdb8f791", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6bab7c-69fb-43b4-9bd3-5ca3a9cadb17", "sighting_of_ref": "indicator--28f68353-8b74-421f-a917-40fbe3ee2b8d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336a7f30-afa4-4595-bfdf-834ca06aea01", "sighting_of_ref": "indicator--28f68353-8b74-421f-a917-40fbe3ee2b8d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe098f1-ac5d-45ca-8908-9a330096710c", "sighting_of_ref": "indicator--28f68353-8b74-421f-a917-40fbe3ee2b8d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd69ff80-3105-4a97-ba34-8de2004f0d1c", "sighting_of_ref": "indicator--d3a97e28-a34f-48b2-94bf-03175a85ffef", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da97ee6-b394-4160-b297-1475e1ab83ee", "sighting_of_ref": "indicator--d3a97e28-a34f-48b2-94bf-03175a85ffef", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d2a803-e0b9-4d93-86ef-6d13ce347661", "sighting_of_ref": "indicator--d3a97e28-a34f-48b2-94bf-03175a85ffef", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b70363c-b50c-4bea-8a60-1b68e6460b66", "sighting_of_ref": "indicator--f8d8148f-c656-46ef-8eff-22e72cc275f9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f8f660-e8b7-40e5-b091-f2b745ec9897", "sighting_of_ref": "indicator--f8d8148f-c656-46ef-8eff-22e72cc275f9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6d8540-2cf6-48de-8ce5-c7ef11fe39f7", "sighting_of_ref": "indicator--f8d8148f-c656-46ef-8eff-22e72cc275f9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b380b8-11a2-4419-8f35-143438091258", "sighting_of_ref": "indicator--67ff7aa2-160f-4c2f-b564-81ed2c796b10", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10becf12-5f06-466a-91a8-baf88eedc65f", "sighting_of_ref": "indicator--ccfa26c8-96fb-409a-b258-59684112e9bd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0a1dd7-6a7f-4190-9dd5-67dbbf033fcf", "sighting_of_ref": "indicator--407e66e9-edf8-4065-9f82-b9722c459ef4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22cdd8a1-8e68-4cde-baeb-59fc45a3e196", "sighting_of_ref": "indicator--4885f6e8-17fa-4810-b343-d332168f6574", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac743a3-a7b3-4098-ad93-8f3c3ca28fd1", "sighting_of_ref": "indicator--9b4f822b-54cb-4612-8dfc-f74004822a47", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2883eb-7f28-4568-a105-b38e02859cf9", "sighting_of_ref": "indicator--d15525d2-ba8d-4f08-b6b6-d1bd9299b856", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d9e2b1-a5ac-4571-a556-72feb0cbd44c", "sighting_of_ref": "indicator--9e6940ae-43b0-4e51-9f85-77858dc2358a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cab44f1-31fc-496f-9d67-2b7b88b16878", "sighting_of_ref": "indicator--57b68579-cbef-4682-9c10-49ef719502aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24229e45-3fdf-4a68-8041-58bcea288293", "sighting_of_ref": "indicator--57b68579-cbef-4682-9c10-49ef719502aa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a2bd8a-802a-4522-a7b4-850ac2c13a15", "sighting_of_ref": "indicator--d69edbc3-15db-4465-9dd2-c139f15c760b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88449205-1556-4876-9a2a-80b4ba238b79", "sighting_of_ref": "indicator--e062e6ef-1c1e-4482-af7c-e775f6891df6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4bae95-dcba-4a85-98f4-7a6519ab6fb9", "sighting_of_ref": "indicator--0f9e7310-99a8-473f-8b46-959e0a80c61c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525ba487-afa3-478a-aaf9-54aa17526fa7", "sighting_of_ref": "indicator--f53652ba-f915-4de3-b84e-477a3c3f5ccd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f11090-d455-4220-a573-8d2debad1c9b", "sighting_of_ref": "indicator--f53652ba-f915-4de3-b84e-477a3c3f5ccd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f89ba27-8377-48bf-b6be-33c00f434e6d", "sighting_of_ref": "indicator--4638c47d-cf04-47bf-a411-db06d0adacad", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e32c0a-cc40-4f5a-8887-9dcff92b2a98", "sighting_of_ref": "indicator--882c008f-15e0-4cf4-b5b2-c60260c104d3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2c67c1-a339-4fa8-846b-8b35591f2fd6", "sighting_of_ref": "indicator--882c008f-15e0-4cf4-b5b2-c60260c104d3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c969ce0c-8434-47f9-98b0-60db2d9e8424", "sighting_of_ref": "indicator--c9fd00a7-1e71-4362-865d-a8ffbc6e2c92", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140dff98-541d-48fa-8ab9-8f2eb6b9ec76", "sighting_of_ref": "indicator--2af66aed-ddad-43e4-8f9b-802710c0eea9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01874d85-784d-476a-9e2b-24a24edffd8d", "sighting_of_ref": "indicator--2af66aed-ddad-43e4-8f9b-802710c0eea9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4299dfb1-af2b-4030-b718-7bfd62051da5", "sighting_of_ref": "indicator--2af66aed-ddad-43e4-8f9b-802710c0eea9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f7c971-91af-4e14-9e39-2096f1960193", "sighting_of_ref": "indicator--474acb9c-19a3-40de-ba9b-644564313110", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3f2ea1-49de-4acb-8eca-f13236a565a3", "sighting_of_ref": "indicator--1cb7e143-f669-4b52-b898-a2f07773cf4b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0371c9-1e40-4d85-a075-9b731a9026e8", "sighting_of_ref": "indicator--e577c928-b25b-4903-9b16-dc56e2fb606d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c632ef-76be-436b-9e23-4052feb811ea", "sighting_of_ref": "indicator--e577c928-b25b-4903-9b16-dc56e2fb606d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065e48fd-14e1-40c5-97f9-60a8c3645c30", "sighting_of_ref": "indicator--5c5bf15c-7b34-43d5-9a29-32183e3e3fac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7d37d5-7f1d-44db-97b4-f365250c3c18", "sighting_of_ref": "indicator--5c5bf15c-7b34-43d5-9a29-32183e3e3fac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528a1492-1a72-48be-93b9-58c50d93eca6", "sighting_of_ref": "indicator--3ae4c103-b26b-4e41-bf0e-dd88aa6a557c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1479d65b-5369-483e-93cb-7ef6f06ba533", "sighting_of_ref": "indicator--a43541fb-11b8-4621-99fa-5908d7303042", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719eb697-3ab3-42d8-8230-ccf641dbe21c", "sighting_of_ref": "indicator--b85fe3c8-617d-4c93-9397-fb1863cb2f62", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c34fd6-fcb7-4512-b15b-8ad6b24b2626", "sighting_of_ref": "indicator--b85fe3c8-617d-4c93-9397-fb1863cb2f62", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1a2f40-6477-4610-b1a7-e39b60f0ec2f", "sighting_of_ref": "indicator--36ccfe81-653c-4616-a883-bd210b2b1a03", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ef8f90-adb7-436e-9220-94ea9d39b64c", "sighting_of_ref": "indicator--36ccfe81-653c-4616-a883-bd210b2b1a03", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbc8870-f1b2-4fe3-a335-e02e21b8b47e", "sighting_of_ref": "indicator--36ccfe81-653c-4616-a883-bd210b2b1a03", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b360f107-07dd-4127-9fd7-38d5d5adf4ea", "sighting_of_ref": "indicator--49fce4f1-a420-45ec-9b33-0d73fe462a1e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f459156-a5b2-4d97-ad65-d5e2ad3cf087", "sighting_of_ref": "indicator--49fce4f1-a420-45ec-9b33-0d73fe462a1e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d5e2f2-2629-462c-a498-2e6146165ff7", "sighting_of_ref": "indicator--c72260f0-c1eb-49f3-9933-948c36b7bca7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43171998-66df-465d-947f-569dd41bb1c1", "sighting_of_ref": "indicator--c72260f0-c1eb-49f3-9933-948c36b7bca7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1d7b59-c714-48ba-b789-bb1f2760defe", "sighting_of_ref": "indicator--1fba54c6-0261-4209-98cf-c32e7cf788bb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a42b0d-7953-4165-9d7c-8bc28a38c795", "sighting_of_ref": "indicator--11d07c63-c264-424e-86d8-0461f8010eae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3661a6-7de3-4c5e-bcad-1df1f446d377", "sighting_of_ref": "indicator--11d07c63-c264-424e-86d8-0461f8010eae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aaee9ff-1d93-42d7-b6dc-9355a541a886", "sighting_of_ref": "indicator--369b535b-c351-44bc-86a7-13437426df6b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cdecf4-cb23-420f-a13d-682c2e36ecf4", "sighting_of_ref": "indicator--369b535b-c351-44bc-86a7-13437426df6b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef2ecff-5fa6-4d54-a679-dd451678b9dd", "sighting_of_ref": "indicator--a9ebc00e-02b2-499f-ad20-39a2bbcbe98d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec8fa28-08b1-4f30-9184-ca54f6c50d84", "sighting_of_ref": "indicator--a9ebc00e-02b2-499f-ad20-39a2bbcbe98d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2495caff-395f-42a3-86c5-feeacd147142", "sighting_of_ref": "indicator--f750fad7-c857-4e21-b7a4-53f564a907d3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d504e1c-2bf1-47b2-b54f-d1351724bcc1", "sighting_of_ref": "indicator--f750fad7-c857-4e21-b7a4-53f564a907d3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1ac6df-5bf4-4b39-ba9e-a97c25123276", "sighting_of_ref": "indicator--a0190773-cc6b-48c4-aad1-9016850b5f26", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f8f9da-556c-44ce-a2a8-379461b70ae6", "sighting_of_ref": "indicator--a0190773-cc6b-48c4-aad1-9016850b5f26", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c7f995-4dc5-4c5d-93aa-c01a2a0ce779", "sighting_of_ref": "indicator--6fed4553-2859-41c1-b7f9-7311c50f0302", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb45909-20e1-4535-a746-beca43a1afaf", "sighting_of_ref": "indicator--81aada75-4b11-4a44-9858-e7c6d0598460", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed151da-a6fa-48de-93a1-06a715bd7713", "sighting_of_ref": "indicator--81aada75-4b11-4a44-9858-e7c6d0598460", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836e171b-dee2-4687-9fab-3d3fd5290908", "sighting_of_ref": "indicator--d45b0cdc-571b-41b9-a011-e259886ab1f3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c360d56-4c32-48d7-a981-d4960c0bfe1d", "sighting_of_ref": "indicator--e9b4719f-ab79-4983-a87c-70b4d0e3c622", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c716f8-c4fa-49ef-9068-12e6cc72d771", "sighting_of_ref": "indicator--e9b4719f-ab79-4983-a87c-70b4d0e3c622", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5a1737-5730-47e6-8b35-514b91fa5c92", "sighting_of_ref": "indicator--adc533f7-7337-4888-8f14-c242f7121fdd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875b649a-a7c8-4a72-8b16-419295e5f5de", "sighting_of_ref": "indicator--adc533f7-7337-4888-8f14-c242f7121fdd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bb27b5-3b11-4ca8-9962-2ee77b526360", "sighting_of_ref": "indicator--eebd06b0-94a5-48eb-8336-64e465692b32", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d17158-37ca-4c2a-b58d-d7dde89c29ee", "sighting_of_ref": "indicator--eebd06b0-94a5-48eb-8336-64e465692b32", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf39643-581a-4722-8e87-15cfab32132a", "sighting_of_ref": "indicator--4cb90cd7-2632-47a3-a62b-d8dec6e33985", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2618c3e8-79b3-47e3-9a6a-4997ab5984e6", "sighting_of_ref": "indicator--e1ec5491-a64b-4059-be41-c33525281bf1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7475b368-c00b-4e55-8781-3c019ce42f78", "sighting_of_ref": "indicator--e1ec5491-a64b-4059-be41-c33525281bf1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47aa4483-3c5e-4afb-b067-2de84038e214", "sighting_of_ref": "indicator--06e155b8-4016-4ac2-bf86-d18c095ee74e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11acc90-40cd-41ad-be04-7c2e496bc7b2", "sighting_of_ref": "indicator--30434e77-c9c3-4e2f-a742-64cfbbf54727", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d1060d-e72c-41d6-8b33-37dbfd1c20b3", "sighting_of_ref": "indicator--3bf8c5f3-2a4e-494d-9fb2-63b9518d84b7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfd6b56-76ac-4bb9-81ba-716f29584847", "sighting_of_ref": "indicator--3bf8c5f3-2a4e-494d-9fb2-63b9518d84b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25999632-0487-4445-b42e-2a278eeeae52", "sighting_of_ref": "indicator--ac8be2f5-5ed1-4c5e-9464-41710ab05bb5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a70829-0f47-4439-9cc0-e24c51f5c611", "sighting_of_ref": "indicator--ac8be2f5-5ed1-4c5e-9464-41710ab05bb5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547348cd-6baf-44d1-a0fb-5dee06200077", "sighting_of_ref": "indicator--764b150e-12ad-4e3b-9e9f-bae3e8009407", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c34f50-ece8-4d62-9876-ad982f7414d8", "sighting_of_ref": "indicator--6ab9ea7e-4b7a-44e3-8342-683baa098216", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88741fa7-c227-4877-8c7b-a2ca23f422e1", "sighting_of_ref": "indicator--230d98dc-961d-46d3-b47c-c2939333f459", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557e0a29-9433-4c1b-b492-a87c9e3b7952", "sighting_of_ref": "indicator--230d98dc-961d-46d3-b47c-c2939333f459", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0929612-1223-4ea0-a61f-d8d594950ada", "sighting_of_ref": "indicator--230d98dc-961d-46d3-b47c-c2939333f459", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927b3051-1052-4935-8c60-c80dd2a08f4d", "sighting_of_ref": "indicator--560d651e-cc27-4388-8eb4-ddfa890c09c8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1c14d1-c6ec-43e8-a848-76f3e7b3b664", "sighting_of_ref": "indicator--560d651e-cc27-4388-8eb4-ddfa890c09c8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b287a13-b67d-4d56-b10d-eea69b4461bf", "sighting_of_ref": "indicator--a1b915a4-f360-47a3-a506-6bf0c47fe070", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973f47a7-e34b-47b4-bca3-0e1bfff402de", "sighting_of_ref": "indicator--e9a0df2f-6d66-4031-9785-f65589bebb30", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d121d8-856a-4dec-9b08-6badb3788fed", "sighting_of_ref": "indicator--55bb186d-7c07-45e6-98c0-52ea0e13b051", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd81177-f957-441f-bb33-75e31a692d7a", "sighting_of_ref": "indicator--55bb186d-7c07-45e6-98c0-52ea0e13b051", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0552c201-ff40-475e-a5e4-900cd8863498", "sighting_of_ref": "indicator--b485e14d-947d-4e3e-a89d-7940e030d76a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa66641-e842-4a9f-98e9-c9462c8c2a71", "sighting_of_ref": "indicator--b485e14d-947d-4e3e-a89d-7940e030d76a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63fd63c3-70e8-474f-abdc-86ddbbb23ca8", "sighting_of_ref": "indicator--e799c71d-86e0-481e-8723-d9c62d5ea8c6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fd031f-ddcf-4d80-a51b-07febbfb704f", "sighting_of_ref": "indicator--e799c71d-86e0-481e-8723-d9c62d5ea8c6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b972dd-445e-4ab0-b339-d29401527d8a", "sighting_of_ref": "indicator--e799c71d-86e0-481e-8723-d9c62d5ea8c6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a63d21-e189-4e64-844a-b38285266258", "sighting_of_ref": "indicator--3d1bac81-cad2-4347-8061-07adbeaab3ca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94cc121-5bb6-4f27-abe6-4b9ec3bd73ea", "sighting_of_ref": "indicator--4a6ddf72-5bef-4098-a248-655b1c076989", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54f63e7-2d8a-432e-81d2-62339a49aa4e", "sighting_of_ref": "indicator--4a6ddf72-5bef-4098-a248-655b1c076989", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0fc530-6427-47a9-82b1-c08b460c61bb", "sighting_of_ref": "indicator--847f043f-ca12-4262-9dbb-58f38690bd77", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321325f3-d94d-4fea-a46e-ca8a07a2d880", "sighting_of_ref": "indicator--2990658e-e19f-4104-bcfb-2645ea5f9be4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5cc506-0952-4ce4-88cd-d934d3bedca6", "sighting_of_ref": "indicator--658a20f2-4b4b-470e-bead-9119105af914", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5650260-4d8d-4f81-8c37-7b52300018e7", "sighting_of_ref": "indicator--a5878820-1e9a-47a6-9436-22e0f27f9d9e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78219d29-09d9-4ff5-b7ea-a4f9e48cd724", "sighting_of_ref": "indicator--a5878820-1e9a-47a6-9436-22e0f27f9d9e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0d0a33-64f7-4ff0-a96e-e99c642401d6", "sighting_of_ref": "indicator--f81f36c2-5486-4708-bd9e-805f45c5e01e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0701d8c8-4d85-4f98-b6c7-7d675641726f", "sighting_of_ref": "indicator--960f535d-bfe1-4d71-a01f-70d788af218f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5cc6bd-0e44-4c83-a990-76dfadb1b166", "sighting_of_ref": "indicator--18e9e483-6d5a-4178-83a0-b27a70a8fe51", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c49f3aa-1e97-4d38-ae2c-915eceb205c5", "sighting_of_ref": "indicator--18e9e483-6d5a-4178-83a0-b27a70a8fe51", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4668ce93-4aa9-4a9a-bca1-2f41cfc9b5bf", "sighting_of_ref": "indicator--d1418ce3-fe84-440c-a807-fad54482ea5e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82aaa38-d321-42c0-af1a-105b5d68c010", "sighting_of_ref": "indicator--2a439925-e381-49af-82a6-227ca4e9a1af", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d214fe-fd53-43fa-99c7-6e16d74c7da6", "sighting_of_ref": "indicator--2a439925-e381-49af-82a6-227ca4e9a1af", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52cd08e-461f-446c-bbb6-ef431fb9ff25", "sighting_of_ref": "indicator--0419557d-bfa2-4011-b610-bee4350f94bc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadb137e-d45e-44d8-9c6e-ccb0fd1d612f", "sighting_of_ref": "indicator--08a2f53d-dc99-4172-9fae-c584c473ea57", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938c42ed-830d-458c-afbd-6abbaffbbb74", "sighting_of_ref": "indicator--6fae5e74-e6de-4600-8c75-ef997cf948bd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93587d0a-06e8-45f5-bede-62c355c0169f", "sighting_of_ref": "indicator--a6cd6242-77f6-4229-b059-62c24a3df216", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f11aa18-997d-4e85-8cda-d70c9944c5a7", "sighting_of_ref": "indicator--a6cd6242-77f6-4229-b059-62c24a3df216", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ca00bc-19b3-4dac-ade1-7f6c54540803", "sighting_of_ref": "indicator--b6a10c0c-b406-4cde-aae7-a11cc322fadc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4e3104-8339-4ae6-9482-bd6b5318d93c", "sighting_of_ref": "indicator--b6a10c0c-b406-4cde-aae7-a11cc322fadc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78291542-e15b-460f-ba1b-3c5abb2679d1", "sighting_of_ref": "indicator--0e2be786-5151-4464-9867-a04d704b144a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24da176d-0944-4e19-bfd9-6b1e457433b1", "sighting_of_ref": "indicator--0e2be786-5151-4464-9867-a04d704b144a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdeb19a-1d29-4d2e-a5e1-1be95c75cac1", "sighting_of_ref": "indicator--0420b04f-5f7d-4dbc-914c-21ad03e4a7af", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f13390-1947-48c3-810b-443552b0f399", "sighting_of_ref": "indicator--0420b04f-5f7d-4dbc-914c-21ad03e4a7af", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f698dff0-9878-42f6-8ef5-2f6385f42d87", "sighting_of_ref": "indicator--551617d1-8850-4ffc-ac92-c4052c798fd6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141c0aac-8dda-46c4-baf8-2760993e26e1", "sighting_of_ref": "indicator--6f1acb47-df2c-4e10-8ba3-4f05f168da0a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea4d957-f515-44c7-a1ff-0ddb03861b03", "sighting_of_ref": "indicator--8af7d1d8-60c0-4ff2-ba02-5ed63e3e40e3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b02afd-8393-481f-a77c-a1a5c444a097", "sighting_of_ref": "indicator--8af7d1d8-60c0-4ff2-ba02-5ed63e3e40e3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d629589-3c02-409b-a72f-d3a8a0a8bdd4", "sighting_of_ref": "indicator--8af7d1d8-60c0-4ff2-ba02-5ed63e3e40e3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c142199e-3b90-4457-a83a-da5e6c35a90a", "sighting_of_ref": "indicator--85ad677a-e5f2-4e46-b478-9d35d9a8db00", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff1366e-438f-474c-85f8-ed58cc246b20", "sighting_of_ref": "indicator--d0d94c87-9cc8-4c45-89c6-2010935a3ffd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48916398-ac0d-4869-a12c-58c101df11f2", "sighting_of_ref": "indicator--67ad7ee1-8122-4cbd-b429-275993143c48", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fce3af5-ce0b-4aef-b6cf-c5198aa31408", "sighting_of_ref": "indicator--346ff9ec-dff5-4546-8087-7815b74efd39", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98dcdc8-8221-4762-820f-67b800f2ef9a", "sighting_of_ref": "indicator--027bc561-9b2f-48b2-a755-cd281e048b57", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90207ce-c6ba-45f2-8d04-d0b33127a18b", "sighting_of_ref": "indicator--027bc561-9b2f-48b2-a755-cd281e048b57", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c0868b-93cb-445a-a78b-516b248b9f63", "sighting_of_ref": "indicator--6635c473-22ab-46f1-b1c8-808be4eff282", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dd5aac-99c0-499f-aed0-be5966288a7f", "sighting_of_ref": "indicator--6635c473-22ab-46f1-b1c8-808be4eff282", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c8e0ab-adfb-43f6-8582-b57e3b58e2a0", "sighting_of_ref": "indicator--ba1fb9d3-e20c-463b-8bf0-95386ee20575", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc23298-2226-42a8-8c0d-415d2478d5b1", "sighting_of_ref": "indicator--ba1fb9d3-e20c-463b-8bf0-95386ee20575", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00969961-9f3f-4a95-b4c1-1f885ede29ae", "sighting_of_ref": "indicator--00fd9aba-7478-457c-9bf2-277ee356d592", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc9e4b7-76cf-441a-bc55-ca3fd6c4cac6", "sighting_of_ref": "indicator--00fd9aba-7478-457c-9bf2-277ee356d592", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02957a95-f556-4160-b3b6-4c07b99165ba", "sighting_of_ref": "indicator--59279de5-eb72-4144-9c48-5d6a76d35b16", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e832163-9a67-4dad-9c29-a8840fa437d1", "sighting_of_ref": "indicator--59279de5-eb72-4144-9c48-5d6a76d35b16", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a147dc5d-1d11-4b3e-ad36-794e7fb684a6", "sighting_of_ref": "indicator--8ae6600c-43b5-44c7-97d9-98d32ac9f256", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed095722-e016-4e4e-96a9-a1c946b04744", "sighting_of_ref": "indicator--4de1a1f9-3707-490a-ba51-1f2476bb621e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664a6282-0887-46c8-9ab6-07ecb9ba1123", "sighting_of_ref": "indicator--4de1a1f9-3707-490a-ba51-1f2476bb621e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756010d4-e97c-4f5c-8aeb-449e1e35fcb8", "sighting_of_ref": "indicator--4de1a1f9-3707-490a-ba51-1f2476bb621e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f6ac9e-a439-4ff0-a9c1-d1f5b769d4e2", "sighting_of_ref": "indicator--2b317870-0e69-4762-b7b7-ff73f3cceaf5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551c1a32-da31-4259-84e8-7afb6387ea78", "sighting_of_ref": "indicator--6a62dd5a-dcbf-4498-bc1c-9dd9a8a66ee1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6bb928-4669-43d1-9b50-9651787f5bcb", "sighting_of_ref": "indicator--6a62dd5a-dcbf-4498-bc1c-9dd9a8a66ee1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af709dc-53e3-48b0-9816-0fc5868a8358", "sighting_of_ref": "indicator--6a62dd5a-dcbf-4498-bc1c-9dd9a8a66ee1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05bb43b9-8463-4fc2-8069-8093e6498170", "sighting_of_ref": "indicator--870774c6-7e3f-4d88-8cf5-6f0f4e6efb39", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cce4b4-ddb3-4582-8267-b1f433a51261", "sighting_of_ref": "indicator--8f444ce2-ea46-49ab-96e1-9a99895f8458", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c46feb-b92d-401c-b46f-37dcf8ed8cb0", "sighting_of_ref": "indicator--8f444ce2-ea46-49ab-96e1-9a99895f8458", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370009c3-e3f3-4e59-85bc-c28023452fc8", "sighting_of_ref": "indicator--4f252824-334b-4397-9048-2c12fa38b061", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26f7b57-5f2e-442f-9475-afd9e1781414", "sighting_of_ref": "indicator--4f252824-334b-4397-9048-2c12fa38b061", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948c9c43-2776-4a82-91ee-b5be644fee92", "sighting_of_ref": "indicator--f3fcc634-136d-4c9b-9bc5-34f324cf715a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef5a85c-f69d-4be1-8fb3-45b595df0683", "sighting_of_ref": "indicator--f3fcc634-136d-4c9b-9bc5-34f324cf715a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51c1a50-a261-4ad6-a929-517bcb056f59", "sighting_of_ref": "indicator--f3fcc634-136d-4c9b-9bc5-34f324cf715a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc3fd2f-0d5f-4203-a6af-c4e258ce1438", "sighting_of_ref": "indicator--ad95b15d-43e4-4d83-aeae-0fe715bda542", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b487ab-e7a5-4cbf-8ceb-cf40f4810ec5", "sighting_of_ref": "indicator--ad95b15d-43e4-4d83-aeae-0fe715bda542", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577a9e15-0554-4865-8789-5ed7078fbe7e", "sighting_of_ref": "indicator--ad95b15d-43e4-4d83-aeae-0fe715bda542", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49dc5336-35dc-4ad6-9d6d-b318aa4122b9", "sighting_of_ref": "indicator--b7a64d55-4753-4ba4-802f-c5373d2cb1c0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344cb43e-f459-4f35-8753-92fac1e70e29", "sighting_of_ref": "indicator--b7a64d55-4753-4ba4-802f-c5373d2cb1c0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa2635e-a2eb-46da-bf46-d89e8eefeda5", "sighting_of_ref": "indicator--2340001e-6afd-4423-aaaf-159c4e61a1ee", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e64ecd7-c5e1-48fe-be6e-6d600d3d2fb3", "sighting_of_ref": "indicator--19a94b00-2d7f-43e4-9f57-d101a659e8ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc4df2b-dd3d-4ec4-a133-848167f6b901", "sighting_of_ref": "indicator--19a94b00-2d7f-43e4-9f57-d101a659e8ab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0726a6-1a98-4b57-b464-827812a45ba9", "sighting_of_ref": "indicator--fb1dd0e0-bd0e-4ebc-840b-3ab10b301b24", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a9eeef-9833-413a-854e-f50061cfb492", "sighting_of_ref": "indicator--99700ef5-6e20-4908-8dfd-026b806c78ac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908d866b-709b-4045-9230-6faa39213a7e", "sighting_of_ref": "indicator--bd45e1a9-313f-4d02-a5f2-cc0a982839db", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c55226-0309-43d0-895a-1838f6de3f04", "sighting_of_ref": "indicator--bd45e1a9-313f-4d02-a5f2-cc0a982839db", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a7b03f-e65b-4a66-96bf-e7a0f4d8a03f", "sighting_of_ref": "indicator--bd45e1a9-313f-4d02-a5f2-cc0a982839db", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0ceb41-e35e-4ce3-b724-09c9cafdc08d", "sighting_of_ref": "indicator--f758c6f6-0cb8-4810-9b8c-47444d253630", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a8ce41-e547-4e39-a0d3-2d910c3bb942", "sighting_of_ref": "indicator--f758c6f6-0cb8-4810-9b8c-47444d253630", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75da78b1-cdb8-4268-b6f3-222925292de5", "sighting_of_ref": "indicator--0c68e3b9-4293-4788-a4ee-8234e3afb800", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e407b49e-8931-40bd-81a3-6b51939235d5", "sighting_of_ref": "indicator--0c68e3b9-4293-4788-a4ee-8234e3afb800", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd7efad-59c4-457d-87e6-449bcd713e37", "sighting_of_ref": "indicator--80a4fb42-7511-4f6b-8958-8ba1c991016c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713f0b56-798a-4e6a-9723-1d1c11470a56", "sighting_of_ref": "indicator--80a4fb42-7511-4f6b-8958-8ba1c991016c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ae77b0-6d70-4854-b3a2-c1c27dc46b08", "sighting_of_ref": "indicator--c93caf3a-57c7-4014-a3af-21ffb2ca3006", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a540af-ef43-46aa-864c-e23265689460", "sighting_of_ref": "indicator--c93caf3a-57c7-4014-a3af-21ffb2ca3006", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5121b1c9-cab0-4c1c-80dd-383e2166e401", "sighting_of_ref": "indicator--cf22b902-e44c-4b53-a2d3-c114e65a2cb1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f640a9-ea4f-49b2-af0a-805eedd88aed", "sighting_of_ref": "indicator--244439b7-c007-424d-932e-2697ada4d0cd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4050a5-19f1-45e1-86ca-f7071bfbf289", "sighting_of_ref": "indicator--244439b7-c007-424d-932e-2697ada4d0cd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab8b8e0-b3ba-402a-8dbf-f03731333358", "sighting_of_ref": "indicator--941599a7-8f81-4961-927c-fc69d58aeef1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27adcec-728f-4353-84d4-44ca764c6ceb", "sighting_of_ref": "indicator--941599a7-8f81-4961-927c-fc69d58aeef1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4902570e-3e24-413b-a6c0-0519dc497dd0", "sighting_of_ref": "indicator--941599a7-8f81-4961-927c-fc69d58aeef1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024f9891-8ce3-440a-b149-55c635f17b20", "sighting_of_ref": "indicator--4bd94042-1e82-4d70-9803-127ae93894ec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc17dcd2-74a0-4b34-91d1-413116d3c4d1", "sighting_of_ref": "indicator--3c1a3bc3-a05a-42a8-b346-3ed47d482061", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86067896-d10c-4a0a-8a3f-16600f4e5eb9", "sighting_of_ref": "indicator--50fbbc7e-84e2-4744-ba82-81e309436c6d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c710a42a-f043-4abb-8d34-90f2bc10d2d3", "sighting_of_ref": "indicator--50fbbc7e-84e2-4744-ba82-81e309436c6d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1bd6bd-f9c3-4f6c-b87d-45c06a5e9688", "sighting_of_ref": "indicator--50fbbc7e-84e2-4744-ba82-81e309436c6d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3699b7cd-4908-4bc9-a30b-dd26874cba39", "sighting_of_ref": "indicator--dd1a138a-801f-4ee6-94a3-930a6458b777", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729c3715-11ae-4291-bc62-0f2d02815a51", "sighting_of_ref": "indicator--dd1a138a-801f-4ee6-94a3-930a6458b777", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabac5f9-1011-4ef7-9846-25653139f382", "sighting_of_ref": "indicator--43e4bd21-196c-42ed-baed-82736900c436", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96176b21-e279-4f9a-bb40-4b8eeb3d38aa", "sighting_of_ref": "indicator--43e4bd21-196c-42ed-baed-82736900c436", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f966ed6-31ab-4212-840d-0319c128d0e1", "sighting_of_ref": "indicator--43e4bd21-196c-42ed-baed-82736900c436", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9d6c98-358e-41a8-b598-eba8b5211b2b", "sighting_of_ref": "indicator--81f241f9-7243-4adc-8f80-57117203e06c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65e162a-8afc-4997-992c-65e9404de900", "sighting_of_ref": "indicator--81f241f9-7243-4adc-8f80-57117203e06c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b9a5d2-23e1-4535-a004-547db51470df", "sighting_of_ref": "indicator--f108a25d-6e62-4dde-9e8b-ec30fc6ed336", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3847dd06-ab69-4145-8787-a01591999fbf", "sighting_of_ref": "indicator--f108a25d-6e62-4dde-9e8b-ec30fc6ed336", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a4d73f-80e8-4a0c-863a-16d3e316aa58", "sighting_of_ref": "indicator--f108a25d-6e62-4dde-9e8b-ec30fc6ed336", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef596c21-7492-48f3-b3f5-33eb322c9c1a", "sighting_of_ref": "indicator--6198c668-3e2a-4849-895e-44084a87176e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172c0f0d-e729-4192-9ca3-c8f0d6ae2755", "sighting_of_ref": "indicator--6198c668-3e2a-4849-895e-44084a87176e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e54babb-d746-4526-a0bd-7e60c1e7e37a", "sighting_of_ref": "indicator--910c6778-0325-4d67-a146-00d35e516e7c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c552c878-95fb-4216-a96d-57f85ee9b0e3", "sighting_of_ref": "indicator--910c6778-0325-4d67-a146-00d35e516e7c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d8d529-4b9d-496a-9696-3d73bdc055f9", "sighting_of_ref": "indicator--910c6778-0325-4d67-a146-00d35e516e7c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7a43ef-3204-49dd-a943-1e422f69b45e", "sighting_of_ref": "indicator--69301793-d93c-4bab-9a49-76f9d97099a9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a076c6d8-89c2-40d4-ac3f-2f04ef47d9d7", "sighting_of_ref": "indicator--69301793-d93c-4bab-9a49-76f9d97099a9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00553ab-557a-42c2-9bdd-0c79d77c2475", "sighting_of_ref": "indicator--bbfb41fa-b2f9-4b45-9f25-68311de41f49", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7bbbc3-0f69-41af-a8b6-6afe99cdc594", "sighting_of_ref": "indicator--bbfb41fa-b2f9-4b45-9f25-68311de41f49", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98824d69-80c7-4a5e-82d7-100dc2dbb9a6", "sighting_of_ref": "indicator--02bf719b-fb58-479d-92a4-1f9cc8b477d7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb1b3b1-5d94-4ab5-90e9-071018e2f2f2", "sighting_of_ref": "indicator--18c52d5f-0ed1-4f53-99eb-f407a875adb1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db0d5ea-368f-4436-be53-8a1c868d0174", "sighting_of_ref": "indicator--18c52d5f-0ed1-4f53-99eb-f407a875adb1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86faa826-c2f3-4f6c-8d97-dfb137a4214a", "sighting_of_ref": "indicator--b47169a3-039a-464a-a64a-e2846213a80c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0e20fe-d872-4e25-84ae-d668613bf6c3", "sighting_of_ref": "indicator--b47169a3-039a-464a-a64a-e2846213a80c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d97668-829c-4f96-a774-030ae1e6b3d2", "sighting_of_ref": "indicator--ae8f47d2-efab-44f7-986e-8a28398f1ee2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9996a2-9beb-4536-a8af-3d6befd7a77f", "sighting_of_ref": "indicator--ae8f47d2-efab-44f7-986e-8a28398f1ee2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e441c9d4-68ef-4dfc-aa3b-cad76b65c17c", "sighting_of_ref": "indicator--ae8f47d2-efab-44f7-986e-8a28398f1ee2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f461821-abf3-46cc-accd-058dcdc4552b", "sighting_of_ref": "indicator--490ac637-9659-4cc3-9bd4-cb567413d8da", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1dc9a2f-c89f-4726-bf2c-70c3f30a438a", "sighting_of_ref": "indicator--96c7b626-6d34-4a90-9eb7-148b00c4c94b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ae50d0-ffbb-48ae-b13f-c0e131078885", "sighting_of_ref": "indicator--96c7b626-6d34-4a90-9eb7-148b00c4c94b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bdb9dc-68b6-482c-a979-82b0ecd81667", "sighting_of_ref": "indicator--a89e13ae-5de5-4a82-a3a6-711d9957c011", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3cbf7e4-7afb-4cb8-ad24-7321326276b6", "sighting_of_ref": "indicator--a89e13ae-5de5-4a82-a3a6-711d9957c011", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6c8f34-e79c-4a6c-bac6-da0844474d91", "sighting_of_ref": "indicator--5549c8cd-8436-4aac-b30b-e5c608aaf91d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f583b2b1-3363-4e92-8693-ee040554dc40", "sighting_of_ref": "indicator--5549c8cd-8436-4aac-b30b-e5c608aaf91d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efaa0e77-cf3b-4dc1-b0c5-d49e51bc91a7", "sighting_of_ref": "indicator--12e263dc-f610-48c1-a8d1-777cebb9d39d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d3dc3e-fc1a-406a-a9e8-6211656fa99d", "sighting_of_ref": "indicator--12e263dc-f610-48c1-a8d1-777cebb9d39d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963d3c93-e6ff-4625-b71a-73e5c17e8859", "sighting_of_ref": "indicator--12e263dc-f610-48c1-a8d1-777cebb9d39d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac93618-eb70-48b2-9c44-2b49456b1b13", "sighting_of_ref": "indicator--d07ae77c-598b-48fc-9354-7b6ef5e14a76", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46e03ab-f9ab-4536-bae2-a57592a23d92", "sighting_of_ref": "indicator--d07ae77c-598b-48fc-9354-7b6ef5e14a76", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5a717e-85c8-4637-86d8-e81ff3f40e35", "sighting_of_ref": "indicator--027daf29-dacb-4535-a4e5-a5fe01c8ef82", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67d50da-d587-498d-ad04-463c9e13a6ac", "sighting_of_ref": "indicator--027daf29-dacb-4535-a4e5-a5fe01c8ef82", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78996437-1693-4bfc-8ce3-a285cbbc2fde", "sighting_of_ref": "indicator--36696c31-935f-4625-817c-6ab01b318dd2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1d2e4e-1317-4ab7-bc59-0d6e8806cc9b", "sighting_of_ref": "indicator--36696c31-935f-4625-817c-6ab01b318dd2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06da8ea-fbf4-4e84-b347-737c2754e6e8", "sighting_of_ref": "indicator--885642bc-a6c1-4675-aa7c-faeb408ce160", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1dfe4d9-3073-4e14-aca3-a939212e2ca2", "sighting_of_ref": "indicator--eb3cedfd-af20-440e-9aa5-3547523011ef", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc284fd-9e6a-4f41-b4ca-b4aa7aebbdd0", "sighting_of_ref": "indicator--eb3cedfd-af20-440e-9aa5-3547523011ef", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41fd3338-ead2-41ab-a7fb-0aa855bd8ad3", "sighting_of_ref": "indicator--338f1f9b-5344-4397-8b16-a9e9bd644964", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2adfab-9ed7-48b6-a875-10c31a753870", "sighting_of_ref": "indicator--338f1f9b-5344-4397-8b16-a9e9bd644964", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37e3301-4e26-4737-b398-86315c4011f7", "sighting_of_ref": "indicator--ca9b4f65-06e8-47c7-9d7b-c83793be3389", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed82e7a-24f8-4d1c-a1f6-a8afd77f2a76", "sighting_of_ref": "indicator--ca9b4f65-06e8-47c7-9d7b-c83793be3389", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8923a9e9-8e78-46eb-8152-288acce933f5", "sighting_of_ref": "indicator--1535b2c2-12e6-49df-9da2-3239854f12bc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab01d09f-576b-4b33-a91d-80034a741780", "sighting_of_ref": "indicator--1535b2c2-12e6-49df-9da2-3239854f12bc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a113321-03f2-44fa-a423-f27e3c538859", "sighting_of_ref": "indicator--29e26e4c-bfc0-438f-89ef-75484fc769f4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c07af60-59bc-46b4-9c29-fc0bbe97c00c", "sighting_of_ref": "indicator--7ee27fc9-e19d-4cc8-b856-e0f70f36f67f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78d272c-3b0c-4b58-8df2-408f6c9f6232", "sighting_of_ref": "indicator--7ee27fc9-e19d-4cc8-b856-e0f70f36f67f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c589ff1-d694-45f0-aa99-78ebde4f0931", "sighting_of_ref": "indicator--45b6fe4b-94df-489a-882a-342ed77373a6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9e0d5f-6546-40b6-9bcc-a11da9219766", "sighting_of_ref": "indicator--45b6fe4b-94df-489a-882a-342ed77373a6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9495b41b-a797-4d1c-a862-db16b1b1415d", "sighting_of_ref": "indicator--45b6fe4b-94df-489a-882a-342ed77373a6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf445cf-342c-46c2-abd2-a93d6002bcc9", "sighting_of_ref": "indicator--2bf59977-bef4-435b-ab4f-937b5c938bbd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89de66e-1527-41e8-abb0-5aad67eb1595", "sighting_of_ref": "indicator--a1d89bf7-dbf5-4fab-812f-75413067c04b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614121e8-2380-4b7b-8c57-fad248531dd4", "sighting_of_ref": "indicator--299b374c-83e0-4182-8dff-2ee43c4ac036", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2040ed3f-56bc-462d-a299-66e72618f936", "sighting_of_ref": "indicator--299b374c-83e0-4182-8dff-2ee43c4ac036", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f24391-a286-452a-8018-7369c8fe3d45", "sighting_of_ref": "indicator--b09e4c0e-94d7-4b10-a2dc-8393207f9535", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc726f16-2fd7-4746-bf63-532b8e5e9581", "sighting_of_ref": "indicator--b09e4c0e-94d7-4b10-a2dc-8393207f9535", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0087dca3-c66d-4abb-9863-ec935d25473a", "sighting_of_ref": "indicator--2942f8db-9851-4e89-aa71-d86a11154a55", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb50e3fb-0d15-4ff9-95d9-8c788b318072", "sighting_of_ref": "indicator--2942f8db-9851-4e89-aa71-d86a11154a55", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b96e876-e284-4711-ad41-0c8c320c0e93", "sighting_of_ref": "indicator--92b760de-648f-406e-9693-5ea088d7d5d9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6407d51f-7901-49c1-b3fc-fb39e86748de", "sighting_of_ref": "indicator--cf38b469-00c8-462f-b942-74deac850559", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9269f284-95b6-4e31-8082-9de574deb3fe", "sighting_of_ref": "indicator--96ab74c3-5482-4170-ba6f-22ba7e5766e0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5f0251-907b-4909-b602-20216c83229b", "sighting_of_ref": "indicator--80d347c1-e3d9-415e-88c4-0ae815e729f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e24b31d-8056-479e-b9af-a1e6b85c88c0", "sighting_of_ref": "indicator--80d347c1-e3d9-415e-88c4-0ae815e729f2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a19aa0-bf62-4732-8463-4c59d17cdd41", "sighting_of_ref": "indicator--7b85ce2e-41e4-498c-81fe-6386a11e7c97", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b1e239-3b2f-4db8-9cc5-1418490a7357", "sighting_of_ref": "indicator--50276501-6233-47d0-babf-4a9c9fbe3f64", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ebbcbd8-204a-46a4-9f66-ffd19543f23d", "sighting_of_ref": "indicator--98f46d97-ba7c-4290-b9fa-67c8d5943966", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50eb993-e9ac-4585-a9d1-c598c7fcfc96", "sighting_of_ref": "indicator--aba64af3-52c2-4e0e-a507-90dcc608300e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2940e638-4763-4232-b9f5-cbc81afa701d", "sighting_of_ref": "indicator--c0fcec51-178b-4819-be30-4d83b20e35d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9634418b-949f-40cb-a712-0fa16020c78e", "sighting_of_ref": "indicator--9ee5c0cb-ada8-4616-b3d4-fefc84963f62", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4650b3f-0c47-4c0f-ab8b-0531e5a7302d", "sighting_of_ref": "indicator--9ee5c0cb-ada8-4616-b3d4-fefc84963f62", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0173247d-c68c-4a4f-83c6-7fc90ae0ffad", "sighting_of_ref": "indicator--b4bbfd51-0690-43ae-9736-7d26a0b46495", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd30c8e6-b1de-483f-9782-c15d11976921", "sighting_of_ref": "indicator--b4bbfd51-0690-43ae-9736-7d26a0b46495", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0a8496-1295-491f-9e64-4581c8c61e72", "sighting_of_ref": "indicator--00be4abe-8989-4494-abee-f5f80d54d6ea", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58088042-1823-40b3-92a1-503204abbf02", "sighting_of_ref": "indicator--a048af49-234a-44d4-85b5-71602ac71a74", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42195c5e-194f-4fd1-9709-3db46ac671f6", "sighting_of_ref": "indicator--a048af49-234a-44d4-85b5-71602ac71a74", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cf6fcc-852d-4968-9771-0870a3965c1c", "sighting_of_ref": "indicator--410ed5bf-372d-46c0-955d-548902335ab4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730969aa-5a29-4ae3-8eed-5fa510f6cd10", "sighting_of_ref": "indicator--410ed5bf-372d-46c0-955d-548902335ab4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bc1b5a-f210-4041-9517-06fc62005e73", "sighting_of_ref": "indicator--796f22bc-b16c-442a-b06b-7f214a61fea9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65eab56d-6048-4abb-84fd-5bbe828d81c4", "sighting_of_ref": "indicator--9382a47f-4db6-4ec5-8804-12ec8511ecb1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d6fc27-0fff-4436-b4df-b408cb333246", "sighting_of_ref": "indicator--9382a47f-4db6-4ec5-8804-12ec8511ecb1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4b46b5-149e-4756-9267-976d56917e3a", "sighting_of_ref": "indicator--692089cd-124e-4e2d-8997-4aa216cb6c90", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f318aa-3ec4-47e9-b916-80fc6c2bbb49", "sighting_of_ref": "indicator--692089cd-124e-4e2d-8997-4aa216cb6c90", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3070a3-56ec-4198-851b-44a3860a4bed", "sighting_of_ref": "indicator--9422ba70-b73d-4241-82f2-b621b5fb3cc7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1e1e63-2a4f-41af-9e20-64f0e664165c", "sighting_of_ref": "indicator--82d94dd1-dd88-4d8c-b4f5-976391593a0c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024580f9-2388-4b98-9c2d-a168aa86ede5", "sighting_of_ref": "indicator--82d94dd1-dd88-4d8c-b4f5-976391593a0c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e1c13f-abcb-4466-919f-bda89811572e", "sighting_of_ref": "indicator--e3578b24-eea8-4a8c-80b3-6ed9548b32b1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16e9159-25c2-4693-820c-76d9cdf68ff2", "sighting_of_ref": "indicator--c0f5f984-67c4-4154-9a80-cef5ec7c89db", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0801c68b-1eab-4a5b-a72b-3ad8daaeba3b", "sighting_of_ref": "indicator--c0f5f984-67c4-4154-9a80-cef5ec7c89db", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229d8e10-48f3-45f1-a3a0-90e843fc45f2", "sighting_of_ref": "indicator--c0f5f984-67c4-4154-9a80-cef5ec7c89db", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f43b0c-a9e4-4357-a1e5-cdb65374e7c0", "sighting_of_ref": "indicator--e475f365-7d35-4ad2-b863-bdcff685c447", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef584dc1-fcce-40b8-9b64-2ce18573c910", "sighting_of_ref": "indicator--a4223af5-0996-4068-aa19-66c93b9e378d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4eca16-794b-42a4-9675-f9b12b78a13d", "sighting_of_ref": "indicator--a4223af5-0996-4068-aa19-66c93b9e378d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd997897-c941-4ee8-9010-5f78651f313a", "sighting_of_ref": "indicator--80ee31b9-c097-4a07-bf4d-7d2cbccf693f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fda2dd-ad59-42d8-852d-782142e05fb0", "sighting_of_ref": "indicator--9abcd108-2005-42c7-bd85-b1edad8107e8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19cfe94-49e5-4524-a550-3f6a2e1ccbbf", "sighting_of_ref": "indicator--9abcd108-2005-42c7-bd85-b1edad8107e8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182083f2-d582-4e52-b5d7-66ba92b4f1b8", "sighting_of_ref": "indicator--0480b946-8ef4-4fd5-9759-33563fa1855d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493fd3a9-88de-4fb1-81ef-4f3a0363ecc3", "sighting_of_ref": "indicator--0480b946-8ef4-4fd5-9759-33563fa1855d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a46976-6d6b-4104-ab3a-13459f63e4ed", "sighting_of_ref": "indicator--39a0fc83-93a6-48de-8a31-8a3254ee8611", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f15a359-e97a-4eee-ace9-ddf3601404af", "sighting_of_ref": "indicator--355bb660-0248-4bda-9943-b02d478b8828", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61eab66-4d98-4e98-9805-543654344c79", "sighting_of_ref": "indicator--355bb660-0248-4bda-9943-b02d478b8828", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6ab0d4-2d9f-4a28-8a8b-2f9a6dcf5b41", "sighting_of_ref": "indicator--186eb1aa-5dce-4524-8f5e-4d491f130b2d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c30ef2e-24b1-4db0-b392-46e9148c9ef8", "sighting_of_ref": "indicator--19282ab0-955c-4086-b5d2-478adcff8d3d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9055e6f3-2c04-49a9-ad5e-aa75d436e528", "sighting_of_ref": "indicator--16e9c01e-51c1-40e7-9519-724a66752215", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e48192-d00e-4375-a325-fab19a1bc65d", "sighting_of_ref": "indicator--ab3c41a9-397f-4bb1-bedc-e97ee8f25b3e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb1be02-8954-4ace-8029-e58244907bc6", "sighting_of_ref": "indicator--ab3c41a9-397f-4bb1-bedc-e97ee8f25b3e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ae2ed1-c9b6-4d46-9b31-1a3bca98ca56", "sighting_of_ref": "indicator--d1a6a247-0a45-4f73-bae6-7d9a9c2c4592", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a151039b-49dc-4930-a727-4bf24a75822b", "sighting_of_ref": "indicator--d1a6a247-0a45-4f73-bae6-7d9a9c2c4592", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61720c6a-81a5-4f63-8ed3-15fd3d17c378", "sighting_of_ref": "indicator--5734a2fe-1cee-4d1a-b8c2-e5291d601849", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0ce814-2da9-457b-be56-cae7b6699349", "sighting_of_ref": "indicator--3bbf50e8-73f6-40be-a80e-a09531027607", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab4833f-c2fd-4dff-929f-61d482ffcee8", "sighting_of_ref": "indicator--3bbf50e8-73f6-40be-a80e-a09531027607", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad28e5f-483e-4ce1-a6b1-0ef01b5b50fb", "sighting_of_ref": "indicator--800f412d-9584-4e32-8fe8-23800c83e14b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26d52ce-ed9d-44cb-a7c0-9e54126c7abc", "sighting_of_ref": "indicator--800f412d-9584-4e32-8fe8-23800c83e14b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66422cb-2e7c-4347-9e68-9709b349e737", "sighting_of_ref": "indicator--d3250c58-b4b3-4718-a0be-4888e2814df2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040fca13-dc40-4e83-bdaf-f24414b47fb3", "sighting_of_ref": "indicator--840349c0-1110-4d81-a219-66b1b0f64245", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50238451-bb2f-4245-8c11-92bc0afb3640", "sighting_of_ref": "indicator--fc42bac7-d411-4588-aaf8-6eea2b99a6d7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fcf485-378c-4c7d-971f-561bd6ce78e9", "sighting_of_ref": "indicator--1156419b-5a70-4338-8ec8-6fec7c1a339a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93abd98-c423-4a86-8d43-3bb91d42597d", "sighting_of_ref": "indicator--1156419b-5a70-4338-8ec8-6fec7c1a339a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84345a5a-121f-4706-a75f-c69ab4cfa2cb", "sighting_of_ref": "indicator--1156419b-5a70-4338-8ec8-6fec7c1a339a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f540411-5bf5-46e8-9ba7-c213694a24fc", "sighting_of_ref": "indicator--033d7ff4-638f-4447-821d-af81cfae71ff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be7c9c3-bab7-408c-8c68-4d32b7fa0189", "sighting_of_ref": "indicator--92142b58-79db-4c24-ac2d-eba1edbb7cab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2629a98-23f1-4376-9336-f9a96baddac1", "sighting_of_ref": "indicator--92142b58-79db-4c24-ac2d-eba1edbb7cab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9111f7-ab0b-4de8-a3e2-e98e16b7d839", "sighting_of_ref": "indicator--6fcb35d1-3185-4b70-ba19-afb2a31cec76", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8d1fca-5ace-4a95-8a14-d5dab094c0e1", "sighting_of_ref": "indicator--c5ad2719-3e39-44ac-bcbf-dbe7d80d2f5b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2d6c4e-7ee9-425a-a50e-5b0f5be20d6e", "sighting_of_ref": "indicator--0428c8de-bed9-47a0-bb51-6561f97be245", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132e0389-3b5c-49ef-b157-b742728c1bd4", "sighting_of_ref": "indicator--3fd0fe55-ae41-48a1-904b-789b1e85d9db", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd0f4a0-ec05-453d-9c3d-d3123008ef32", "sighting_of_ref": "indicator--3fd0fe55-ae41-48a1-904b-789b1e85d9db", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ac5fde-1272-4e47-905d-d8fdaf6bcc38", "sighting_of_ref": "indicator--93ba3c91-d1ec-4c13-aa18-ef2d3c033fb6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4f289a-19c5-4525-9395-72c478708a42", "sighting_of_ref": "indicator--93ba3c91-d1ec-4c13-aa18-ef2d3c033fb6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c585120-1500-4eb2-b679-618ccc8407fe", "sighting_of_ref": "indicator--93ba3c91-d1ec-4c13-aa18-ef2d3c033fb6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396aab57-2159-4890-8e82-6db37ba59b54", "sighting_of_ref": "indicator--75e314b6-77b0-481c-b26f-4b6510193622", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a29bff-eb59-4a73-917b-049510046d20", "sighting_of_ref": "indicator--a8719457-df98-4096-b131-0ccb10aa6a05", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d9cc0f-b39c-4185-a9bc-3c1ee198937e", "sighting_of_ref": "indicator--cb8eeb66-5791-4a36-a31f-e2a2b0e0bb4f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2b55c8-3f28-4114-a1a9-e2e925012d14", "sighting_of_ref": "indicator--cb8eeb66-5791-4a36-a31f-e2a2b0e0bb4f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a093806-7a3b-4844-9641-f884b66b5536", "sighting_of_ref": "indicator--34fc0aa7-46da-4b18-b546-4738e0f45faf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7d4c33-59c5-4b97-bb4e-811a55c51327", "sighting_of_ref": "indicator--34fc0aa7-46da-4b18-b546-4738e0f45faf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de8ebc4-8543-464e-8603-565985f39f6a", "sighting_of_ref": "indicator--77e45d29-3423-4c21-93dc-d2ad09fa53e0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7918a720-bb23-45db-b065-d5dd56eb0f67", "sighting_of_ref": "indicator--77e45d29-3423-4c21-93dc-d2ad09fa53e0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73442ed1-a965-405a-9b25-af9e69e488dd", "sighting_of_ref": "indicator--1e127a46-acf7-4dc2-98ad-3076fd717ba9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef6caaa-cd56-48f8-9fb6-f5e36f740dac", "sighting_of_ref": "indicator--4af6ca1b-41a1-430a-a328-10c1cc46c08d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2555edd5-6b1c-4d95-afb7-fb2ac418b422", "sighting_of_ref": "indicator--4af6ca1b-41a1-430a-a328-10c1cc46c08d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8782f006-9caf-4d43-a421-1360f0d8de04", "sighting_of_ref": "indicator--4af6ca1b-41a1-430a-a328-10c1cc46c08d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352198a2-92ee-483f-b230-933b89e0bf5d", "sighting_of_ref": "indicator--f3d60c09-ed9c-44f8-bc89-719c62eb1033", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e454b142-52bb-4c81-b250-d356dc88b785", "sighting_of_ref": "indicator--007d9c4f-11fc-46a9-894c-e01488511457", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83837758-34e8-44d1-a931-dd62b011a571", "sighting_of_ref": "indicator--007d9c4f-11fc-46a9-894c-e01488511457", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c187bba2-fe7a-4455-882a-86190ad3a1f5", "sighting_of_ref": "indicator--cfbf2b22-afb0-4b81-89bd-97cd8f545d81", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1e9600-727c-4070-8e92-46d371459d08", "sighting_of_ref": "indicator--c22a5ba0-49f0-4c6b-8704-ffb13865f634", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80993e82-b753-40fe-94ec-2f5fc962018b", "sighting_of_ref": "indicator--c22a5ba0-49f0-4c6b-8704-ffb13865f634", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1491795b-ea19-46f6-bcad-e314b51f8f11", "sighting_of_ref": "indicator--fd2fbeb3-7f5d-430c-b962-67d5a0f962f5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efece826-09e9-4408-8f6c-d59caec20182", "sighting_of_ref": "indicator--fd2fbeb3-7f5d-430c-b962-67d5a0f962f5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8891f0-52e0-461c-b96f-1c730732404d", "sighting_of_ref": "indicator--537777b4-ac48-40a4-8602-cbfa5be83667", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0203f364-d4ef-4fde-9f81-72c73bfae804", "sighting_of_ref": "indicator--537777b4-ac48-40a4-8602-cbfa5be83667", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfd1683-555a-4a7b-ba7d-494036636bd7", "sighting_of_ref": "indicator--e60a4ca3-5959-4dbe-aff2-c2e380c531a1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d963d045-7436-4ca4-ab45-10857578294a", "sighting_of_ref": "indicator--e60a4ca3-5959-4dbe-aff2-c2e380c531a1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec902d39-e64a-42d8-ada8-65acdd9670a7", "sighting_of_ref": "indicator--d6d45697-21a0-4252-8ac8-c5e32513985e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d792264-e46c-4416-b426-cdd58b114d4b", "sighting_of_ref": "indicator--d6d45697-21a0-4252-8ac8-c5e32513985e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d44c00-9566-41fb-8656-7fbc979b72d8", "sighting_of_ref": "indicator--d6d45697-21a0-4252-8ac8-c5e32513985e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c425ff6d-02c9-490f-8de7-0b7dec65f721", "sighting_of_ref": "indicator--58549cf8-0a17-4330-adba-29c3d1cbc686", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbb5a28-0887-44d3-b520-f579249975e5", "sighting_of_ref": "indicator--58549cf8-0a17-4330-adba-29c3d1cbc686", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328989a1-29f9-4eb9-b66b-cde66b9f4aeb", "sighting_of_ref": "indicator--58549cf8-0a17-4330-adba-29c3d1cbc686", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11aae14d-f77f-4c5d-a3d8-69d812c4aec4", "sighting_of_ref": "indicator--2a836621-b887-4c43-8b4d-e4fb55217755", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717de23c-b9ac-46f7-b046-e6af1d7b25e7", "sighting_of_ref": "indicator--8f2c4579-7b0b-4034-8622-5c1d80502126", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8172116-57c9-45a2-9ce8-17a672372879", "sighting_of_ref": "indicator--2285357c-f720-4fbb-b98d-4a909ccd218d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9535f32d-a2ad-4248-b9c2-f5133bd9d906", "sighting_of_ref": "indicator--76a739b2-89f0-473c-930b-e300cac8f1ca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e00acf-5ba1-4982-ba6a-af3bff8883c6", "sighting_of_ref": "indicator--76a739b2-89f0-473c-930b-e300cac8f1ca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d74d0b-0f01-41e2-9262-5d49f7c37080", "sighting_of_ref": "indicator--76a739b2-89f0-473c-930b-e300cac8f1ca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bda2bc-074b-4120-86e0-8b1caf7554f1", "sighting_of_ref": "indicator--829d65eb-ba1d-4028-a26b-00d585d67685", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa7da12-26c0-4570-a73c-db26cf10c65e", "sighting_of_ref": "indicator--829d65eb-ba1d-4028-a26b-00d585d67685", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db84e9e-03ff-4fe3-9b3c-f4bae0f6e99f", "sighting_of_ref": "indicator--baef765c-d5c6-4856-a988-8e31009f214d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba156d6-9dd3-46b3-a6ec-5578ac8bce4f", "sighting_of_ref": "indicator--baef765c-d5c6-4856-a988-8e31009f214d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1f3cab-a3bb-4c81-a3d7-14620ba9cc9e", "sighting_of_ref": "indicator--baef765c-d5c6-4856-a988-8e31009f214d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1b1493-eba7-4a69-8424-44374e0a4fa8", "sighting_of_ref": "indicator--3c503794-8f2f-4d70-b5a9-8279d588f533", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22960757-13dd-4019-bc99-d0a153262075", "sighting_of_ref": "indicator--3c503794-8f2f-4d70-b5a9-8279d588f533", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5fedc99-dd2c-4dab-83d3-73af13d336f3", "sighting_of_ref": "indicator--3c503794-8f2f-4d70-b5a9-8279d588f533", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b1629f-6d73-4fff-b185-0095a5f23d5e", "sighting_of_ref": "indicator--7049e6b9-b473-4fc2-a598-7c834f11b37d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e27064-392e-454e-aeae-d75c326298f2", "sighting_of_ref": "indicator--7049e6b9-b473-4fc2-a598-7c834f11b37d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3770bcb4-e9f7-45e0-ab2c-bd6a332f8d99", "sighting_of_ref": "indicator--9b813d59-72b8-4430-b59b-a67b672a0181", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47750064-d90e-4d92-8ca0-ea136690461c", "sighting_of_ref": "indicator--1f70d78b-861f-477c-b6a2-0c8163118d30", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82db65f5-6afc-437a-975f-a3d6f93b4ca2", "sighting_of_ref": "indicator--f0409550-724f-4b7f-8a18-74b273aff17d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e521e841-932d-4338-81fe-34bee8f1e93e", "sighting_of_ref": "indicator--f0409550-724f-4b7f-8a18-74b273aff17d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023ab2b2-a8c5-426b-bb37-8dcba0d5c16e", "sighting_of_ref": "indicator--b04221c8-01fa-404c-aff7-8fdf12e79ae4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b536573-1014-4d04-b52d-8af5a025dbff", "sighting_of_ref": "indicator--b04221c8-01fa-404c-aff7-8fdf12e79ae4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0777053c-a266-436f-bc1e-376cd0c39853", "sighting_of_ref": "indicator--abe2f5b0-a865-49c2-a791-dc955528dfc7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8350c221-442e-4cd1-b420-115018f9b640", "sighting_of_ref": "indicator--abe2f5b0-a865-49c2-a791-dc955528dfc7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8081f70e-79c4-41a8-b5f2-fade73aa73b0", "sighting_of_ref": "indicator--29330583-21fc-4636-917f-a1e9cb56ff60", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d546be-3ff4-459d-abc8-3a48ba56ef84", "sighting_of_ref": "indicator--29330583-21fc-4636-917f-a1e9cb56ff60", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f08b2ee-2dbc-4d03-9a62-b98d773ad469", "sighting_of_ref": "indicator--90fe4662-71a1-4e0d-880e-e02de29f949c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c88341f-21aa-415f-b08f-b084eedc5f3c", "sighting_of_ref": "indicator--90fe4662-71a1-4e0d-880e-e02de29f949c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba593739-8961-41e7-9f33-f9838b031ea5", "sighting_of_ref": "indicator--43d29be3-d77a-429b-8bd1-97bc09b6613a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf10e01-ecb1-48b7-9da9-bb26770d06a7", "sighting_of_ref": "indicator--a69ab761-1ff1-425d-87b7-970ab7889d49", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d88bad1-3dd3-424b-841b-28384af06fb9", "sighting_of_ref": "indicator--a69ab761-1ff1-425d-87b7-970ab7889d49", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470ed9e5-72a3-4b35-9f8e-923dd128a559", "sighting_of_ref": "indicator--e68ee276-b910-485f-8db3-c26a256f1d81", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ad0357-fc21-49b8-8dfe-422fe341674e", "sighting_of_ref": "indicator--8015a501-4f06-4598-8cb5-d9e07f935c06", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6132a39-28cd-43bc-afff-cf681cbba38c", "sighting_of_ref": "indicator--a1edc3f3-1d62-4a22-a257-916788276cce", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b3a97a-439a-4222-bade-501fe5d7f909", "sighting_of_ref": "indicator--a1edc3f3-1d62-4a22-a257-916788276cce", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6844fbea-ce81-4979-98bf-6787d56a9200", "sighting_of_ref": "indicator--a1edc3f3-1d62-4a22-a257-916788276cce", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4624a7eb-ec8a-4b6f-be70-1c6a13570641", "sighting_of_ref": "indicator--b2147436-df26-4194-8c11-d5f4331be005", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef9373c-bcc4-4872-b729-2ce90b3df68a", "sighting_of_ref": "indicator--39477ffb-2d89-49ad-a1c5-3409619d77c1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5afdf2-0916-4bc4-b831-33512af74bee", "sighting_of_ref": "indicator--39477ffb-2d89-49ad-a1c5-3409619d77c1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f117c62-0bd6-44f6-92c7-67e9adf23e53", "sighting_of_ref": "indicator--e92c6e49-05f3-4257-965d-2c699f0be238", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9228d6-7af1-4c11-941e-a22fab034cc6", "sighting_of_ref": "indicator--e92c6e49-05f3-4257-965d-2c699f0be238", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e562b298-6c20-4632-acd8-33e87ce64df9", "sighting_of_ref": "indicator--fa35966a-6369-40ff-bcb6-abf56ea9d8bb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e812ba5-c45b-4626-a228-1d1151d4cb35", "sighting_of_ref": "indicator--fa35966a-6369-40ff-bcb6-abf56ea9d8bb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59cd922-66fd-4cb0-af5a-8c0fcfa9634e", "sighting_of_ref": "indicator--e39f500c-fde7-438f-b7aa-f0854c88b255", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1288b1e-f538-4f76-b665-291a00c0cfa9", "sighting_of_ref": "indicator--9cab0f24-03b1-4f16-b228-953d9f43369d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8d6042-dad2-4f33-b5a0-d1583e4ce895", "sighting_of_ref": "indicator--9cab0f24-03b1-4f16-b228-953d9f43369d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4174e8-af6b-4e9e-8bbb-f51e44b5ef39", "sighting_of_ref": "indicator--d8825150-c110-4e35-a539-b4c4d76067cd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa678c8-f01e-4f29-bf08-17cb08b4ab54", "sighting_of_ref": "indicator--d8825150-c110-4e35-a539-b4c4d76067cd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3940f283-46f4-4b87-805b-5fa3b5259bde", "sighting_of_ref": "indicator--6b332b6c-9cb5-455f-8aa4-2c855c00dfb0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf3c6dd-1b36-4afa-8f33-a5d012d44ca3", "sighting_of_ref": "indicator--6b332b6c-9cb5-455f-8aa4-2c855c00dfb0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df26be0b-a705-4783-82b6-8815a5a2a6f2", "sighting_of_ref": "indicator--49cefcfb-fd05-41d9-8b1e-ae1077088cd3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad2519d-f96f-4e4d-87ad-3e44f364c3d0", "sighting_of_ref": "indicator--49cefcfb-fd05-41d9-8b1e-ae1077088cd3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1428e906-d379-49fb-be98-dae9a7a223ca", "sighting_of_ref": "indicator--49cefcfb-fd05-41d9-8b1e-ae1077088cd3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311f99a1-68cb-47a7-9bc5-51e7fedb0460", "sighting_of_ref": "indicator--9fb7f91c-d145-4e93-bba9-72bf2ec516cb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188e152e-0d63-4b68-b5e9-b5aa0c95f409", "sighting_of_ref": "indicator--c728e403-b72c-43cd-beac-e52959f3fe61", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2874484a-730d-4bb4-a420-7f80f63354f2", "sighting_of_ref": "indicator--c728e403-b72c-43cd-beac-e52959f3fe61", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc63a9c-d203-47af-9c72-95071c86a356", "sighting_of_ref": "indicator--c728e403-b72c-43cd-beac-e52959f3fe61", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fea557-001a-4f79-a167-bbddabcbf2d9", "sighting_of_ref": "indicator--27e4008d-b68a-4c67-a61c-aa8d90c609e3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4ecbea-ffc5-47db-87c4-67ed19aa99a4", "sighting_of_ref": "indicator--27e4008d-b68a-4c67-a61c-aa8d90c609e3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa39e623-aaca-46ad-a392-cc51fd9feffa", "sighting_of_ref": "indicator--cd5e2f69-6fc0-48c2-a01d-32681b6e514d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a66728-8e28-4237-9090-80eb1fc6b9cb", "sighting_of_ref": "indicator--e82ee0dc-a691-4577-9bec-6112ee134a1a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde04204-6e9c-49f9-8f95-d101aac3d9d7", "sighting_of_ref": "indicator--e82ee0dc-a691-4577-9bec-6112ee134a1a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023ac3b3-8e71-48a7-bba5-89fefa88c015", "sighting_of_ref": "indicator--e82ee0dc-a691-4577-9bec-6112ee134a1a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689d500e-2bd0-49e5-bbff-569e8e4d77fd", "sighting_of_ref": "indicator--27f5ddd0-7ac2-4b00-ac83-c95f0dfbf0e8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d56f38-c89f-4557-82bf-6a2a78f70bb3", "sighting_of_ref": "indicator--50e844fe-9353-4796-a354-feb876f12a78", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435ace75-7ec3-4027-bac5-c647c83a7c06", "sighting_of_ref": "indicator--50e844fe-9353-4796-a354-feb876f12a78", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6bacd5-1ad5-426c-9883-5e177bcc8d5b", "sighting_of_ref": "indicator--30f25e96-0951-4bb9-8859-974bc18e994c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fd36af-6ade-40ac-b109-b9d4ec0009a0", "sighting_of_ref": "indicator--30f25e96-0951-4bb9-8859-974bc18e994c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f482fc-a650-44da-bb32-676966f316ed", "sighting_of_ref": "indicator--20c6854f-116a-4a7a-b5d5-8fc48c84e917", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e5f22f-299b-4a78-b4c1-4c94667e6a9c", "sighting_of_ref": "indicator--20c6854f-116a-4a7a-b5d5-8fc48c84e917", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18cca2d-3b5b-4a96-bcb1-b1312054acbe", "sighting_of_ref": "indicator--20c6854f-116a-4a7a-b5d5-8fc48c84e917", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fab7c0-5f88-42b3-ac2b-6be55be1fa6b", "sighting_of_ref": "indicator--0fa9e484-acc8-461c-806f-321ca6c32af8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8396efae-947b-46de-855e-d5483f50d015", "sighting_of_ref": "indicator--f03181a0-fd0d-4783-a141-e18473b5fb8f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403f742f-21f4-4b06-b15f-152c6c6ce1aa", "sighting_of_ref": "indicator--357d64d2-6092-418f-bdb0-3eeb4653741c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc31622-e15d-4cdb-8218-9b3937bbc713", "sighting_of_ref": "indicator--6b4bd8f1-cfab-4314-bef1-12d2679b7669", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f76ff9-cd18-4839-9644-e36c802d2826", "sighting_of_ref": "indicator--6b4bd8f1-cfab-4314-bef1-12d2679b7669", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbe6d88-a62f-4480-abc7-d024052d5e33", "sighting_of_ref": "indicator--6b4bd8f1-cfab-4314-bef1-12d2679b7669", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc5671d-0740-4f5b-9e92-d2d9eca2aa39", "sighting_of_ref": "indicator--c8d497c0-5f14-46c8-ad73-49e4e7dfc614", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0667ce2-5a3c-4aec-97de-00c442926053", "sighting_of_ref": "indicator--1e6e1530-8c49-48c2-8154-92fc3b99c1ea", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6f6c3c-cd38-4be4-9e2a-a26aed2bd905", "sighting_of_ref": "indicator--1e6e1530-8c49-48c2-8154-92fc3b99c1ea", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95d79ae-23f4-4c32-b971-ed2883d00553", "sighting_of_ref": "indicator--cbccbb39-b942-44d4-a530-49ce3cb294ec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7468ce9f-29b8-427d-966e-204bd5d08fd9", "sighting_of_ref": "indicator--6ae5d046-2aea-4253-8c9b-87cb9e5b9319", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f07977-6e85-45e6-b6e7-c90f0172f9ee", "sighting_of_ref": "indicator--6ae5d046-2aea-4253-8c9b-87cb9e5b9319", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c575e47-6209-4b8d-90db-d8312f4708c7", "sighting_of_ref": "indicator--ae23d2bc-a07e-498c-a09b-4e6a6b8cc006", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43842ff3-3c37-4563-babb-de2ed096b13a", "sighting_of_ref": "indicator--ae23d2bc-a07e-498c-a09b-4e6a6b8cc006", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf0cef0-7ec2-4a84-bf51-01aba26e1e53", "sighting_of_ref": "indicator--ebd37983-a26b-42ba-83a9-3c6327536491", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995dbe71-884a-414f-8765-e525e206961a", "sighting_of_ref": "indicator--a1f58156-7517-4249-bf0f-fd66df548d42", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9b0e82-a245-4c45-b9fc-40d639b3a4c0", "sighting_of_ref": "indicator--a5320328-0c2a-445e-b623-f30dad461ace", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fcfc33-8516-48de-abe2-cc173629ee94", "sighting_of_ref": "indicator--9154926b-639c-4d87-af65-c2ee5d29731b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175d2f77-eceb-4321-82b0-68efe9cb5c44", "sighting_of_ref": "indicator--9154926b-639c-4d87-af65-c2ee5d29731b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946d2cba-dbc1-4461-b7ed-9f660d844bff", "sighting_of_ref": "indicator--9154926b-639c-4d87-af65-c2ee5d29731b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23da49e6-7cb8-4bf8-a19f-f891e9dba487", "sighting_of_ref": "indicator--a973672f-bc88-4ad4-99d5-600e7d17dd09", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d34456-2b1e-488e-97a8-9483fc9bdfc7", "sighting_of_ref": "indicator--a973672f-bc88-4ad4-99d5-600e7d17dd09", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b536ab46-bd92-45cc-a0fb-0ee879eecd30", "sighting_of_ref": "indicator--e33bd149-ccd7-4c8c-8a87-7cdec29e1ea0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c0c13f-cc40-458f-8da9-0257122472b5", "sighting_of_ref": "indicator--db2efb22-d910-4e50-aaf0-7d97bd3779e6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec8ccc5-e4cf-465a-9438-dd8a1afd2477", "sighting_of_ref": "indicator--b3f2e560-3462-4702-bcce-ec20a6c19452", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd0797b-6983-49f1-9018-2ae50d5e7c12", "sighting_of_ref": "indicator--55a78aea-6f38-4574-a8a7-87bf76530a4e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf5fc2b-7b8c-4ba6-a896-2de05c964936", "sighting_of_ref": "indicator--21e459b9-423c-4c1b-bf69-26cbee846bc7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0d8a6a-0f19-4200-978e-ef7adedee573", "sighting_of_ref": "indicator--21e459b9-423c-4c1b-bf69-26cbee846bc7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182db07a-f341-426a-b6f7-64323e258c09", "sighting_of_ref": "indicator--21e459b9-423c-4c1b-bf69-26cbee846bc7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fcaefb-6e06-4804-9fa5-17f880599560", "sighting_of_ref": "indicator--da009971-52e6-48dd-a418-94ad1176f8e0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485eaee3-c329-4b17-856a-d839f5dd145c", "sighting_of_ref": "indicator--879468bf-7eca-45d9-8153-f28d66b2ddf2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5551e40-0a43-4ce9-b0da-1cac878217ca", "sighting_of_ref": "indicator--4e25eeaa-d375-45bd-8a34-38fce6ba1e7d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d332aa12-705c-4dea-8a75-9dd40a2a306d", "sighting_of_ref": "indicator--4e25eeaa-d375-45bd-8a34-38fce6ba1e7d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df684fb5-07d1-4844-8524-8338fc6ec49d", "sighting_of_ref": "indicator--1c8d8452-5c86-4baa-8eee-b2a5206e3562", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e028c01d-e6e8-487b-8319-552f0cb05cf4", "sighting_of_ref": "indicator--7023e688-2609-4383-9de0-4b413accf844", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b05f659-32a0-4ad5-a200-bb93ba045c16", "sighting_of_ref": "indicator--def5a990-4c8a-45c4-a1d2-88d81cd93998", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cdca6bf-e05b-4a61-a3fa-e5e42a7bf6b7", "sighting_of_ref": "indicator--bacc1e9d-9621-421e-8d67-abb8244cba65", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06447701-527e-47ec-a20f-4d13079de212", "sighting_of_ref": "indicator--bacc1e9d-9621-421e-8d67-abb8244cba65", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbaf3d3-0220-4276-9972-b357702aa08c", "sighting_of_ref": "indicator--bacc1e9d-9621-421e-8d67-abb8244cba65", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5750dc-b6e5-4b09-8347-c9a4c4f617e3", "sighting_of_ref": "indicator--439fb09a-2ed7-49c8-b5e9-88dfe0f27dde", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd7e24f-6d27-4ba5-a8f1-7f9ff1225600", "sighting_of_ref": "indicator--cd35094e-1db4-49d3-a374-4db9d295eb59", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520c0d33-b831-4b6b-8e41-6db30a13e846", "sighting_of_ref": "indicator--beadafd3-1211-41c4-8890-5b0484244418", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bb5d21-9a04-4821-bf7a-d9caabbfb152", "sighting_of_ref": "indicator--45102c86-3da4-43d9-92af-42333b1149ad", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4206fc-fc24-45e0-8614-6858143920a6", "sighting_of_ref": "indicator--be994eae-124a-4f9b-98a8-9e6b950d3028", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964b83f1-84eb-47cb-aaa4-8cc319aeb8f9", "sighting_of_ref": "indicator--be994eae-124a-4f9b-98a8-9e6b950d3028", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89cc7cb-993d-4517-af7f-10097854075a", "sighting_of_ref": "indicator--f2e78899-b37d-4fef-bd67-c7533d8fd140", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8e4c25-f2c3-4a90-8eb1-f06f8549ce98", "sighting_of_ref": "indicator--f2e78899-b37d-4fef-bd67-c7533d8fd140", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed363707-d363-48ec-b3d7-16aed7338049", "sighting_of_ref": "indicator--f2e78899-b37d-4fef-bd67-c7533d8fd140", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232c8cf6-3f87-4bf2-b3eb-176862b2b239", "sighting_of_ref": "indicator--066db160-c15a-4950-9baa-467e8108e4c2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414153bc-08f7-449b-8a62-5f3c7740e580", "sighting_of_ref": "indicator--428264b0-73d7-4455-be76-ea8b60c4a7ed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd5410b-b65e-41c1-860d-d430b26a181d", "sighting_of_ref": "indicator--6dcd6155-aabf-46b5-90fb-a45882d61d68", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3d8d97-f11a-476d-8620-f46c5afc7fb9", "sighting_of_ref": "indicator--6dcd6155-aabf-46b5-90fb-a45882d61d68", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360c9e8a-ac97-48fa-b604-b4f842953a32", "sighting_of_ref": "indicator--b495e219-759a-43be-8515-15bf924dfeb4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd66087-5caf-4cde-8f74-7d75cc0f3b90", "sighting_of_ref": "indicator--b495e219-759a-43be-8515-15bf924dfeb4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2785ed3c-70bd-499f-bb60-e91480c282e0", "sighting_of_ref": "indicator--b495e219-759a-43be-8515-15bf924dfeb4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0428ba7-5ffd-4677-b9de-d5514d2426d4", "sighting_of_ref": "indicator--c176ff7d-284f-4355-9dd8-9ca7d98eaa92", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4a08c7-df40-4a4c-81be-462da7886bec", "sighting_of_ref": "indicator--d117566b-0cad-47fc-b5a9-44658f064ecc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c824c3b-4fcf-49f2-a939-ab3c1c3de7f5", "sighting_of_ref": "indicator--7646d63a-1555-4c99-90d1-10362b43f4f3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f35f250-a15c-4ef5-a175-8601653830b9", "sighting_of_ref": "indicator--03804f47-40c5-41e7-9365-333fb59a7754", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324bef79-bc6f-4d9d-8dd4-cd56ecebf10d", "sighting_of_ref": "indicator--03804f47-40c5-41e7-9365-333fb59a7754", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d5e2ce-6d68-4e60-9b99-ed8363f5cd0e", "sighting_of_ref": "indicator--fc70ade9-8685-405a-8f6a-f831d12b347a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c93609-f867-4cf7-bc8b-2302528481bc", "sighting_of_ref": "indicator--96079646-4fa8-4798-9a01-4aa68527ff9f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e14ac3-7c87-4074-b268-9e6bfe5c0577", "sighting_of_ref": "indicator--96079646-4fa8-4798-9a01-4aa68527ff9f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3eafd70-007d-4ead-baf8-2853104f7a2d", "sighting_of_ref": "indicator--96079646-4fa8-4798-9a01-4aa68527ff9f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd248f1c-7d68-49fd-93e6-d9c0cd0fcfbe", "sighting_of_ref": "indicator--a6b4edaa-3424-4308-90b0-c96bb66c51a5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466fd426-368d-4bfa-9a9f-b26ed91ed3f6", "sighting_of_ref": "indicator--cf914b44-294a-48f7-b238-3e91c1c894d2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31232918-0802-4cbf-8485-44a763ae1206", "sighting_of_ref": "indicator--cf914b44-294a-48f7-b238-3e91c1c894d2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add4d795-4117-436f-87ad-503f9c7baf94", "sighting_of_ref": "indicator--669571b6-4bce-4e33-a41a-b5cd7560e7ed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff41ad4-3d92-4a73-9d3e-1f022273110b", "sighting_of_ref": "indicator--669571b6-4bce-4e33-a41a-b5cd7560e7ed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a46881-e6a0-4abc-a3ef-e1e7bc2d7de1", "sighting_of_ref": "indicator--669571b6-4bce-4e33-a41a-b5cd7560e7ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54ff357-e8d5-48f7-bae3-7f86ab88af06", "sighting_of_ref": "indicator--c5794254-e13c-4212-9caa-876d6087ba4c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e447aa-711c-41f5-ae13-619f050aa17e", "sighting_of_ref": "indicator--2699cec9-9356-4cf0-9b5d-6d996e254d94", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecb1844-2034-4c01-bd56-19ac159c74cf", "sighting_of_ref": "indicator--2699cec9-9356-4cf0-9b5d-6d996e254d94", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c494f07-55a3-4c0e-8d04-7017aba26a78", "sighting_of_ref": "indicator--f66df3fa-0b56-4809-a14f-74d961694525", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f202139-b6e7-4856-8319-c1e83343b34e", "sighting_of_ref": "indicator--57fb1160-6996-4d05-a780-ebd41683fafd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f29d33-5d8b-48f0-9c80-45446b6b442d", "sighting_of_ref": "indicator--c15220b8-6ce4-4d6b-9759-374f5b21ca71", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e66519-878c-441b-a627-18b491401192", "sighting_of_ref": "indicator--c15220b8-6ce4-4d6b-9759-374f5b21ca71", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f449da-89b2-4af4-b4f2-006af2395a35", "sighting_of_ref": "indicator--e98f4525-3746-4735-b3e4-4caae42e97d6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6a2e4e-3c69-4366-9aa1-0ff8571fffa4", "sighting_of_ref": "indicator--25c35246-26e1-4b51-91ec-4cd2d3f7ab3e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1074d7-4af1-4823-9330-059869d664c8", "sighting_of_ref": "indicator--25c35246-26e1-4b51-91ec-4cd2d3f7ab3e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239d9ec9-27dd-418e-969f-39acfd7615b3", "sighting_of_ref": "indicator--20973359-4e35-429b-9228-99e6fb7fb6d5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0059e9d0-52f8-44e6-86b4-d4bf195f274b", "sighting_of_ref": "indicator--20973359-4e35-429b-9228-99e6fb7fb6d5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55944ed9-790e-476d-93bf-0928f5d99bb5", "sighting_of_ref": "indicator--20973359-4e35-429b-9228-99e6fb7fb6d5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f8e41b-b0e3-45b8-8ddf-8e5ef4374562", "sighting_of_ref": "indicator--de09ba0e-1cff-4def-b9dd-d1c20120f347", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64901859-cc87-476a-9788-13e82f7e14d9", "sighting_of_ref": "indicator--de09ba0e-1cff-4def-b9dd-d1c20120f347", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3547de68-9614-4f9f-99ea-3eaacd403808", "sighting_of_ref": "indicator--f6e30f45-6e57-4424-bd76-c1c849b97438", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50317fa0-5b6c-4dd3-8ce6-ecb371dcad45", "sighting_of_ref": "indicator--fb2add71-4b5b-43ca-ac2f-b2c1ad179d65", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290e17ca-1a4c-4714-846b-22d563dc868f", "sighting_of_ref": "indicator--fb2add71-4b5b-43ca-ac2f-b2c1ad179d65", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145c5093-3155-4e11-9c7b-dc29c5490624", "sighting_of_ref": "indicator--fb2add71-4b5b-43ca-ac2f-b2c1ad179d65", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497f892e-078b-400e-9852-f13534253b01", "sighting_of_ref": "indicator--2233ebb9-c860-4092-a810-0dd8f863a2ff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109104ac-7659-4633-9c55-503ef3de097e", "sighting_of_ref": "indicator--708ce9ef-e7cd-4adc-ad7e-81fdada08adb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cc2c44-11e3-414c-9285-b5082c65e272", "sighting_of_ref": "indicator--708ce9ef-e7cd-4adc-ad7e-81fdada08adb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95be5d5b-c890-45fc-aa05-34de592e191b", "sighting_of_ref": "indicator--775ab141-f342-4c82-a7cd-ceda01841ebc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72652587-f9e4-44d8-8582-0a9cbd572fbc", "sighting_of_ref": "indicator--571ce7c3-22f5-4ef6-a618-597fc6a022e3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155966f3-66a3-4a91-8341-e5cd9367223d", "sighting_of_ref": "indicator--571ce7c3-22f5-4ef6-a618-597fc6a022e3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14463acb-35ad-4cc2-a2a1-cce9a2849968", "sighting_of_ref": "indicator--03d2a6f7-1603-425e-ac08-58a84bc47b66", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b8020c-f92a-4fbd-915a-4e94663768c3", "sighting_of_ref": "indicator--03d2a6f7-1603-425e-ac08-58a84bc47b66", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57322385-f921-400e-987c-a597cccef16a", "sighting_of_ref": "indicator--f98203ce-924b-4cb0-80a2-29e5e20c0198", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896b7720-9045-4180-95c1-32e2d4d1217a", "sighting_of_ref": "indicator--414b1f3e-c74a-4dd4-b335-bd6b864270dd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a29ad8-34a9-4be7-9aca-a856c6142390", "sighting_of_ref": "indicator--414b1f3e-c74a-4dd4-b335-bd6b864270dd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70caaef-5159-45a2-b3ef-43789c8f28cd", "sighting_of_ref": "indicator--bff9ad12-96ed-4fd7-a7a0-c700ed7d6a03", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3e772c-4197-47af-82bf-9ea60f20fd2b", "sighting_of_ref": "indicator--bff9ad12-96ed-4fd7-a7a0-c700ed7d6a03", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef3425e-d797-4b15-a41f-fea502001622", "sighting_of_ref": "indicator--67670db1-e297-4760-a6b3-95b442c45338", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef00138-6b90-4795-b88f-6db752087c5e", "sighting_of_ref": "indicator--67670db1-e297-4760-a6b3-95b442c45338", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1586d3c-29d6-4864-a8c2-ecbf15f9bcca", "sighting_of_ref": "indicator--2bc1c1c7-6c63-4730-8aad-35bc862c13f6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d137386-4d1a-4f0d-8f33-221718c6c9c6", "sighting_of_ref": "indicator--2bc1c1c7-6c63-4730-8aad-35bc862c13f6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24b8d07-084a-407f-8d9e-b2273db1a140", "sighting_of_ref": "indicator--2bc1c1c7-6c63-4730-8aad-35bc862c13f6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38c2b4f-31ef-4ccc-8397-1183809234f5", "sighting_of_ref": "indicator--a81ec5db-04eb-4c56-8d45-8841f7960297", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981de095-a8cb-458a-b58b-52be8423f733", "sighting_of_ref": "indicator--a81ec5db-04eb-4c56-8d45-8841f7960297", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaba0215-b8dd-41c2-a433-05b7fe1321e3", "sighting_of_ref": "indicator--a81ec5db-04eb-4c56-8d45-8841f7960297", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ee0323-14d8-47ee-9f02-01756b98279b", "sighting_of_ref": "indicator--00ab199a-4a00-4bf8-ae23-3119d369109f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f876010d-93eb-4d8b-b207-f620dc204d4d", "sighting_of_ref": "indicator--5be6af56-3eca-4e97-94e3-e8f732a3dbe6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75812af-f2e1-4515-a943-53331c036e01", "sighting_of_ref": "indicator--20bc98a0-00eb-4361-a68c-e2f7c6f3c7ab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7e231f-a619-4246-af5a-e1ee2132f5d1", "sighting_of_ref": "indicator--20bc98a0-00eb-4361-a68c-e2f7c6f3c7ab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876b67ca-c8a0-4007-bb99-dc08fff1ee0f", "sighting_of_ref": "indicator--44cee309-cc16-4c91-a02c-2282943a69ee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d61e832-64c5-4267-910f-b90ec979916c", "sighting_of_ref": "indicator--222804db-b68a-4b9a-b2ea-7b40f51c699e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9d93a3-46dc-4889-96ab-4bc21ffcc634", "sighting_of_ref": "indicator--c036eeee-7858-4c4b-8b2e-de1343c92423", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b54b993-cc15-4e41-814f-54e863d1061d", "sighting_of_ref": "indicator--17f070b9-2d27-407e-b441-171fcfb8f60b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f96de05-e588-44e3-931a-ecbaeb418209", "sighting_of_ref": "indicator--17f070b9-2d27-407e-b441-171fcfb8f60b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43eb266-5ce1-4e73-9fdd-d8175decae6c", "sighting_of_ref": "indicator--7be6709f-1e56-41b6-a0ae-b3064570afbb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2598c5b1-7e5d-4c83-9252-23068fe5ecc7", "sighting_of_ref": "indicator--7be6709f-1e56-41b6-a0ae-b3064570afbb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db15662-7c81-4013-8573-4b48b224177b", "sighting_of_ref": "indicator--84fc4aee-ce25-46b2-8db9-a7d6576620b9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b74498c-ff3d-4fe3-b9a8-d0ce13709ff8", "sighting_of_ref": "indicator--d03d1f26-3467-496d-94a0-8a9b45da412c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be13d75b-e06a-4dda-ae44-5dadf97ae536", "sighting_of_ref": "indicator--2be1328b-65f4-4db2-9238-1fe09366f4e8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a7e423-10b3-43c4-8181-d9624fd3c338", "sighting_of_ref": "indicator--22ecfe1d-df1c-4019-b2a4-9bc83204aa7c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50980fcc-5f62-4112-9743-783c84efbcb9", "sighting_of_ref": "indicator--5ce8b81d-73fa-45a5-9305-8e7fb5a37235", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35529e7e-bcec-429e-8fb0-88f8c55c16ac", "sighting_of_ref": "indicator--b512f90c-0d56-4acd-8c2c-f706e8239a7e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b7df9c-7d47-4023-b169-870e082b0401", "sighting_of_ref": "indicator--b512f90c-0d56-4acd-8c2c-f706e8239a7e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b68bf79-98b8-45ff-ab21-2d191938f08d", "sighting_of_ref": "indicator--745dbb38-9fd6-4f2b-862f-179c9387010d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9da78b-cfbc-4036-a5c6-174ad7b0cc4f", "sighting_of_ref": "indicator--745dbb38-9fd6-4f2b-862f-179c9387010d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f32ed3-64ac-4323-8fce-8b9b7c3b2c92", "sighting_of_ref": "indicator--efccea20-b6be-4e34-a128-2f3054f94396", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8ea2d0-190e-440a-974d-a6284df00d1e", "sighting_of_ref": "indicator--ad77377e-c8b3-4675-81da-7f35688fb9c8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569d2c05-6758-440e-bb82-bd7f6bc7ab39", "sighting_of_ref": "indicator--3aad9f6f-6c97-47d1-8180-d46fcdf8acc7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb09be3-874c-4b8c-b745-9b99b5657ef6", "sighting_of_ref": "indicator--3aad9f6f-6c97-47d1-8180-d46fcdf8acc7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ed6b75-f869-4693-8d30-01d6a5bffc8b", "sighting_of_ref": "indicator--b6fed4fe-feef-4994-86e9-ba97cc8739ee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41efa6d5-aca8-4349-b9f2-c83764e0a2bc", "sighting_of_ref": "indicator--b6fed4fe-feef-4994-86e9-ba97cc8739ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511b28e4-4c4b-4048-a342-670dc6c60183", "sighting_of_ref": "indicator--c279def1-1a65-4521-b0ff-9d46a85af7b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a04b298-36cd-417f-9ae1-c367e4405da5", "sighting_of_ref": "indicator--c279def1-1a65-4521-b0ff-9d46a85af7b3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e510c4ce-4bff-4707-a3f5-9fd1909c1c75", "sighting_of_ref": "indicator--b4e1f918-a950-44fb-ae20-8319ce85d114", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad34f07-a452-427d-bea4-f96e6af1a77a", "sighting_of_ref": "indicator--d93d3d9f-185b-49d8-870b-7186fff6de91", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd96cf87-c942-4f7f-8e93-b0a7f073739c", "sighting_of_ref": "indicator--d93d3d9f-185b-49d8-870b-7186fff6de91", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0903bfb1-5e43-43e4-8d8a-5d6467ea30ed", "sighting_of_ref": "indicator--dd63699f-bdbb-44d3-aadc-d79507be5895", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193205f2-0ca9-46b2-9df8-2a456cd5470c", "sighting_of_ref": "indicator--98dc6634-f4d1-4c6a-bd89-00bd2e2e818a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbf0ea6-a5ac-4aa5-bda2-05768ba7dbaa", "sighting_of_ref": "indicator--d850d60a-3586-441a-856a-a86c7f15cda3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e1fac6-b7ef-4e3a-b9d9-5b5e064106de", "sighting_of_ref": "indicator--064675c4-2fa1-4ac4-aba4-cfb352514e04", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeac5d25-78cc-437d-81e2-0a4707376f51", "sighting_of_ref": "indicator--11f15c48-88e8-4431-8df9-829126156da2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96423a18-d23a-4d8b-adfa-d1c786fd0d3b", "sighting_of_ref": "indicator--0b0bdf93-e82f-4dd9-bd64-213d5381698c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46eee548-49ff-4366-8408-4cdfcddfe96b", "sighting_of_ref": "indicator--0b0bdf93-e82f-4dd9-bd64-213d5381698c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c480b670-9fe7-4051-8683-88f97f8e2515", "sighting_of_ref": "indicator--cf946721-45dd-4bfe-8202-775d468f5069", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5f06e4-ba79-4dca-990f-a2778e46de9e", "sighting_of_ref": "indicator--94e7a90b-bff1-4482-8d45-4af8a3a051d1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b33a63-daa2-4fce-ae47-c43a1bfcb80a", "sighting_of_ref": "indicator--a37df4d2-2bb6-4e7d-bda7-32373c3da2ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b866e77-fa36-4693-9944-0dafa4b5b708", "sighting_of_ref": "indicator--886a9577-b937-4253-be90-40d988d1b9be", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d28026e-19f6-45e7-93f5-ca9cebe944b0", "sighting_of_ref": "indicator--74f150ac-79d3-44e7-8395-ce389903b6ef", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041686a2-1383-49cf-84d5-90d333649a6d", "sighting_of_ref": "indicator--74f150ac-79d3-44e7-8395-ce389903b6ef", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544ac2d8-6c3b-47f4-823c-87625dfb37fc", "sighting_of_ref": "indicator--7158e4ae-e29b-4eb6-947a-518fcbce662f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e44565-063b-4190-8d39-ffc7beb5a0c7", "sighting_of_ref": "indicator--6cab5d92-7b65-424e-8528-3c146f9f6a3c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d55c53-5c32-47a8-98bd-41b1ce07608a", "sighting_of_ref": "indicator--c1feba48-446a-4659-8ec6-3d26566e238f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a25dcb-0f1c-4b8e-9493-886df18e2371", "sighting_of_ref": "indicator--c1feba48-446a-4659-8ec6-3d26566e238f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f94fa2-db41-4a9f-9986-a355d155f92d", "sighting_of_ref": "indicator--0fce9480-0f59-4f72-84e1-7a02b0daeec0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f2cfde-4621-4248-99b4-5f17e89a8944", "sighting_of_ref": "indicator--7e672eb2-39a8-4154-9f1c-983c74e79c16", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0de1263-559a-468d-a5de-313bfc3f65d9", "sighting_of_ref": "indicator--7e672eb2-39a8-4154-9f1c-983c74e79c16", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e2bc66-126d-43b5-99d0-fd7712389555", "sighting_of_ref": "indicator--b3eb1a20-8c2e-4340-91e4-0b8bd9e20b34", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f027b4-7b88-4235-ad49-84dcd1bcb932", "sighting_of_ref": "indicator--b3eb1a20-8c2e-4340-91e4-0b8bd9e20b34", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a454a3cd-2e0a-4378-929a-bc28707e7c08", "sighting_of_ref": "indicator--ef1314b3-ad73-4880-a86b-13aedd1b8987", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be37d5eb-09df-4250-bff5-2a864b786840", "sighting_of_ref": "indicator--ef1314b3-ad73-4880-a86b-13aedd1b8987", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502ba1bf-7dc6-4442-a5ba-69322e019cff", "sighting_of_ref": "indicator--ef1314b3-ad73-4880-a86b-13aedd1b8987", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d90ae7-8b90-4d2b-a81f-3bb8af17f77b", "sighting_of_ref": "indicator--5ad7e6bf-90e3-4055-99f2-c011a0791c72", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85bed54-5b9a-4e56-9214-be1061d082ed", "sighting_of_ref": "indicator--5ad7e6bf-90e3-4055-99f2-c011a0791c72", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b7dfc3-03c9-4f0d-b38f-a4533894943e", "sighting_of_ref": "indicator--5ad7e6bf-90e3-4055-99f2-c011a0791c72", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae71701-3253-4931-a407-742dbc38d1f8", "sighting_of_ref": "indicator--e71d44bf-2e5a-4ff4-a397-441686bf3776", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f849dc6-f121-4b9e-afcd-ed8a38de1240", "sighting_of_ref": "indicator--a121d04a-96a7-4492-9445-3e1cc51a4921", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37dc84a5-de5f-427e-8baf-80cff2655f8f", "sighting_of_ref": "indicator--859f91b7-c428-4857-bf60-756e2f8fce08", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc0463e-0b4e-49b1-93b4-64c18a2716b2", "sighting_of_ref": "indicator--859f91b7-c428-4857-bf60-756e2f8fce08", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2a6e93-7969-4db1-8eff-2906ab388e24", "sighting_of_ref": "indicator--32f4f181-a13c-4b39-b77f-68988dabcb50", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a7e10c-3c90-4b65-a9df-fe3899910fa3", "sighting_of_ref": "indicator--4cd6aaa8-e936-400c-9c8a-14bc4aa906b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d0996d-82ec-426b-8db0-09f4ae9d7c5f", "sighting_of_ref": "indicator--4cd6aaa8-e936-400c-9c8a-14bc4aa906b3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d23018-385b-411b-bc09-336917405b38", "sighting_of_ref": "indicator--bc2b0845-3350-4a4c-b1fe-3acef86d25ea", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7d27e6-a735-485d-af3f-4066e6dbb497", "sighting_of_ref": "indicator--bc2b0845-3350-4a4c-b1fe-3acef86d25ea", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049c9cf9-7e2a-4ec8-85e2-104e49faee2b", "sighting_of_ref": "indicator--bc2b0845-3350-4a4c-b1fe-3acef86d25ea", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09befd3-f7cd-443e-96ff-f09603a702c0", "sighting_of_ref": "indicator--29012148-f072-407a-a264-f760e6c5fb71", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3037b0-4bf1-4b03-94f0-3ac1a86a457e", "sighting_of_ref": "indicator--29012148-f072-407a-a264-f760e6c5fb71", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54976aad-e3c8-49ff-8ab6-1b936a0dc4dc", "sighting_of_ref": "indicator--2e7254ab-77f3-435d-bcb8-aad519f20bbe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911c313a-62e4-4b4e-ba84-c38e7cbcda04", "sighting_of_ref": "indicator--225e0fd4-e57e-46e3-b86a-e268673af795", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255e4968-875a-425b-8744-9ccc0fd12567", "sighting_of_ref": "indicator--6e2d5a35-bb1d-4f44-9e6b-b956133e35d6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61aabacc-adbc-4e2b-9493-ca908cc4e441", "sighting_of_ref": "indicator--05c265fc-e9b7-4376-b506-d03ce9f8e959", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9519ed-072a-4f4a-9b8e-d79334b8c5c7", "sighting_of_ref": "indicator--05c265fc-e9b7-4376-b506-d03ce9f8e959", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15c19fd-befa-48cf-99b4-7b018f045557", "sighting_of_ref": "indicator--05c265fc-e9b7-4376-b506-d03ce9f8e959", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd6efab-ba3b-489a-8e9c-eacfa7ef8fbf", "sighting_of_ref": "indicator--a1de312f-3bf2-443e-89a3-94be67c15b51", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9815071-5484-4f42-a7b2-1314761ddbe4", "sighting_of_ref": "indicator--a1de312f-3bf2-443e-89a3-94be67c15b51", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361f15cf-b6a5-40eb-bb65-91cc4536f2f4", "sighting_of_ref": "indicator--7c264a55-e906-4a65-a1e6-e58d8edcaaed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65628de2-f10a-4466-90e3-4e8e0f683ad9", "sighting_of_ref": "indicator--3dcd5234-39af-43dc-aa76-5443ad28610f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3a402b-c078-42a2-8707-c49207889f99", "sighting_of_ref": "indicator--3dcd5234-39af-43dc-aa76-5443ad28610f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52948300-9206-49ed-a262-94683c9fb0c0", "sighting_of_ref": "indicator--3dcd5234-39af-43dc-aa76-5443ad28610f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3f1fe0-c3a5-45f8-829c-ef14c15c479c", "sighting_of_ref": "indicator--068be326-eec5-4ea9-b0e9-d25667786e65", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9d87fd-69c9-451a-9bad-eb744d53b1c0", "sighting_of_ref": "indicator--068be326-eec5-4ea9-b0e9-d25667786e65", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521e2e3e-b1ae-4f96-b426-a82465be2ffa", "sighting_of_ref": "indicator--ace31402-e8cc-4867-8f55-e8288c0d131a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddef2218-7ca9-4931-9d0b-8d159de0d9fb", "sighting_of_ref": "indicator--ace31402-e8cc-4867-8f55-e8288c0d131a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3597b5-e7d3-4065-8c28-d44759d97e0e", "sighting_of_ref": "indicator--5bbb2463-f00a-4183-b157-d2d1b1b1b748", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc86dc36-b040-4d45-bf68-5b13fd30f839", "sighting_of_ref": "indicator--5bbb2463-f00a-4183-b157-d2d1b1b1b748", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c42ebd-299a-4dfe-8410-bed33a0a6fbb", "sighting_of_ref": "indicator--64f46c61-9834-45ca-8f74-efbbc2ea4778", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b256892-4dec-4334-b9b3-1175a8a79af0", "sighting_of_ref": "indicator--64f46c61-9834-45ca-8f74-efbbc2ea4778", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f93959b-67d4-4471-9a52-6c2d46f2ab00", "sighting_of_ref": "indicator--848e62fd-bd48-4e8c-93ad-d2630f8fdcb8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1331daaf-6348-429f-981a-14c8db35da24", "sighting_of_ref": "indicator--848e62fd-bd48-4e8c-93ad-d2630f8fdcb8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48dda07a-12a1-4f36-bff0-50c7b0aad5cf", "sighting_of_ref": "indicator--4a710e58-224c-4597-a605-4000344d4ba4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a819de2a-9ec8-4d2c-8fdb-123b22de1d99", "sighting_of_ref": "indicator--4a710e58-224c-4597-a605-4000344d4ba4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e366123-cf6b-4a26-b187-9c9e91a8eea3", "sighting_of_ref": "indicator--f9cc3171-a6e3-44b0-9784-9f3da8509060", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ee8669-48ea-46b0-b8c3-f769bf4eff4b", "sighting_of_ref": "indicator--e867b0b6-c8a5-485b-8086-c656d7d060bc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9beffc-f860-4628-8610-1599ee6fd915", "sighting_of_ref": "indicator--b47ee336-7e92-4ae6-ab06-69d8fa5e3b7c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31d5fb2-3441-446d-8f65-e456414384a9", "sighting_of_ref": "indicator--b47ee336-7e92-4ae6-ab06-69d8fa5e3b7c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9afe0e-c046-42db-9792-6b078f74fd5f", "sighting_of_ref": "indicator--0245d5d6-bdfa-4de4-a4ec-1277fd95f4b0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ee4a52-7a60-44d8-9147-225ce697ba0e", "sighting_of_ref": "indicator--0245d5d6-bdfa-4de4-a4ec-1277fd95f4b0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f67fa6-7a22-428d-b7f5-95f529b7a83e", "sighting_of_ref": "indicator--66c3c1d2-26cb-4d52-b3c1-57a393fa9ca2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295f65a9-30ba-4a51-b549-23190ac6d823", "sighting_of_ref": "indicator--66c3c1d2-26cb-4d52-b3c1-57a393fa9ca2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1ecae1-b1b2-4634-8275-6ae61847adaa", "sighting_of_ref": "indicator--a2557957-39e2-4afb-928d-daa10d7f0066", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a5b84e-7221-4063-a8a1-c34ef916a604", "sighting_of_ref": "indicator--a2557957-39e2-4afb-928d-daa10d7f0066", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdf6b1f-4c05-4781-9eb6-7475f7fd4e3e", "sighting_of_ref": "indicator--2f90a2bc-b7d6-4003-850e-653ef726a432", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3e5fca-1658-4382-9abb-f51ca68f241b", "sighting_of_ref": "indicator--2f90a2bc-b7d6-4003-850e-653ef726a432", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27751d42-04ae-4811-a19e-f4e11d9a011e", "sighting_of_ref": "indicator--579fb8c5-c622-424e-9231-64a929808ed1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02080d11-3aed-4cb5-a015-d365daabd225", "sighting_of_ref": "indicator--579fb8c5-c622-424e-9231-64a929808ed1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf010738-cdd6-4764-b785-8e98d286b2ae", "sighting_of_ref": "indicator--8bca8ac0-f3e2-43bf-a782-09253a641eaf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efb8165-a151-484d-acdf-f8c2b5d11f91", "sighting_of_ref": "indicator--1a443888-7c98-4d8d-bc48-f5774c37830b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29c536c-79b5-4c7e-be31-d6d09dda06f2", "sighting_of_ref": "indicator--1a443888-7c98-4d8d-bc48-f5774c37830b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac84927-1210-4189-be9d-c457b642cd81", "sighting_of_ref": "indicator--829d35e8-ec89-4f51-a635-9d4caadd2bc7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afeab441-6168-4181-8e3c-7752aa51a052", "sighting_of_ref": "indicator--829d35e8-ec89-4f51-a635-9d4caadd2bc7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb63115a-fb43-40fe-a06c-610bc462fe17", "sighting_of_ref": "indicator--829d35e8-ec89-4f51-a635-9d4caadd2bc7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b211fa60-f845-4648-b0c0-b7940f78fc68", "sighting_of_ref": "indicator--f935e8bd-116c-4222-b963-cf9805bfc6ed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c73eaf-95bc-454d-b749-890701b324c0", "sighting_of_ref": "indicator--f935e8bd-116c-4222-b963-cf9805bfc6ed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87349a9-4d92-4e0c-8651-babf60d47be8", "sighting_of_ref": "indicator--f935e8bd-116c-4222-b963-cf9805bfc6ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305ba7c6-0a1e-4fde-9d22-4d2915203054", "sighting_of_ref": "indicator--069ad771-f346-4209-a271-b5a6606cdf56", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10292432-e371-49d6-bc35-92cf0574f36a", "sighting_of_ref": "indicator--00b0779f-b37f-42ae-9474-a6310828d978", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cac1f13-8472-4951-829a-4697a87f0f09", "sighting_of_ref": "indicator--77c861dd-78a6-43a2-8941-14193372fba6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6936453-9c85-444a-b9a3-e03c0a99987b", "sighting_of_ref": "indicator--272c5fd7-65f2-41e1-9f06-e2a4db619c93", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a766835-8898-4174-b658-4b0e154c6843", "sighting_of_ref": "indicator--c74cc2eb-9fb9-4dbd-8a6e-0cac54535a4e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0a5bbb-283c-452b-9fdb-4545c5ed6951", "sighting_of_ref": "indicator--c74cc2eb-9fb9-4dbd-8a6e-0cac54535a4e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3114879a-d979-43ce-b4aa-361be94201f5", "sighting_of_ref": "indicator--c74cc2eb-9fb9-4dbd-8a6e-0cac54535a4e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58410fa4-73bf-4641-8a05-3749199d7070", "sighting_of_ref": "indicator--ccc59273-4e27-447e-baf2-32f5a8ebfe29", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fa072c-cd87-4334-91ec-812acc610fbc", "sighting_of_ref": "indicator--ccc59273-4e27-447e-baf2-32f5a8ebfe29", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb98a9a-099f-4928-86d4-18665ff5406b", "sighting_of_ref": "indicator--aeb5e454-18eb-4ddd-99e0-e985b4bae1d2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec02756-8884-4c1e-abc4-a5eb330b9fcf", "sighting_of_ref": "indicator--aeb5e454-18eb-4ddd-99e0-e985b4bae1d2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e999016c-4644-4823-897c-654957d5b1bf", "sighting_of_ref": "indicator--aeb5e454-18eb-4ddd-99e0-e985b4bae1d2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40f5413-2de7-4717-9f34-09024693cec0", "sighting_of_ref": "indicator--98fc5ca1-1a18-42a6-a336-a62ed65dfe14", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943824d5-b9b5-4fc7-8aa3-9f449512905c", "sighting_of_ref": "indicator--98fc5ca1-1a18-42a6-a336-a62ed65dfe14", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4437aa4-2479-48dd-9716-6bb9994fcb81", "sighting_of_ref": "indicator--0a95b5da-215f-40ba-a61a-b8d323f606e2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141fd6b7-ec49-4c30-855d-00a6e203709e", "sighting_of_ref": "indicator--0a95b5da-215f-40ba-a61a-b8d323f606e2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63425af-49f9-4b08-bd92-652e87e02684", "sighting_of_ref": "indicator--1cfe2bd4-511e-4e1a-af29-7b7f31a71785", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e51be50-0354-4f95-8ea7-4ee6894fd2aa", "sighting_of_ref": "indicator--8bcd5486-4c0b-49a3-be99-3ded61647197", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70f0d31-5e5d-4f43-8e02-d9106cd1dcdd", "sighting_of_ref": "indicator--8bcd5486-4c0b-49a3-be99-3ded61647197", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69ae438-6467-4505-864d-3fea71b245bc", "sighting_of_ref": "indicator--8bcd5486-4c0b-49a3-be99-3ded61647197", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f107ee61-8426-4ce1-bdcf-826d8f030b9f", "sighting_of_ref": "indicator--a2894867-d7ef-47ea-8db4-505ae2d49238", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42462007-d0ab-4e34-92b8-7e722f41e3b3", "sighting_of_ref": "indicator--24d3bc73-842a-47b1-b88f-b17d565099a5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db27f60-e266-4682-837b-1f10b803c4c9", "sighting_of_ref": "indicator--0395e712-4a29-4f1c-9049-f960f20a10e4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e59745b-9295-4477-add2-bd15dc08dcd4", "sighting_of_ref": "indicator--0395e712-4a29-4f1c-9049-f960f20a10e4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b70af6b-2237-43a3-b81b-ad76c51f15c9", "sighting_of_ref": "indicator--0395e712-4a29-4f1c-9049-f960f20a10e4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81286df8-8aac-48e6-8f5a-440b9f28d449", "sighting_of_ref": "indicator--149f8d7d-43d1-4f94-9db6-30ff5432861d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4601ad-9b87-4326-a5a8-e114475900ea", "sighting_of_ref": "indicator--7bf448c5-fd38-44a9-a52b-3fa6d2c6ff6d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c922f8-d522-40c8-86f1-63e893e49dbe", "sighting_of_ref": "indicator--b633ba5f-5604-469b-b820-5e5a6d8640c6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ee7ab6-f449-4dd7-8620-d1563b90eeda", "sighting_of_ref": "indicator--d113b0cf-d597-4523-8ad7-962173ff8196", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428343c7-e0a5-4aa2-82b7-899116918a64", "sighting_of_ref": "indicator--d113b0cf-d597-4523-8ad7-962173ff8196", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5b7803-8198-4baa-9d4b-c204f8121fdd", "sighting_of_ref": "indicator--d113b0cf-d597-4523-8ad7-962173ff8196", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173ea759-38c2-47c5-b018-95c126c2276e", "sighting_of_ref": "indicator--777649c1-a51e-4f24-b728-5b552c35ff07", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c59e0c-c2f7-44a3-8686-669bc1a9fe6d", "sighting_of_ref": "indicator--386b791d-06ce-4dd7-8105-b07b07fe65e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff649c6-0ab2-4f97-8c50-8011e3fda587", "sighting_of_ref": "indicator--28d21e4e-bfdc-448f-addf-0fd2560fd560", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba207029-7af5-45e3-9f15-c99ee0b879bc", "sighting_of_ref": "indicator--28d21e4e-bfdc-448f-addf-0fd2560fd560", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d4ca6d-73b2-4577-9984-29a736a5356d", "sighting_of_ref": "indicator--acbe61b9-c833-44f1-8fd2-a329782585ff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d489a3-f656-466f-8b8b-f8ab0fcf67f6", "sighting_of_ref": "indicator--acbe61b9-c833-44f1-8fd2-a329782585ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16050414-3eca-4f9d-acc6-b1a496504964", "sighting_of_ref": "indicator--9880d226-c5a0-4a55-9622-537c1bc9caa8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb56c55-9d4c-44ba-9db8-a262b78e5f9a", "sighting_of_ref": "indicator--9880d226-c5a0-4a55-9622-537c1bc9caa8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0191410-ef96-4389-b4dd-8d9d55616819", "sighting_of_ref": "indicator--a6202ef4-ce34-4780-8abe-fa0e242b5d46", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49a3c76-cc78-483b-b983-ddea185c87a0", "sighting_of_ref": "indicator--9b5cac97-7fc6-40c0-92a3-148d7297cf49", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73237a06-d9d8-49c3-85eb-45c4e0ef274e", "sighting_of_ref": "indicator--9b5cac97-7fc6-40c0-92a3-148d7297cf49", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef432fb-d28f-436a-a255-8bb2b47c21b6", "sighting_of_ref": "indicator--9c991653-2ee6-4215-8d2a-5fce9fbf8733", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f15fb4e-471c-49cf-ac31-609ad1b5a7da", "sighting_of_ref": "indicator--9c991653-2ee6-4215-8d2a-5fce9fbf8733", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da8a50e-5615-4265-a211-2c454793cd50", "sighting_of_ref": "indicator--f732801d-467c-48ad-aa9e-b672d64fc44b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef230dd-f3a9-43a1-a45f-afe41e4c5bc0", "sighting_of_ref": "indicator--f732801d-467c-48ad-aa9e-b672d64fc44b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0bdd1d7-cc58-4c13-9365-af70d93ac08a", "sighting_of_ref": "indicator--b278f234-c6a0-4af3-bf82-e4e74b7a4a41", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc70863-d542-4069-ada9-1748757d8997", "sighting_of_ref": "indicator--b278f234-c6a0-4af3-bf82-e4e74b7a4a41", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2f4935-27b3-4d9a-ab35-850d3ffe6ae7", "sighting_of_ref": "indicator--402d562f-df17-4c1c-a136-d4bad9ae9aeb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a692bcae-15e3-4529-8166-9cf50713d927", "sighting_of_ref": "indicator--402d562f-df17-4c1c-a136-d4bad9ae9aeb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffd6420-be84-4d89-8fcc-94014b88f7d5", "sighting_of_ref": "indicator--5aaa2404-883e-4eb4-89dd-fcca3695008a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38b7419-7053-4282-a04b-6247a57ea603", "sighting_of_ref": "indicator--f635251e-f782-4b18-a9d8-47f6f516f05e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca3b560-351d-48b0-adf0-ddc05e1e5eda", "sighting_of_ref": "indicator--cfa10f65-becd-42fb-9f10-df3cd1cfbd8c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac673b7d-ce46-41e1-9b02-ab98d4b6b85c", "sighting_of_ref": "indicator--eaa2c86a-dc7f-4f53-8cb1-ab24d953fa17", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f337e64a-b72d-4906-bfb3-60a50ab78982", "sighting_of_ref": "indicator--eaa2c86a-dc7f-4f53-8cb1-ab24d953fa17", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07864be2-df0a-4689-bbd4-a6bc51fd6c65", "sighting_of_ref": "indicator--eaa2c86a-dc7f-4f53-8cb1-ab24d953fa17", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db42a459-1f52-4029-a141-0ef7c5bf5f1f", "sighting_of_ref": "indicator--c4872056-be4f-4432-9fca-861c1bc0ba6b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0d83dc-5295-4f84-afea-24404892d7df", "sighting_of_ref": "indicator--c4872056-be4f-4432-9fca-861c1bc0ba6b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696fd1c6-e5c7-4893-a118-1e7773cc6a6e", "sighting_of_ref": "indicator--c4872056-be4f-4432-9fca-861c1bc0ba6b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f5042e-b262-4fbe-8f28-a2ffb9070756", "sighting_of_ref": "indicator--3768a788-b782-4d18-9dca-7b5a07d4b226", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c72472-c62e-4da0-a899-6247656ddd41", "sighting_of_ref": "indicator--3768a788-b782-4d18-9dca-7b5a07d4b226", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e90f05-07ed-44c1-9274-3bc902737f52", "sighting_of_ref": "indicator--1950c41e-1e26-4863-bae4-77de172640a6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b061a5f-8c28-4fe7-a937-a195160c9ced", "sighting_of_ref": "indicator--622fd7b8-9db5-4986-92c2-905bc7c5b678", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7480c63a-be74-492a-a286-3001efa19b79", "sighting_of_ref": "indicator--81b98c58-a0f5-4155-91e8-f2038b7c4c39", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e0f951-7db8-40f1-9e7d-45db66b3d557", "sighting_of_ref": "indicator--81b98c58-a0f5-4155-91e8-f2038b7c4c39", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311d0b5f-7af8-45a7-a034-dd50e10c6cd5", "sighting_of_ref": "indicator--81b98c58-a0f5-4155-91e8-f2038b7c4c39", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2621140-e881-4492-8d77-3179a67b56fe", "sighting_of_ref": "indicator--9d269676-85d8-4090-a104-149e03d0d9d6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce2249a-fe3a-4e16-bb8d-a19c5e04add9", "sighting_of_ref": "indicator--9d269676-85d8-4090-a104-149e03d0d9d6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edac5e71-c53e-4737-9ac1-c2d117f85a0c", "sighting_of_ref": "indicator--e7dad380-fb01-4345-850f-49e516148a0a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b7fd79-63b1-4d54-8f44-3909c090832e", "sighting_of_ref": "indicator--86bdb822-5531-4927-b887-62b80c3bca35", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329b1358-7287-4918-9a76-b352a0e1229e", "sighting_of_ref": "indicator--86bdb822-5531-4927-b887-62b80c3bca35", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71653b2b-7e6f-455f-bdbd-fc8651c2febb", "sighting_of_ref": "indicator--29d34a4e-7789-4b0f-8719-211385ce80b2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c3a0bd-9e57-42a1-ba97-4bcde6c49acc", "sighting_of_ref": "indicator--29d34a4e-7789-4b0f-8719-211385ce80b2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92146ad8-175b-4823-806b-854882fe7938", "sighting_of_ref": "indicator--62db377c-ebad-4ab1-90e4-77b69300f242", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7a1175-5424-43c0-87bf-b3f281d56206", "sighting_of_ref": "indicator--62db377c-ebad-4ab1-90e4-77b69300f242", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952caaac-686f-428e-8f17-6467695a9004", "sighting_of_ref": "indicator--62db377c-ebad-4ab1-90e4-77b69300f242", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b3c45e-b19f-45e9-99c3-6a09aff03793", "sighting_of_ref": "indicator--f5061b1b-43ed-4385-895a-b7415ff4afb6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8a7d78-5eae-44fc-ab5e-808d783b7e35", "sighting_of_ref": "indicator--f5061b1b-43ed-4385-895a-b7415ff4afb6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc0cf8e-0cef-4da1-8704-c568bde43492", "sighting_of_ref": "indicator--f5061b1b-43ed-4385-895a-b7415ff4afb6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99cfe349-cdf3-4ed2-90d3-0a71a20bc196", "sighting_of_ref": "indicator--6f4052be-574f-4ed3-89a3-149ef045ca74", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c193d889-fa4d-4258-9793-800190ec1f8c", "sighting_of_ref": "indicator--79566c76-ea34-4be8-a0c1-8de5c1e57599", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec92146f-1bd1-422d-bad8-35334df9d1cf", "sighting_of_ref": "indicator--79566c76-ea34-4be8-a0c1-8de5c1e57599", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7691444-514b-4cae-80c8-15fdfcf09121", "sighting_of_ref": "indicator--fff7c910-be37-489f-bdcb-751baf4600d1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec1397c-5686-4151-b2e3-1553a048195c", "sighting_of_ref": "indicator--fff7c910-be37-489f-bdcb-751baf4600d1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297de026-ec4a-472e-8d2f-0806ddaae52a", "sighting_of_ref": "indicator--8c7557b0-e4a4-4477-8e51-0cf15a704f1a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45452aa4-ccb1-43d4-b4ac-1c931b28ecf6", "sighting_of_ref": "indicator--8c7557b0-e4a4-4477-8e51-0cf15a704f1a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a8a73d-6478-46c1-a9a5-660dddc1a871", "sighting_of_ref": "indicator--8c7557b0-e4a4-4477-8e51-0cf15a704f1a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4aa782-45b6-413d-92db-1a95cb480769", "sighting_of_ref": "indicator--d48ccc1f-4161-4f97-b733-55438f17ebef", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9707c96-6f40-4fff-bf55-4fd741a7e2b4", "sighting_of_ref": "indicator--d797e882-0de3-4e18-af26-549cb56bb8cf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7008400e-97fd-40af-9e0e-ae80d598cbca", "sighting_of_ref": "indicator--d797e882-0de3-4e18-af26-549cb56bb8cf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57dbdd8-54d3-4236-a405-7996dd5b2762", "sighting_of_ref": "indicator--cdc9b8fc-b0ec-4ab8-b4ea-db8ef5756d33", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80dad76a-78d1-424c-8436-35292a305c4c", "sighting_of_ref": "indicator--cdc9b8fc-b0ec-4ab8-b4ea-db8ef5756d33", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7315129c-033b-4d62-931d-31490256c3dd", "sighting_of_ref": "indicator--360f3773-ef86-4afe-a3b7-c9dd539f0739", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b796dbd-ef92-40da-91fe-4bd44708f320", "sighting_of_ref": "indicator--360f3773-ef86-4afe-a3b7-c9dd539f0739", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54d9996-8a95-4194-b56d-24a3389b4e44", "sighting_of_ref": "indicator--360f3773-ef86-4afe-a3b7-c9dd539f0739", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25728800-f2b5-4805-a85e-8b3a4527c89d", "sighting_of_ref": "indicator--d122ea93-5c1d-4a02-8308-dad6b4dacbc7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a658f40-a9d1-4c15-9680-e24a9ff5586a", "sighting_of_ref": "indicator--78a9989d-a82c-4be0-99c5-96b5bc0792e9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dceea09-ede1-463e-aa3b-35aa77fc675c", "sighting_of_ref": "indicator--9928283f-f0be-4f2d-adc5-77e78e6a4ecf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71ea5d4-6789-4732-b8fc-695ed84b9583", "sighting_of_ref": "indicator--9928283f-f0be-4f2d-adc5-77e78e6a4ecf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06b6bea-4c66-4736-8d01-91ac5337100f", "sighting_of_ref": "indicator--594c2315-0863-45dd-8ad8-e37b73b2aa80", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3455af6-6ec2-4349-b3a5-87c6def596f0", "sighting_of_ref": "indicator--594c2315-0863-45dd-8ad8-e37b73b2aa80", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f72704b-e846-4936-a169-b4f65486fdde", "sighting_of_ref": "indicator--78a2d279-35ee-49ed-8a68-9fbb6dfff0d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663428ee-18ab-48bc-9924-b5812aef25ba", "sighting_of_ref": "indicator--78a2d279-35ee-49ed-8a68-9fbb6dfff0d0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5448290e-a1a3-44cc-98a8-06365f7cd774", "sighting_of_ref": "indicator--0e8122f4-d12b-4a98-b29e-b5350586cb4d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d79750d-e117-490d-a875-8bed4af2f525", "sighting_of_ref": "indicator--0e8122f4-d12b-4a98-b29e-b5350586cb4d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75de2207-8b03-4327-8591-6388a73e5225", "sighting_of_ref": "indicator--dc5a5077-55b2-4a72-aadd-b79398eddc43", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e14b04-b828-414f-8972-632bd5543abe", "sighting_of_ref": "indicator--dc5a5077-55b2-4a72-aadd-b79398eddc43", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba896577-7090-4b69-9440-a26c52df4840", "sighting_of_ref": "indicator--5abafe6d-2ae2-4438-bf90-412e45b810bb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c663f0-969f-41ac-95fe-7c0e0c938298", "sighting_of_ref": "indicator--7b8dd879-cc14-490a-a065-d060778ffac4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de007100-2d46-4e41-8a94-ad5d522cf8fc", "sighting_of_ref": "indicator--7b8dd879-cc14-490a-a065-d060778ffac4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6deb1a1d-04e6-49e1-beb0-c776cc64fedb", "sighting_of_ref": "indicator--690bb53b-b63c-4fd4-ab98-8f77ee04c8b1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e8b127-8cc6-4146-bad6-b0ffe47fa541", "sighting_of_ref": "indicator--690bb53b-b63c-4fd4-ab98-8f77ee04c8b1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26abf7d8-50ed-472d-a038-6a2c6fdc3b1a", "sighting_of_ref": "indicator--6d74a7de-5959-44c7-a261-183c89a03a9f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812c989a-5155-462b-8f0c-13ef343a5c96", "sighting_of_ref": "indicator--6d74a7de-5959-44c7-a261-183c89a03a9f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d329ddf1-93bb-4bdd-8bc5-e945498bc1d4", "sighting_of_ref": "indicator--5cbf5a0e-8362-42c1-b01d-8d57ad730325", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b59c40c-2fe1-43cc-9b3c-93fc303834d2", "sighting_of_ref": "indicator--5cbf5a0e-8362-42c1-b01d-8d57ad730325", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0fc457a-2473-4f50-85e0-0b2650d257af", "sighting_of_ref": "indicator--6a586c3f-0964-432e-a311-9d391a3a489c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a96140-a71a-488e-b122-5f3c3d12cea3", "sighting_of_ref": "indicator--6a586c3f-0964-432e-a311-9d391a3a489c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0b93d3-cef2-4eb1-8201-4de4c3c87981", "sighting_of_ref": "indicator--0f8b6894-6e73-4cde-a5ae-319c0a5c894e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec98cd7-5c10-4af4-835f-37d0ddb6be25", "sighting_of_ref": "indicator--0f8b6894-6e73-4cde-a5ae-319c0a5c894e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca54c67-f642-4bb4-b07f-e78ef6ed5e4b", "sighting_of_ref": "indicator--a1175982-aee7-4a06-8f47-064b3e80c7db", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd249bd-0514-445c-b0ae-ce6c893f3001", "sighting_of_ref": "indicator--a1175982-aee7-4a06-8f47-064b3e80c7db", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091c5324-1eb3-456f-b44e-05612de806b7", "sighting_of_ref": "indicator--b9d2edba-81bb-48a9-b508-d1f360d025fa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c7472e-98e2-4cdc-9a24-50ebc1cbad38", "sighting_of_ref": "indicator--b9d2edba-81bb-48a9-b508-d1f360d025fa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8999666-1918-4b7e-b398-6a4a5da6862f", "sighting_of_ref": "indicator--b9d2edba-81bb-48a9-b508-d1f360d025fa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac906d3-f594-4afc-9798-9a2868107345", "sighting_of_ref": "indicator--6e371570-483d-4567-bc04-e36c9a3fc3f0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beef3837-8d7b-48dc-8eca-80a818cc72a0", "sighting_of_ref": "indicator--c57c84da-8aa7-4e6f-99b8-e3350b45538f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f0c336-6dbd-4636-ba97-eae352f82eed", "sighting_of_ref": "indicator--c57c84da-8aa7-4e6f-99b8-e3350b45538f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6e35d1-adf7-479c-a863-83d2a808c9a1", "sighting_of_ref": "indicator--c57c84da-8aa7-4e6f-99b8-e3350b45538f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f946bb-8d08-4d6a-9681-b989bdf84c92", "sighting_of_ref": "indicator--02bc32bc-d41f-4924-a2d8-f9686bac5edf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f449d581-665d-4498-8a76-3ba7fb04c462", "sighting_of_ref": "indicator--02bc32bc-d41f-4924-a2d8-f9686bac5edf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed44cb41-0f22-4b75-a3a4-03d8e2982ad2", "sighting_of_ref": "indicator--02bc32bc-d41f-4924-a2d8-f9686bac5edf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f368d8-fcbc-48c6-af5e-4737fbf4f3f7", "sighting_of_ref": "indicator--727ccc8b-e767-43fd-999a-b29a6fe19530", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d631ec14-f6d9-4a43-aa9e-ac5b81894658", "sighting_of_ref": "indicator--33c7dab7-1cdc-4740-82ff-7c25b3c985fa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33bd003-c762-442f-ba6c-b8eb334d60f0", "sighting_of_ref": "indicator--c72b8d4a-daf8-4bcf-bd8c-2ead74147be1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4d8070-08c9-4353-95cb-111c04c30ae5", "sighting_of_ref": "indicator--c72b8d4a-daf8-4bcf-bd8c-2ead74147be1", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55f0e18-b339-4507-b3c5-5dec0e0aa66f", "sighting_of_ref": "indicator--29ddff0f-7cfc-4fb7-9ccf-a43589a71d05", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cfefeb-af6b-4c42-9381-9f98cb115c83", "sighting_of_ref": "indicator--29ddff0f-7cfc-4fb7-9ccf-a43589a71d05", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093887f0-763a-4737-838c-f6a910ba24a6", "sighting_of_ref": "indicator--29ddff0f-7cfc-4fb7-9ccf-a43589a71d05", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5a140d-1a66-49cf-bcbe-65b680297081", "sighting_of_ref": "indicator--e64e14e5-cf49-461f-8be2-7ac5c97df5fa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449b9946-77e1-4371-85c4-8431502fc6ca", "sighting_of_ref": "indicator--688e5974-b258-48e2-b307-0cbab4c641b2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88537825-f686-41d6-846e-c5e2e7ad969e", "sighting_of_ref": "indicator--688e5974-b258-48e2-b307-0cbab4c641b2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5798d4-54bb-4e3f-a092-23685ca73005", "sighting_of_ref": "indicator--989449dd-55de-45e7-89ff-e14d8f5aa125", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2672fd8-013c-4cc8-83a0-3407632dd23d", "sighting_of_ref": "indicator--989449dd-55de-45e7-89ff-e14d8f5aa125", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc906661-2e00-4dc7-ae05-71071199348d", "sighting_of_ref": "indicator--989449dd-55de-45e7-89ff-e14d8f5aa125", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3aab783-e7da-469b-9839-82318fbef4d2", "sighting_of_ref": "indicator--9173c243-f381-41d8-a45f-e5d842ef842e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777a7efd-e8cb-4ea6-8a2f-eeef012a282b", "sighting_of_ref": "indicator--4bf7ac9e-01f0-49ce-8cb1-be6695139089", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd58c6e-fc1f-49ba-abaf-d4074fde2f3c", "sighting_of_ref": "indicator--4bf7ac9e-01f0-49ce-8cb1-be6695139089", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e149cb3-98b5-442a-b639-d60b93c41325", "sighting_of_ref": "indicator--4bf7ac9e-01f0-49ce-8cb1-be6695139089", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b637a6-edbe-49ad-970b-52e84352212f", "sighting_of_ref": "indicator--a1dec58d-5ea7-4c92-a1ee-62b0ecdc270e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8466f976-0b13-408c-a649-bec036c7bf7f", "sighting_of_ref": "indicator--0c0a0112-25cf-4424-9f56-69b7d9fdf057", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc4533a-63f9-4a14-9734-a763d62a9517", "sighting_of_ref": "indicator--e6b916a9-af29-497b-a6ef-78cf8c23d799", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b804d1-eddb-46d5-9153-3fe5e1d4b397", "sighting_of_ref": "indicator--937c9049-4cda-4c56-94be-e08db0d610cd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdeb979d-c915-4985-bdaf-c833fd5483c9", "sighting_of_ref": "indicator--e3264d2a-26ba-48db-9f35-9e876be10883", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3c42cc-6af7-4b97-b50a-3b48eae4c9a7", "sighting_of_ref": "indicator--e3264d2a-26ba-48db-9f35-9e876be10883", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b521810f-e3b3-471a-962b-fb3838a9f08f", "sighting_of_ref": "indicator--5c5ae739-a19e-4931-b530-37501dbfb5c0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbb00b4-3145-4350-bf48-d66f628ac3d5", "sighting_of_ref": "indicator--5c5ae739-a19e-4931-b530-37501dbfb5c0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c104d2d3-0629-481b-ba27-0163aec04034", "sighting_of_ref": "indicator--5c5ae739-a19e-4931-b530-37501dbfb5c0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca67d763-e2df-4043-953e-683980ee9bda", "sighting_of_ref": "indicator--3e1b549b-b1f0-4584-96fb-3a9a051c747f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf68612-c5c9-4830-9118-9f2b6063ee1a", "sighting_of_ref": "indicator--1a05a15f-c057-417f-9e8f-5c4be13dcbeb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2317542a-cb14-4cea-bad4-ab39518335e8", "sighting_of_ref": "indicator--1a05a15f-c057-417f-9e8f-5c4be13dcbeb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c333cb-535a-42a5-bb19-6da65b31bcc2", "sighting_of_ref": "indicator--5602c498-ea34-45fa-be63-2ca38b94d301", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dddb4de-51b4-4729-81bf-0023977a77a4", "sighting_of_ref": "indicator--5602c498-ea34-45fa-be63-2ca38b94d301", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a09d5db-bd91-457e-840f-7cb9f513f068", "sighting_of_ref": "indicator--591ada3c-9147-4d71-ac76-d1167120c830", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b654a302-28c9-458c-8348-de99c079f369", "sighting_of_ref": "indicator--f90919bc-092b-4698-bade-32c9e6ab82b1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb63269f-45ff-460d-9545-f3b5add39dad", "sighting_of_ref": "indicator--2ccdb7b9-f1fb-496d-b4b2-87707c56f3e8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a8cc55-df4b-4a0d-bb0c-18e2882d0ec3", "sighting_of_ref": "indicator--2ccdb7b9-f1fb-496d-b4b2-87707c56f3e8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1392c0e1-39be-4293-be1e-89135cbe2ab8", "sighting_of_ref": "indicator--1ae2f7f7-2906-413f-adc0-8a54d498601d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2813a6b-602f-48ee-98a2-bc6ae1aa2ef0", "sighting_of_ref": "indicator--1ffc92ee-f1d0-49a8-bfe8-138b6d0bf677", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dc1a4a-4112-41de-b855-d6f071401194", "sighting_of_ref": "indicator--1ffc92ee-f1d0-49a8-bfe8-138b6d0bf677", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59f636c-c86f-4153-b4bb-24f17b5d4ace", "sighting_of_ref": "indicator--1ffc92ee-f1d0-49a8-bfe8-138b6d0bf677", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52cccb9-acc6-4d93-895a-d1cc1d3d8754", "sighting_of_ref": "indicator--f525dcb3-18cf-4fbf-bf37-0e1af699f31c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0883325d-b67e-4c84-8a0a-21d4a0842e50", "sighting_of_ref": "indicator--3ba9c4a5-3289-47df-a28d-718018b4b1b8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2833b8e-d08e-402d-a134-545e17215a5f", "sighting_of_ref": "indicator--3ba9c4a5-3289-47df-a28d-718018b4b1b8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60db219-947f-4b9a-97ec-7047a75c6194", "sighting_of_ref": "indicator--5ef65dd4-bdb1-4f2a-aa71-060da46b6638", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5caf508-d5ab-4446-b8f0-83c5c01cc42d", "sighting_of_ref": "indicator--ca06a660-b58c-4788-b2ac-d53a57580f44", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d475ae9c-2514-4d23-8923-8d0b6678b13d", "sighting_of_ref": "indicator--ca06a660-b58c-4788-b2ac-d53a57580f44", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a7f633-204a-4a94-bfa0-330ba492ed57", "sighting_of_ref": "indicator--ca06a660-b58c-4788-b2ac-d53a57580f44", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f550efb-1a44-4d16-8395-1a0398a55473", "sighting_of_ref": "indicator--7e6d052d-9656-4875-99ad-ad91236b57bf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda6879f-8958-429d-b50c-80130608104b", "sighting_of_ref": "indicator--1e816355-d996-4583-a00d-9ee5d34f4f5d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e807626-93aa-451f-a0c3-c576b6e71efd", "sighting_of_ref": "indicator--057f8632-289d-4bf8-9af5-0b05a3a96d8b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf36999d-4d17-4433-8c4b-4f1e2ea7d0db", "sighting_of_ref": "indicator--7b11d594-7ebc-4e54-89bd-fbdc09661b5e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81c8fed-2caa-4e0b-a409-10bde3e9b13f", "sighting_of_ref": "indicator--4233e463-ecab-4a8b-92e2-05a921576af6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9084f02c-7c96-4567-924e-ac1dc6b4ca9e", "sighting_of_ref": "indicator--4233e463-ecab-4a8b-92e2-05a921576af6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b58e2e9-ae61-4c2e-91a6-cd6b92de41b2", "sighting_of_ref": "indicator--728cd5e1-06be-46ec-9a7d-770c040f28eb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f50315-28f3-48d1-9b21-ed515b4960f3", "sighting_of_ref": "indicator--63c20854-c227-4815-965f-dfc599baa261", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83839f11-493d-4689-a6bb-61d5687f00a4", "sighting_of_ref": "indicator--e58b3c96-3f36-43f9-a657-135dcad6a9d2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54809ac9-0aee-4ac3-ac5b-072664bd9b74", "sighting_of_ref": "indicator--8283701d-537e-4ac3-8273-fcad0748bc99", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d4be22-c0a1-4f55-9b7a-9215539979ab", "sighting_of_ref": "indicator--c06bd290-c989-468e-a695-ee78967649d8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3129ff99-a487-4ae8-8244-dba64b76df6a", "sighting_of_ref": "indicator--f760774c-c616-409c-a7ad-61f8b7733c64", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acf7e4c-72e1-4fde-933c-32667e322656", "sighting_of_ref": "indicator--22f3a1b5-5a19-42cc-923c-d850f474f81a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ff32c3-2cb9-4466-a1ad-88cbe43e50b8", "sighting_of_ref": "indicator--22f3a1b5-5a19-42cc-923c-d850f474f81a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55336175-fe23-4865-a9b2-cdf51301fb0e", "sighting_of_ref": "indicator--22f3a1b5-5a19-42cc-923c-d850f474f81a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c11cd75-1593-4f30-aa3c-b0c45f4487d0", "sighting_of_ref": "indicator--48de6b69-63d9-4c7f-8125-038861e364ad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69689e6-7801-438d-bb1f-4940fb792367", "sighting_of_ref": "indicator--d334ad5b-73f6-4d4e-909b-74b4f207faed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd27696-cd0b-4396-9430-b180e1b8b153", "sighting_of_ref": "indicator--8695da6e-3cb0-4c41-964c-4a4b7c8d739f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6a89b7-7a0d-435a-8a30-bf518d321cf6", "sighting_of_ref": "indicator--db25ad36-e6f4-4fa4-b303-18854b6bad30", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20acab2c-12c0-468c-bc38-c8767e1aff7b", "sighting_of_ref": "indicator--db25ad36-e6f4-4fa4-b303-18854b6bad30", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcdf9a1-7568-457d-b49a-f76067ae970b", "sighting_of_ref": "indicator--a81e39ce-5833-472e-8a66-305fb1622a62", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8371d73-015f-44d2-a00b-341ca7dc38ba", "sighting_of_ref": "indicator--f5b6446c-d832-44e3-b271-b58c765eb419", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50221ba-f271-493f-a599-b8004f7b524e", "sighting_of_ref": "indicator--415c695b-ec3c-47d2-8c0d-b8bd4af0d99c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb50d1c-19ce-476f-bc7e-f4b13af58322", "sighting_of_ref": "indicator--3ffd2edf-d8b2-422e-832a-dcb5799790d9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15acf243-18fa-4808-a845-0df92a52a301", "sighting_of_ref": "indicator--9924e708-60ea-43b9-8b5b-6534819293c4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3648a27c-14a7-45bc-a2c0-b51162a7f6b4", "sighting_of_ref": "indicator--01c36ed1-6cb6-4e15-b0db-1a3d0e5af5ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52018cea-d0ab-4fec-882f-6fd78e66bf9b", "sighting_of_ref": "indicator--8109df98-6442-4527-bd4b-6ae78a8d906f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b22d4a0-f6fd-4620-ab7e-97a9377c9fb3", "sighting_of_ref": "indicator--f9b890ea-5928-45c3-b584-57cd89ce3c3e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915f9055-d730-4520-b415-68b908aeccf1", "sighting_of_ref": "indicator--9625d89f-90ff-4882-9c90-687ac68cc336", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f557cda-d09e-40f0-bb11-d005af593f53", "sighting_of_ref": "indicator--9625d89f-90ff-4882-9c90-687ac68cc336", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9bf60b-0b03-4fdf-b8b2-0c5e22983498", "sighting_of_ref": "indicator--a7672812-1243-466f-8cb2-3b59581df940", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b99c03-7151-4acf-b234-1ecd5ba1bee2", "sighting_of_ref": "indicator--a7672812-1243-466f-8cb2-3b59581df940", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ff0560-4748-4983-9eef-8256132f1d9f", "sighting_of_ref": "indicator--d3f32cb5-4213-4b4f-814e-867b4e38218f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9d713a-58f5-4123-909e-71a8e1dd4259", "sighting_of_ref": "indicator--0fd195fa-204f-477b-b40e-121bc2e5c298", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1418bca4-f3f9-4b1f-8225-476bef5e3399", "sighting_of_ref": "indicator--28beb4d7-3897-4a9b-b947-b00463859475", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e20daa-0dda-4b8a-816c-8a0d6fbdd86f", "sighting_of_ref": "indicator--28beb4d7-3897-4a9b-b947-b00463859475", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df43423b-54e0-468f-976a-87cee4b7f3ef", "sighting_of_ref": "indicator--ce8a746c-bab2-4c52-ad05-5787a44c3f12", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080ed3c9-443f-4b5e-96d2-7afdf74d1bd5", "sighting_of_ref": "indicator--cb0ce165-1f14-4aff-90ef-856c68e7123f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbd0c24-e505-462e-8f42-fdb87b27e70d", "sighting_of_ref": "indicator--3a111c77-5625-4655-b426-6e5028d55833", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b883bd-1100-45ff-874f-a84255e948c7", "sighting_of_ref": "indicator--b5b34e8a-1736-4d91-b078-faf3a150b2d2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246afca7-153b-498d-bb07-528d117500d5", "sighting_of_ref": "indicator--b5b34e8a-1736-4d91-b078-faf3a150b2d2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165d6845-317c-46a1-880b-466e159132ca", "sighting_of_ref": "indicator--3c777224-1b35-4bb3-be4b-e88b4ef34b2e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8d3a51-64d7-4a74-9585-6a88f7a7431d", "sighting_of_ref": "indicator--3c777224-1b35-4bb3-be4b-e88b4ef34b2e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71bd995-c801-4c69-9209-0ed17dbea936", "sighting_of_ref": "indicator--1e4d072a-2928-4fbe-9d79-5f8c24e6e4e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed7ee3f-df18-4da3-9adf-1a53e3b5eb6e", "sighting_of_ref": "indicator--1e4d072a-2928-4fbe-9d79-5f8c24e6e4e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5a1b4a-5ca8-4b78-80e5-33d4020f1d38", "sighting_of_ref": "indicator--6fdd6a19-3927-4c30-9d36-05e13f942461", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32908e52-f30b-46df-82c2-1e49232cfa04", "sighting_of_ref": "indicator--6fdd6a19-3927-4c30-9d36-05e13f942461", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8737c223-cb72-4425-ad48-973778ea1136", "sighting_of_ref": "indicator--b14cb712-ad2c-421e-b6c4-a4f05acc4e51", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44840cb-0e3e-4e69-b557-936326d8dfb3", "sighting_of_ref": "indicator--b14cb712-ad2c-421e-b6c4-a4f05acc4e51", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a48f07-d307-4954-bc5e-6778e8cd0535", "sighting_of_ref": "indicator--1bfdb9b3-d1aa-47a4-bb53-0bd62a971650", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd3f26d-7b3b-42b4-a573-154d80192904", "sighting_of_ref": "indicator--922aff65-a189-4841-bd45-1e58392599c2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0678373-4f61-4721-9fd1-374c9bd6bdd5", "sighting_of_ref": "indicator--922aff65-a189-4841-bd45-1e58392599c2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492a070e-1fb3-4b13-b489-4390580f422f", "sighting_of_ref": "indicator--0147679c-2da9-44b5-a0e1-7b28c2e765ad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a9e049-3c7a-4d9a-b2fe-ddd00f69b216", "sighting_of_ref": "indicator--498b5ef4-f234-4e4d-85ed-7e9f438832ba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0b51d6-e2f4-400c-8234-56bdce1a6f2d", "sighting_of_ref": "indicator--18b652a6-02ef-4e10-bbc0-90a6d1edfa80", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53022749-daf8-4100-99d1-3ec8f4d39c4a", "sighting_of_ref": "indicator--18b652a6-02ef-4e10-bbc0-90a6d1edfa80", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776d92f6-a070-4458-8e3a-fae3ad1bef4a", "sighting_of_ref": "indicator--8e706178-2a98-4b8c-92ab-2f44f266e3b4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5471bf22-5331-44af-8abb-96415def6c90", "sighting_of_ref": "indicator--8e706178-2a98-4b8c-92ab-2f44f266e3b4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5811a53-f88b-4d35-b306-b124c6149456", "sighting_of_ref": "indicator--cf11faa0-4420-4458-9d55-64cc52f82243", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719957f5-1e9a-43a1-9075-77d428c9020c", "sighting_of_ref": "indicator--8678a76c-5786-469b-acf5-851e4febcbaf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e4b1b3-b6d8-42c8-bdbe-0b8908a01a6e", "sighting_of_ref": "indicator--410d0f1a-6c9f-4b7f-8bc2-63cba22752ea", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62228e60-926e-41f2-bde7-0a8796b4c010", "sighting_of_ref": "indicator--410d0f1a-6c9f-4b7f-8bc2-63cba22752ea", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e37b85-8ce0-4edc-b677-8734269a67af", "sighting_of_ref": "indicator--410d0f1a-6c9f-4b7f-8bc2-63cba22752ea", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbdae03-8bc3-45cb-a002-14c960f0f8b6", "sighting_of_ref": "indicator--e9139923-f5c1-4de4-928e-8f944a0558bc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5c7cec-2aa3-45d0-8692-ef2661c6283d", "sighting_of_ref": "indicator--c5844359-50a4-417e-92ec-92bf7af86448", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8416d5-01cb-4063-babc-9f461b463031", "sighting_of_ref": "indicator--f85c08ed-40fc-45f4-8037-51e04b3af79d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c93e36-eec3-484b-882f-b252a4dc8c31", "sighting_of_ref": "indicator--bf60861d-1bdf-47ba-abca-e3f59412b047", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cef133-2e14-467b-aebe-0a88630cf586", "sighting_of_ref": "indicator--1c9bc2f7-005b-45a4-b5a0-9c57c90f0ad5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228f174f-594d-4a82-a864-656c4cddee9f", "sighting_of_ref": "indicator--c042474b-5338-4c20-a6a9-d93042cef6ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daca5776-17f7-4d79-a762-406c8d3bb14d", "sighting_of_ref": "indicator--17238bb9-7d3f-4109-8567-a4893a2a55cf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd703ac-f7f6-488b-87d3-70871677ee74", "sighting_of_ref": "indicator--17238bb9-7d3f-4109-8567-a4893a2a55cf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8d17f7-10cf-4e36-b033-918d720f8266", "sighting_of_ref": "indicator--204c25d7-f8d6-4969-a8c9-495ee1b004fd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d725d4f-66c0-4c32-b609-c5650c8bfc6e", "sighting_of_ref": "indicator--204c25d7-f8d6-4969-a8c9-495ee1b004fd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26af2e37-44d9-4327-bded-37d540e915af", "sighting_of_ref": "indicator--549c44d0-4bb2-4434-832b-c5053ec176c1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe04fdf-6ac0-425e-af0d-924b86891c43", "sighting_of_ref": "indicator--f46be945-3213-47ed-9505-ab1832dd52eb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2f6080-3c3e-4f8b-a059-9dd936da420e", "sighting_of_ref": "indicator--f46be945-3213-47ed-9505-ab1832dd52eb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224a20d9-49c4-4b4c-9637-ff86dd937702", "sighting_of_ref": "indicator--a81121d9-e414-4dd9-9be3-d219645350d7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b38796-2709-4604-baba-5e4320742df7", "sighting_of_ref": "indicator--9b9f738a-595b-4927-a046-672f22e1643c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e78853d-82a2-4054-afa8-0391c05a88e3", "sighting_of_ref": "indicator--aac6aab7-6493-4726-9b40-cae70ce17e8b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e86952-6347-4711-ad33-f0aac9ed8343", "sighting_of_ref": "indicator--e1d317ea-266f-49dd-af20-34b566739fa9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39b0a56-309e-4d57-b458-494b717453ec", "sighting_of_ref": "indicator--6bc51b86-253e-4246-a79b-13bb39b63b5c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e81db9-ccb2-48a7-8bfe-9f1acc9bb726", "sighting_of_ref": "indicator--b1419ca9-a756-48c3-bc2d-572f11b148d8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548de084-0b07-4334-bdda-d76856595ea6", "sighting_of_ref": "indicator--9768b461-0319-4f1f-9b86-d4f861285006", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23773af8-0741-465a-8c32-76ac1ae76c92", "sighting_of_ref": "indicator--f4ca6f09-d66a-43f3-b3d9-35716e9ec812", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e08113-e527-4bf2-953e-bca67002e74b", "sighting_of_ref": "indicator--ebeb13f0-f17d-4207-8aba-75603a6778b5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17eafe8e-f426-4ffb-a5fe-0bcdddc86d56", "sighting_of_ref": "indicator--ebeb13f0-f17d-4207-8aba-75603a6778b5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc89750f-319a-47c6-8586-d5de536d63fe", "sighting_of_ref": "indicator--5ebbd2ed-f6d0-4728-9b51-662b00ecb5ca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b393a02-3df8-44cf-befd-ae90cf9f68cf", "sighting_of_ref": "indicator--19254ed7-15d2-4417-8e06-342af22b52f1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612e5e3f-5a77-4e64-b6b4-02189db74f08", "sighting_of_ref": "indicator--19254ed7-15d2-4417-8e06-342af22b52f1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f4282c-d09f-4e90-b929-ac5152a4abb2", "sighting_of_ref": "indicator--7d07628d-8d10-4570-a2b6-dc18a18e8e74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063faff4-18bc-48e2-a14a-518c4df9e19e", "sighting_of_ref": "indicator--b48cf5fc-9a7e-4668-aec0-b14b1c05fb32", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea4013f-091b-4e37-af8a-08f6d4043d1c", "sighting_of_ref": "indicator--b212d51e-fcc3-4953-a985-142edfe86a61", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac289c3-f722-4425-ae0e-c13ff49ce0e2", "sighting_of_ref": "indicator--b212d51e-fcc3-4953-a985-142edfe86a61", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e809b9c9-d1ac-4421-a8e7-c0b6eccfaf71", "sighting_of_ref": "indicator--b212d51e-fcc3-4953-a985-142edfe86a61", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd814513-ab08-4616-b4a5-c206ce5b64d2", "sighting_of_ref": "indicator--3dee53f4-b865-44f3-9780-6d798d9b370d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c040927-5ae2-4399-9861-6735098e4fe1", "sighting_of_ref": "indicator--1bc0ad79-8104-43cc-9647-bc82f6083012", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d29850a-4176-4205-8d02-7b88d8ed30e4", "sighting_of_ref": "indicator--1bc0ad79-8104-43cc-9647-bc82f6083012", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c047ea9-ea70-4834-b449-c0a8ab2941d0", "sighting_of_ref": "indicator--7f01ba1d-11de-4e45-976d-a11dcdd5edf5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683cdf30-6c55-41d5-b3d1-7c37a5dbe2ea", "sighting_of_ref": "indicator--7f01ba1d-11de-4e45-976d-a11dcdd5edf5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8419db5b-3fc7-49d0-8289-6d760d918715", "sighting_of_ref": "indicator--1a8283a1-c536-4d5a-872b-77c3fd6e0c68", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18a37de-d4ea-4744-b0cf-787e7a8e385d", "sighting_of_ref": "indicator--1a8283a1-c536-4d5a-872b-77c3fd6e0c68", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca71c9fb-f626-46ee-90ac-e3fdba567e53", "sighting_of_ref": "indicator--6bc3b82a-7e52-49ca-ba52-ffe6bc931014", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca7f12b-a9dd-4514-a438-56a26ed12272", "sighting_of_ref": "indicator--6bc3b82a-7e52-49ca-ba52-ffe6bc931014", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094f9d00-5cbe-42cb-a25f-80c087197015", "sighting_of_ref": "indicator--b4b52996-ef12-4ea2-aa90-9214394241ed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84def3ca-ae1b-48e3-aeaa-f956d7808664", "sighting_of_ref": "indicator--b4b52996-ef12-4ea2-aa90-9214394241ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4bedb7-5842-4867-bef5-8b1a2616060c", "sighting_of_ref": "indicator--dc7f46fa-020c-439c-b84d-ab485609d6b6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4d8a8b-3e3f-4547-8836-f35ced5e5562", "sighting_of_ref": "indicator--dc7f46fa-020c-439c-b84d-ab485609d6b6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f9f5c5-7bc6-48bb-9698-1ca1b03184ca", "sighting_of_ref": "indicator--dc7f46fa-020c-439c-b84d-ab485609d6b6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba86584-70bf-4f1e-aed8-cf65ccc66584", "sighting_of_ref": "indicator--22cf8050-8c84-4fd9-9eac-90db0a7c01d0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f63d3b3-75f7-47db-a045-414e13adcaa1", "sighting_of_ref": "indicator--22cf8050-8c84-4fd9-9eac-90db0a7c01d0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e9bf76-2ee5-433a-b7e9-2a2ae31bf738", "sighting_of_ref": "indicator--5336d533-9249-4148-897f-dc0e88df0a08", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e1e49d-2cf9-4928-a540-894b8bd6cb39", "sighting_of_ref": "indicator--6b296029-0200-4248-9bee-2a1375a940b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a27f5b-14fe-4dce-9fd4-8d56b8dd1595", "sighting_of_ref": "indicator--c5939ae7-6dab-4610-9149-71d7d22ba63f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81413189-af13-4f25-b3b3-6d20e5735e59", "sighting_of_ref": "indicator--c5939ae7-6dab-4610-9149-71d7d22ba63f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82a7796-07e9-45fb-b9a0-11c22b2f8561", "sighting_of_ref": "indicator--edfc51d4-331e-4055-a8e2-c8d82f1d954a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b185b777-16e7-4e11-9207-0a2c4f130e77", "sighting_of_ref": "indicator--edfc51d4-331e-4055-a8e2-c8d82f1d954a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c4fa74-5b35-4973-9e3d-b20ed3c6ef7b", "sighting_of_ref": "indicator--edfc51d4-331e-4055-a8e2-c8d82f1d954a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4071c3-7f75-4a28-83e0-e5976e9167f6", "sighting_of_ref": "indicator--2a03af89-032f-4c84-8136-2f01a8224b13", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861916ad-a72e-4888-8a2f-9cfa96176340", "sighting_of_ref": "indicator--68dded42-214d-42bc-83a6-6ea89290cf64", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca027c1-d25f-4529-9673-f3e58413dcf3", "sighting_of_ref": "indicator--68dded42-214d-42bc-83a6-6ea89290cf64", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b00e71-2713-496c-a96c-bae2981f68ce", "sighting_of_ref": "indicator--7c4b0e47-73ed-40b7-a5b6-e565179543b5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a25970-0c2f-4467-9a3d-4510b853a946", "sighting_of_ref": "indicator--a3a167f0-ecd9-45cc-9180-820e206764e3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28314304-19fe-42a1-b786-6afe7a82a0ee", "sighting_of_ref": "indicator--036bd420-d340-45be-8df2-0ece8d1d11c0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b9b3e5-7746-4251-9cdf-9a9a0a7ca4ea", "sighting_of_ref": "indicator--036bd420-d340-45be-8df2-0ece8d1d11c0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca022b7-2dcd-4c03-b250-3a3990764ca8", "sighting_of_ref": "indicator--036bd420-d340-45be-8df2-0ece8d1d11c0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10902b4b-692a-4f14-9abe-183d92ff1c8e", "sighting_of_ref": "indicator--145c6dbd-be71-4f9e-959a-a5dfe2c21329", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c8bf07-129a-44d2-9579-25a72ec23b28", "sighting_of_ref": "indicator--145c6dbd-be71-4f9e-959a-a5dfe2c21329", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2eef16-ed5e-4fbc-9e39-c81cc507a49c", "sighting_of_ref": "indicator--8de1f57f-34e9-4fbd-96b7-84618a1d5642", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7dab5b4-bdcc-4ec0-b3a2-289b24bcb113", "sighting_of_ref": "indicator--8de1f57f-34e9-4fbd-96b7-84618a1d5642", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54511d58-b9cd-4191-aa67-6ef762f24aa8", "sighting_of_ref": "indicator--69d03e17-2ad4-488e-ae4a-f7e7554a0bee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11058a44-4bfd-497c-b240-ea7cb5718ce9", "sighting_of_ref": "indicator--69d03e17-2ad4-488e-ae4a-f7e7554a0bee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f4091b-d839-43af-96a1-3ef57ca682f2", "sighting_of_ref": "indicator--4d4b403d-a7f6-498a-bfa4-8fa656e97ecb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2ee469-3a9c-4a9c-912a-96f96df0d406", "sighting_of_ref": "indicator--4d4b403d-a7f6-498a-bfa4-8fa656e97ecb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8339096a-1332-429c-9b30-3f0ef1bced3b", "sighting_of_ref": "indicator--46f299c7-e85e-4795-af01-8a4d34c80f0c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93af1f86-4d31-4656-9c42-4a6e234e1852", "sighting_of_ref": "indicator--d77985da-472e-43cf-849f-0f5f43d27084", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0851d0-c07f-421b-8ff0-f404273b19fa", "sighting_of_ref": "indicator--d77985da-472e-43cf-849f-0f5f43d27084", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b2f7cb-3220-4707-a973-12ef85d292f6", "sighting_of_ref": "indicator--d77985da-472e-43cf-849f-0f5f43d27084", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eba09b6-b28a-4fd3-8ccf-9a048baaf036", "sighting_of_ref": "indicator--63d152d1-a45d-4211-8715-74b14e2dea77", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5184de0-9180-4ec7-90a1-9a503f825e8b", "sighting_of_ref": "indicator--63d152d1-a45d-4211-8715-74b14e2dea77", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b88b316-b929-44c8-8bfb-b2da9ec4cb88", "sighting_of_ref": "indicator--e10b7ec2-75bb-406f-aa63-a53ad4513dba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61dda58d-8ee1-44cb-9163-6c8998ec4bc3", "sighting_of_ref": "indicator--e10b7ec2-75bb-406f-aa63-a53ad4513dba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7145616b-95d9-4a0e-b876-c027c6836efd", "sighting_of_ref": "indicator--513e2aba-c66c-4622-b5f7-1c9dbb706dbd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1465ef52-33a3-4ea4-a5e0-fa3970886b27", "sighting_of_ref": "indicator--513e2aba-c66c-4622-b5f7-1c9dbb706dbd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e009b1-1676-408f-ade7-9f4fab9abcae", "sighting_of_ref": "indicator--513e2aba-c66c-4622-b5f7-1c9dbb706dbd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511d966f-1c6a-4e7c-becd-c52bc371921f", "sighting_of_ref": "indicator--b9141c7d-c43b-432c-9a6a-4f9dd611a49f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4dd9ac6-eb07-4e10-88ec-28cf5f99d952", "sighting_of_ref": "indicator--b9141c7d-c43b-432c-9a6a-4f9dd611a49f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e336b7d-8532-413e-b49c-8b3a2103e839", "sighting_of_ref": "indicator--eac42215-459b-42c3-b0d5-d104770cc90c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2a25f7-2118-4556-bdef-c69bc09dce06", "sighting_of_ref": "indicator--eac42215-459b-42c3-b0d5-d104770cc90c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8ee29d-1fdb-4132-a0f4-cddf15a0ff4e", "sighting_of_ref": "indicator--eac42215-459b-42c3-b0d5-d104770cc90c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c597fe1c-cabb-4891-81f2-a81158cdb50f", "sighting_of_ref": "indicator--ff691c68-9776-4839-8bcb-bf00649d8823", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6eeb913-6488-4c7b-9178-58627ac8d345", "sighting_of_ref": "indicator--ff691c68-9776-4839-8bcb-bf00649d8823", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd857b2-a2ac-4f48-9808-c32d22f884c0", "sighting_of_ref": "indicator--ff691c68-9776-4839-8bcb-bf00649d8823", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ec1a7d-2cb5-4b84-a154-1acbfe6b2973", "sighting_of_ref": "indicator--6f7d9ff0-6590-4663-81df-ce51d3322017", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc988ec0-2d8a-48b5-b654-212514a84f79", "sighting_of_ref": "indicator--6f7d9ff0-6590-4663-81df-ce51d3322017", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4184c8-9bd4-40f4-b950-24ea79b99adc", "sighting_of_ref": "indicator--16a8d606-5420-478d-b897-72d6f433a12f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c896cb-fbb7-479c-8f64-c8ae7d27ce00", "sighting_of_ref": "indicator--a4e935c1-2187-42fd-b53b-94213b7d571b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fa3fa1-1545-44ae-9810-bd14c1ffca9a", "sighting_of_ref": "indicator--e1e91200-33fd-4200-828e-a583f737ad0b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9e907d-c3b3-4641-8fc7-400fbc9a4fb8", "sighting_of_ref": "indicator--e1e91200-33fd-4200-828e-a583f737ad0b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3964bb-0b29-4614-8d7b-e199385837f8", "sighting_of_ref": "indicator--e1e91200-33fd-4200-828e-a583f737ad0b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c888fbd9-4529-419c-afb1-b9b4dc50b307", "sighting_of_ref": "indicator--91ecbac7-03e1-437e-8b83-053aff8d42d4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1cc55d-e416-4266-9d3c-94edeaec5225", "sighting_of_ref": "indicator--5c07f2da-912b-457f-87be-27d121d01dfb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db8744f-fefa-4e22-beee-0231c7507cc8", "sighting_of_ref": "indicator--5c07f2da-912b-457f-87be-27d121d01dfb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f487b3db-d3a4-4689-aff2-50104056f102", "sighting_of_ref": "indicator--5c07f2da-912b-457f-87be-27d121d01dfb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6c47b2-2ec3-4e77-b02b-a385550ab842", "sighting_of_ref": "indicator--edbbc34b-570f-469b-a1ee-bb1f4f21eb4d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f0518b-d0df-42e6-9e7d-babac3d91ba5", "sighting_of_ref": "indicator--a74d8e16-d9d1-4e48-bdbe-eb4ce5c62530", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdcf20c-f248-4caf-ad1b-9b21b70bbfd8", "sighting_of_ref": "indicator--a74d8e16-d9d1-4e48-bdbe-eb4ce5c62530", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3159c92a-c411-45e3-966b-a6c1b6ea7393", "sighting_of_ref": "indicator--a74d8e16-d9d1-4e48-bdbe-eb4ce5c62530", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b289d0-b86d-4035-a49b-6df40c1a060d", "sighting_of_ref": "indicator--e3de5a9b-23e3-4817-8b1d-482495a0c67a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b630edf-5a6c-4754-8c3b-ca662145031d", "sighting_of_ref": "indicator--194b69ce-ed53-4815-bcb3-e9bccbf57b69", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce1b2c1-3d6d-4fb9-8565-c5996d2a2436", "sighting_of_ref": "indicator--2f030adb-2606-4251-a994-e49a2c6b4be9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bc400f-7166-434a-9e89-be390eb80cf0", "sighting_of_ref": "indicator--2f030adb-2606-4251-a994-e49a2c6b4be9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e451673-3ce5-40da-8160-8d4b949e89e9", "sighting_of_ref": "indicator--a01e738f-e395-426a-b855-636b2ee5cbd3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1490600f-e444-4511-9ade-231267f7586b", "sighting_of_ref": "indicator--849d9da4-3fe8-4b41-861d-0677fa283021", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edc7f64-8f86-4157-b76b-122ab9a533d6", "sighting_of_ref": "indicator--849d9da4-3fe8-4b41-861d-0677fa283021", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7f13da-8b6c-4a5e-8391-070cab33a716", "sighting_of_ref": "indicator--849d9da4-3fe8-4b41-861d-0677fa283021", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a83bdc-97f6-485a-9d31-f9ae70f3e2fe", "sighting_of_ref": "indicator--0355be27-e759-4ede-bfc4-4b7761d753a1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed629a05-f57a-4d1e-ac4e-4c005e13e2e9", "sighting_of_ref": "indicator--0355be27-e759-4ede-bfc4-4b7761d753a1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45176820-1541-467d-bbd1-1eaa8af3d94c", "sighting_of_ref": "indicator--0355be27-e759-4ede-bfc4-4b7761d753a1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfa72a7-cc3a-4f60-96c9-624d9af54d97", "sighting_of_ref": "indicator--9e8702b2-714b-47e4-972a-aca247b932c1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f327e7-f82f-416e-b7cf-4817683bee7b", "sighting_of_ref": "indicator--25bcc6d8-7c4b-477a-bca0-ccb40e97c8d2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c555b7-a489-4cad-b7ee-100bcb4d5982", "sighting_of_ref": "indicator--25bcc6d8-7c4b-477a-bca0-ccb40e97c8d2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a74b4e6-14ec-47f8-99ec-49ab06a563a6", "sighting_of_ref": "indicator--25bcc6d8-7c4b-477a-bca0-ccb40e97c8d2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4439fbc4-f461-4b59-930c-1dace7de1981", "sighting_of_ref": "indicator--858be74a-a289-4340-8025-c1c0523ea607", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c817071-1630-4b6b-a4ea-84ec5fa33acf", "sighting_of_ref": "indicator--6b21254d-5ce4-47c3-a5ef-13416b370a5d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4652874f-5092-4e47-9900-f88e289f4dce", "sighting_of_ref": "indicator--6b21254d-5ce4-47c3-a5ef-13416b370a5d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7117305b-635b-43d6-b52b-f3f785a52dfb", "sighting_of_ref": "indicator--6b21254d-5ce4-47c3-a5ef-13416b370a5d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931f3f2e-9a85-4424-9900-7a7540832968", "sighting_of_ref": "indicator--25597f51-1f51-48e2-bde6-49b4e449cee0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcc61a1-adbd-4efa-a2f3-c2668f07d162", "sighting_of_ref": "indicator--815e72d9-c124-4f18-9882-13421773b5d9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3047c0-8065-4555-b91f-0dc7b82e3855", "sighting_of_ref": "indicator--209c1ff5-8a3e-4441-903c-a5877774e2fe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7583e3-4c43-4ac1-91c4-631df97f2121", "sighting_of_ref": "indicator--e460a862-4669-4cce-bab3-fb0dab49625b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c25cbe-ad17-4089-b651-b9b88324a415", "sighting_of_ref": "indicator--339a4b05-1f36-46c5-a9fb-a2116abfd8cb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b00291-0c3e-4fc5-9d81-7b8d3398d417", "sighting_of_ref": "indicator--6e576bbf-b573-4959-a23f-9955416a8dea", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fb14fd-a0e1-4fcd-a819-cee5096cc9c4", "sighting_of_ref": "indicator--6e576bbf-b573-4959-a23f-9955416a8dea", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ad2559-adf9-4619-b491-a6e0b3975d88", "sighting_of_ref": "indicator--4b7b31a3-b4db-424d-8b22-2f26af26d247", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c8b761-658c-4f2a-8968-161b47d8f476", "sighting_of_ref": "indicator--4b7b31a3-b4db-424d-8b22-2f26af26d247", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e50caa-5bb7-49a8-b0f1-965f25dd1187", "sighting_of_ref": "indicator--ff172f89-b332-4f69-89b5-f7234a3ed5c5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b970f004-7cee-4db9-ba8b-add597e33686", "sighting_of_ref": "indicator--ff172f89-b332-4f69-89b5-f7234a3ed5c5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6548c377-45cb-4e75-a174-013fda795b71", "sighting_of_ref": "indicator--786b0026-3ca4-4745-9092-f461ecb86890", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebc7c7a-e540-4d56-b486-2f08ce53e3d5", "sighting_of_ref": "indicator--5789dae1-ba85-4533-8684-a71a03546785", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd827564-edb3-4ddd-9661-0bfc0d4cb804", "sighting_of_ref": "indicator--5789dae1-ba85-4533-8684-a71a03546785", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796b3616-a9c4-498d-a6d5-adea71b8cd23", "sighting_of_ref": "indicator--752b8747-86d3-451f-ab69-dbbd0c2d3f40", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a370667-eae3-4138-a14a-bb6d368fd1d9", "sighting_of_ref": "indicator--752b8747-86d3-451f-ab69-dbbd0c2d3f40", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ecf973f-5921-4038-ac49-e20bf3343641", "sighting_of_ref": "indicator--2d2fea1a-182d-4d14-ba79-c79e71ced300", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5989c3d6-4a74-4fb6-b19a-885794075058", "sighting_of_ref": "indicator--2d2fea1a-182d-4d14-ba79-c79e71ced300", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526ca99f-3a53-4a8a-9951-1724737ccb85", "sighting_of_ref": "indicator--bceb42b1-d4e2-4f4f-a459-63f165ae50ac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1e497f-c25c-4f12-ac5e-9c5ee0d9093f", "sighting_of_ref": "indicator--bceb42b1-d4e2-4f4f-a459-63f165ae50ac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c8104a-2756-4924-b24d-f1cb62bc3bbe", "sighting_of_ref": "indicator--bceb42b1-d4e2-4f4f-a459-63f165ae50ac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cde53c-6ec3-4af7-8895-ac9f1a80a7ed", "sighting_of_ref": "indicator--d51b1c94-92ee-470e-8404-387bce9047c8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f028f34-2b94-4afc-b209-8ec4dde1fd24", "sighting_of_ref": "indicator--a107f6e0-318f-47a8-892b-d765808db06a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb65939-a71e-4e94-bfb6-d94e96855e1d", "sighting_of_ref": "indicator--3c8e443f-b87f-4676-a207-9692deffb60b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7dc269f-b95d-4319-9687-a87bb9c0b9d1", "sighting_of_ref": "indicator--727f891b-5840-4edf-bd83-b895a266938c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4493de-d691-47fb-85d2-d05d779b1afc", "sighting_of_ref": "indicator--727f891b-5840-4edf-bd83-b895a266938c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95ed1f4-aa9d-4dc2-bc17-9a1b1787e056", "sighting_of_ref": "indicator--727f891b-5840-4edf-bd83-b895a266938c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e468d1d0-76ad-47b0-a4da-bcf6768172ea", "sighting_of_ref": "indicator--dfe48688-42a8-47f4-adf0-0bbc385ce3cd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40eb0b7c-441b-4a35-a283-dc84a1ac29af", "sighting_of_ref": "indicator--67d95830-34f3-41de-9fdd-2b25bf5445d2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d1ab34-303b-489d-929b-3ae2b90283a8", "sighting_of_ref": "indicator--67d95830-34f3-41de-9fdd-2b25bf5445d2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6af9c75-52fe-4e52-b036-56a0f96c392e", "sighting_of_ref": "indicator--67d95830-34f3-41de-9fdd-2b25bf5445d2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb0b136-c1be-4ab6-ab5c-8b1353be47c2", "sighting_of_ref": "indicator--7d3236c3-6446-4582-881f-7b2f95cef4ad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7b0ed0-6885-4777-bc77-08a734e801a7", "sighting_of_ref": "indicator--be840eb9-eb98-46ab-8ef0-ea6a26b97c59", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9066505c-8ade-44fe-8492-fa937791dccf", "sighting_of_ref": "indicator--be840eb9-eb98-46ab-8ef0-ea6a26b97c59", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998f908d-9983-4030-b564-bc28d4911f6b", "sighting_of_ref": "indicator--be840eb9-eb98-46ab-8ef0-ea6a26b97c59", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c0bd8e-172c-4e9d-8e20-8b3a70342b54", "sighting_of_ref": "indicator--a0073ce6-dd79-4da8-a18c-5c320dc21f32", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca448f6-38af-4f40-bfb2-cfe29c152936", "sighting_of_ref": "indicator--a0073ce6-dd79-4da8-a18c-5c320dc21f32", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32d8a58-6120-441c-bc6f-167b5e53c2ac", "sighting_of_ref": "indicator--a0073ce6-dd79-4da8-a18c-5c320dc21f32", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6389f3ac-59af-425d-a7a3-573e74eecbaf", "sighting_of_ref": "indicator--0eb311fd-6429-4208-b0d1-edfb0173b1c4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7b4756-a675-4a52-98a5-fad817bc581f", "sighting_of_ref": "indicator--0eb311fd-6429-4208-b0d1-edfb0173b1c4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d1537c-ea42-4ba9-a983-108a38cca25f", "sighting_of_ref": "indicator--0eb311fd-6429-4208-b0d1-edfb0173b1c4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be996f8c-12af-4b3d-b4e6-2828c26fe675", "sighting_of_ref": "indicator--e649b26b-7ce8-46b3-8688-fb6c7793aa1a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd57021-d05e-4d5b-934f-e6839d2c3e89", "sighting_of_ref": "indicator--e649b26b-7ce8-46b3-8688-fb6c7793aa1a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b86433-8b8e-4a13-bb4c-48e7b75ffc1a", "sighting_of_ref": "indicator--e649b26b-7ce8-46b3-8688-fb6c7793aa1a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9a8574-8b0f-4b4c-adcc-b662f9585e07", "sighting_of_ref": "indicator--2c14a2ad-99fb-407e-aec4-ca0aa9921069", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84cfbf37-9925-4f36-b08f-b2918822a7d7", "sighting_of_ref": "indicator--2c14a2ad-99fb-407e-aec4-ca0aa9921069", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690b85e1-b321-4baf-97b8-6398ff63e785", "sighting_of_ref": "indicator--2c14a2ad-99fb-407e-aec4-ca0aa9921069", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fef5d65-6d17-40b7-b40f-d89014d050a5", "sighting_of_ref": "indicator--e2005f52-f2df-47fb-b9db-e0156dba0991", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76066609-bae3-41df-8627-5cb1c4a1e8cf", "sighting_of_ref": "indicator--3bc2bd03-7773-4128-9203-7a514288f558", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92dc01d2-5562-47fd-83a7-c54613a31a6c", "sighting_of_ref": "indicator--3bc2bd03-7773-4128-9203-7a514288f558", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4993c058-0ce1-47fa-ae09-0d463445b404", "sighting_of_ref": "indicator--3bc2bd03-7773-4128-9203-7a514288f558", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d66d11-4e38-4382-9773-d611737c421d", "sighting_of_ref": "indicator--33b46664-f3c3-4ea0-836f-a80dd556e994", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40e8bb1-a5ed-4e3b-a157-dd2d02f44b7c", "sighting_of_ref": "indicator--33b46664-f3c3-4ea0-836f-a80dd556e994", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b30cbcc-95df-46ec-b133-12d7d94aaa22", "sighting_of_ref": "indicator--33b46664-f3c3-4ea0-836f-a80dd556e994", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c763b42-ee93-4ad3-9f64-0507a67efd20", "sighting_of_ref": "indicator--01b5569c-c37b-4c8f-a943-38dbce930a3b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1438caed-eecf-4bdc-9d88-41faedc54a0b", "sighting_of_ref": "indicator--01b5569c-c37b-4c8f-a943-38dbce930a3b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25f6cce-a759-43e1-b251-8a266175f8c0", "sighting_of_ref": "indicator--01b5569c-c37b-4c8f-a943-38dbce930a3b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8425eeba-5ba5-423b-97c9-89db4cea83cd", "sighting_of_ref": "indicator--30bbb854-79eb-41c9-a397-c00516539558", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f72160-e412-4747-a62c-fed66a908009", "sighting_of_ref": "indicator--30bbb854-79eb-41c9-a397-c00516539558", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c462a6-6943-4de0-9c83-bfc5d6a356ee", "sighting_of_ref": "indicator--523c9b23-69b4-4f05-8400-a83d29036ede", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3f6e7b-664c-4198-8969-d2d54989a87b", "sighting_of_ref": "indicator--d6b4b5b1-213e-4ff4-a81a-ad6205e6dcc4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61186d83-dffa-4162-8b81-da39cbe0f4d0", "sighting_of_ref": "indicator--d6b4b5b1-213e-4ff4-a81a-ad6205e6dcc4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c09474d-24c5-4431-9f02-1878884d786a", "sighting_of_ref": "indicator--70cde57d-584a-48cb-9310-3a6c1879ee77", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686e9f14-ad1b-46b8-a0c5-318128b965ae", "sighting_of_ref": "indicator--70cde57d-584a-48cb-9310-3a6c1879ee77", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f145ff91-195a-4619-b6c4-7f6c7164387a", "sighting_of_ref": "indicator--70cde57d-584a-48cb-9310-3a6c1879ee77", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75466351-fd9c-41a3-969e-0cd3b1651193", "sighting_of_ref": "indicator--a6ff53bf-af29-4639-be39-9bfb41ea967b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8032e9-d0db-4209-ab43-c8e7728bda9a", "sighting_of_ref": "indicator--a6ff53bf-af29-4639-be39-9bfb41ea967b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35eef287-904a-454b-83a5-fc60946fa865", "sighting_of_ref": "indicator--5be2b4ac-6882-4cd1-acd2-ae84c2d865b1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fbb780-95d2-4d97-ab0b-6d619d2e7f6b", "sighting_of_ref": "indicator--5be2b4ac-6882-4cd1-acd2-ae84c2d865b1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6389bca9-3786-41db-8cef-228f13da0473", "sighting_of_ref": "indicator--debeff97-d1bd-44d7-8ed4-dbd88b0b3b31", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983db24e-2425-41c9-9953-c7a6c7de4c7d", "sighting_of_ref": "indicator--debeff97-d1bd-44d7-8ed4-dbd88b0b3b31", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91dedd90-00e5-4d13-bd33-7cc231a7d5ff", "sighting_of_ref": "indicator--d558e8a6-749a-45da-86d3-fae1a7928a00", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d30f00-96a1-4e41-8d8d-113de6cb64cb", "sighting_of_ref": "indicator--dfb1c0e9-5ca9-41e1-b180-24e39c49b6b1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f99ff8-b403-4fe2-be1a-a230cb408628", "sighting_of_ref": "indicator--f213815d-8250-4d23-9827-be39aae7d293", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9292cd9b-7bd5-4b26-9758-3098cbab651b", "sighting_of_ref": "indicator--f213815d-8250-4d23-9827-be39aae7d293", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40712483-5629-4414-a971-d38a18fa7362", "sighting_of_ref": "indicator--f213815d-8250-4d23-9827-be39aae7d293", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052e9513-e92e-4f62-b0c8-00b3956d9aaa", "sighting_of_ref": "indicator--212b443c-4c1d-4f02-9c5f-b2d40175491e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a94b5c-f8b5-4d8a-96ee-58ceb861451b", "sighting_of_ref": "indicator--212b443c-4c1d-4f02-9c5f-b2d40175491e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d21d2d-aa49-4295-8792-fd0b78ead284", "sighting_of_ref": "indicator--212b443c-4c1d-4f02-9c5f-b2d40175491e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9d0ab9-8166-4e53-854b-5efee6c587d1", "sighting_of_ref": "indicator--b3653fca-c483-4218-a969-3c0bff2a33cb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46ff18c-be89-4ef3-89ae-2991fcdd773e", "sighting_of_ref": "indicator--d74338c6-fd15-4711-b393-1af740e6f356", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b5491a-9398-4444-8d68-d4138e75a91f", "sighting_of_ref": "indicator--aec8173d-1051-4376-bc9e-f413f1d5839f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c0eebb-d62b-4dcc-b297-fd755b9af4f2", "sighting_of_ref": "indicator--aec8173d-1051-4376-bc9e-f413f1d5839f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84063adf-73e1-4b8d-9f00-e5d760f49e9a", "sighting_of_ref": "indicator--bbabff32-0764-4a9a-9405-321ef3be42fb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c8ac1b-85b8-41fe-b0ee-205483434b73", "sighting_of_ref": "indicator--a1854be9-298c-4db4-a00a-33db5bbfe14c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e790db4-b50a-4e36-8c13-45c7b064f239", "sighting_of_ref": "indicator--0fa891e5-68fe-4694-96c5-d6e3f0a0ad2e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0897c02-7df8-4966-9661-215730c65931", "sighting_of_ref": "indicator--e2c48b8f-c95e-4612-8131-4b5703bc9f81", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e53286-e5e6-4dde-bea7-6083a621b546", "sighting_of_ref": "indicator--7737095d-7308-445d-805a-5943ea89a330", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809faff0-7ba9-481e-90aa-28906d74c7e5", "sighting_of_ref": "indicator--7737095d-7308-445d-805a-5943ea89a330", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0910be-ce5e-4321-8236-56baf1d8778b", "sighting_of_ref": "indicator--7737095d-7308-445d-805a-5943ea89a330", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5ce477-0828-40d9-a8d7-2954704ceb8d", "sighting_of_ref": "indicator--8625c0f3-adf3-44af-8986-751bc970a532", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b1fa03-17d8-441a-ac96-2670282a692a", "sighting_of_ref": "indicator--e9d7d147-edeb-4035-8513-372f889b0042", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915637e2-6e6f-4434-8b54-d18d4691df9f", "sighting_of_ref": "indicator--e9d7d147-edeb-4035-8513-372f889b0042", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e9fdf0-b74e-4787-a640-7b415ea41820", "sighting_of_ref": "indicator--cbc105a0-e35b-4fd4-9079-32f9b97f42b4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a47fbb5-8530-46ba-883b-24ade49af014", "sighting_of_ref": "indicator--cbc105a0-e35b-4fd4-9079-32f9b97f42b4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2d2898-dd00-421d-9417-09b5cfdaa3c1", "sighting_of_ref": "indicator--cbc105a0-e35b-4fd4-9079-32f9b97f42b4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f137e74-f242-4cf0-8708-cf3f41465c14", "sighting_of_ref": "indicator--a9908f83-9899-43d3-941e-1546fd5b83e4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7981f5f7-aeb9-43cc-98fe-623075d00a3e", "sighting_of_ref": "indicator--a9908f83-9899-43d3-941e-1546fd5b83e4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f4010e-e10b-4936-bd6e-ea0de63429fe", "sighting_of_ref": "indicator--a9908f83-9899-43d3-941e-1546fd5b83e4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef646109-5ead-42cd-bd15-4ec026f3ff9d", "sighting_of_ref": "indicator--b7ecc588-26cd-4e59-a7b4-a46e6fc69f8b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adbdd03-8526-44b1-bdd5-c3cae8477470", "sighting_of_ref": "indicator--69ec21a3-065d-4877-aede-a65249a58dbf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7f6591-d1df-4dd7-8e08-cd2379649db5", "sighting_of_ref": "indicator--69ec21a3-065d-4877-aede-a65249a58dbf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9dc7c7a-91aa-4a41-b2bd-09ac78787431", "sighting_of_ref": "indicator--69ec21a3-065d-4877-aede-a65249a58dbf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c3fb46-a064-4af1-a63d-81863eb0513b", "sighting_of_ref": "indicator--35e2c10a-cef5-42dd-918d-978a2366487e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c58eca-f536-485d-99c9-ee2c01a57103", "sighting_of_ref": "indicator--35e2c10a-cef5-42dd-918d-978a2366487e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46b9490-7baf-449b-8375-92fc421889a4", "sighting_of_ref": "indicator--35e2c10a-cef5-42dd-918d-978a2366487e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a153d8ad-2216-41ea-8cd6-a6c0f3d8d400", "sighting_of_ref": "indicator--7a24819a-c2a4-48e6-be8e-517b277a43bb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e54cbb-9638-4254-a864-9c4718e9ce6e", "sighting_of_ref": "indicator--33357010-24d7-434e-b036-e56045bdafdc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1994ff05-9acd-4955-a217-15ee2abf9250", "sighting_of_ref": "indicator--33357010-24d7-434e-b036-e56045bdafdc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c3da71-d065-454f-8820-a6ad78592d7d", "sighting_of_ref": "indicator--7f0280dd-d893-4734-8522-559b0fefb202", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5965b6a-4954-482d-83fe-ada565a338d1", "sighting_of_ref": "indicator--ca5bbce8-79a9-4980-a80f-1be5a3b52e19", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b90a6d-3784-4677-85d6-955c848e9853", "sighting_of_ref": "indicator--ffe7a007-d2a3-4dcf-be54-f9625a810000", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2411b976-5b47-41b9-85a6-08433b68ebcb", "sighting_of_ref": "indicator--ffe7a007-d2a3-4dcf-be54-f9625a810000", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dda0948-d296-42ef-a3f1-0dfe98028cb6", "sighting_of_ref": "indicator--ffe7a007-d2a3-4dcf-be54-f9625a810000", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cd943b-6586-477f-b2ec-4dfc03986c26", "sighting_of_ref": "indicator--500f2dd5-646a-4730-bd22-5c73edbbb7ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd50e627-b614-42d9-af22-1952a9eb5056", "sighting_of_ref": "indicator--9345e968-7e2a-4936-8861-683a7e6e430c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c92058-4ce2-4870-af40-af3a5ccf82d7", "sighting_of_ref": "indicator--41db4e4c-c06a-4e47-a3ff-b764ed608b00", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7a8372-9bdc-42bd-b7bf-d983e49e1227", "sighting_of_ref": "indicator--41db4e4c-c06a-4e47-a3ff-b764ed608b00", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1298ee2-9c1d-4bce-981d-fbf28f0430f1", "sighting_of_ref": "indicator--41db4e4c-c06a-4e47-a3ff-b764ed608b00", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9416eb76-c85e-4888-b4b3-ac4291bba50d", "sighting_of_ref": "indicator--462cf2c3-ef44-49ce-af5b-4152dad78796", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1431e840-1c38-4942-a4dc-13171c4edc99", "sighting_of_ref": "indicator--462cf2c3-ef44-49ce-af5b-4152dad78796", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec2abc7-5d49-44e1-870b-5bc4149e8c5a", "sighting_of_ref": "indicator--0477cba0-7f22-455e-8329-bf0aeab540cb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e186dd8-56f4-4c83-9dcc-8a0773dd322f", "sighting_of_ref": "indicator--7f61d573-382b-4717-aabe-cb7eda7c8d49", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ec710b-dda5-487d-a80d-bf955f1b168b", "sighting_of_ref": "indicator--4d0b1f36-7fe0-44a8-a189-968a62da8e6d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94dccfaf-dad7-4220-a083-7a278c863dd6", "sighting_of_ref": "indicator--f6a7c1c7-1685-44a5-b44f-31e171912d02", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44b851c-e454-46b9-9088-d33c031b3910", "sighting_of_ref": "indicator--f6a7c1c7-1685-44a5-b44f-31e171912d02", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e4c12b-9e02-490e-afb4-eff6f185d5b4", "sighting_of_ref": "indicator--ff067f2e-1d81-470d-bd4a-932e9cc7df8e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbea9dba-c68d-4d85-ba7e-d1818a50bab6", "sighting_of_ref": "indicator--ff067f2e-1d81-470d-bd4a-932e9cc7df8e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f12b7ed-5838-4615-8ce3-89621e569294", "sighting_of_ref": "indicator--65e5af4c-48b7-47b2-b216-e6d9a468c36f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74729ac7-f4c1-4a17-8e6b-9ad2035ebcdc", "sighting_of_ref": "indicator--65e5af4c-48b7-47b2-b216-e6d9a468c36f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6255f71e-163e-4b0f-aaa8-70840ced5f3e", "sighting_of_ref": "indicator--65e5af4c-48b7-47b2-b216-e6d9a468c36f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f701a627-eb79-4cfa-bf5d-b53a03f0ec57", "sighting_of_ref": "indicator--cb643226-761e-4994-9370-8a0fed9f15c3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c5e344-e581-468a-909f-997ba99e7451", "sighting_of_ref": "indicator--cb643226-761e-4994-9370-8a0fed9f15c3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a88bdcc-74d7-4476-9e16-10b30a7cdd5e", "sighting_of_ref": "indicator--cb643226-761e-4994-9370-8a0fed9f15c3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4cbc29-2cba-4882-8e5d-83c666073d92", "sighting_of_ref": "indicator--814d923e-beaa-497d-a600-257f051dbee2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59af23d4-efce-4bd9-bdb9-f9acd30d415f", "sighting_of_ref": "indicator--32485b51-1bce-4371-9d8f-a39dee9fd5ef", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df604fe-3389-4a8d-b39c-18b6740c4018", "sighting_of_ref": "indicator--32485b51-1bce-4371-9d8f-a39dee9fd5ef", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82997a4d-e267-48bb-8c7a-71acd8def636", "sighting_of_ref": "indicator--7a8edda7-82fa-4d21-a6bb-7a421a374600", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acb77ae-00bb-40db-8d1c-1f8ba02db5f7", "sighting_of_ref": "indicator--ebd354ed-d277-434d-9c48-9a84dde8cfd2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44b4c83-cdb1-4854-86cc-d682a0a32656", "sighting_of_ref": "indicator--bf61aba8-de18-461a-b149-f8d744342a66", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d180753-33b5-44cb-96ce-a50221b7f4d3", "sighting_of_ref": "indicator--306821ab-ff42-4c0d-852b-907ec40ffacf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48e87c9-84d1-45df-8160-48c3cf2423d3", "sighting_of_ref": "indicator--c7ac20e1-5f5d-499b-a30b-23e4c7826b74", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f69b0e-84f7-492d-9cff-179ffba60904", "sighting_of_ref": "indicator--c7ac20e1-5f5d-499b-a30b-23e4c7826b74", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ee91fa-bb01-4f6d-8cda-01d14891c5f3", "sighting_of_ref": "indicator--c7ac20e1-5f5d-499b-a30b-23e4c7826b74", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361e54d0-cf5a-4d4e-a14b-cd26b71e3184", "sighting_of_ref": "indicator--05750073-f743-4577-b058-2b49b9f8fa5d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aecdedb-f762-4de6-8ae9-6f8ac3913b0d", "sighting_of_ref": "indicator--102e52c4-87dc-449b-86f6-701f099d1ec8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4de76b-3268-48dd-bc87-de43e250d4c0", "sighting_of_ref": "indicator--96313ba7-ae2f-44ff-9f2b-a612f7f561c5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e095784-ca0a-4b26-8d3d-b66b1cdcec7c", "sighting_of_ref": "indicator--3d306508-4b10-4f2d-9d4d-ff291df6868b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7848583a-ad98-42bd-bdcd-65456764236c", "sighting_of_ref": "indicator--301dc1a7-a08f-4d13-9dda-acf289ab2ec2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9cb2ad-f164-4b6e-9f38-b4fe0abba9e6", "sighting_of_ref": "indicator--301dc1a7-a08f-4d13-9dda-acf289ab2ec2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618a81f6-321c-4f56-bcbe-d7c7ef7a50d9", "sighting_of_ref": "indicator--6e2cd3ac-092d-4e79-b040-6ea2f19ef51e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5994819-3874-4ad1-badc-27402d85911e", "sighting_of_ref": "indicator--6e2cd3ac-092d-4e79-b040-6ea2f19ef51e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c25597-77ba-4d40-9cb9-890a279264ae", "sighting_of_ref": "indicator--491cdb41-26e6-4304-854a-97eb1315b92e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1465d4-e61d-48ac-aa01-c83542dba500", "sighting_of_ref": "indicator--491cdb41-26e6-4304-854a-97eb1315b92e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d57528-7ccd-4c03-bd05-786ba54ef1e4", "sighting_of_ref": "indicator--0ee9c58b-dc8c-44ea-9b59-fde155bbee08", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f388aa3-14e0-486f-8dac-cbe63979e81c", "sighting_of_ref": "indicator--0ee9c58b-dc8c-44ea-9b59-fde155bbee08", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c8f2a9-bbb4-4903-8eaa-fc687bda4b42", "sighting_of_ref": "indicator--f3b24cab-7610-4ef9-9b7e-97ad610a185a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9996ac1-a60d-4d7e-ac11-bfbdc4523bbc", "sighting_of_ref": "indicator--f3b24cab-7610-4ef9-9b7e-97ad610a185a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed402e54-261f-4cc2-92b2-b5024e0c7575", "sighting_of_ref": "indicator--3a6cf898-d739-4bdf-a1a1-01a0f2d1dd43", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb472a8-9f67-4f1d-8749-c7572c85db56", "sighting_of_ref": "indicator--f3ac7e91-4bb4-4711-b53d-cddd4ede75f9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006d53b4-ec85-46a4-ac86-7db31df663a5", "sighting_of_ref": "indicator--3bdc4fb4-fa2f-4bc1-bb97-f2a55b4bdbda", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aad7612-fbd2-4898-b610-4b8cf8e10d2a", "sighting_of_ref": "indicator--f7cf0153-6d74-455d-aac5-a7ed899824c0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7104698f-af12-4a59-838a-10707a3df1b0", "sighting_of_ref": "indicator--2dc2d81f-b0ee-4339-98e4-ea3343a77051", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44647d3e-095a-41b7-8768-02b42dd3d690", "sighting_of_ref": "indicator--28538a8d-4bea-4179-aab4-302d9aaa4d05", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ba7351-7eff-41fa-8bd8-b4b09f1e1e2c", "sighting_of_ref": "indicator--788d0465-d77a-494b-bae2-d6ab6f542c1c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f52beb4-0cfe-4192-b7c2-082f712d7be8", "sighting_of_ref": "indicator--4d9f8b32-e53b-4f5a-9dc8-a5a2b1651825", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6c7956-5ba1-45de-91d6-0f6c2e3aa0f2", "sighting_of_ref": "indicator--ebaed5a4-6e6b-4247-9ab6-8889d4021cb2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a81959-e102-439f-a21a-daf94e0edc3f", "sighting_of_ref": "indicator--f34b261f-6d06-4864-b97a-86733922c8ab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e7094e-5c5f-4143-a14f-bdcd7f052d23", "sighting_of_ref": "indicator--f34b261f-6d06-4864-b97a-86733922c8ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2ab2a7-91c5-4008-8918-39a53b4c86be", "sighting_of_ref": "indicator--f34b261f-6d06-4864-b97a-86733922c8ab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8d8d26-e271-4bc4-ad46-dced56dcf889", "sighting_of_ref": "indicator--8e1a0357-d7a9-4b43-9ef1-e26191b9bf90", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b92511f-930b-41a7-84f6-d614fb8dbcdb", "sighting_of_ref": "indicator--8e1a0357-d7a9-4b43-9ef1-e26191b9bf90", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46499842-f539-482b-9119-a86d239bfc21", "sighting_of_ref": "indicator--8e1a0357-d7a9-4b43-9ef1-e26191b9bf90", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4545b2e1-27fe-4adf-b9f2-3adc848d7b8d", "sighting_of_ref": "indicator--14feeb2c-d461-4b42-9b70-5bbd11066d53", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9f4864-1d6a-4bca-ba67-64d606ce945f", "sighting_of_ref": "indicator--14feeb2c-d461-4b42-9b70-5bbd11066d53", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e3d01e-4f50-4f2c-9ed6-2ec4f0ea02b1", "sighting_of_ref": "indicator--14feeb2c-d461-4b42-9b70-5bbd11066d53", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9303a96c-866c-47a2-8a09-f517f7d97e64", "sighting_of_ref": "indicator--05457bfd-58f1-4723-b5e7-1b464ba38617", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661762a5-af73-411a-be9b-9e2afafd246c", "sighting_of_ref": "indicator--05457bfd-58f1-4723-b5e7-1b464ba38617", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbef550-d04e-4b2c-90ea-34d2559d4502", "sighting_of_ref": "indicator--05457bfd-58f1-4723-b5e7-1b464ba38617", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09edb3d4-270b-4903-800b-b7a57d3f7539", "sighting_of_ref": "indicator--dc0f2639-cdf6-4f29-932b-ffd12bb6c485", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132b40d9-f73c-4203-84e7-d7343bd67ef5", "sighting_of_ref": "indicator--dc0f2639-cdf6-4f29-932b-ffd12bb6c485", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875ce27c-b31b-4e43-ab2f-34b4d432979f", "sighting_of_ref": "indicator--dc0f2639-cdf6-4f29-932b-ffd12bb6c485", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c956112e-15d0-4f5a-bc20-5ee234ec0873", "sighting_of_ref": "indicator--37f66978-2662-4ecf-87f2-f6fec8b4be1f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227df81b-8597-4b75-a7a3-4d68dcdbe51b", "sighting_of_ref": "indicator--37f66978-2662-4ecf-87f2-f6fec8b4be1f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4708e372-1d9f-4c49-a5dc-393cd40cb9b8", "sighting_of_ref": "indicator--37f66978-2662-4ecf-87f2-f6fec8b4be1f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237be997-ac8b-4ce8-bc8b-9744c16212f0", "sighting_of_ref": "indicator--6a3fd44d-5242-460b-9c0c-5d60e7bec716", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c50a3f6-cbbf-4780-936c-315021cce5a1", "sighting_of_ref": "indicator--7736182d-b3f0-4e77-b100-7b317660086c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eaf24da-00ad-4d19-895b-61b14c9ca331", "sighting_of_ref": "indicator--27e02973-2a21-48a7-9ee0-d5a862bddca1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6d7345-ec3f-4b4e-8b37-4fdf368b8ea2", "sighting_of_ref": "indicator--2f99a48e-1d34-496c-94f9-5c50609d1c2c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91eafd7-966b-4db2-89eb-acb0cb043190", "sighting_of_ref": "indicator--f4675caf-50f6-4124-819b-f72b67cc56fa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe32f96a-e22b-4713-a40d-f23828587a5b", "sighting_of_ref": "indicator--e1c254d9-f7fe-495f-acee-bddfcd6c4c02", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c225a4-86cc-4b31-a3ec-6581eb5db919", "sighting_of_ref": "indicator--e1c254d9-f7fe-495f-acee-bddfcd6c4c02", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca98d89-1e02-4aca-9ef0-75e86ff1b913", "sighting_of_ref": "indicator--9289ac0f-4a0d-4842-b735-978d083c187a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae9320c-45f8-43a3-a9f6-6047e74e2f9c", "sighting_of_ref": "indicator--b6b631e1-6708-477b-9ff8-a4e894976473", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b020439e-3a83-49dd-a94a-7beae272e589", "sighting_of_ref": "indicator--b6b631e1-6708-477b-9ff8-a4e894976473", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38af8d0a-f8c9-4233-ae2d-dd88c6afbcba", "sighting_of_ref": "indicator--b6b631e1-6708-477b-9ff8-a4e894976473", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42c940a-a5db-456e-aac0-f881ffb9b73a", "sighting_of_ref": "indicator--2b58e617-d065-492a-95b6-47e9b33494eb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ed739e-dc08-4292-afd1-a7f7d05ae62c", "sighting_of_ref": "indicator--56a672a8-e3ca-41ce-8dce-31bf308fecc3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0fc6f4-81ae-4c3f-828d-75bdb197bb66", "sighting_of_ref": "indicator--9321d23b-6220-49fd-9d41-5bba66aa661b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87aeba73-a00c-40dd-8d39-5cc873cdbacf", "sighting_of_ref": "indicator--14ca3f68-1cec-481f-a1b4-63eab16ffeb3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b633f3f3-e9ee-45bd-9711-07852ab34e2c", "sighting_of_ref": "indicator--14ca3f68-1cec-481f-a1b4-63eab16ffeb3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0a3f68-6ea9-448a-a104-31e4aed70614", "sighting_of_ref": "indicator--94fdd99f-2383-4e3b-9e43-74835c96511a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57903461-34d2-4f40-961b-71635db5e6ed", "sighting_of_ref": "indicator--f705221f-c4e6-4992-ba3c-b625a771a21d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4212c5-3fcc-489b-97c5-13e9a253255e", "sighting_of_ref": "indicator--2775b897-8105-4085-81d7-c35088cc033f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c166a3-71dc-42c6-b793-14a190c055a2", "sighting_of_ref": "indicator--bdd720da-8a5a-44dd-8f73-b8ec7273f6f1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb0ef88-c77a-4b4b-9b15-b3d205cc7fac", "sighting_of_ref": "indicator--7f1794ca-89b4-4547-8cea-aa5a25b872f3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf1b195-a31e-4264-b935-908df9ec48de", "sighting_of_ref": "indicator--7f1794ca-89b4-4547-8cea-aa5a25b872f3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3e92d1-d7e9-4c6d-8b4c-6d771a6653f6", "sighting_of_ref": "indicator--be99de56-1b77-452e-8218-ddd6d34a2357", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71518b1-c2e0-4702-b127-2d2fd9f008f4", "sighting_of_ref": "indicator--be99de56-1b77-452e-8218-ddd6d34a2357", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682bac7d-0273-4e7a-b259-46428ee4ede1", "sighting_of_ref": "indicator--46f87529-3e95-4c9d-9350-fc7868dc5536", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1566f1-07c1-43e8-a263-22f71e2aa67e", "sighting_of_ref": "indicator--72c729b7-5c8a-4098-ac36-ead249b9be70", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a111ac-f32d-4329-a812-8cdda586fc16", "sighting_of_ref": "indicator--bdc93717-127b-4462-90a5-52c596666d68", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d71953-14c3-4a4d-abad-50c7a7eac95e", "sighting_of_ref": "indicator--3d41af96-37a9-401f-be3e-953934d2c371", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6067f1-8a1a-4f12-86c9-252e36f9102b", "sighting_of_ref": "indicator--3d41af96-37a9-401f-be3e-953934d2c371", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c191ce4-4367-4d39-9c25-6c13399ae391", "sighting_of_ref": "indicator--14600395-bf21-43cd-9971-72f5079ab766", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7ed2ee-1aa6-432c-ab56-14da09b03224", "sighting_of_ref": "indicator--396aa626-b2e9-4c27-8fd6-26c5c0d9f962", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73e209d-86ba-4491-88aa-1ed3cbcc5c28", "sighting_of_ref": "indicator--1157ba8a-5436-49fc-9340-f6e0563b9a96", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f289f4b7-2488-4f3d-bb01-aaf42f8a1d47", "sighting_of_ref": "indicator--98b396a1-b0f1-4b8c-8ae7-a6bd92834cb9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7355c65-1436-4205-ab31-3ff8fec8a3e0", "sighting_of_ref": "indicator--c612fca8-6e6d-47a9-b00f-0bb93d9deb1d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01adab2-2290-4e82-bc42-418ccb6aeaaf", "sighting_of_ref": "indicator--2f81d04f-f702-4172-afb6-6dec13ed0f52", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf38e31b-d0c0-46b6-b758-fd1b4c6298d2", "sighting_of_ref": "indicator--1b359230-f21d-4fee-adb1-c0606e63fd8b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62aea742-838e-42d1-ae12-96e0b5039836", "sighting_of_ref": "indicator--1b359230-f21d-4fee-adb1-c0606e63fd8b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2e247e-b0a1-439d-bb97-ae8b795a767e", "sighting_of_ref": "indicator--1b359230-f21d-4fee-adb1-c0606e63fd8b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8363710-4f3c-4451-b57f-9253530e2704", "sighting_of_ref": "indicator--ac9abe04-60c3-4169-a6e6-82d47a470d64", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab37afb4-1cff-4456-afa1-29c8fc44e033", "sighting_of_ref": "indicator--e5101873-cbca-4451-86dc-4e2a41041a60", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5666ad-035f-4440-af9f-e28765787cb5", "sighting_of_ref": "indicator--447c1f27-07ac-4dd4-97eb-8f420f87c5ce", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2bb304-eb7a-4d95-bfa1-78d17e4b05f2", "sighting_of_ref": "indicator--447c1f27-07ac-4dd4-97eb-8f420f87c5ce", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3238a669-050f-496b-bd69-593b9b15788f", "sighting_of_ref": "indicator--fad70b4b-24fd-4fba-958e-1c8809fae609", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c9876d-7533-47a0-b95b-7bb95772a92c", "sighting_of_ref": "indicator--fad70b4b-24fd-4fba-958e-1c8809fae609", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d90075-182f-4bec-aa58-81fc20857876", "sighting_of_ref": "indicator--0c3ca667-53be-418f-baee-7897ed696ff7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc08d91b-8a1b-4464-8fcd-dbcb4d7881a2", "sighting_of_ref": "indicator--0c3ca667-53be-418f-baee-7897ed696ff7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de50969-9c70-4b13-b746-795846af05c7", "sighting_of_ref": "indicator--0c3ca667-53be-418f-baee-7897ed696ff7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a963feeb-a632-49cc-a284-b670259adb1e", "sighting_of_ref": "indicator--63d725e5-baf9-425f-adb9-b136d5b001e0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7230d142-d14b-4594-b2cf-a4d6f16afeba", "sighting_of_ref": "indicator--63d725e5-baf9-425f-adb9-b136d5b001e0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0511b291-582a-4829-883a-1a3f54fa1e23", "sighting_of_ref": "indicator--63d725e5-baf9-425f-adb9-b136d5b001e0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f125ed7f-bc64-4f38-9a24-60294330e6ff", "sighting_of_ref": "indicator--8b93eae8-945f-4da2-b423-998c1c7152b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6858671a-e7f7-4633-9e27-eac5a05bc870", "sighting_of_ref": "indicator--8798f139-a999-4a78-b8b1-40c4be9affda", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bac0d4-61d8-4026-a2cd-25047e277ec5", "sighting_of_ref": "indicator--8798f139-a999-4a78-b8b1-40c4be9affda", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee86821f-4dca-4995-9fad-68b08cde322c", "sighting_of_ref": "indicator--8798f139-a999-4a78-b8b1-40c4be9affda", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3ed42c-857d-46c7-ad0f-7e5a041f52e7", "sighting_of_ref": "indicator--13f0fe0d-8e58-4220-96e5-dd5510f60af1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af9ee73-ffa7-49c3-8289-82abb49bae65", "sighting_of_ref": "indicator--0359e5ad-b516-401a-a279-694cf5c58e9f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65df8ae-fda3-4f67-8ade-9a3171196384", "sighting_of_ref": "indicator--b77beea4-4a2a-4403-9ba4-cb405b7b4529", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3a65c2-5e47-4622-939e-5859efca24e0", "sighting_of_ref": "indicator--84932fcd-d96b-4f0d-b125-651869455aec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86aa8d9-dccf-4e62-b86b-c58a6420e5cb", "sighting_of_ref": "indicator--c2a5d3c7-dba2-4bac-8ad3-e7658a1b9bc6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bbb5b3-a57f-4620-a525-abead123bab0", "sighting_of_ref": "indicator--084a8900-6657-49d0-ab32-5fc2cbd865dc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fdd646-6224-4f78-ae55-9473aa018391", "sighting_of_ref": "indicator--2fd800e9-99d5-465c-8fc4-31570bbd996f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d501ccdc-1190-440b-89c8-280d7cee307f", "sighting_of_ref": "indicator--2fd800e9-99d5-465c-8fc4-31570bbd996f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e7b0d6-c0b7-4af8-99ad-2959e7072752", "sighting_of_ref": "indicator--6c80cc33-4828-4905-804c-df18ef717d58", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7ed031-75a0-47f5-9fd9-b124e813a755", "sighting_of_ref": "indicator--5c17803f-19d3-4069-94b9-034484aeb667", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5990fc7-8dc5-4e08-a998-b14003219a0e", "sighting_of_ref": "indicator--b2d0fda1-b3e2-49fe-9df0-9501b9e35292", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c730bf3-1fb0-4a70-84fb-088bbeae6fa5", "sighting_of_ref": "indicator--f6fd991d-5a93-481e-801a-433afddc4316", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01549bab-fa84-4481-a9ea-bf7c75bf1c5e", "sighting_of_ref": "indicator--de08ca66-44eb-41c5-a70d-a2faaf280811", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b26fd7-b9d3-4c22-811b-54d2e130f6a5", "sighting_of_ref": "indicator--02e73984-ed42-4088-9014-5e1463fd275d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5962116-9609-4892-a43b-0f2635f1b700", "sighting_of_ref": "indicator--6309da44-ea21-4f73-b703-0eca64c7c128", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40412dd-f489-4e8e-83bb-5da60b47c301", "sighting_of_ref": "indicator--6309da44-ea21-4f73-b703-0eca64c7c128", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15263407-51c9-42c3-bcb5-d5a7543ddb24", "sighting_of_ref": "indicator--4e58d9f2-7f28-4e23-8372-1b58d94ffbcd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f34f15c-815d-4dc5-bee4-284fa0d933d6", "sighting_of_ref": "indicator--4e58d9f2-7f28-4e23-8372-1b58d94ffbcd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5f5081-3842-4886-8e59-8bf44b6bf749", "sighting_of_ref": "indicator--a5797a4b-062d-4470-b8c8-94fdfd8e81a1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e09893c-1b44-4811-9f20-4a51862dd3eb", "sighting_of_ref": "indicator--eee50b32-c107-4298-9788-87940a626e5f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17852f6a-c7a9-4bcf-9e80-192adbcf4dca", "sighting_of_ref": "indicator--35f302b5-9a83-4cd6-8aa2-4a72fa6f0db6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9dfe50-ebc5-4a37-b78d-e945ce9ca81e", "sighting_of_ref": "indicator--35f302b5-9a83-4cd6-8aa2-4a72fa6f0db6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2943b1c-5972-4b79-8c5f-e5eb9ff72bc2", "sighting_of_ref": "indicator--07a9b638-3841-49fd-a583-1e463ca362e9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7c3c6f-747b-4b08-92ff-025cd8c5b995", "sighting_of_ref": "indicator--47928f0e-15af-4819-ba26-bb98ddc9e770", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76b2069-a55a-4603-9003-9ff26d903e58", "sighting_of_ref": "indicator--5801eb98-aee1-418a-ac08-dc9855ddb57d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f138df5-40e3-49e9-8f4e-b5f996e090d4", "sighting_of_ref": "indicator--72648cad-b08a-4f67-9f9c-4f01740efcad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de15dd36-3d4c-4d15-88e1-10b995602355", "sighting_of_ref": "indicator--d12d0f86-40de-468d-a8bf-ebea4e76df06", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cc5fdc-0a16-4b7e-88d5-726741670452", "sighting_of_ref": "indicator--270bd66e-6b6f-4b9b-b2e6-1720032e5141", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef7bea3-9adb-46d4-8432-af2e7201aaa2", "sighting_of_ref": "indicator--9b114540-30b9-481c-b1c6-091335d57dd6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe9ae80-55d7-48b4-93b0-f40f8a2155b3", "sighting_of_ref": "indicator--2d557649-3dc9-47c7-aa7e-ed24ea6d764a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b448fad1-08d2-4cf2-8196-92b02fdc28cc", "sighting_of_ref": "indicator--d6cc7184-7ade-40ef-a736-489d2d44d7fe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fc8f03-0185-43b6-b556-18c6c670e2e3", "sighting_of_ref": "indicator--d6cc7184-7ade-40ef-a736-489d2d44d7fe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c20abca-5485-4ede-8b6b-85ce79a768c6", "sighting_of_ref": "indicator--b05ae839-9b5b-4e85-9ddd-065bb717bcbb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d099d2-ec73-44cc-a3c0-954a0a47a1f4", "sighting_of_ref": "indicator--08229095-0fad-487e-a530-027fc1929189", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e687e839-6ec1-4e03-89fa-6e906a05acff", "sighting_of_ref": "indicator--08229095-0fad-487e-a530-027fc1929189", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f64cd51-cf5c-405f-936f-6aa2ae6ec676", "sighting_of_ref": "indicator--e8f61424-43d4-4d19-bd0d-b16ea0ca0634", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44292c3-871c-4aab-b609-762586de4d56", "sighting_of_ref": "indicator--4dff1db1-6057-4c38-a22c-a1a088c4e5de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a95761-15b9-4a1f-af89-5e2444177d9b", "sighting_of_ref": "indicator--54631e03-01e3-48c9-be30-fe76e86ec98a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943eba40-e746-4266-96f8-0d1236293d08", "sighting_of_ref": "indicator--54631e03-01e3-48c9-be30-fe76e86ec98a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a55248-a73a-48ab-8b0d-f79dea4c6548", "sighting_of_ref": "indicator--9e384386-08e1-4489-a146-60bd2507a4c5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2e5d2e-4c63-4e82-a093-c54d5d1d9141", "sighting_of_ref": "indicator--57666542-147e-4f51-8a7e-2938367040f0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1fb044-7d50-4dd5-8377-fe92d800653a", "sighting_of_ref": "indicator--048e70da-d98d-4397-8e57-18e21720408f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71a6d5e-395e-4adc-9968-f81a1f088ce0", "sighting_of_ref": "indicator--048e70da-d98d-4397-8e57-18e21720408f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4949e2c8-478d-49da-9fe7-3080de73010e", "sighting_of_ref": "indicator--8b78daad-f91a-4681-9d78-132cb760dbfc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d17cd2c-6d18-40d0-b234-db48f8c00c97", "sighting_of_ref": "indicator--5f40715e-7f83-4c55-9439-62b02867c81a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80936c33-f8e6-448b-bb95-c3db721b6865", "sighting_of_ref": "indicator--2c7e862e-f732-4ec9-a1c4-8a4e24f3017a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1d0598-e94f-455c-97bd-1739687b7e69", "sighting_of_ref": "indicator--4512443d-46cb-4f31-a69c-1c2465637a19", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00d781e-a52d-49b8-99b9-a6d6f894217c", "sighting_of_ref": "indicator--4512443d-46cb-4f31-a69c-1c2465637a19", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288c3378-b891-4f06-8bef-1120a37d1162", "sighting_of_ref": "indicator--f0632bbc-7302-445c-8707-7be8d9ea419d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2a5152-874e-4db1-9f21-083bdb81f90b", "sighting_of_ref": "indicator--e76e86d9-3fbf-4eca-a774-c4912accccc1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38890248-ea6d-4d43-8a90-dfe390b336ec", "sighting_of_ref": "indicator--70256165-54c5-4a47-9e83-0b79a9efdfcc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1cf41c-ea9a-40a6-9fb7-2515ab240e4b", "sighting_of_ref": "indicator--1bd6a553-2b71-47d0-af66-67ce557166dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba6af00-a7b5-454b-bb2c-179b020823d3", "sighting_of_ref": "indicator--47ee4168-f01e-4e50-a6a9-98113b5d286f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96ca46a-8255-4456-8514-a8393b35e150", "sighting_of_ref": "indicator--149008d4-260a-4f20-94c2-0c37a3c077a8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbd684c-9f57-4844-bde1-1040beec5da8", "sighting_of_ref": "indicator--829c2c93-97e5-4646-b7b7-799d1d0371aa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7c950e-f91c-4dc5-8070-cb55eb935bed", "sighting_of_ref": "indicator--829c2c93-97e5-4646-b7b7-799d1d0371aa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea2efde-5fca-4567-808a-f2dfb1cd9dcb", "sighting_of_ref": "indicator--829c2c93-97e5-4646-b7b7-799d1d0371aa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40a3025-928a-4fb5-a67f-b7a357cb81a3", "sighting_of_ref": "indicator--0ba6f98f-4d7f-46bb-b08b-e0ab9e786c2b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e305b1-d191-4598-9a7b-cbff434cc676", "sighting_of_ref": "indicator--0ba6f98f-4d7f-46bb-b08b-e0ab9e786c2b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f791ef-4b09-4692-af0f-6fa7e9e6f06d", "sighting_of_ref": "indicator--ece1d861-6e7f-40fa-8d0e-f980955c8c5a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee47c565-dbd8-47b4-a7c0-37164f5ce12f", "sighting_of_ref": "indicator--ece1d861-6e7f-40fa-8d0e-f980955c8c5a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0a34ca-76fb-47f1-a618-14b9eacf6c75", "sighting_of_ref": "indicator--ece1d861-6e7f-40fa-8d0e-f980955c8c5a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d298921-40fc-4769-9829-728e021027f0", "sighting_of_ref": "indicator--1085d662-e3f5-4bf1-b314-765f8d9bbff4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3dbc6e2-df90-4e36-b686-ce91f4e916d3", "sighting_of_ref": "indicator--539e6a10-18f2-4fde-b6d5-777981b09d19", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630d9a33-4e9e-4cd2-985a-ab000a313ad8", "sighting_of_ref": "indicator--bb2b9039-bea3-4fb6-8445-60b75fde954c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79479ee0-7b94-4774-9a48-e3f7bb29d551", "sighting_of_ref": "indicator--bb2b9039-bea3-4fb6-8445-60b75fde954c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4ff466-5716-4d7e-a21d-3714bc8b9459", "sighting_of_ref": "indicator--fa9a68f4-2dde-4edc-af7c-6c78c0636736", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ac7e03-63b2-4295-b9d2-dcf95289c74b", "sighting_of_ref": "indicator--fa9a68f4-2dde-4edc-af7c-6c78c0636736", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e9a574-6755-45f2-aa4e-2224e89adf29", "sighting_of_ref": "indicator--3ca5a5df-4a8d-48e2-9606-17a265201ac7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3122675a-f04e-49df-9bfa-2799730e537b", "sighting_of_ref": "indicator--94dfb0e1-681d-437f-b095-52f727053b9c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722f049d-3bff-4d3b-95c8-a1c206b1e2d9", "sighting_of_ref": "indicator--e2b0bbd3-01e6-4ff1-a142-f783d5cd4277", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba8fb55-3673-411b-a4a7-a22b7b378a71", "sighting_of_ref": "indicator--e2b0bbd3-01e6-4ff1-a142-f783d5cd4277", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0201369d-e647-449e-8ecc-e40af6a367ad", "sighting_of_ref": "indicator--79d35a37-6a45-4a75-9255-bb7206318f6a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605b437f-6346-436d-9eec-ad005638fc18", "sighting_of_ref": "indicator--79d35a37-6a45-4a75-9255-bb7206318f6a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5beb45cc-fcec-4761-8c99-77414f64f8fb", "sighting_of_ref": "indicator--a8e7e709-562f-4a53-9020-7a67facf372e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caca54b4-1eae-4173-ac91-d5e3b0ab0958", "sighting_of_ref": "indicator--a8e7e709-562f-4a53-9020-7a67facf372e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40018f77-1f2d-43b4-83a6-81fe932d504e", "sighting_of_ref": "indicator--6f6b71db-6566-432f-af63-5c2e6c667346", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43a0442-044d-4f3c-97b7-654589beffed", "sighting_of_ref": "indicator--8e43376e-aef2-43c0-ac6d-d1e211cd137c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd10aef-d65c-464d-b2c5-1ab68aacf64a", "sighting_of_ref": "indicator--4e1f2766-a0a4-493c-885b-aa43a3d42c95", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3e8425-ba6f-4c81-88eb-95d6c73c0cb5", "sighting_of_ref": "indicator--4e0eb2d2-482a-4516-a060-24fd461cac7f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b5ef3d-b553-408d-927f-7ec198afd051", "sighting_of_ref": "indicator--70c70028-c7a3-4efe-a515-ff6bd92a24e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45489dc4-18ed-4bd3-bab2-051f615fd523", "sighting_of_ref": "indicator--61b509ec-edee-4fb4-9131-b7828ff327ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16bf778-fa3c-48e6-89e1-8cd0c830173b", "sighting_of_ref": "indicator--2500ed8c-93b9-40b0-92c3-777f662d955b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b36649a-2003-480c-992d-9519ecdaceea", "sighting_of_ref": "indicator--6a3c3418-eca6-419d-9177-4858fc7acc16", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d76832-93ec-419a-bace-568c06a325cd", "sighting_of_ref": "indicator--dbdb6fd4-bd8c-47fc-a85c-38b71dab8e4e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f272a137-8199-479b-a513-da038deb8b30", "sighting_of_ref": "indicator--be34fafb-c21c-4c3b-b5ec-5fad6f121ace", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18414598-8bb1-4689-9eeb-24d0139b1232", "sighting_of_ref": "indicator--1b20f72e-ee6a-434a-8994-6ec057b6ef28", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd86621c-a93f-41c4-b209-01508f65f279", "sighting_of_ref": "indicator--831e8819-181d-4e32-92be-96fed02a5120", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb0df62-9f4b-4965-a8df-851918812c0d", "sighting_of_ref": "indicator--83e97f2a-7a02-4ce0-8851-837a81a24e97", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56657e17-7b1f-498c-8747-027473e39107", "sighting_of_ref": "indicator--14fcf33c-9868-49db-a789-8037aa15f0e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aafa194-9103-4384-8601-1a5d2fe343eb", "sighting_of_ref": "indicator--a7a7b131-6080-4389-9c05-eccabd672484", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff01d74-7067-487e-b272-810339011300", "sighting_of_ref": "indicator--a7a7b131-6080-4389-9c05-eccabd672484", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83b99ab-7229-4a6f-b1ff-b70d172320b4", "sighting_of_ref": "indicator--38ccdaea-638b-49f0-873c-ec1b9f3457f1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb7cdc1-c17a-4c6c-bf71-1d5ece298ebb", "sighting_of_ref": "indicator--59288293-72c2-4264-9f54-7a95be82e67b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61217543-0f50-4203-8e82-6fff359b9a20", "sighting_of_ref": "indicator--166c5b96-dd54-4b95-97fd-5fb9d9f8d180", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526e8917-d362-4a52-b85c-33c7d53f73ae", "sighting_of_ref": "indicator--166c5b96-dd54-4b95-97fd-5fb9d9f8d180", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f3b812-874a-4fc7-b77a-935f7ca2b5c0", "sighting_of_ref": "indicator--9cfa8eeb-ad63-4ea1-a7a9-bc86ae11d2d5", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12183cb1-77fc-461d-88e8-e706d1a3196b", "sighting_of_ref": "indicator--94c306d5-390e-4473-b7fe-0ac5d03f5112", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a35748a-1bf1-4842-b489-1137505cea82", "sighting_of_ref": "indicator--94c306d5-390e-4473-b7fe-0ac5d03f5112", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bcd333-9eaf-4954-9d4b-9d29a6d11a50", "sighting_of_ref": "indicator--9d152e2d-f426-4452-ba8d-de37bc09978c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c44350b-7c43-4c7a-96a1-bfe358a97fcf", "sighting_of_ref": "indicator--1051bc49-c326-4393-8b43-3bf6a2b53217", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c763a6b-7720-4dcf-ace8-e2b99bdd4d75", "sighting_of_ref": "indicator--4b35967d-245e-4578-94d8-ddb105ee67e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db1ac85-9082-4bff-a082-7997a5f09ad6", "sighting_of_ref": "indicator--c112178c-98c2-4b65-80bb-a932ef001bf6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c56879-1751-4fac-a920-05992e7957db", "sighting_of_ref": "indicator--7324862e-3d89-4429-a6f9-c4424e66ceee", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d8265c-8724-4348-a9ab-325e059ac115", "sighting_of_ref": "indicator--ed758f57-5dca-43ae-b567-0487a7e9317f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8bc6740-5436-426e-b516-d9dcdc23d389", "sighting_of_ref": "indicator--24132524-e3bf-4e62-9841-9a7e9adbff51", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de380f2-2245-4eec-8760-cb6a8464bf4d", "sighting_of_ref": "indicator--24132524-e3bf-4e62-9841-9a7e9adbff51", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3674c6ae-f8a5-4f07-ade8-20478b6c24c5", "sighting_of_ref": "indicator--2f95a009-e8b2-4ad3-b16d-f9194ceaa667", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ce1b92-8293-42b1-8aaa-9ff0f7aed544", "sighting_of_ref": "indicator--318a0e03-51d3-4bdf-a980-becca48bb08e", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03536b54-7cd6-487d-ac0a-bfe9745cb246", "sighting_of_ref": "indicator--c5d4969b-ca39-4165-8bef-57a0582abaa2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da3bf39-345b-400e-a220-ed33ec9884f3", "sighting_of_ref": "indicator--7f5d6c4e-54d2-4d1d-ac3c-5d87cde7aa43", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5136557-012f-405b-9805-045d59667d54", "sighting_of_ref": "indicator--09b34483-5a72-4226-be1e-434ee0365ce3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd89435-1a6a-43db-8d6d-15ca962d5080", "sighting_of_ref": "indicator--38d89b99-8c02-4c4a-b9b1-b6d96ecf713a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5ba5e7-c5f7-4216-9f45-b4591741e957", "sighting_of_ref": "indicator--6503446c-7580-4985-817f-fc4d66394f72", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ad72d2-4613-4c9a-99a0-f1ac7283df32", "sighting_of_ref": "indicator--7ebdde35-a393-446a-9cbd-0ea483481d7d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e074b8-7b92-4dc2-b53b-b1c1e85a73c2", "sighting_of_ref": "indicator--5f0f9041-28e9-46ea-a76a-cdd709386708", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa8da7f-4e75-48cb-b4e4-062d22ee1a00", "sighting_of_ref": "indicator--e639c549-64f0-4dd9-a693-3dea1ee027a3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9042bcbf-c059-4a8c-8daf-062796494101", "sighting_of_ref": "indicator--1660acf1-9e78-4c8d-b53d-243f01c2d76a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72df3656-657a-4380-b262-f105f3c5cbec", "sighting_of_ref": "indicator--3622d5dc-5bbe-4a3e-9d10-204e05ae4da2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98594f3e-5fae-4fb8-869b-e97e32b396ac", "sighting_of_ref": "indicator--2ffb2e63-1de7-42ca-a087-bfd8a7d235eb", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ea677b-14e4-486c-bab6-47393e4d029d", "sighting_of_ref": "indicator--62876460-c1c3-459f-a275-f42e7a120ade", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7be6c02-520f-496d-9000-f6d52b021a9e", "sighting_of_ref": "indicator--cf5954e0-4495-41c9-8249-90279973a288", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2270b931-1dd7-4d12-864c-b5487e7ef57e", "sighting_of_ref": "indicator--76f28575-a747-4f4f-b196-0939807518c0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cc8c53-88ea-43f2-8f90-731331087c64", "sighting_of_ref": "indicator--9ac74fd9-a7b9-4b94-8c38-4a7d75869909", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2170681a-23eb-4ab6-b74a-054245e65521", "sighting_of_ref": "indicator--9ac74fd9-a7b9-4b94-8c38-4a7d75869909", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f168d7ac-3601-4e69-aae7-6cfa51528e0e", "sighting_of_ref": "indicator--8fa65e4f-d46c-45dc-85b8-6848b5b3a0c5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf65fbe-a9f9-4eec-9c53-88f87f9c080c", "sighting_of_ref": "indicator--8fa65e4f-d46c-45dc-85b8-6848b5b3a0c5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9b3196-1a4c-4f31-8add-fd6d4a9a5770", "sighting_of_ref": "indicator--8fa65e4f-d46c-45dc-85b8-6848b5b3a0c5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99b022f-b459-409e-b024-3c33e41a05da", "sighting_of_ref": "indicator--cbd8566a-533e-4c61-aabd-2f81240c8125", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c91d913-82d3-4827-838b-9d6a5b7c7900", "sighting_of_ref": "indicator--4f2c5321-735c-47c0-9392-06288703e112", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4284ec-a0b0-45e9-b1f1-ab13e0a6d7a4", "sighting_of_ref": "indicator--5165c9b8-a022-4338-a64a-24a5e0a1a318", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b57354f-69b6-4604-b6eb-8bb4fe275258", "sighting_of_ref": "indicator--4d090513-d0f9-4b2d-a6bd-e9cf1ad7ccac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07267085-5e40-4185-9221-9949a1432e66", "sighting_of_ref": "indicator--b4da4ee8-254e-42cf-b3fb-fbdd4f97fd1a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7307c0-ca17-4821-9f48-87bc5885040a", "sighting_of_ref": "indicator--b4da4ee8-254e-42cf-b3fb-fbdd4f97fd1a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841750a3-cf48-4287-8bdd-b8a6e5ef5bab", "sighting_of_ref": "indicator--b4da4ee8-254e-42cf-b3fb-fbdd4f97fd1a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d079a643-e027-49bc-931e-2e10dfe9eb4b", "sighting_of_ref": "indicator--bae7b664-09ee-467b-86bd-76b05c805098", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2713155-0750-466b-b8ea-722d7f1c5e46", "sighting_of_ref": "indicator--3b581c0f-cdf1-4877-a8fd-d53def64717d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2882c10-6c45-487d-bbde-bc583f97d9d2", "sighting_of_ref": "indicator--c7f1b88a-58a7-4887-9eba-eee0d74e3124", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b71ef4c-17d6-4037-96f8-4f9e988d6bed", "sighting_of_ref": "indicator--01b5ccf3-18d6-4602-952e-c12a81ce2175", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fff1f23-69d2-4684-8324-c72068549f3c", "sighting_of_ref": "indicator--01b5ccf3-18d6-4602-952e-c12a81ce2175", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a3426b-6cb8-4ab9-8976-cdf915e9ef1c", "sighting_of_ref": "indicator--01b5ccf3-18d6-4602-952e-c12a81ce2175", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c76d07d-7cd9-450d-a7b5-4a5f250eb13e", "sighting_of_ref": "indicator--087a0ae0-2e2c-4acf-821b-1354c8d10498", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17ff142-adc5-4cad-9096-da84df2b4ccd", "sighting_of_ref": "indicator--087a0ae0-2e2c-4acf-821b-1354c8d10498", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29d79de-61db-4c32-92de-138518fd6afc", "sighting_of_ref": "indicator--087a0ae0-2e2c-4acf-821b-1354c8d10498", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c611b3-53b8-4e4f-ac24-8b904738e071", "sighting_of_ref": "indicator--cc158dbb-e3fb-4f32-924d-4b614455f9a2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c44536a-f292-49ba-a7cb-0b3f0512c35a", "sighting_of_ref": "indicator--f22cf0b5-4aba-4c72-9c92-5a22f52910ca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ec8857-b2eb-449b-8928-ebb2c5b50ff4", "sighting_of_ref": "indicator--f22cf0b5-4aba-4c72-9c92-5a22f52910ca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acecbbae-1cf4-47c5-92bb-e2c88561d457", "sighting_of_ref": "indicator--f22cf0b5-4aba-4c72-9c92-5a22f52910ca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817c7e3b-065f-4dc3-b9a5-461c825333c4", "sighting_of_ref": "indicator--728184f4-6416-4007-ae81-4f99331b7ce0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf9ae63-71ff-4f17-93e3-469efbdb0d50", "sighting_of_ref": "indicator--728184f4-6416-4007-ae81-4f99331b7ce0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da766bc-fdf8-4df7-a761-af584bc8203b", "sighting_of_ref": "indicator--efdd7559-9c74-4031-8884-b86e6b41debf", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88df234e-dc7d-4d4d-9967-1e60797a0ba4", "sighting_of_ref": "indicator--d8f64305-cbb7-48d5-b98d-b3e5efcf37ca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf74166-ae6c-4d15-9829-14553c79abfa", "sighting_of_ref": "indicator--1c59fc02-3385-4eb9-87f4-3d0c727e90a0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc3a1d2-1843-4d94-a282-b0dbfb3f287b", "sighting_of_ref": "indicator--89c263c4-cc62-4fe7-9f1b-9903ae49213d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c56907-55da-4e35-9090-c6d5bb1d08e5", "sighting_of_ref": "indicator--89c263c4-cc62-4fe7-9f1b-9903ae49213d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea43e41-2ae2-4e6e-a502-ecdfaf822fe2", "sighting_of_ref": "indicator--28c456db-e9f4-47b9-bd38-006c65b5979a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99b7277-3047-4b93-8c61-cd42efa9dc5a", "sighting_of_ref": "indicator--28c456db-e9f4-47b9-bd38-006c65b5979a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178ac838-ef0b-479f-88d7-20b4912e44f5", "sighting_of_ref": "indicator--28c456db-e9f4-47b9-bd38-006c65b5979a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843d5222-f71a-43b3-a066-5cd985cbe5a4", "sighting_of_ref": "indicator--286419d7-a1a0-4a1d-92f0-8703ddbe3758", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070eaf4b-e481-4b12-922f-735485ee66a9", "sighting_of_ref": "indicator--286419d7-a1a0-4a1d-92f0-8703ddbe3758", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83d8f07-f87a-4db1-b2cc-5b801a0a7700", "sighting_of_ref": "indicator--286419d7-a1a0-4a1d-92f0-8703ddbe3758", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6cd153-1c67-48e4-9ea1-a73c00fe1f31", "sighting_of_ref": "indicator--277047e5-f655-438e-8ce4-deb32ddfe5cf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37b9415-c0a7-4a2c-ab0c-c7aa309c6243", "sighting_of_ref": "indicator--277047e5-f655-438e-8ce4-deb32ddfe5cf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282b684a-67a3-40fe-8277-9e9940847401", "sighting_of_ref": "indicator--277047e5-f655-438e-8ce4-deb32ddfe5cf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ad594f-b187-4d84-9496-a73b6944b6e6", "sighting_of_ref": "indicator--f1723a92-2c74-4799-97d7-771cded740b9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624f2ad4-2688-4034-a011-3929b5139280", "sighting_of_ref": "indicator--f1723a92-2c74-4799-97d7-771cded740b9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1eaddaf-64b3-4eb0-aa2f-f177224634e8", "sighting_of_ref": "indicator--f1723a92-2c74-4799-97d7-771cded740b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e82431-f4b3-46fe-9a71-a35d1f570e3f", "sighting_of_ref": "indicator--7345be71-e701-4e18-8484-9414b095cc4d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebbbe66-59e1-4bbf-878b-e13336578ca8", "sighting_of_ref": "indicator--7345be71-e701-4e18-8484-9414b095cc4d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268d0a51-bf0f-46fb-9880-b6ae727e9fe2", "sighting_of_ref": "indicator--7345be71-e701-4e18-8484-9414b095cc4d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57613d1-e940-43a0-9eeb-17c32c330231", "sighting_of_ref": "indicator--35332a02-2f1f-47ea-9eab-4f7aa15d8d20", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b7698c-d237-4a38-a001-0750a0dd57ef", "sighting_of_ref": "indicator--35332a02-2f1f-47ea-9eab-4f7aa15d8d20", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ad8fca-af45-45a5-9935-3343a5e28fa6", "sighting_of_ref": "indicator--35332a02-2f1f-47ea-9eab-4f7aa15d8d20", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d41f090-f4f2-409a-87b6-ce52e97c7c46", "sighting_of_ref": "indicator--05ee7dc1-5421-4a80-b9be-7ff4643150f6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ce4ce5-48ef-4ba7-a0f9-79688f27f05b", "sighting_of_ref": "indicator--05ee7dc1-5421-4a80-b9be-7ff4643150f6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873296a6-1c7d-4ad6-9d19-f913eff08464", "sighting_of_ref": "indicator--05ee7dc1-5421-4a80-b9be-7ff4643150f6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379953a6-8c31-4942-948f-eafc3e79d28f", "sighting_of_ref": "indicator--8143ea8a-0b60-40ba-bfdf-137b522a00c0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5e66b3-b792-4277-b8a1-839d5a47429f", "sighting_of_ref": "indicator--8143ea8a-0b60-40ba-bfdf-137b522a00c0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f322957e-b7a5-4136-9c78-1925846df0c0", "sighting_of_ref": "indicator--8143ea8a-0b60-40ba-bfdf-137b522a00c0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7b9f58-9f78-45be-bf77-4ed3968ca17c", "sighting_of_ref": "indicator--04e0ca47-30ad-4cba-b91b-c26054ad7595", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c02196c-3bc0-4612-8519-42d56f8ac506", "sighting_of_ref": "indicator--04e0ca47-30ad-4cba-b91b-c26054ad7595", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--badb6d07-2d7b-45ac-b61e-b581efa1ecad", "sighting_of_ref": "indicator--04e0ca47-30ad-4cba-b91b-c26054ad7595", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234b73f7-272f-4148-b390-e9c1c4fd33b2", "sighting_of_ref": "indicator--c947ca30-b6c6-431f-bbfd-95d2609096b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01a9778-df19-4451-a564-1e3f09f1b25f", "sighting_of_ref": "indicator--c947ca30-b6c6-431f-bbfd-95d2609096b3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdde46d-2b4a-4006-90bc-415907aa59e4", "sighting_of_ref": "indicator--c947ca30-b6c6-431f-bbfd-95d2609096b3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08deffeb-7d3f-4f01-bcab-65f652933c83", "sighting_of_ref": "indicator--8f42ebb3-4a1a-494b-82af-02cea920f210", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4e513f-a48f-4f83-bd1d-8a79e8c0afdd", "sighting_of_ref": "indicator--8f42ebb3-4a1a-494b-82af-02cea920f210", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fc444d-3931-4ea4-b999-7c8a46ac7360", "sighting_of_ref": "indicator--8f42ebb3-4a1a-494b-82af-02cea920f210", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6754d298-f067-4368-9b05-e63a88978d76", "sighting_of_ref": "indicator--980f3706-6653-4b97-8dcb-75641a54d171", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0808ada7-bbd2-450a-9965-279beee22ee1", "sighting_of_ref": "indicator--980f3706-6653-4b97-8dcb-75641a54d171", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92cfe06d-b7f0-460d-adec-977fc659e044", "sighting_of_ref": "indicator--980f3706-6653-4b97-8dcb-75641a54d171", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b374fa93-7b48-40d0-bd55-d1a59ff4bf48", "sighting_of_ref": "indicator--1abfb158-6e36-490a-9d5c-88698cf045f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60dcd33f-0870-403f-9f1d-fdc21d889e88", "sighting_of_ref": "indicator--1abfb158-6e36-490a-9d5c-88698cf045f2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e4c5d7-e130-4aa1-bae7-0b8d6d0ab8eb", "sighting_of_ref": "indicator--1abfb158-6e36-490a-9d5c-88698cf045f2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6dcea7f-7699-4d17-b0f7-6e9158c2b112", "sighting_of_ref": "indicator--0e29c89c-bab5-4c16-9664-fcb4320b17c4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22feb9b7-3c91-499c-b23d-1a31f7a364ad", "sighting_of_ref": "indicator--0e29c89c-bab5-4c16-9664-fcb4320b17c4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191c47e0-2d64-4ce5-a939-98b802779cd7", "sighting_of_ref": "indicator--0e29c89c-bab5-4c16-9664-fcb4320b17c4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73691c37-f5ce-4766-be01-c350788e8dfa", "sighting_of_ref": "indicator--d02d7fcc-b2ee-401d-9e24-ed130cdb9c24", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df5aa0b-9525-4fe1-b659-51039fa81a31", "sighting_of_ref": "indicator--d02d7fcc-b2ee-401d-9e24-ed130cdb9c24", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5adf092b-f4af-4662-aa95-0656d1b9ac01", "sighting_of_ref": "indicator--d02d7fcc-b2ee-401d-9e24-ed130cdb9c24", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856d1884-dd59-4aad-b980-f64159dbcaec", "sighting_of_ref": "indicator--039fc47a-734f-458b-8ce0-3fa4681b654a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c531a68e-a966-4c83-805b-1a68a6e2df25", "sighting_of_ref": "indicator--039fc47a-734f-458b-8ce0-3fa4681b654a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37fbf2b-75dc-4d96-bf25-0613fbca38e1", "sighting_of_ref": "indicator--039fc47a-734f-458b-8ce0-3fa4681b654a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffbb08c-ccc4-450f-8b91-4c2657b56dcf", "sighting_of_ref": "indicator--aaf76351-5584-408e-9b5b-3de5eaadc29f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0e5562-7409-4847-ba64-afefdcb01e88", "sighting_of_ref": "indicator--aaf76351-5584-408e-9b5b-3de5eaadc29f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02eae0e-69ab-4651-9cb5-7535618903bb", "sighting_of_ref": "indicator--aaf76351-5584-408e-9b5b-3de5eaadc29f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888963bf-5499-4d5d-b366-aabbe7aca779", "sighting_of_ref": "indicator--653a1f9f-fbc7-4fc2-b953-fb76d7787b07", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c91ffd-523b-41dd-91f9-31b694c4d0f9", "sighting_of_ref": "indicator--653a1f9f-fbc7-4fc2-b953-fb76d7787b07", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80f5e97-9ff2-4d6b-aad2-bdbb1747e181", "sighting_of_ref": "indicator--653a1f9f-fbc7-4fc2-b953-fb76d7787b07", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c07a31b-4888-445c-a9c8-319bde4e3ff4", "sighting_of_ref": "indicator--945aa7ec-a107-49e0-904c-b1a6c5f40345", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8338ef-d157-4658-b0d8-28be1e400ace", "sighting_of_ref": "indicator--945aa7ec-a107-49e0-904c-b1a6c5f40345", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff0302f-d214-495e-a81a-dbb986e01434", "sighting_of_ref": "indicator--e85a7429-5af2-4cd8-b472-9802c4df8dd1", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6780ec5-86a3-486b-97d3-acad0a9d1d93", "sighting_of_ref": "indicator--f8889909-ace8-4342-8611-1cbc7e3f4ee9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db91945c-fb62-4604-9480-dac593b2051a", "sighting_of_ref": "indicator--f8889909-ace8-4342-8611-1cbc7e3f4ee9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229f7074-f102-4070-aa99-e35af7a90436", "sighting_of_ref": "indicator--f8889909-ace8-4342-8611-1cbc7e3f4ee9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e421085-ad3f-44c3-8ce8-d358f58d0f06", "sighting_of_ref": "indicator--1b5162ac-5f8f-48d5-91f4-6500e014a04a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c5c498-bb47-41fc-8e05-9f0862cf8369", "sighting_of_ref": "indicator--063d6b36-758f-40a5-b670-71e4d1897090", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653706d1-3bd5-4df9-a8e5-9226c20a23bf", "sighting_of_ref": "indicator--4b9ffcce-b3aa-4bdf-b155-653b851fbcf8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e156db1a-f076-4663-989b-189caf170c59", "sighting_of_ref": "indicator--449807de-67bd-4115-9e9f-9c6465ce3df5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea0c4c3-6784-49f0-b133-4bc6631b05c6", "sighting_of_ref": "indicator--aa4e247e-a5a3-4840-a8f2-e28ebd1ba638", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7798bf-bd13-47cf-9b6c-aa79c449401b", "sighting_of_ref": "indicator--20cced31-0852-426f-8349-498977f3e2bc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc99524-58ff-4189-84e6-ea9c36929716", "sighting_of_ref": "indicator--14593579-1785-4619-a4ea-62bff7c02446", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a09f614-ce73-4074-b4f2-59a4af3ddf9a", "sighting_of_ref": "indicator--15cb68ea-2b43-4b85-a8b6-f1520925e574", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd7e2ed-5625-45af-82ba-2d57208ef244", "sighting_of_ref": "indicator--2dcf9725-628b-40c4-adba-de418b109f8f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a137104d-f8f9-4d47-8582-5a98f9535d82", "sighting_of_ref": "indicator--b1c6846c-0f75-4257-a1a2-71213acb8d9c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbed31f-d962-439c-9bb2-4413b31f6535", "sighting_of_ref": "indicator--e26a5b1d-2b70-4282-af10-bead7a36f681", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c85f42d-5d2d-414a-89b3-c23468ee289c", "sighting_of_ref": "indicator--e1f47f19-1f08-49b9-88f8-883b3f1dd2be", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f7676a-c941-4d97-ae88-01a4300bff16", "sighting_of_ref": "indicator--169ba4f5-2ca6-46cc-af21-8911e1f12218", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93d5c53-9c91-4c80-aaf9-ee64316da2dd", "sighting_of_ref": "indicator--81f24efc-abf2-4663-bfe1-98ddd8102c5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00f7eca-24b8-4f1f-893f-e29e52bee61b", "sighting_of_ref": "indicator--fafa7fb8-c0c9-4b87-9cad-aa56ea8a8fe3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e127ae0d-ef98-44e3-be1d-605602b4c545", "sighting_of_ref": "indicator--eead76e1-5359-4f7a-b9cf-a1b5d29447de", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05071826-4b1a-42c9-9742-d999683540f4", "sighting_of_ref": "indicator--c9d1665f-cfc7-437d-9841-55a17e243d6a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aabcb43-38d3-452d-8d4b-e8837851ae18", "sighting_of_ref": "indicator--30266331-7784-4724-8804-4a217a88e8ac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8608c58a-b57d-4327-ab12-7b6323cfe47b", "sighting_of_ref": "indicator--30266331-7784-4724-8804-4a217a88e8ac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06006488-7b44-44f3-b962-f8f5727af6b3", "sighting_of_ref": "indicator--7b1706cb-5ec3-4a8d-a869-93507b8f2005", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3395d5e4-a98c-4d15-8e7a-5bda9b4bb684", "sighting_of_ref": "indicator--7b1706cb-5ec3-4a8d-a869-93507b8f2005", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9a67d7-5b8b-407b-8f04-83a598309a59", "sighting_of_ref": "indicator--7b1706cb-5ec3-4a8d-a869-93507b8f2005", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2deb18-e2fe-4cc6-b4be-e446e7e1f406", "sighting_of_ref": "indicator--53bcaae4-c4f8-4f0b-a393-9f9201159856", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff07a4c-24a4-4be4-af93-8eb1eb9d2723", "sighting_of_ref": "indicator--53bcaae4-c4f8-4f0b-a393-9f9201159856", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74e3c4f-c1bc-4898-af41-fa8d75e71fcc", "sighting_of_ref": "indicator--a8bc704e-cf54-4a6e-9fd1-7cf9ddfc12e2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92257cb0-5cee-4d33-8db3-9807f858c7ed", "sighting_of_ref": "indicator--a8bc704e-cf54-4a6e-9fd1-7cf9ddfc12e2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b428ba49-fc34-44f5-b364-d595b894d733", "sighting_of_ref": "indicator--3c861abb-168e-4556-97c4-8682cc53b5e5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52f8d56-49f8-4b67-aa40-c7a789c55429", "sighting_of_ref": "indicator--3c861abb-168e-4556-97c4-8682cc53b5e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d62e12-23cd-4bc4-8d97-6be207491032", "sighting_of_ref": "indicator--11e1c27d-d017-4d6b-bcc2-0857d22a2028", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6d9366-a28c-4a0e-b679-8f9e92fbac46", "sighting_of_ref": "indicator--845058b4-b611-4408-ab40-5340e8c86de3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6492dd3-1bc1-4eab-8630-5a740a7f31c5", "sighting_of_ref": "indicator--26bbea5b-7718-4509-8b62-26a6f7ae17bf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9d9862-0229-440c-8c7d-32701ad3723d", "sighting_of_ref": "indicator--6cea02ab-6632-4ba4-99a3-61dfd0966045", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db04c04-d4c8-402a-adc0-fb1f3847a4ac", "sighting_of_ref": "indicator--112e0f91-14a9-4b11-9cda-2adde6435aed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6937069-e5a7-470f-92ac-395fc14aaa8a", "sighting_of_ref": "indicator--112e0f91-14a9-4b11-9cda-2adde6435aed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb067e9-b824-4aed-afb7-288854363728", "sighting_of_ref": "indicator--81a65574-e420-4181-8e68-8ac10d07d81b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d78933a-7952-43f2-b220-f1c253216c1d", "sighting_of_ref": "indicator--81a65574-e420-4181-8e68-8ac10d07d81b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3b7f3f-38a0-4ada-a804-4a307737f65c", "sighting_of_ref": "indicator--ad7e2ae3-4c43-4cc9-90cc-462ddbcbfb9a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3efd631-71e0-4a15-ba5a-bdac0d7e76cf", "sighting_of_ref": "indicator--ad7e2ae3-4c43-4cc9-90cc-462ddbcbfb9a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e861aa-bfae-4e2e-bb66-f3e348b7284c", "sighting_of_ref": "indicator--a3402425-6fe5-460d-b284-b67c5141f78e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f44bf3d-cc76-41bf-9e9b-882502da4810", "sighting_of_ref": "indicator--816b8710-1bf8-4a25-8953-f506edb5f096", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1872e94b-2049-4c3b-bf55-8ded4127f7b2", "sighting_of_ref": "indicator--038bfd12-12d6-4a29-a473-ec5ad951ea39", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e098158-4156-4ccf-90b4-4b76c268bd65", "sighting_of_ref": "indicator--038bfd12-12d6-4a29-a473-ec5ad951ea39", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a358f3c1-92eb-4fa7-8bf1-fff150956420", "sighting_of_ref": "indicator--038bfd12-12d6-4a29-a473-ec5ad951ea39", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c436c0cc-dac6-4f2e-9f49-09e5e32ae33b", "sighting_of_ref": "indicator--9862d07c-9c2f-4e55-8858-ec3138d7e61a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cb8118-a282-4812-adcf-7e395b1fe1c0", "sighting_of_ref": "indicator--9862d07c-9c2f-4e55-8858-ec3138d7e61a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef9f9ef-7214-4000-9cf3-173cdac1ac94", "sighting_of_ref": "indicator--d47b948c-dd34-4c4a-83d5-bf6e41cbe898", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea27b39-7ba3-4eea-84be-65f9d216895e", "sighting_of_ref": "indicator--4d1c38ab-6c72-43c0-94c3-99b9b80bc7d6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3f0a63-858a-4709-9005-824ba82abb11", "sighting_of_ref": "indicator--4d1c38ab-6c72-43c0-94c3-99b9b80bc7d6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717206cf-a499-46fd-917a-743a4ecb54ef", "sighting_of_ref": "indicator--4d1c38ab-6c72-43c0-94c3-99b9b80bc7d6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a00fd44-d47e-42d5-801c-fe8a8512fe1b", "sighting_of_ref": "indicator--2b965baf-d3f5-4fe7-8026-c66301f24d25", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51cbe2d-77a7-42ee-ad99-4f6321db2645", "sighting_of_ref": "indicator--874160e1-acd7-42b3-89b7-666db8f38385", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96056d74-6f6e-44a0-8c77-51ff7828b696", "sighting_of_ref": "indicator--8db5148c-2b5e-476b-bc4b-b17aef56da56", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5312fe4a-3bf4-4c7b-a553-c40cf4ef9769", "sighting_of_ref": "indicator--d5ce0c1d-43e5-4e9b-a32d-90ec85ff0840", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db93ee6-0de4-4fca-9e57-ee65c74ee616", "sighting_of_ref": "indicator--d5ce0c1d-43e5-4e9b-a32d-90ec85ff0840", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72f6ab8-f990-4687-a250-ad681d96034d", "sighting_of_ref": "indicator--fcb94486-1b12-477d-99e7-1fd8a193cf8e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e386fb9-ec8d-4f57-b7ba-e4c1ff708a3d", "sighting_of_ref": "indicator--5417683a-d559-4aa4-8e6b-811fb5c95b8a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265f6b1c-74df-434c-a626-c6d7e1b08259", "sighting_of_ref": "indicator--0b2f91cc-08f1-4bc7-9956-6c23f6966084", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad47fd37-fb00-4039-b900-6cdbf5269fb5", "sighting_of_ref": "indicator--8d342a99-86dd-480a-88c8-9e0fe66a489e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98377eb8-40b3-4dc0-86af-e5d827e85439", "sighting_of_ref": "indicator--cff4c47f-5a6a-4428-8ef9-9bdbdeddf252", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2eea39-0765-4499-9c07-9cf025232e7c", "sighting_of_ref": "indicator--cff4c47f-5a6a-4428-8ef9-9bdbdeddf252", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8209cc-be7f-4839-b2c4-0628e39f7cf8", "sighting_of_ref": "indicator--e2b0dd05-9552-4faa-bbfd-4c3f49e0dc38", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb58577b-b2ff-4dd5-9bb4-94fc28e0535e", "sighting_of_ref": "indicator--d198a8a3-3d54-4674-8731-24007f2d077d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d7d783-b4c2-48d0-86ac-66e918d4b682", "sighting_of_ref": "indicator--d198a8a3-3d54-4674-8731-24007f2d077d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e0e0db-a2ac-4e34-a175-2b061419955e", "sighting_of_ref": "indicator--8e051abb-decc-4828-91ab-22d250214f06", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6798bf95-ae1a-4f74-b534-752c81aab4b4", "sighting_of_ref": "indicator--8e051abb-decc-4828-91ab-22d250214f06", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3de3d55-d402-4d7c-9df9-8b66d8f39cdf", "sighting_of_ref": "indicator--8e051abb-decc-4828-91ab-22d250214f06", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be33d8cc-bd91-4e58-9414-0169fd3be8ab", "sighting_of_ref": "indicator--edcc0bc1-94d5-4fb3-8b0d-1a16986c7c71", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403b517c-c0f9-4ca6-afa3-091e710cf23d", "sighting_of_ref": "indicator--edcc0bc1-94d5-4fb3-8b0d-1a16986c7c71", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d9f649-0fac-480a-9ef7-fd7cd3d60bc1", "sighting_of_ref": "indicator--d6444745-b356-4d6c-be80-c8e83731f37f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccdfa85b-4c66-4ccd-9b02-350af98fffff", "sighting_of_ref": "indicator--d6444745-b356-4d6c-be80-c8e83731f37f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ed51b5-faee-478a-9900-c97d9967cce1", "sighting_of_ref": "indicator--3f30ec59-58c5-48bc-9f9c-7a69643bd867", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25955511-35b2-4de5-b777-65e7eab4c9ac", "sighting_of_ref": "indicator--236270a9-e2d3-4ba2-bfe2-c1049218dfd8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d6f681-3c12-4015-963a-0531750f1aa4", "sighting_of_ref": "indicator--a70225f8-363b-4902-a706-900e1b2e338b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90f1467-3a8f-4784-85d4-896ab26670be", "sighting_of_ref": "indicator--90038eab-88c7-40af-b165-a5da5ce7cd26", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a586a962-51e8-4053-8f68-52b730bb5c9b", "sighting_of_ref": "indicator--90038eab-88c7-40af-b165-a5da5ce7cd26", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7799d79-48c0-44c0-80c2-b062fb2ae8fa", "sighting_of_ref": "indicator--807728f7-d48d-4d23-bf1c-a3ab4206245c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35d3c72-764b-4178-a807-acb2a36a3a3d", "sighting_of_ref": "indicator--807728f7-d48d-4d23-bf1c-a3ab4206245c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e3fbad-d113-481b-a7b3-41d35a4884f1", "sighting_of_ref": "indicator--4a0a0af7-9bee-4bc4-83a3-b81df7f1e256", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ad35dd-412e-405c-a0cf-872c33e0e41a", "sighting_of_ref": "indicator--3eee23be-95eb-49f2-8cb4-20b185b97a4b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7c1f18-f931-4fe0-87ab-b25e14088552", "sighting_of_ref": "indicator--3eee23be-95eb-49f2-8cb4-20b185b97a4b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1451d079-895d-4dd6-9730-8a7e609335b7", "sighting_of_ref": "indicator--1e317db0-6267-45e0-af18-769a8a9b3489", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb39345-e1d4-4013-bfcc-c0e808f76b1e", "sighting_of_ref": "indicator--2ee01a0e-2707-4f48-b357-880fc6883c80", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b05656-0621-4bc4-b5d6-5b29580fbc80", "sighting_of_ref": "indicator--86b22875-551c-4dde-800d-e7351ede10ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb38fdb6-1afd-4910-a947-26af8633e750", "sighting_of_ref": "indicator--6d5c0385-0d68-4dcd-bba4-0b76acb2afa7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14c948e-1fd7-4fc7-bfd8-42d26fdb1c64", "sighting_of_ref": "indicator--0e8ad322-02a8-4689-8e5a-71ff9e7882db", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0077235-ec62-4cd0-bbec-d369034e9584", "sighting_of_ref": "indicator--0e8ad322-02a8-4689-8e5a-71ff9e7882db", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b8f024-ac9e-4645-98ed-88a41672fac8", "sighting_of_ref": "indicator--29209ea2-2b54-467e-a632-0a187344853a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9f7be8-f967-4e56-9423-7b74225c38a6", "sighting_of_ref": "indicator--29209ea2-2b54-467e-a632-0a187344853a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23ed083-7f22-4dea-a5e8-12f372f0e419", "sighting_of_ref": "indicator--8bdaa487-4466-4ea9-9c7e-a5d491857e03", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bc6bf3-53dc-492a-8a4a-e0f1251ae421", "sighting_of_ref": "indicator--8bdaa487-4466-4ea9-9c7e-a5d491857e03", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29e7254-6c10-4435-b9a6-9fbd97873d09", "sighting_of_ref": "indicator--b9acbc65-b19f-468a-b177-361cf64d6d0c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b38ae1-a58b-4886-86d2-fb04ea4a31aa", "sighting_of_ref": "indicator--f225564c-da45-4008-9fe3-a3a86b9b5217", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04c4d50-1221-4e8d-a6ae-4445bb8f2d9b", "sighting_of_ref": "indicator--220758ca-6100-479c-a23c-9009bc1f0e22", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3ab1c7-748c-41a9-ba0f-eadb4990cab1", "sighting_of_ref": "indicator--46a27ea2-56f8-47a9-96bf-b873260783a4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c695e5-f907-4519-bd2d-7f7642e09b9b", "sighting_of_ref": "indicator--46a27ea2-56f8-47a9-96bf-b873260783a4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41092bc-1cfb-4609-8dc0-bf733e675f1b", "sighting_of_ref": "indicator--46f4bd0c-1484-4dbe-9151-73259a869216", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d1f08e-1c3a-4810-b5a0-52370270e674", "sighting_of_ref": "indicator--46f4bd0c-1484-4dbe-9151-73259a869216", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b4a01f-6098-4ade-bf63-7feae0ebe116", "sighting_of_ref": "indicator--5b3d2a92-dd73-4f4d-a9f7-2bf94da163be", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420a8509-6f3f-46b4-9279-be56b3cd9a66", "sighting_of_ref": "indicator--ff2fa0d8-eee9-41f1-9f13-26d744831336", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01af041-cfdc-486e-8770-54e2e1db43fd", "sighting_of_ref": "indicator--0d70dc31-6e51-404f-bfec-85bce88651cb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e61d41e-9507-4be5-9492-b0bb2fa3d06e", "sighting_of_ref": "indicator--ac25fa62-53eb-4df6-9c9e-d3101a4d183c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64be63d-e207-4ae1-ad4c-624c6ebcde00", "sighting_of_ref": "indicator--2aca5827-dd26-40b1-a99c-aa2ef3bb3f7a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ed2cc4-fa23-4204-aca3-7022a95d67cf", "sighting_of_ref": "indicator--2aca5827-dd26-40b1-a99c-aa2ef3bb3f7a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e8ecfc-d989-47db-bacf-523643a65265", "sighting_of_ref": "indicator--46092eae-3e83-42df-93bb-e2ca3d049b60", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e987a3-fc68-44c9-a513-78693f17729b", "sighting_of_ref": "indicator--b1878ad6-b422-441d-bfd1-07e884114202", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ccaeeb-759d-49b2-b41b-3b0b8ec53c8b", "sighting_of_ref": "indicator--b1878ad6-b422-441d-bfd1-07e884114202", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3be0da-c4ff-4c10-a463-1bff5e7dc619", "sighting_of_ref": "indicator--4a11f5ee-5958-4aca-b8d9-a036b79db10a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a35c4e3-f916-489f-aced-a5b95a6ece35", "sighting_of_ref": "indicator--4a11f5ee-5958-4aca-b8d9-a036b79db10a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943ac04e-16bd-469c-8a73-88c7b164a093", "sighting_of_ref": "indicator--612e5725-7ddd-441d-a325-e4d28d87c2ad", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1618a4-3a39-480d-bfb0-47b8ab630cf9", "sighting_of_ref": "indicator--612e5725-7ddd-441d-a325-e4d28d87c2ad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d1c4f2-2eae-45cb-a9b1-26358e767aa1", "sighting_of_ref": "indicator--459657b0-356b-4862-9b99-abdcc8b688b7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7afbf82-158f-4764-9f42-b59e399170dd", "sighting_of_ref": "indicator--8be77238-5411-49c6-bc98-91c8e0144598", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4281711-a8a7-493a-bc9d-1afc177f50ac", "sighting_of_ref": "indicator--8be77238-5411-49c6-bc98-91c8e0144598", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5af62d-91fb-4d3d-9887-6f0817fb8d63", "sighting_of_ref": "indicator--12eaaa14-3509-4f75-8be4-464b8e8614af", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e77ea4-8138-4029-bb6e-63a7c2d0825c", "sighting_of_ref": "indicator--12eaaa14-3509-4f75-8be4-464b8e8614af", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bb9d6f-9afa-4bb0-8c3d-dc99669e820e", "sighting_of_ref": "indicator--12eaaa14-3509-4f75-8be4-464b8e8614af", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74b3bc1-a17a-4d5c-a5dc-3dcffa43301a", "sighting_of_ref": "indicator--516f2332-e2d9-4822-8f74-3bf2c9a59f5d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63db4170-6c22-4bbd-8b38-2ae8ce85a8c0", "sighting_of_ref": "indicator--d2c4ae13-31b9-4689-a69a-31b9f1a7abf8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f75deca-38e6-4f3b-b3b0-5a3cc04cfeeb", "sighting_of_ref": "indicator--fda221ee-5b76-4176-af7d-d6d852fa5f6b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd538802-d37c-46be-8324-8ec9ded2130c", "sighting_of_ref": "indicator--95007a98-28b2-435d-8497-af6a418bc082", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556e989f-7a2d-4ee1-8fb6-7651e041ec64", "sighting_of_ref": "indicator--822c6c6a-abd6-4f94-b9f1-14ba02e93f89", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935d2678-0cae-4348-89e5-0947ee7ffb37", "sighting_of_ref": "indicator--822c6c6a-abd6-4f94-b9f1-14ba02e93f89", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b3d069-c00d-47ad-b424-2aba9be5547d", "sighting_of_ref": "indicator--ded54d91-28fb-4dae-bb52-cb09ba90183c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7e173f-1e73-4f20-a5cc-4fe33d793a2d", "sighting_of_ref": "indicator--65e67b56-abd0-44e4-9757-250d3700fb24", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41307a6e-7168-4fae-9935-d854a8fce00c", "sighting_of_ref": "indicator--a959489e-64e9-4f2a-bc18-da98983fc94a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed77e57-1659-4c82-9e98-6bcd1f60eb89", "sighting_of_ref": "indicator--a959489e-64e9-4f2a-bc18-da98983fc94a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f29c51-755a-44cf-ae52-c0d186b5f39a", "sighting_of_ref": "indicator--a959489e-64e9-4f2a-bc18-da98983fc94a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f451977-48d4-46cc-8e2a-4e31e74bbe13", "sighting_of_ref": "indicator--316f9d30-0ac1-43c7-9c72-553c53ad84e0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3efe2a-6d9e-40c4-a380-5810c0aff5f5", "sighting_of_ref": "indicator--316f9d30-0ac1-43c7-9c72-553c53ad84e0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c89fff9-98bd-4d05-848f-0a0fd4cb166d", "sighting_of_ref": "indicator--87d81505-85ab-48b6-b681-bd0c7798ffe9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351b65fa-7a08-48b2-9e84-211e7d9194fa", "sighting_of_ref": "indicator--87d81505-85ab-48b6-b681-bd0c7798ffe9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2de488-aaa4-458a-b5da-039c0d988fc0", "sighting_of_ref": "indicator--27422ae6-a785-4a25-b6e4-c70481f1d89b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b1099a-0e15-4768-943d-194395af4aa8", "sighting_of_ref": "indicator--c76f8704-da37-43c8-bb53-45c31c84a2f4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d83347f-66c3-4a16-8e2c-c2d3d6d4b8c7", "sighting_of_ref": "indicator--c76f8704-da37-43c8-bb53-45c31c84a2f4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91592cf-60e1-4361-a42b-6d4d40ddc093", "sighting_of_ref": "indicator--c76f8704-da37-43c8-bb53-45c31c84a2f4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d147f00c-c511-41ec-98e1-e47157de5f3b", "sighting_of_ref": "indicator--3913a496-76e1-4396-8b96-b99650db312b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c8cec2-736b-4996-b760-fc94f3fa01ee", "sighting_of_ref": "indicator--5f22683f-00c0-4669-933e-0e7c917581f9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b004f080-1f0c-4115-b6b1-a2169bc6e4bf", "sighting_of_ref": "indicator--5f22683f-00c0-4669-933e-0e7c917581f9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62af32bc-e9aa-4850-9d2a-5315af1719af", "sighting_of_ref": "indicator--5f22683f-00c0-4669-933e-0e7c917581f9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2eafabc-afc5-4b09-a211-d5a015287c35", "sighting_of_ref": "indicator--2edb0066-fa11-47f0-8db1-8c46cf054dff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79914059-584d-4ce6-9632-7709a60209b4", "sighting_of_ref": "indicator--fffe87ef-c20d-4d0a-9a57-63e85d65c5dd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298b4d09-55de-48c9-a42c-d7f5ef333b15", "sighting_of_ref": "indicator--ee6f5235-297a-472f-a8c0-3cb041f3c93f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c73d8b-4843-4692-91c8-2e7653457db4", "sighting_of_ref": "indicator--c6558b92-d537-46c8-8a9e-0b5c539ea367", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf1f433-58aa-4a20-9806-1cdd466c7535", "sighting_of_ref": "indicator--c6558b92-d537-46c8-8a9e-0b5c539ea367", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6748453-5ff5-4cad-9335-5a1c91219938", "sighting_of_ref": "indicator--c6558b92-d537-46c8-8a9e-0b5c539ea367", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d86bcc7-6a40-4272-a1ef-9d70a97ca43d", "sighting_of_ref": "indicator--4d0dc4b2-261c-486d-9979-799ea16ddc7c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022ea4d9-eb52-4b3a-839f-5b9f3c870ed1", "sighting_of_ref": "indicator--4d0dc4b2-261c-486d-9979-799ea16ddc7c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a52266-81de-4136-942e-d4dc115d8d94", "sighting_of_ref": "indicator--4d0dc4b2-261c-486d-9979-799ea16ddc7c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58440b72-6e40-4277-985d-db5c277c9dae", "sighting_of_ref": "indicator--571a595d-0bf3-450a-861c-53d81408bf16", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9318cb7-594f-4f3a-8329-751ea2d9172c", "sighting_of_ref": "indicator--e8b4d02b-eba3-4431-a319-8ae6fc81f1ef", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21b5b0b-12d7-4bc6-a2ee-6dba7567f8f7", "sighting_of_ref": "indicator--e8b4d02b-eba3-4431-a319-8ae6fc81f1ef", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9f1255-d512-46c5-94fd-b42af1ee0a49", "sighting_of_ref": "indicator--0fb790e6-6843-4697-b4d5-d78c75bee3d4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510d8d98-cae5-4ea2-9a4b-c27de038838f", "sighting_of_ref": "indicator--77795856-2ab0-4fec-9925-269e38be506b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a93134e-d5be-4676-9b28-dff3e2a2493c", "sighting_of_ref": "indicator--77795856-2ab0-4fec-9925-269e38be506b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfc46a4-df5a-40eb-b742-444455379f70", "sighting_of_ref": "indicator--dd57a7f1-2907-4ef7-b155-f8fd017a9415", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea4ff87-73e5-4843-ae1d-9c0789256ac8", "sighting_of_ref": "indicator--6ec19650-a74d-4f49-8db9-a9d10c978cee", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdf4452-4bfd-4a37-92bb-33c005f4d2c1", "sighting_of_ref": "indicator--6ec19650-a74d-4f49-8db9-a9d10c978cee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb987a7-6cfd-4790-872b-219b9b66eaa0", "sighting_of_ref": "indicator--53e65d60-bb1c-420e-a56b-c26af9f89a6b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce81d171-913c-4f3a-b671-93c600687c61", "sighting_of_ref": "indicator--15314070-b796-40ec-993d-2b090490d618", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d96add-2528-499e-a1c3-5f6d5d447390", "sighting_of_ref": "indicator--62e3118a-752d-443e-bd69-038bb95c2f9d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4bdc46-6998-4579-8dc3-aaa5c68e0c36", "sighting_of_ref": "indicator--62e3118a-752d-443e-bd69-038bb95c2f9d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92c02fe-3625-41c5-b643-081a59cd2071", "sighting_of_ref": "indicator--23856071-8f07-4328-9841-0e132336e035", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1a1230-2c6c-4f51-9895-0be891db7daa", "sighting_of_ref": "indicator--23856071-8f07-4328-9841-0e132336e035", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5154b5-dbfd-4567-98b4-4a64f3043aab", "sighting_of_ref": "indicator--f99b6e54-3c25-4fa8-a9e9-397ba9369f80", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6bf1008-d54a-450a-b78c-d167e55e341e", "sighting_of_ref": "indicator--feb3c9f4-8596-456a-bb44-39fd97b67168", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58665b8-00ba-47dc-aeac-bc4739c98381", "sighting_of_ref": "indicator--2d9abb7c-f0d0-4548-831e-7d0b31fd734f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac14e96d-ee3d-41b2-83e7-4f725e00b140", "sighting_of_ref": "indicator--e48622fd-9a28-44d2-a8b4-397a2d631cbd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670b803a-bbf5-4d04-ae54-8897216d9d5e", "sighting_of_ref": "indicator--a82e654a-5901-4e61-a157-610a02fbbb80", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f29a97-c6cf-4545-9464-169f3343d4df", "sighting_of_ref": "indicator--38914d63-b143-4341-a2fc-c60fb5c2ba26", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b86b47-8b8e-4490-bdde-e4c6f4aafba2", "sighting_of_ref": "indicator--38914d63-b143-4341-a2fc-c60fb5c2ba26", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4562a279-368b-4324-a657-eadbc453379f", "sighting_of_ref": "indicator--822f17c0-577e-4d74-ab3d-50bc47a29846", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0445cc6f-8cef-465d-a3de-43570f75e03d", "sighting_of_ref": "indicator--0ae2c62f-cdde-4442-94d4-0ea039e6822c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ff97c5-4348-45a0-af13-88cdae35e70d", "sighting_of_ref": "indicator--e7cd2db2-61c1-42e0-98be-8f40b6ccc413", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725240ef-c01b-4d27-84a7-3458c92101c2", "sighting_of_ref": "indicator--e7cd2db2-61c1-42e0-98be-8f40b6ccc413", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fcb958-48b1-4511-8a4c-10b5d0bbc0ca", "sighting_of_ref": "indicator--80a2fcae-310a-45b0-a212-3b99e27ced44", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d30ffbc-b1eb-4b73-b798-e2cb36794aab", "sighting_of_ref": "indicator--80a2fcae-310a-45b0-a212-3b99e27ced44", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4819292c-37de-4ae2-8a09-cbd589f9dfd7", "sighting_of_ref": "indicator--ecc67bcc-b684-4d61-a5bd-798675e82c87", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccdcbdd-db07-4362-ab94-1e75da3795d6", "sighting_of_ref": "indicator--ecc67bcc-b684-4d61-a5bd-798675e82c87", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea37c30-fb43-4160-89d3-d2e880afa342", "sighting_of_ref": "indicator--400b22dd-3e10-4cba-b2b1-32c952913a5c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac8f60b-5150-4709-8bb1-6e42c5ab7166", "sighting_of_ref": "indicator--400b22dd-3e10-4cba-b2b1-32c952913a5c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2d76ff-94ea-41a2-82dd-047a0524fb71", "sighting_of_ref": "indicator--400b22dd-3e10-4cba-b2b1-32c952913a5c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e308b31b-cb46-4f1f-90f2-dbf586bdfd0e", "sighting_of_ref": "indicator--c98afd78-67fa-4ab3-a84c-c0201b174eb7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12db3c13-8538-4639-9397-7f6ba4ab0426", "sighting_of_ref": "indicator--c153b834-231d-4e56-a34a-6d4337d03f86", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28f9f2f-b901-414a-b065-a30f78571e9a", "sighting_of_ref": "indicator--c153b834-231d-4e56-a34a-6d4337d03f86", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df64466e-3e34-4223-8d8e-c8954d8b88e8", "sighting_of_ref": "indicator--c153b834-231d-4e56-a34a-6d4337d03f86", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961273f3-db84-4556-bb23-413590a80151", "sighting_of_ref": "indicator--ab647b25-ec26-413e-a92b-1f59eb547243", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665a3a43-9c56-4ab5-b638-e31d7fdbd7f8", "sighting_of_ref": "indicator--ab647b25-ec26-413e-a92b-1f59eb547243", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f021d5c-6dcf-462c-b13b-1ad6337a0e36", "sighting_of_ref": "indicator--624a9ca8-ec77-4893-9998-4f05fcd75779", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222d9c7f-2b14-4f04-9b54-e01057442dd3", "sighting_of_ref": "indicator--fe8f7e6f-b9ab-489d-ad19-346aee451f0c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa744a3-997a-4493-8892-c5cb9d192016", "sighting_of_ref": "indicator--f36387e5-f3bb-4414-b094-86cc4d7e3c6a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7699cb-b4ee-4a76-8a1d-523955a92425", "sighting_of_ref": "indicator--f36387e5-f3bb-4414-b094-86cc4d7e3c6a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb836df0-c2e1-4f91-ab00-c4b8727b1537", "sighting_of_ref": "indicator--c932678a-57fe-48de-8ecb-26af1e6d1e09", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd31100b-33bc-444a-95c2-9e4d83b3eb9f", "sighting_of_ref": "indicator--45a0687a-9ed9-48ad-8db0-f8ea7c22ca15", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358714a2-6d5b-4ae7-bb95-4dd90aa1acbf", "sighting_of_ref": "indicator--45a0687a-9ed9-48ad-8db0-f8ea7c22ca15", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56a2f69-7604-4eb6-85c8-916ecbb0c80e", "sighting_of_ref": "indicator--2ed81815-2164-4b7c-88b4-a1b4415440de", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10c8bf3-19b5-4743-b842-1fbf010c30ef", "sighting_of_ref": "indicator--2ed81815-2164-4b7c-88b4-a1b4415440de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016ec5c1-272c-4627-b7ed-d1f0a58c41c2", "sighting_of_ref": "indicator--2ed81815-2164-4b7c-88b4-a1b4415440de", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6050e7f-e076-48d8-9bee-8cff61f21012", "sighting_of_ref": "indicator--a5ab95f2-115c-4886-8a51-d7b0041cd71b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e14650-c1a4-4d0f-90c0-2d3a1a0cc306", "sighting_of_ref": "indicator--19864320-d291-4391-a98b-2e7b590b97f7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b661a6-5462-4db8-b1d9-d0939e6f6369", "sighting_of_ref": "indicator--19864320-d291-4391-a98b-2e7b590b97f7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e987fec6-4aa9-42c4-abf5-1e0248f5938e", "sighting_of_ref": "indicator--19864320-d291-4391-a98b-2e7b590b97f7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2c33f9-ae7f-47c2-afb8-5872986a3002", "sighting_of_ref": "indicator--704bfdf0-b53e-4ee0-aba0-c8cd75736e7a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5024edd-6e4f-4ef0-8d01-c39d100c6f8c", "sighting_of_ref": "indicator--6ecf1253-777a-449a-9db9-bf2b8dc7eca3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdaf40a-0b40-4893-ad5d-ef74ce6cee30", "sighting_of_ref": "indicator--6ecf1253-777a-449a-9db9-bf2b8dc7eca3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a98c60-f9b9-4463-8bed-f63f346b237e", "sighting_of_ref": "indicator--6ecf1253-777a-449a-9db9-bf2b8dc7eca3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bf4142-5363-4935-a2c8-83195a13e2a4", "sighting_of_ref": "indicator--de40ab10-dc4f-41c2-b437-3529089372fe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfbaa12-7044-4b1b-8edf-f61dc507de85", "sighting_of_ref": "indicator--de40ab10-dc4f-41c2-b437-3529089372fe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f939f5e2-bee8-4885-8c31-f0a48565d142", "sighting_of_ref": "indicator--54542764-4b4d-4f58-9e2a-64feb16ecc04", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbbc09b-356b-47cb-8688-b8e7baaa528d", "sighting_of_ref": "indicator--54542764-4b4d-4f58-9e2a-64feb16ecc04", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445745f5-f23f-4939-b504-1b3f0712add9", "sighting_of_ref": "indicator--3830fe7a-e1e9-4c1f-a88e-3ba7f4a33988", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc28caa7-89bd-4062-8de4-a8f5f12d2388", "sighting_of_ref": "indicator--3830fe7a-e1e9-4c1f-a88e-3ba7f4a33988", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f260e36-0622-495f-9f36-35d5d6b81ecf", "sighting_of_ref": "indicator--e0333dce-18e8-47dc-973c-8000164d6160", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc37964-dfdb-40e9-9eae-f37fd4688f2d", "sighting_of_ref": "indicator--e50d1228-0dc7-4f56-9558-88a23c59d6cf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01bbbb4-1b79-4c6b-9bee-47bc66af3388", "sighting_of_ref": "indicator--4c9c491e-b1a1-49ce-9424-d51231f02886", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa38e02f-c8e7-499a-8b9f-4553e7972276", "sighting_of_ref": "indicator--4c9c491e-b1a1-49ce-9424-d51231f02886", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3b9ff3-9b8d-4bf5-8e33-544db0278bc7", "sighting_of_ref": "indicator--86432d15-5803-4e1f-a884-b08bf6e18d58", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b61266-2287-42c0-b81f-27049ad342e7", "sighting_of_ref": "indicator--86432d15-5803-4e1f-a884-b08bf6e18d58", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03cb9c92-bf35-4e55-a0f3-e4d4fa86f235", "sighting_of_ref": "indicator--85cdd6c3-acaf-4552-9c2a-a5f3c92f24af", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d44e7b-70be-4dc4-ab14-0d6d562c51f9", "sighting_of_ref": "indicator--13032b75-15df-49c8-8ceb-ffe681195809", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bc9ead-19b6-4a4a-9d67-6e83c53dac94", "sighting_of_ref": "indicator--13032b75-15df-49c8-8ceb-ffe681195809", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ef6601-f5d1-4a6f-bb78-67cdde849203", "sighting_of_ref": "indicator--e1596704-4116-4fdc-995a-6cf3211c3438", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e699f3-d3c0-458e-b5ac-d6ff5983584d", "sighting_of_ref": "indicator--35f46d42-4515-4bf8-853c-05b87341d3a6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18156988-9220-4b6b-9ad5-b741b05e1d91", "sighting_of_ref": "indicator--35f46d42-4515-4bf8-853c-05b87341d3a6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a10ce9-0d3d-433b-a32b-f776c9184d3d", "sighting_of_ref": "indicator--35f46d42-4515-4bf8-853c-05b87341d3a6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c84dc92-a4f3-49c0-bdc0-d87e4482765c", "sighting_of_ref": "indicator--ea821cc5-738f-4a4f-991d-ff3a6bdbaaba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25423cf8-3031-47fa-b44a-449d5a617cf3", "sighting_of_ref": "indicator--95d5b9e7-7788-460c-bc6a-e6108d59063f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6935ea4f-1173-4ee2-bebc-2c573a8dd84f", "sighting_of_ref": "indicator--95d5b9e7-7788-460c-bc6a-e6108d59063f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967acc38-3952-4f0c-86cd-c7555e4e50bd", "sighting_of_ref": "indicator--95d5b9e7-7788-460c-bc6a-e6108d59063f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712de116-a401-4cf4-b3ad-aee85f8d9709", "sighting_of_ref": "indicator--cdeb4b18-3b57-4410-bda5-68eaa4c6ac10", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdda17e-d61c-4ee8-8bcc-64cf089c2d3a", "sighting_of_ref": "indicator--cdeb4b18-3b57-4410-bda5-68eaa4c6ac10", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac193379-c02c-4130-966f-7f7793e84ca6", "sighting_of_ref": "indicator--13d830bb-0f24-402c-b987-b6f52ddb96d1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56dd434-75c3-4106-afd7-416612440086", "sighting_of_ref": "indicator--63cfcddf-b043-4cf2-be49-5c6442cbabea", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a82bc8-79f0-457a-b762-70584b9b15d6", "sighting_of_ref": "indicator--0a01960f-6947-4b2a-9f8d-d597c846df39", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfe4cc0-dc68-4898-b2a1-b338446aa230", "sighting_of_ref": "indicator--0d9632ae-d539-403a-9bf5-758cb64ade12", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e1d1d2-125b-4f59-8573-56a801cd43e7", "sighting_of_ref": "indicator--0d9632ae-d539-403a-9bf5-758cb64ade12", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a29e7c-ccae-4659-a2c0-e1bedd5670cc", "sighting_of_ref": "indicator--00adbe4a-ca64-4be9-afcf-94002d567824", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3194c1-02d3-4dea-92e1-06998ae4f090", "sighting_of_ref": "indicator--351af504-970d-440f-a686-7ba6c4d40264", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6399ada-83e2-4963-8b94-21b8b591a50d", "sighting_of_ref": "indicator--93ae4b4a-6af4-41fa-a6f4-2f38bb446448", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56d716a-b5ad-4cd1-bb6c-1fec6876bfe1", "sighting_of_ref": "indicator--07a59024-5d32-4cad-9878-f0e43e7f8d05", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ad4d71-5bb0-4409-8d9e-e26924d9290f", "sighting_of_ref": "indicator--07a59024-5d32-4cad-9878-f0e43e7f8d05", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a3748d-fbcd-40d2-b7ea-39a86944ae7a", "sighting_of_ref": "indicator--f6d6c7ca-5b0f-4d19-a214-1bdd3160016d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc383c8-579a-4347-ac75-59448c70ee1e", "sighting_of_ref": "indicator--f6d6c7ca-5b0f-4d19-a214-1bdd3160016d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ba6e94-fdf8-4260-a938-d72aa9a579af", "sighting_of_ref": "indicator--14b72a8b-7d5d-4000-b6d7-04b76b317826", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0c14b8-805e-4d11-af72-72fad141dcf2", "sighting_of_ref": "indicator--14b72a8b-7d5d-4000-b6d7-04b76b317826", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc115b1-ecb7-48ca-a060-3586cbd17e16", "sighting_of_ref": "indicator--9a1f5792-3ba6-4fb2-b446-d5293649ca28", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83a07d6-9385-42a8-a00f-d8c475f58af2", "sighting_of_ref": "indicator--c118159a-b4c4-4024-887f-8705a8599d84", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa77713-fc27-4d6c-beb9-4ee13f0f9ad4", "sighting_of_ref": "indicator--c118159a-b4c4-4024-887f-8705a8599d84", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fafd1e4-a28c-4d64-895f-8c0188311b5c", "sighting_of_ref": "indicator--1c0c1a66-39b2-469a-a545-ee832f84021a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fed84f7-fecd-417c-b4a5-241a84306dc8", "sighting_of_ref": "indicator--b6f2c412-9311-4312-af2d-39abd62ea8c0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab2c20a-3fce-4f1a-8bdb-d2fbd594803d", "sighting_of_ref": "indicator--b6f2c412-9311-4312-af2d-39abd62ea8c0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94285192-87d4-46ef-a7aa-98d24d535a7a", "sighting_of_ref": "indicator--b6f2c412-9311-4312-af2d-39abd62ea8c0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c6f746-af64-44b6-8117-a39505bdcd72", "sighting_of_ref": "indicator--99b2afc3-f383-45ab-bfe3-142dba99d791", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8cfce6-9df8-4700-96cb-63770cc254ce", "sighting_of_ref": "indicator--99b2afc3-f383-45ab-bfe3-142dba99d791", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d282dee6-bfc0-4a33-aa88-2967779f2ac4", "sighting_of_ref": "indicator--b98d1454-1e6c-475e-9a79-1177e8243dbb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfdf5db-a26a-4391-ac5f-3ffeaa3eb3b3", "sighting_of_ref": "indicator--52f776cb-fa5a-45f2-a3f4-5f09c110d1d3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c21387e-b601-4267-9f78-cf09d41338ab", "sighting_of_ref": "indicator--76637859-c51a-4262-9fc0-509942d2dc03", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc310ce-f251-43e1-9856-8199cbd3bb7d", "sighting_of_ref": "indicator--76637859-c51a-4262-9fc0-509942d2dc03", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfab86d3-52ba-4d4e-ad57-62b417afc008", "sighting_of_ref": "indicator--0e968a6e-f16c-4a67-8e50-cf17df1d4cd7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a30ff6-4b1b-430b-8c31-6b3bb2033d36", "sighting_of_ref": "indicator--0e968a6e-f16c-4a67-8e50-cf17df1d4cd7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e41f175-92bc-48c4-8cb4-eb823ad4677d", "sighting_of_ref": "indicator--767654f9-e0fd-4d8a-992a-69f23586b23c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380cdd95-e9a6-4f03-a4d0-da81b12ca95b", "sighting_of_ref": "indicator--767654f9-e0fd-4d8a-992a-69f23586b23c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876e1b3b-11a2-4a45-85c6-86035148b31a", "sighting_of_ref": "indicator--2fc4fef7-4a0e-412e-8333-c8c439f00051", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27d05fe-71c0-4c25-afdd-5344b2888910", "sighting_of_ref": "indicator--e2149b04-0866-46ed-8375-adf3233129a7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53b24bb-8f60-4e4e-be85-82a38e3aeb72", "sighting_of_ref": "indicator--e2149b04-0866-46ed-8375-adf3233129a7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fa8e8d-bd2a-41ae-bdcf-d0d2dad74aa8", "sighting_of_ref": "indicator--e2149b04-0866-46ed-8375-adf3233129a7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d3e31f-585b-4f47-aab6-7322d50ed67d", "sighting_of_ref": "indicator--903a8294-241d-41bb-ae8c-4dc2fb7a1fc9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59afd70f-ef5b-4ccb-8736-d71ce8b4aef5", "sighting_of_ref": "indicator--eb2a545d-c30c-4027-8e0f-a83bbb17f71a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c04e23e-b548-46f9-aa7f-79ac630f53a5", "sighting_of_ref": "indicator--eb2a545d-c30c-4027-8e0f-a83bbb17f71a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325c7971-8764-43e9-b9d6-3eb38dacfeec", "sighting_of_ref": "indicator--b1b28014-50ed-48a2-b54f-65ed8bfd7b4b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3491fa8a-8d7f-4ea4-8439-535cd98454d7", "sighting_of_ref": "indicator--075c5386-6f81-409b-ad6b-82c74138502c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1720cd98-21ec-490f-9ca5-26e57a68502e", "sighting_of_ref": "indicator--c81c623c-07a3-449e-bb97-a5c50d5b7318", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ea8d93-c505-41c0-a5c6-33e6db710f44", "sighting_of_ref": "indicator--3a65283d-66ea-4696-a959-ef31b83a8ed5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58ab774-3b39-4980-b336-793507ae2b03", "sighting_of_ref": "indicator--9be4c60d-9553-4fb4-83df-e498f6b883bf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603ad48e-c338-44c3-87ac-b3962fcd7792", "sighting_of_ref": "indicator--7d1aff58-6999-4eb3-8c78-40c7fdb987da", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e36e93-c98d-44c8-8d1a-d09e8d254c09", "sighting_of_ref": "indicator--7d1aff58-6999-4eb3-8c78-40c7fdb987da", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91dafb9d-6bf2-4dca-9aff-313f8862ea57", "sighting_of_ref": "indicator--8f593825-a3cb-4483-a4e4-d3c3871d8446", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d3b597-90ed-477b-b355-8d633c44b917", "sighting_of_ref": "indicator--8f593825-a3cb-4483-a4e4-d3c3871d8446", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc1b65f-4e4d-4312-a47c-018ea9705413", "sighting_of_ref": "indicator--d30d8e6b-8b34-4297-b87b-00b0828e9209", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de116969-92cc-42e1-81d6-87ccb6194ff0", "sighting_of_ref": "indicator--d30d8e6b-8b34-4297-b87b-00b0828e9209", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e31b577-81d3-4ebe-993b-7704db1c2c51", "sighting_of_ref": "indicator--af0cf8e4-943b-43a3-a513-2c581106d956", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365786e4-8f85-43fd-a763-ac1328f1b7e3", "sighting_of_ref": "indicator--2123699b-6747-4cff-8dc6-9d5089239f0a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743133fe-f1c5-4f74-8b19-22e217eeb92a", "sighting_of_ref": "indicator--2123699b-6747-4cff-8dc6-9d5089239f0a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde2ee0e-4308-41d1-bbcd-07aceb045241", "sighting_of_ref": "indicator--bb8008d5-4336-41a4-a8ab-680d3d9c249e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aeb7997-ed8f-4957-935a-1d796a910ec0", "sighting_of_ref": "indicator--da44e16a-f0f5-40d2-9070-45879d7c497b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa1626d-8e9b-4dfb-b159-71ac4cf3f282", "sighting_of_ref": "indicator--da44e16a-f0f5-40d2-9070-45879d7c497b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44b00a5-d655-4e47-8dc5-fa7f8d162397", "sighting_of_ref": "indicator--99090df7-8828-45a0-afdf-b6b2421d3e21", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c39af27-be75-4563-be60-4f6fc9c4901c", "sighting_of_ref": "indicator--c7079b1b-dbd9-444e-8a64-c6fab115462a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358aaeca-2e11-4ed1-9e64-a52ac5d728d8", "sighting_of_ref": "indicator--c7079b1b-dbd9-444e-8a64-c6fab115462a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf41ab1-7af3-4f90-902d-3ebd5abe3e3f", "sighting_of_ref": "indicator--385788b6-ae65-4048-bba3-2f86d841e61e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e8504d-721a-40e2-a168-5d248491df95", "sighting_of_ref": "indicator--385788b6-ae65-4048-bba3-2f86d841e61e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85ad6ac-268d-49e0-b475-57ab507ac883", "sighting_of_ref": "indicator--6d83b379-14af-4d1f-a55f-db45813f1171", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2774ec80-9ea1-43f4-97be-c741c9b198b9", "sighting_of_ref": "indicator--6d83b379-14af-4d1f-a55f-db45813f1171", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462a3c49-9981-4d6f-a106-bb765617af37", "sighting_of_ref": "indicator--8994d39a-90b6-4dd6-b26c-6345606215ec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d04e5b-9076-4c2b-849c-afc7a5d5ef99", "sighting_of_ref": "indicator--51b1f28d-fa90-40b5-a62b-4db68dea7c22", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0f92b0-1ac4-467c-b149-133e5d510fe1", "sighting_of_ref": "indicator--aa766a2c-85d6-4591-9d7e-2a82c1c57241", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36d12a2-ec46-4764-9086-b015caa14f70", "sighting_of_ref": "indicator--303457cd-b620-4b46-826d-17ce84ecdcc2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4974b9c-02cf-4abf-86fd-fccb03745326", "sighting_of_ref": "indicator--7e98e730-b66b-4f30-935a-c5ee4ad29c26", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb716fa-0d3e-48b3-97bf-1f5d22cd41b5", "sighting_of_ref": "indicator--7e98e730-b66b-4f30-935a-c5ee4ad29c26", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d86d92-a6b0-47b8-b318-5c4b5f55963f", "sighting_of_ref": "indicator--7e98e730-b66b-4f30-935a-c5ee4ad29c26", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495ec48c-6eb2-4298-8901-02f5b68c911f", "sighting_of_ref": "indicator--d55bcbaf-f644-436d-b3b3-f9d8349880d6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7309419b-39a1-4ce7-b7f6-2f9e0e6f2121", "sighting_of_ref": "indicator--dbee3fe3-b0d7-45e3-be3a-30aca812d9ff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a41c0c-095e-4b25-8167-8beaea07857e", "sighting_of_ref": "indicator--dbee3fe3-b0d7-45e3-be3a-30aca812d9ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca04283-8977-4d7b-9d09-f641b62337be", "sighting_of_ref": "indicator--d00cf587-d0da-497d-b147-cc3a75234930", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de98e8a-f70d-40d8-a682-635f0873fb29", "sighting_of_ref": "indicator--fdddf504-bfe0-4c61-8e9d-14d55816f5af", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120e2bd5-9fea-44da-9887-d61f0c418327", "sighting_of_ref": "indicator--a46e04cb-8cae-4321-9ff0-9db8a95b4293", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f870c8-d9d1-4390-9046-79b28c45dd44", "sighting_of_ref": "indicator--a46e04cb-8cae-4321-9ff0-9db8a95b4293", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe76825-23f9-46c9-8322-22536fce399d", "sighting_of_ref": "indicator--d102cb6e-7c35-4812-b60d-261e4325ec62", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215b25b8-cf90-43be-945a-e9bfe8212e64", "sighting_of_ref": "indicator--d102cb6e-7c35-4812-b60d-261e4325ec62", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14dd3a54-c835-409f-9ab2-118e5bb3a373", "sighting_of_ref": "indicator--79e9f635-7ac7-467b-8f8e-b0836864a8c2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddabd59-7e66-4bbb-8149-a39d43f4719b", "sighting_of_ref": "indicator--c45e2f23-f0ae-411c-8ea6-5275e78db21f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856c4477-a861-4098-b878-e45a1906eee9", "sighting_of_ref": "indicator--c45e2f23-f0ae-411c-8ea6-5275e78db21f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b88813b-ba49-49c7-b1e9-86ac45e6d3d7", "sighting_of_ref": "indicator--2b896b75-5f84-4142-bab4-55a3b58e5d0e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f465966e-075b-45fc-9bbf-433429a43d11", "sighting_of_ref": "indicator--2b896b75-5f84-4142-bab4-55a3b58e5d0e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe5eec2-3615-466c-94e5-56f234a41dfd", "sighting_of_ref": "indicator--dac13020-e282-4599-b3a7-972d28c76fb1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ff8a8e-23d2-4e9a-aa3b-4684be529af7", "sighting_of_ref": "indicator--fdc495a1-11af-4b5f-b55b-54a7b8f02d2e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f95c00-e420-455a-902f-d7de865257a4", "sighting_of_ref": "indicator--fdc495a1-11af-4b5f-b55b-54a7b8f02d2e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40063833-434f-4ee7-a1b0-1f29d7efd44c", "sighting_of_ref": "indicator--5b791698-2d2e-4563-a855-bda9f4a8e1dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d4e6fd-57b5-4eea-ba25-3c4312aa18ca", "sighting_of_ref": "indicator--5b791698-2d2e-4563-a855-bda9f4a8e1dc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd45155-86c5-4654-b24c-beab03d5532f", "sighting_of_ref": "indicator--5b791698-2d2e-4563-a855-bda9f4a8e1dc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021611aa-723c-4d04-a682-0a0aa4a0fc2c", "sighting_of_ref": "indicator--d81da9e4-0d44-4838-ae26-574f52f592c9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3697f9d0-fb81-4fdd-99ea-0f7d997cd8d6", "sighting_of_ref": "indicator--92efa23d-b393-45d0-8238-d3a4d24a9ae9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e382e8d-16f8-4eea-8e37-85a01681ebda", "sighting_of_ref": "indicator--43fd8cca-98e0-4a3b-ac18-07b668f27d98", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebccf7b-2989-41d6-babc-03ffbbf19f9c", "sighting_of_ref": "indicator--43fd8cca-98e0-4a3b-ac18-07b668f27d98", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5544f6-befa-40e3-9ad7-24b37f2fc36e", "sighting_of_ref": "indicator--c54368df-12a2-4a3b-b72d-6fd8bdd475f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35974bf-32f3-4114-976c-eeaef10202d0", "sighting_of_ref": "indicator--c54368df-12a2-4a3b-b72d-6fd8bdd475f2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bc0b19-1b87-4aff-b972-fc07f5952af2", "sighting_of_ref": "indicator--c819c2b9-ba1b-4085-b242-3b8adc2808c0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc80b32-d23b-46ce-904e-56bf76d60727", "sighting_of_ref": "indicator--dd21eb2d-1eb1-4187-b849-2d4f3cbedaa9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2afb5d-1b48-4994-95e7-778ff4dc35dd", "sighting_of_ref": "indicator--2b8d815c-0da3-4055-acea-8d18f1be8e04", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fab725c-8b28-4df4-a0ba-211b7868ea42", "sighting_of_ref": "indicator--2b8d815c-0da3-4055-acea-8d18f1be8e04", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7914496f-6cfa-44c2-82f9-ceb228a95b77", "sighting_of_ref": "indicator--d65754ad-0d88-4fa8-bff8-c78fc421c78b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594bd0b1-5bb5-4ee2-9f13-b624d6a21254", "sighting_of_ref": "indicator--d65754ad-0d88-4fa8-bff8-c78fc421c78b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76aed593-4066-49c6-95a4-e11a92bd8cea", "sighting_of_ref": "indicator--d65754ad-0d88-4fa8-bff8-c78fc421c78b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cde6d22-9218-44c8-88f3-354120540756", "sighting_of_ref": "indicator--b6240a2d-9216-4826-bd58-da04b274d13e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db79338-b3a7-4de3-bf49-637a9e7b4b3e", "sighting_of_ref": "indicator--b6240a2d-9216-4826-bd58-da04b274d13e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f7e2dc-2a3a-4112-b98e-58ca4dc2c07f", "sighting_of_ref": "indicator--b6240a2d-9216-4826-bd58-da04b274d13e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277e40f4-4a84-4eaa-967b-ad78098e5917", "sighting_of_ref": "indicator--d556ca9d-8d7c-4fcc-9435-3891494da04e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66f214d-25d7-4e19-a39e-4cb96bcb3935", "sighting_of_ref": "indicator--ad1d9940-53b1-4d9e-baea-7d49470b81cd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a74be9-e68a-4433-80dd-7b4c40075bbf", "sighting_of_ref": "indicator--ad1d9940-53b1-4d9e-baea-7d49470b81cd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7567c247-4592-4d90-977e-1fb8d4766bbf", "sighting_of_ref": "indicator--dab26a10-aaa7-4946-b75a-f7269fed1bc1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376feb97-5b43-4063-bbce-cdb55e8c4496", "sighting_of_ref": "indicator--071e9e43-522b-46e6-9dca-382f7c3148b6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40d3d3b-fd36-48cc-9799-9e53b403daa7", "sighting_of_ref": "indicator--b4913d06-970d-402c-8118-ca6a34717ae2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdf9226-c8de-4b98-8e89-098a43d4b9b6", "sighting_of_ref": "indicator--b4913d06-970d-402c-8118-ca6a34717ae2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448f357c-1fa7-4968-be14-80d2cfeb85c6", "sighting_of_ref": "indicator--b4913d06-970d-402c-8118-ca6a34717ae2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2352d0d7-0684-4120-ad2f-dd525ecae6bb", "sighting_of_ref": "indicator--5f6dc904-53dc-4127-9c86-daf341057b4f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f6d2ec-c447-487a-826f-c4f10d690f63", "sighting_of_ref": "indicator--5f6dc904-53dc-4127-9c86-daf341057b4f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bc68c1-ad15-4eb0-85ff-9878df721fdd", "sighting_of_ref": "indicator--94d55bab-fbaf-4d96-b3db-38edf10104a3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7f05ee-a854-408a-973c-51bc7314b199", "sighting_of_ref": "indicator--27156dca-200d-461e-8b8e-efd4d9709ad3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39448ead-3d20-43d1-863d-b60e5c6cdd75", "sighting_of_ref": "indicator--27156dca-200d-461e-8b8e-efd4d9709ad3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c4fcb3-7a2c-496e-b78f-a390ddb294dc", "sighting_of_ref": "indicator--b44dd2ae-5696-4921-87e8-fc55e872d927", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c1cc1f-766c-4d5d-9155-9fd24a258aa4", "sighting_of_ref": "indicator--b44dd2ae-5696-4921-87e8-fc55e872d927", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266ab48f-1e33-4b2b-87db-8599fee7b0de", "sighting_of_ref": "indicator--b44dd2ae-5696-4921-87e8-fc55e872d927", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a367d495-167a-45e5-aa88-5470473358ec", "sighting_of_ref": "indicator--029a5177-8845-432f-b892-39a88d62f6c5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d23faf7-83b1-4a01-8021-24984384240d", "sighting_of_ref": "indicator--029a5177-8845-432f-b892-39a88d62f6c5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480e9a84-bd2e-4002-9b27-496da54113fd", "sighting_of_ref": "indicator--f24a9e1d-96e5-49d7-9dc4-38a74c76940b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95e7b2e-e9e9-4c6e-9f5c-99deeb6dbf71", "sighting_of_ref": "indicator--c6e3ca9b-8074-467e-b87e-b69f608eee40", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f66fe4-67e9-4045-a5af-f4793139c0cf", "sighting_of_ref": "indicator--ab6ff58b-308f-40e1-9f77-d623fbc50a58", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fc3a5b-489f-4eb5-8d18-eb29b5c8fa9a", "sighting_of_ref": "indicator--9be6eead-5844-453d-b2d3-380ca3612765", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca94e9e-420e-4bac-bdc1-985a8ba1ba4d", "sighting_of_ref": "indicator--dd700efb-7668-49d7-9256-554e500ad5f3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb198fb4-c365-4a9c-8e55-036f50ffa0e4", "sighting_of_ref": "indicator--dd700efb-7668-49d7-9256-554e500ad5f3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f7db34-7d70-4bfc-ae82-c0f700d94d0e", "sighting_of_ref": "indicator--0553671e-7c53-4e85-a014-903b9e6e5468", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7e3503-ca0f-4dec-8536-72020c028eca", "sighting_of_ref": "indicator--0553671e-7c53-4e85-a014-903b9e6e5468", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9499089d-ce0a-48f5-90f6-93d20f0ed6cd", "sighting_of_ref": "indicator--0553671e-7c53-4e85-a014-903b9e6e5468", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f0d259-2301-43d7-92ee-442d4b08494e", "sighting_of_ref": "indicator--9d24e21b-0b59-4e79-ad23-ff0b91d6312c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f634d50-d2b2-4b03-a2b0-a7da5d524572", "sighting_of_ref": "indicator--9d24e21b-0b59-4e79-ad23-ff0b91d6312c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf6711e-c5ec-4646-94b2-b66bdef08cc9", "sighting_of_ref": "indicator--37dfe11b-c1c3-4610-86bf-c71464bd1d21", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07a9fa8-6d26-4c9d-bba6-be80807365ec", "sighting_of_ref": "indicator--486f3a3b-54c5-4188-9377-078bb5bfe732", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92fa24fe-051c-4352-b0c8-076c0c1ef6ec", "sighting_of_ref": "indicator--486f3a3b-54c5-4188-9377-078bb5bfe732", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86245857-4b60-478d-9bdb-cd91f96b927d", "sighting_of_ref": "indicator--486f3a3b-54c5-4188-9377-078bb5bfe732", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb36f25f-ab64-4518-9d68-355c933fc0e7", "sighting_of_ref": "indicator--86bcaad0-2bb8-46dc-b6fb-057c402bc58b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90130cf-ad96-4ed1-85fa-20309a384286", "sighting_of_ref": "indicator--638916ee-12d0-4f47-850c-60bf7bef69ac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38821db0-978e-4b2f-a7f2-29b71b082851", "sighting_of_ref": "indicator--81e3be9b-473c-492f-9ad2-c99b352ca89d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71e9afd-0dc3-4aa6-8ffa-487e964d2698", "sighting_of_ref": "indicator--81e3be9b-473c-492f-9ad2-c99b352ca89d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2c8301-f01b-4402-a87b-73a3c7d78b81", "sighting_of_ref": "indicator--984ac009-289e-4840-a62f-0d3b72bd5fa1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340be338-4442-4d21-a0e1-ad3731d051b7", "sighting_of_ref": "indicator--984ac009-289e-4840-a62f-0d3b72bd5fa1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6038ab9b-3322-450f-9197-112ffbfe594e", "sighting_of_ref": "indicator--f913d6e5-e654-4679-b374-3dba0fe6a54a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba966e4-69f0-46cf-bc35-871656e4940e", "sighting_of_ref": "indicator--f913d6e5-e654-4679-b374-3dba0fe6a54a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866a7b79-b1be-42b8-8198-a04b107f5dcd", "sighting_of_ref": "indicator--f913d6e5-e654-4679-b374-3dba0fe6a54a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8025198d-a90c-45f3-8afb-0132546adc24", "sighting_of_ref": "indicator--3ac34929-2539-4621-997e-a1f2e63928d2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31dbb13c-4826-420b-9427-5cd8431dfedb", "sighting_of_ref": "indicator--3ac34929-2539-4621-997e-a1f2e63928d2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c262f74-4b47-457f-acab-e5280ca04d9f", "sighting_of_ref": "indicator--9c5db5a8-abdf-441c-b8a4-16f3b19cdc02", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1553798b-cdac-4301-9c45-c513840a33ee", "sighting_of_ref": "indicator--599c6168-357b-49c2-9943-92f9d930985c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b17c796-7218-4f9e-a3bb-722424cd806e", "sighting_of_ref": "indicator--23c081ab-8e3e-4451-92a5-cd1a3447b3a9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b749dba9-0c90-4663-bc13-eb4a94e14f81", "sighting_of_ref": "indicator--23c081ab-8e3e-4451-92a5-cd1a3447b3a9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181dd699-aacf-452a-9ff7-563b8c1ae755", "sighting_of_ref": "indicator--eddd0580-a218-46e7-a942-0b2abce4206d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cbe221-34e7-4083-ac4b-6e2cd8ae0762", "sighting_of_ref": "indicator--05daf83d-c527-47d2-89f1-05ecd6922074", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514c3433-f145-4ec1-b4b2-0d7a0db2a4a1", "sighting_of_ref": "indicator--7b329b4e-a92c-400a-8177-2ca2d88b05f6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d4674e-0727-4173-ab7d-7847552b88ea", "sighting_of_ref": "indicator--7b329b4e-a92c-400a-8177-2ca2d88b05f6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343885c7-ff1b-4baf-8f87-face38d48f08", "sighting_of_ref": "indicator--f4a3fa97-0b76-4b8b-99a0-0de6580b35a9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e3b52b-ceef-4177-9865-66b4f7c32e91", "sighting_of_ref": "indicator--474e62e8-074c-43de-9f35-f9a0b110deea", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90935b4-5322-4265-896e-135291185d0e", "sighting_of_ref": "indicator--7a45041f-d89a-4d1c-89c2-d96a4e82a726", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1ed0e7-539c-427b-96b7-fb87c0459f17", "sighting_of_ref": "indicator--21995e5a-801c-40f4-8fd7-03af8948ece3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a55bba-18dd-4099-97dc-74d1dbffbc16", "sighting_of_ref": "indicator--21995e5a-801c-40f4-8fd7-03af8948ece3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93204f39-5444-4c28-9a28-72425ba40dcc", "sighting_of_ref": "indicator--1056ea2e-4574-4e17-892f-c4ee2b318549", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0c4253-625b-451a-9202-e24c513d4ffb", "sighting_of_ref": "indicator--8596a2d8-f90c-4ee7-a30a-4e2dda649ec6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e69ad0-e86b-4c13-b7a3-3c91c37524f6", "sighting_of_ref": "indicator--8596a2d8-f90c-4ee7-a30a-4e2dda649ec6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2c1629-f80f-4921-8049-5b7f5857a396", "sighting_of_ref": "indicator--2490e8e7-3306-4826-a437-deed417b2f26", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647d27ee-3a04-4ca5-b591-f9bf7f42c62c", "sighting_of_ref": "indicator--2490e8e7-3306-4826-a437-deed417b2f26", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a29c1a-1c69-4c05-8403-9eef48eb7377", "sighting_of_ref": "indicator--51134bca-3e61-4ed8-a295-e114fa6373a2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5e24cc-6c6e-47f9-9a33-e5adaf2af36a", "sighting_of_ref": "indicator--51134bca-3e61-4ed8-a295-e114fa6373a2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2340b433-4a2a-4e94-9042-91fe0c1a139c", "sighting_of_ref": "indicator--4f4a28d4-5385-48dd-b614-7cdeb80a8d84", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d078285-d104-459f-9eae-a33de16019b2", "sighting_of_ref": "indicator--b4622add-a23a-4d0c-9c68-024051b49934", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44682c03-9b03-473b-be34-161c8f95a511", "sighting_of_ref": "indicator--b4622add-a23a-4d0c-9c68-024051b49934", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76b7b40-739e-43ca-9988-3b7b10649312", "sighting_of_ref": "indicator--c020e5a5-22a1-4b97-91d8-50c73918245d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a591456-9fb3-450c-83be-21b6645adf75", "sighting_of_ref": "indicator--c020e5a5-22a1-4b97-91d8-50c73918245d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7bef2ec-7b6b-4f60-9d31-74c8190d1e3a", "sighting_of_ref": "indicator--ba7e5092-45cf-4207-a47f-9019815b0204", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9593dadc-f334-4645-b28d-6751987c2b67", "sighting_of_ref": "indicator--5e192f0e-d88e-448a-963d-19aff6d1be81", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56aa714e-0544-4d66-aeb5-75083ed43382", "sighting_of_ref": "indicator--5e192f0e-d88e-448a-963d-19aff6d1be81", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c845d25a-32b8-4a63-9667-0884fdb7690d", "sighting_of_ref": "indicator--e974aa4b-c298-46ea-99ea-2b0eb8649b56", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdb8e0f-a10a-4fc1-859b-1566497ee45b", "sighting_of_ref": "indicator--e974aa4b-c298-46ea-99ea-2b0eb8649b56", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aac7d3e-7610-4789-b9c5-33257a30cde2", "sighting_of_ref": "indicator--e974aa4b-c298-46ea-99ea-2b0eb8649b56", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858593f0-bc51-413f-a83e-b9bf13f0d3e9", "sighting_of_ref": "indicator--07cbb235-8d30-4cb7-9528-b52be0ba523f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8ef01d-b60d-4085-a175-399100bab3d2", "sighting_of_ref": "indicator--07cbb235-8d30-4cb7-9528-b52be0ba523f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3114659a-f08a-45a0-bda0-491b00ac0bad", "sighting_of_ref": "indicator--3cbd272a-ab72-47d2-a908-e6993aa662ec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f998e88-5848-4e91-bb41-94366dced22d", "sighting_of_ref": "indicator--337a8508-c6ed-4dfb-9d97-6f3a8aa84a2e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87b5c25-410f-4327-b578-6b86d181ca84", "sighting_of_ref": "indicator--337a8508-c6ed-4dfb-9d97-6f3a8aa84a2e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b995c184-1b60-4fdf-a7b4-8458b820f994", "sighting_of_ref": "indicator--337a8508-c6ed-4dfb-9d97-6f3a8aa84a2e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ef7ae2-13db-4ed2-a925-e9e049028487", "sighting_of_ref": "indicator--1bb6566b-972f-424f-9a7a-ec7a1e5a1d96", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bad581-6d34-4e27-bf73-2e5d3fae9ec9", "sighting_of_ref": "indicator--1bb6566b-972f-424f-9a7a-ec7a1e5a1d96", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742202a9-dee5-40c3-a5d7-ea5c3b579495", "sighting_of_ref": "indicator--bbc00550-4f6b-4a90-8ae6-173a8d55f05a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19190d5-c376-41a8-9de9-e223a478ea50", "sighting_of_ref": "indicator--bbc00550-4f6b-4a90-8ae6-173a8d55f05a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844785cf-88a4-46fd-b6b2-31aa51965196", "sighting_of_ref": "indicator--e4dec201-0402-4c4c-bb4d-c561c94e6ad9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a418fee9-871d-45c0-9005-23fe9f3095fe", "sighting_of_ref": "indicator--e4dec201-0402-4c4c-bb4d-c561c94e6ad9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53e3b53-e45f-4c28-88b3-6663e1220a42", "sighting_of_ref": "indicator--840fcc15-6d7e-46a3-b8af-6de780914528", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288f3ec9-24ba-4f72-9536-97d655369c2e", "sighting_of_ref": "indicator--8bd685d7-cf98-4ca4-8758-99bba00d3964", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27be2b56-d3ab-4e6d-9feb-6c747da49ef1", "sighting_of_ref": "indicator--d3e9744d-f1b5-4372-bfb5-b230c872d127", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11c3fe8-929b-439f-a5c3-29b2deebcbbd", "sighting_of_ref": "indicator--d3e9744d-f1b5-4372-bfb5-b230c872d127", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cae4d52-10a8-47e7-82f5-b02584baf179", "sighting_of_ref": "indicator--d3e9744d-f1b5-4372-bfb5-b230c872d127", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acffa257-524b-4f18-b61f-de20b45693db", "sighting_of_ref": "indicator--c24902d8-7bb6-4111-bafe-43a3b5196985", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc846d4-9e44-49d8-a4f3-67b110ad0868", "sighting_of_ref": "indicator--873b1ef0-5e37-461f-9de9-64559cf1f311", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4aeca7-1d99-4585-b0be-7e3404bd7430", "sighting_of_ref": "indicator--873b1ef0-5e37-461f-9de9-64559cf1f311", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10860ad1-f134-4f0b-a946-324293248c99", "sighting_of_ref": "indicator--93fe25da-122a-4fe0-832f-1aacb881819d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96ed838-23e3-4ce9-a005-9aca0381f394", "sighting_of_ref": "indicator--93fe25da-122a-4fe0-832f-1aacb881819d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a709a7e-b619-48d5-b354-7d29d4761d0d", "sighting_of_ref": "indicator--c3d2bfbb-f369-49db-92df-7e79f57c6aed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e5f4c2-9319-4b15-bb5b-539a23d4a879", "sighting_of_ref": "indicator--1bcb1ec9-ede7-4882-b2e3-477f31c7b361", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3607f5a4-7adc-4334-b6b4-cdb64a439a76", "sighting_of_ref": "indicator--8c953a50-4303-4d96-a465-c646174119b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcd524b-638f-4a36-ab1d-abdf5a800f4b", "sighting_of_ref": "indicator--8c953a50-4303-4d96-a465-c646174119b3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3c80dc-6e8f-49ef-820c-d75cac349469", "sighting_of_ref": "indicator--8c953a50-4303-4d96-a465-c646174119b3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbeb1ba9-4a1e-4cbf-8293-8047f1b7a945", "sighting_of_ref": "indicator--29ad4779-fb0d-4ebc-a479-eade52a45cc5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d519724c-9e71-4672-89d5-70c043148c3c", "sighting_of_ref": "indicator--29ad4779-fb0d-4ebc-a479-eade52a45cc5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81be10e-adb5-43e5-9eb4-504da32a5026", "sighting_of_ref": "indicator--4fe9c7f0-f4ea-4107-806c-a09f96762e91", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61d6237-7a94-42d9-b4f0-fc460cb7eddb", "sighting_of_ref": "indicator--3c01ebbf-ed6f-4624-a3ff-78de27b0a392", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346410d3-ea8a-4a54-91e3-34ea213cbef7", "sighting_of_ref": "indicator--3c01ebbf-ed6f-4624-a3ff-78de27b0a392", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6420795f-defa-46b9-931f-fbdfeebac3be", "sighting_of_ref": "indicator--7cb2259f-334a-46b9-aabb-da3f7a4a546c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52efb64a-12ad-4a4a-be5a-a85bcceba7a9", "sighting_of_ref": "indicator--7cb2259f-334a-46b9-aabb-da3f7a4a546c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a43303-5b63-4e86-a250-13ab4e6a3773", "sighting_of_ref": "indicator--8a146e9c-7090-4a63-a4c2-b0d02daf2da7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05bcabd-78f3-4919-ac6a-ba34a26cfa2d", "sighting_of_ref": "indicator--2866f15d-ffc8-40f5-8670-334c99562ce5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c34827-b368-42be-89a7-7bbc40bf1e35", "sighting_of_ref": "indicator--2866f15d-ffc8-40f5-8670-334c99562ce5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c4290c-b4d1-46ac-9f55-11fb6a06855e", "sighting_of_ref": "indicator--4428b3db-72ac-4509-8892-10741e541983", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b74636e-6bce-46e5-9670-ef6bccc4a794", "sighting_of_ref": "indicator--4428b3db-72ac-4509-8892-10741e541983", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe59842-a85e-4625-8730-27d1f4f34b29", "sighting_of_ref": "indicator--c5474b8e-b849-4abf-bf63-e35ed3ea483b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadfe532-25f7-42e6-8e2a-a1a9680fd6c7", "sighting_of_ref": "indicator--b1275611-e1d0-4636-ae19-83df8ad05b3c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02758513-8605-4ebd-a4d3-c6111cfa8e43", "sighting_of_ref": "indicator--b1275611-e1d0-4636-ae19-83df8ad05b3c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b676e85f-ecd7-42b8-9660-ac416387f16e", "sighting_of_ref": "indicator--4991d5a9-6727-4e5c-9a9e-ba64123a896f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0e616c-659e-4cfc-826b-ae2fcd718646", "sighting_of_ref": "indicator--4991d5a9-6727-4e5c-9a9e-ba64123a896f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d72e380-bec0-492c-8308-8c2184175051", "sighting_of_ref": "indicator--95ec46ad-0d1c-48a0-bd09-7e344831f3b9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2ce355-a8a0-45ba-8162-31b87d1c9f6b", "sighting_of_ref": "indicator--3c5ad4fd-af0f-4653-9d00-d15643d92988", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbc6829-347f-4ada-8fa0-115cc247b0a8", "sighting_of_ref": "indicator--3c5ad4fd-af0f-4653-9d00-d15643d92988", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23503774-cb91-42b6-9149-58e768a69154", "sighting_of_ref": "indicator--8f8e9b7c-cf99-422e-8b9d-5205e462c9d7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5e31b4-e6e2-4afb-90d9-1e3ebe5b74f8", "sighting_of_ref": "indicator--8f8e9b7c-cf99-422e-8b9d-5205e462c9d7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ad1d01-1208-4bfb-959e-f485f2092ad5", "sighting_of_ref": "indicator--405a153c-2977-4797-82ff-1469c8c7bacd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bd0c90-98df-49c8-acf6-a1c6d95a72eb", "sighting_of_ref": "indicator--7d2a7a2e-b674-4cca-9e8c-ba1c4decc7c0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5f86bd-c443-46bf-87ac-bc9bab03b02a", "sighting_of_ref": "indicator--7d2a7a2e-b674-4cca-9e8c-ba1c4decc7c0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef56de94-02cf-49d7-9c7d-7f9cb59e1a1e", "sighting_of_ref": "indicator--a0e106b2-6668-4a6d-b97d-4587b946da0a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1293444c-ac5b-41f7-84a8-f21d4f595238", "sighting_of_ref": "indicator--a0e106b2-6668-4a6d-b97d-4587b946da0a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bd42c7-a0d3-4c38-8cfe-0c8f5adc47c8", "sighting_of_ref": "indicator--a0e106b2-6668-4a6d-b97d-4587b946da0a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7932ba3-d0dd-4180-a8eb-05ea65daf3e9", "sighting_of_ref": "indicator--db0c1282-d711-4cac-b4b1-dffa1dfdba60", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2ec4ad-43bf-4d38-b4e3-8bcfa3f8fee4", "sighting_of_ref": "indicator--db0c1282-d711-4cac-b4b1-dffa1dfdba60", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de745764-3ef9-42c1-bbe8-be08c1234f68", "sighting_of_ref": "indicator--cdee9b14-e360-4150-a0b7-82134d80a759", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950f1ef6-8e68-4770-98a4-464c7c4505af", "sighting_of_ref": "indicator--cdee9b14-e360-4150-a0b7-82134d80a759", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970fab27-3b11-4033-a8f9-ed115574f2b9", "sighting_of_ref": "indicator--885667e0-0495-412c-a13d-30c9fae67d6e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f18c11-6c11-471a-ac29-1dd42acb6cf3", "sighting_of_ref": "indicator--88b9ab21-fbbb-474f-a128-e408d33d1002", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fae2d1-3f57-490b-95d7-79748b92aeda", "sighting_of_ref": "indicator--96b14f00-f577-4e4a-bd3c-aaa309b03c1c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d043fce4-9ea3-4c80-a671-06d75146cbef", "sighting_of_ref": "indicator--96b14f00-f577-4e4a-bd3c-aaa309b03c1c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9fce4d-40cc-40b9-b096-c34df1824a01", "sighting_of_ref": "indicator--d775a317-1373-451b-a5b3-66488946a96b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417817f9-0451-4fe6-b1ec-1f831dac888e", "sighting_of_ref": "indicator--d775a317-1373-451b-a5b3-66488946a96b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6da5ff-7427-40c2-81f4-3634334dddcd", "sighting_of_ref": "indicator--48ba5d7a-fc29-4d7d-8112-96106234737f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afc3931-c46e-40fc-98ae-558c04e7ba37", "sighting_of_ref": "indicator--d32856ac-c3a0-4d26-9c5a-a55730722108", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4751c8c4-5707-490b-8dd8-dff96ade3105", "sighting_of_ref": "indicator--e810272e-d94e-47d6-a16d-1ec927f0d923", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93c3b55-4d9f-4a23-87ad-28b436fa2155", "sighting_of_ref": "indicator--e810272e-d94e-47d6-a16d-1ec927f0d923", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf71c94-e930-4c31-9db3-f3571717946c", "sighting_of_ref": "indicator--89719161-07ff-42c4-9d07-b4684fbf7755", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431c6d31-16aa-4227-b117-e1056cfd0ed3", "sighting_of_ref": "indicator--89719161-07ff-42c4-9d07-b4684fbf7755", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894f9bc3-1aa0-413e-a98e-1df2b0b13db8", "sighting_of_ref": "indicator--b823ee95-7aef-4fc6-b273-c29575bca5f4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ea346b-6223-4ea4-a317-0b2880b6da1f", "sighting_of_ref": "indicator--b823ee95-7aef-4fc6-b273-c29575bca5f4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b19f5c-5171-4727-b78e-b2dcbf0766b9", "sighting_of_ref": "indicator--b823ee95-7aef-4fc6-b273-c29575bca5f4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068e269f-a05c-4c29-bfe4-11d5805b84c6", "sighting_of_ref": "indicator--4e681e9e-785e-4d5e-835f-bccc8c3e0e76", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa44dba5-aa48-41da-8d8b-44a0f743abde", "sighting_of_ref": "indicator--ef90c807-cf83-43d7-897f-db927b1b886f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d0283a-f531-4f08-ad79-8bc63691b75c", "sighting_of_ref": "indicator--aa72a471-6827-4d84-bfa7-4e84ac622fc8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03bf5e34-a579-42c9-80db-15d8a3f12e3c", "sighting_of_ref": "indicator--a506d748-237b-4dea-8cbe-ea1bdecc1cc2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcaa6728-a4c7-4d30-a9c9-f803a63b55eb", "sighting_of_ref": "indicator--a506d748-237b-4dea-8cbe-ea1bdecc1cc2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6168d659-121e-42d2-94a3-4b95fb7d32cc", "sighting_of_ref": "indicator--a506d748-237b-4dea-8cbe-ea1bdecc1cc2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9271e249-ac43-40c1-83be-02455a7ee651", "sighting_of_ref": "indicator--4327d42c-30ac-4aa4-b25b-693428e15d43", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb9b6d3-45ba-4fd3-9be0-9bfa14b49ae4", "sighting_of_ref": "indicator--4327d42c-30ac-4aa4-b25b-693428e15d43", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93afc53-aff1-4da9-b078-b7f5e62e3c08", "sighting_of_ref": "indicator--fe55e8eb-82e6-433d-b64c-50ed01de71e0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64c31a1-5e2e-494c-a043-8f14540b3bbf", "sighting_of_ref": "indicator--fe55e8eb-82e6-433d-b64c-50ed01de71e0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4b9ac6-bad5-454d-b733-2b7c04214f37", "sighting_of_ref": "indicator--0281e82b-e328-49f0-8f56-22c37a0c14bd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c87520-a088-46b2-ba3d-6d5a72f0e9a8", "sighting_of_ref": "indicator--fbf06283-d651-4e7c-a3fd-e1be7527135f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21200fba-11e3-4dd0-ba2c-d961d4ef37ae", "sighting_of_ref": "indicator--fbf06283-d651-4e7c-a3fd-e1be7527135f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18743af-fe7b-42ca-834f-2eb9e9686a2f", "sighting_of_ref": "indicator--ce413fb1-cef3-47c2-ac74-a14ac38ce9eb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53098ec7-a782-4864-a9c0-7c8160570f1b", "sighting_of_ref": "indicator--ce413fb1-cef3-47c2-ac74-a14ac38ce9eb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cc22e2-8ac2-4499-b425-833e52cb7739", "sighting_of_ref": "indicator--ce413fb1-cef3-47c2-ac74-a14ac38ce9eb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42a76a7-8c7f-4845-a7a9-76d2e19ba80f", "sighting_of_ref": "indicator--7662d5cd-7a92-41d2-8403-28010e85bcd8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d913a62-8c8d-481d-9abe-a8a70d6f1762", "sighting_of_ref": "indicator--4f8149e8-3e67-4a38-ba49-974bde7ab8cb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5834dece-fa3d-4d35-8f78-655b8c03ed97", "sighting_of_ref": "indicator--34da0c85-b0fc-4a09-8074-5c00dc172145", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd80b407-216c-458a-b2f6-08e29465d633", "sighting_of_ref": "indicator--34da0c85-b0fc-4a09-8074-5c00dc172145", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28d76ed-ae02-4703-b73b-b379b2fadcca", "sighting_of_ref": "indicator--34da0c85-b0fc-4a09-8074-5c00dc172145", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ec5051-9920-4cc7-aa0f-a1f9151145d6", "sighting_of_ref": "indicator--c2529813-66ab-4cc3-88df-60f0a5795941", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce75e76-7b5e-492e-9135-0c61324e2e0d", "sighting_of_ref": "indicator--49a3d51e-e8a3-4669-8d31-22c8711c0ba8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6177b9-9d78-4c3f-9ae3-a51c6484bd41", "sighting_of_ref": "indicator--49a3d51e-e8a3-4669-8d31-22c8711c0ba8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e899191-53d4-4092-91a5-d13f15fc4925", "sighting_of_ref": "indicator--39139b82-f24d-43ed-af73-1e618e84f1e7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122a185e-a5ce-45c8-aa7e-0e8613aba69b", "sighting_of_ref": "indicator--39139b82-f24d-43ed-af73-1e618e84f1e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1661efd-1dfd-447d-a2af-7b663a619584", "sighting_of_ref": "indicator--eb102ac4-b4b3-458d-8a97-7f0f87520436", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeff1f21-f0aa-4721-9070-9ef9a3a76f58", "sighting_of_ref": "indicator--0989c2f4-7ea4-46b5-9364-094e25ddd202", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4161ea85-7b8f-4ca2-90da-c106dd4ef39a", "sighting_of_ref": "indicator--0989c2f4-7ea4-46b5-9364-094e25ddd202", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24123803-cf51-48be-9f81-e544233d46ab", "sighting_of_ref": "indicator--df59f1de-c967-4fd0-883e-1e57f3c09f79", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0de045d-9aac-4d96-bd1a-7a78e06b6a82", "sighting_of_ref": "indicator--df59f1de-c967-4fd0-883e-1e57f3c09f79", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f41e11-9ee7-440f-865a-4874690ec0a1", "sighting_of_ref": "indicator--5e63a1ae-5ad7-4414-b90e-99557bca16c8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeaa4c5a-11d5-42da-8034-090c69bf94b6", "sighting_of_ref": "indicator--8953e37f-f2da-468c-a5d6-823e844f4341", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d061d25-bc75-49c9-a248-e7cae5412f57", "sighting_of_ref": "indicator--8953e37f-f2da-468c-a5d6-823e844f4341", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0353b5c-6936-443f-a9bb-35be387021f4", "sighting_of_ref": "indicator--dd196512-e144-4362-845f-2e0769504ecb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fbda06-1e50-4048-9401-f326f8d4b3f8", "sighting_of_ref": "indicator--dd196512-e144-4362-845f-2e0769504ecb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cc6aea-116e-44cc-9e1e-424269e00300", "sighting_of_ref": "indicator--ccba6d17-bf61-46bf-ae6f-4d9adcd690ed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d67c877-f314-4d55-874f-c4b00a478023", "sighting_of_ref": "indicator--ccba6d17-bf61-46bf-ae6f-4d9adcd690ed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee93645-3bef-4017-929d-0a2347621243", "sighting_of_ref": "indicator--9e345599-9628-4756-9681-2942832d946e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a53da13-bbf0-41dd-b5d3-7eea35cf5ad3", "sighting_of_ref": "indicator--4f88ad2f-774f-40de-9032-5addb093f6f0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2b8c6c-e432-4cdf-87a3-3d8bb744119e", "sighting_of_ref": "indicator--4f88ad2f-774f-40de-9032-5addb093f6f0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607625dd-12ef-4c4d-b1e6-7967eddac2e7", "sighting_of_ref": "indicator--26f45e34-c398-42dd-b490-82d5f2f015f5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756324d8-c8d0-464f-a62d-a91f83d693ec", "sighting_of_ref": "indicator--26f45e34-c398-42dd-b490-82d5f2f015f5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa46e132-57e0-4fbf-aab0-ef25862f5070", "sighting_of_ref": "indicator--adf54874-2893-4bf9-9c01-ddbb2fb45efe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb176993-e562-4383-84cc-d99fc214a412", "sighting_of_ref": "indicator--7d8344e7-d795-4aba-b754-ff062146a918", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626afb87-53f3-490d-a766-d6b94793cae6", "sighting_of_ref": "indicator--f2628158-ca03-4580-8a64-9ea987df6d68", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8ff72a-378a-46c8-9cdc-9141d4ff8d64", "sighting_of_ref": "indicator--f2628158-ca03-4580-8a64-9ea987df6d68", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb6fde3-e3d9-4fd6-815c-8ecdde722094", "sighting_of_ref": "indicator--a3c541d3-bed6-4257-acb9-a9417dcf43ab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3fa0ad-f5db-4aa3-b953-93464f55a366", "sighting_of_ref": "indicator--a3c541d3-bed6-4257-acb9-a9417dcf43ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b331fb71-ba4a-4676-9e81-ae239ef399a8", "sighting_of_ref": "indicator--a3c541d3-bed6-4257-acb9-a9417dcf43ab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4327b6-425e-4a40-8c9b-c36e2d6ce8f4", "sighting_of_ref": "indicator--30023a4a-11ba-45dd-872b-ce10fc55a9cb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad50055-9b86-4dfa-8568-1eaf65e4c3dc", "sighting_of_ref": "indicator--30023a4a-11ba-45dd-872b-ce10fc55a9cb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f08e0a8-0c63-403a-85ed-1dafda20337c", "sighting_of_ref": "indicator--b4e6422e-546f-4e53-b979-ff3c2c4ee27c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c515ff0c-d227-4bd7-973d-4f869667fd00", "sighting_of_ref": "indicator--b1bcd895-1a60-408b-95a2-0fee94da0075", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a741e2-d033-4196-9589-28af8cf0fb97", "sighting_of_ref": "indicator--b1bcd895-1a60-408b-95a2-0fee94da0075", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47b8e93-8d43-41c5-bcb4-570dfb7895e1", "sighting_of_ref": "indicator--b1bcd895-1a60-408b-95a2-0fee94da0075", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95061b51-1a4a-4548-8bf6-098598217df3", "sighting_of_ref": "indicator--e5c8a3a3-c5dd-4169-b594-c3bfb43f577f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a85de4-2df7-4bb9-b3bf-245af5723238", "sighting_of_ref": "indicator--e5c8a3a3-c5dd-4169-b594-c3bfb43f577f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a607cf-3a77-41cf-b1b2-f0bdb12fcc03", "sighting_of_ref": "indicator--91ece616-34a2-444b-877f-400f663f0a0d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9956db1-a867-49d2-acd9-693c11f10a5d", "sighting_of_ref": "indicator--91ece616-34a2-444b-877f-400f663f0a0d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6972a42d-41b9-4fc5-a52a-237342b0306e", "sighting_of_ref": "indicator--db12ee15-c1b0-4113-a788-856936196a8f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6defee20-725e-4277-b532-322c95eb38ac", "sighting_of_ref": "indicator--db12ee15-c1b0-4113-a788-856936196a8f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b600e7d3-d842-4892-addf-fdba843f47bc", "sighting_of_ref": "indicator--217bd8f1-00c8-4c1f-869a-32fac41e3062", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94fd91a-3968-43e1-a768-22c135e107d7", "sighting_of_ref": "indicator--217bd8f1-00c8-4c1f-869a-32fac41e3062", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6c2216-f014-4a87-a2a3-15aad79a286e", "sighting_of_ref": "indicator--cd942271-ff17-4c73-abf5-4ab96fd40066", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb2cf9e-5828-491e-a103-d27fe239ebf9", "sighting_of_ref": "indicator--f24651a2-efd3-4d6f-9691-378e25e33c65", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b798dbdb-ba4d-48ea-9ab8-08199041824c", "sighting_of_ref": "indicator--f24651a2-efd3-4d6f-9691-378e25e33c65", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7824c188-6db7-4e60-8311-7aa778644629", "sighting_of_ref": "indicator--252a58c9-654f-4df4-abf8-ee8a32d72d86", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec1b649-e0bf-4c1e-8648-92b274fc50eb", "sighting_of_ref": "indicator--ef573735-6629-4ed2-88da-c5117ecc108c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6162dc-2442-449b-be5c-d1b0eb8b30ed", "sighting_of_ref": "indicator--ef573735-6629-4ed2-88da-c5117ecc108c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bee15e0-80a2-4939-a3d5-e0eb6ae43c29", "sighting_of_ref": "indicator--ef573735-6629-4ed2-88da-c5117ecc108c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db797f80-ad6f-4334-921b-6a28af35ec22", "sighting_of_ref": "indicator--2d2ca180-64a6-4424-a280-4e63e82958bb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e7b1a7-2ef2-4cee-b432-c3b1f9b8c2dc", "sighting_of_ref": "indicator--c2933d0e-1b9a-4f95-9659-e2a546ea98d7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8628b114-2103-4724-b484-775213c9cbc3", "sighting_of_ref": "indicator--c2933d0e-1b9a-4f95-9659-e2a546ea98d7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6e7c34-4b8f-4bf2-8af0-a2d394bee29e", "sighting_of_ref": "indicator--66cc52e8-2d7a-46d8-9b51-bcdbd46ff375", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58160308-9168-4d4e-9112-35c870431731", "sighting_of_ref": "indicator--c9053734-9b36-494d-8f86-6491a128ceb4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd784b88-6659-40c9-9faa-5c32489f8968", "sighting_of_ref": "indicator--c9053734-9b36-494d-8f86-6491a128ceb4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f83e02-d2a2-4e40-a529-25654dbdec83", "sighting_of_ref": "indicator--ec85e9be-7084-4562-8430-82a55f33c07a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86c5357-3a37-4d90-a57c-34e8fd72d970", "sighting_of_ref": "indicator--ec85e9be-7084-4562-8430-82a55f33c07a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e96c06c-fe0d-40f2-89bf-3fae0ede8e2f", "sighting_of_ref": "indicator--ffcc9315-ff3a-4885-a526-88b846c9b0fc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de690fae-0886-4430-9ed2-f663674f34f3", "sighting_of_ref": "indicator--ffcc9315-ff3a-4885-a526-88b846c9b0fc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c473b0-2314-4b35-8898-bfd59a5c71b3", "sighting_of_ref": "indicator--86faa368-2e7a-4c7b-8dd5-e385799347ca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c208be-20e1-4a7b-a77e-e0e2c1e1bcbd", "sighting_of_ref": "indicator--86faa368-2e7a-4c7b-8dd5-e385799347ca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bd04a1-98ac-4c22-860f-da3244692cad", "sighting_of_ref": "indicator--a4ae0c1c-8642-4878-b080-1d373289caaa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb6363a-9403-4687-86c0-130320a54ee1", "sighting_of_ref": "indicator--7827e706-b6b2-4d65-abf4-e373c72d7f99", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cad01b-2487-4601-bc67-78fe88321a99", "sighting_of_ref": "indicator--7827e706-b6b2-4d65-abf4-e373c72d7f99", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1b3634-dc94-4059-bc4d-9ff9ac289ce9", "sighting_of_ref": "indicator--86d8cb0b-d0a9-40e1-950c-d60e216b4780", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b9987a-c4e7-434c-9817-a6566219fc2b", "sighting_of_ref": "indicator--86d8cb0b-d0a9-40e1-950c-d60e216b4780", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d37a44-39da-4dfb-bf30-6f6c7e6d2c6c", "sighting_of_ref": "indicator--e0d6a5c8-877f-48ea-8e3d-3a620537f99f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115a3c31-103c-407d-b739-1c9a4fa45482", "sighting_of_ref": "indicator--e0d6a5c8-877f-48ea-8e3d-3a620537f99f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f692fb3e-58ba-4ce8-91f4-6d86a48f97cf", "sighting_of_ref": "indicator--e0d6a5c8-877f-48ea-8e3d-3a620537f99f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d800faec-1479-47ad-8c5f-840b8133b9bc", "sighting_of_ref": "indicator--1615c511-6d51-430c-8607-b920c273b12c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03fb921b-4b6f-48e7-aee0-0a83674ecd9e", "sighting_of_ref": "indicator--904bb92c-d716-4bc2-8a1e-2dc4ca58cee7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba3394d-4fb0-4017-b0b2-05b66b949562", "sighting_of_ref": "indicator--904bb92c-d716-4bc2-8a1e-2dc4ca58cee7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b33b1cc-ba17-4a2d-a403-7740ea453268", "sighting_of_ref": "indicator--904bb92c-d716-4bc2-8a1e-2dc4ca58cee7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381ca18f-461c-4f0f-ba04-2bcb1609c3f3", "sighting_of_ref": "indicator--2467915e-8e75-4232-bbf5-0e8b2205527a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3ad438-64b7-40ad-b84d-18e6ae85bc1e", "sighting_of_ref": "indicator--7fe7a9d5-5549-44c1-be29-836e0ceed40a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c737420a-3223-4e51-a45d-beda82537edc", "sighting_of_ref": "indicator--76b79c91-9353-4cb1-9fc2-1d5f3792944b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e86af35-5a82-4fc9-8868-84e5f294ca11", "sighting_of_ref": "indicator--76b79c91-9353-4cb1-9fc2-1d5f3792944b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e4b63e-597a-4a77-a32c-b287b31f6bbc", "sighting_of_ref": "indicator--3d9c03e8-e932-4def-8cb8-765dc764f2ba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5700e003-2bd8-4bbb-81ef-1e282f8fb9df", "sighting_of_ref": "indicator--3d9c03e8-e932-4def-8cb8-765dc764f2ba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafe318d-3677-4004-b78a-623a1393623a", "sighting_of_ref": "indicator--f910ba41-1fbb-49fb-a73f-841c9ca8286d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8cbfa7-eab3-46ae-b231-cd66cf90d01f", "sighting_of_ref": "indicator--f910ba41-1fbb-49fb-a73f-841c9ca8286d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed66097-8494-48aa-95dc-b271d1ca0195", "sighting_of_ref": "indicator--851d2115-4cb2-411c-8c87-87bfc2bd766d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c00a6f-4ad7-4eef-b981-f2c05d7dc35f", "sighting_of_ref": "indicator--851d2115-4cb2-411c-8c87-87bfc2bd766d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5d21d5-1afa-49d3-b443-184a8eed493b", "sighting_of_ref": "indicator--117d32f7-96b4-447e-af0d-aea01fe6a436", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2011b3c-a97c-4dee-bb1c-8d100afa8749", "sighting_of_ref": "indicator--15866099-1fdb-4f60-8a99-b56938967d7a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d309aa3-802f-4419-a52c-50ecde4b9e78", "sighting_of_ref": "indicator--15866099-1fdb-4f60-8a99-b56938967d7a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e651f7e1-304a-4248-9093-5fb11d345b84", "sighting_of_ref": "indicator--fa76caaa-f1e9-4da1-ba37-b435955fbf61", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f85ba8d-bf3c-4b6f-8396-dbdf857ccb2f", "sighting_of_ref": "indicator--fa76caaa-f1e9-4da1-ba37-b435955fbf61", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e78739-e0ed-4193-b221-e258d307db11", "sighting_of_ref": "indicator--ea5fa2ca-e925-4d34-8eb8-6d60be9ea843", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858d611e-a150-4672-877b-3a512f048696", "sighting_of_ref": "indicator--8e8fafe9-fa18-4fae-b3fc-31373d76bcb2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331f9923-9378-42ce-b9d2-d1ec2f5fad99", "sighting_of_ref": "indicator--540f441d-ab1d-4ccf-93fd-15e19b7216fb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6ee208-5f39-40c2-a857-802251085b0a", "sighting_of_ref": "indicator--1ea9bff3-62a9-4a99-b023-119156febf24", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ec6d19-9bd8-4ef6-a72b-0a2b2d2bafd6", "sighting_of_ref": "indicator--1ea9bff3-62a9-4a99-b023-119156febf24", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a3e560-afb6-4da1-84ff-cbd4e8e9caeb", "sighting_of_ref": "indicator--1ea9bff3-62a9-4a99-b023-119156febf24", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b050087d-8365-4f9f-a419-d3d01628c40f", "sighting_of_ref": "indicator--abf18ad6-4a0b-47b3-8e75-7b40fbca0c77", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0640b26f-d9bb-4a2f-bd62-edd8ae437f93", "sighting_of_ref": "indicator--abf18ad6-4a0b-47b3-8e75-7b40fbca0c77", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2c74f3-1e95-4260-bb40-67f8fa21a0c8", "sighting_of_ref": "indicator--abf18ad6-4a0b-47b3-8e75-7b40fbca0c77", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97bbfa1-3e40-404f-ad48-f76353869df6", "sighting_of_ref": "indicator--75b5c0b0-748a-400b-bdc7-2b44693ab899", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd09d50-fdf2-4645-978d-3cb87c14606c", "sighting_of_ref": "indicator--85bf31b3-8b54-400a-a994-cb2f5e6af977", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba6db1a-dddc-473f-aac9-cba031b01539", "sighting_of_ref": "indicator--d46d63e2-37f0-4c20-8551-606ce2f99937", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07da4f0b-f813-4279-9fc8-eb25ea9bb065", "sighting_of_ref": "indicator--d91b43b0-58cf-43e7-b4ed-1bd786480f3f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cac54ac-da35-4cab-82cb-9bd7834b0528", "sighting_of_ref": "indicator--d91b43b0-58cf-43e7-b4ed-1bd786480f3f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86efbbeb-4e75-479b-a25c-82ebf9b6e296", "sighting_of_ref": "indicator--afec799d-0245-41e6-b2f0-12f12bd5434d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060cb8a2-2a35-48b3-985a-99a797e7ae52", "sighting_of_ref": "indicator--afec799d-0245-41e6-b2f0-12f12bd5434d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f078a3b9-8025-423d-b916-2b90fe4037d6", "sighting_of_ref": "indicator--b7501765-ad33-4b37-bdb6-536158baa990", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a1eac4-9853-481a-b682-208510afa64e", "sighting_of_ref": "indicator--642ca60d-32d1-408b-ad96-a25f411a0f68", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f740f6a8-57e1-4a07-b338-dc07477b5215", "sighting_of_ref": "indicator--9173f7a9-24ce-4dbc-93f4-951a8dc403a0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83a083e-9a2e-46e9-8813-07c8ec7f0860", "sighting_of_ref": "indicator--0dcff5ba-8188-4c5c-848a-ac1921204a92", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7875305c-478d-471b-a95b-fc2f46472198", "sighting_of_ref": "indicator--0dcff5ba-8188-4c5c-848a-ac1921204a92", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcedb68-235e-4e52-89b5-4574f1567334", "sighting_of_ref": "indicator--0dcff5ba-8188-4c5c-848a-ac1921204a92", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc76bb80-3685-4918-a8b0-835228604ab5", "sighting_of_ref": "indicator--ce9ddea7-a3b8-483c-8886-3c7fe90fd91d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87861bb7-2150-4263-9b06-d94897077744", "sighting_of_ref": "indicator--bc10c44d-abfe-4bbb-bbd2-a6fac0032bcb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa45ed32-ba66-42ae-82d0-3ef8cd50ded9", "sighting_of_ref": "indicator--bc10c44d-abfe-4bbb-bbd2-a6fac0032bcb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5d26bc-3625-41f6-ba6f-a6d55a2e8408", "sighting_of_ref": "indicator--bc10c44d-abfe-4bbb-bbd2-a6fac0032bcb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a742cec3-07a6-43e0-9ccd-02f01cf9605a", "sighting_of_ref": "indicator--88fcc561-a45b-4d82-a74d-156531f4261a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e346aaeb-975e-4b03-9971-f827df0cba54", "sighting_of_ref": "indicator--c4123e3d-1aeb-43d9-bbec-1b102e27e219", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1585b0-3aba-49ae-a8b7-22af8b10fefe", "sighting_of_ref": "indicator--1ded6f0a-a169-43d1-ae93-9a469e7a52b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0532c3d-dccb-43d9-9ba9-ec9a7391e8f0", "sighting_of_ref": "indicator--74ba1127-86af-41fe-9147-ed1ae1e601d2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1d6ea8-26c4-4ccd-ac10-6ccf3c1721d3", "sighting_of_ref": "indicator--b914dcbd-e800-4ea4-a6bf-d43a20fc5465", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12eab44a-9d4a-4600-8138-8867beb6602b", "sighting_of_ref": "indicator--b914dcbd-e800-4ea4-a6bf-d43a20fc5465", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d4fd9a-f9a8-4237-b6ff-ca6cd7ce472a", "sighting_of_ref": "indicator--b914dcbd-e800-4ea4-a6bf-d43a20fc5465", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61a5f5b-63b6-453f-8165-f99a764afdf8", "sighting_of_ref": "indicator--dca072e5-8bb4-4a77-b494-45257fd73f98", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6889b6-1c70-48ce-9b92-7f0cd7a33301", "sighting_of_ref": "indicator--435052c4-011d-4554-82a2-d885e9b29940", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36100a18-a252-4f45-88c5-242151b06c34", "sighting_of_ref": "indicator--19104cd9-4bda-4a91-b75f-f7e0edc6bdcb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e98519-fb98-4e62-b82f-c7d56bff92cc", "sighting_of_ref": "indicator--19104cd9-4bda-4a91-b75f-f7e0edc6bdcb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b5bb21-729b-4ac5-8107-6f2ad5ac816d", "sighting_of_ref": "indicator--211eeea4-39cc-4723-ade2-a20bd0f74353", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068202ab-429e-4d48-be81-8bbd95348592", "sighting_of_ref": "indicator--2cc5fcdd-68c0-4532-ad87-f990d2f15031", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0078ebd-364f-462c-bc37-fc1935e86a77", "sighting_of_ref": "indicator--2cc5fcdd-68c0-4532-ad87-f990d2f15031", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60363410-bd13-4e14-973a-bccbaaef699c", "sighting_of_ref": "indicator--fd188289-c1fb-46f3-855b-c635ad03c01f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28da2883-2adf-4976-9c5e-f6bd654d6529", "sighting_of_ref": "indicator--3daf34c0-72e7-4e60-a57a-a18ae13bc0f4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a37399c-ac21-47cf-89c8-12133d5c3fcb", "sighting_of_ref": "indicator--062bd582-7234-466f-90de-47c8a6fa4e27", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b06b86-0fb8-4bb5-a02a-da7e1eeeaeda", "sighting_of_ref": "indicator--75f82885-acbc-43f9-87a4-e97eb5be12a9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1040a5cc-867d-4586-a456-ca6c22b547e8", "sighting_of_ref": "indicator--75f82885-acbc-43f9-87a4-e97eb5be12a9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a64550-a6fa-4d00-ac91-25f8376189f2", "sighting_of_ref": "indicator--75f82885-acbc-43f9-87a4-e97eb5be12a9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1211076-f4c6-4534-b142-7589adc2ef2f", "sighting_of_ref": "indicator--8375135e-30f2-4224-bc61-6f9a2b0b1e52", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce420d5c-0cc1-4097-a373-f0d736bd7f8c", "sighting_of_ref": "indicator--dc1b3a73-be1a-471c-bbd1-cb1c9f77d0f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307c56e2-06d4-4031-978f-ebc1c816ea6c", "sighting_of_ref": "indicator--dc1b3a73-be1a-471c-bbd1-cb1c9f77d0f2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca836d00-c12d-47f3-abfe-76f3db89b11d", "sighting_of_ref": "indicator--dc1b3a73-be1a-471c-bbd1-cb1c9f77d0f2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4a0e3c-ad94-4e95-9118-aba3924650a0", "sighting_of_ref": "indicator--ba892993-6698-440e-91c8-9859029be890", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f304c9ec-397b-454b-862f-1e466ae8e339", "sighting_of_ref": "indicator--ba892993-6698-440e-91c8-9859029be890", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588cd9cc-5db3-4565-a7e4-a2f79660d9c4", "sighting_of_ref": "indicator--b71a7ec4-c25d-42fa-ba05-ba0e3cc5fd08", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63d48d8-a10a-4bc6-a1a0-5049aa37d602", "sighting_of_ref": "indicator--f999688a-9e44-4bf5-9ebf-e0a6655e1958", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba304e3a-ce66-4a5d-8473-050893fb3f0f", "sighting_of_ref": "indicator--f999688a-9e44-4bf5-9ebf-e0a6655e1958", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea6c576-a91d-4ee8-8672-775d736b11e6", "sighting_of_ref": "indicator--afd79e65-ff89-44ea-8a07-3f26bb11f999", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee422dae-b41a-4adb-92bd-29adbd9f10c9", "sighting_of_ref": "indicator--7325e78c-fa09-41e6-9967-6882129a0f13", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb626076-1a0c-41b5-a4f4-1990add7eada", "sighting_of_ref": "indicator--1c7bd3af-4ac2-4e83-8363-49fb15fdaa1a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b666552-ab2a-4a29-9b96-a423e9b37f91", "sighting_of_ref": "indicator--1c7bd3af-4ac2-4e83-8363-49fb15fdaa1a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a6c0be-7908-4b48-97ac-1f9328d00aee", "sighting_of_ref": "indicator--f46e5ade-4980-4551-a90a-b51cd3c48a4b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f188e11-ecbf-4c68-be78-e0caeec32018", "sighting_of_ref": "indicator--d0ad375a-97aa-4160-8951-cca64644c900", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a004ad-2b21-4ad1-9b88-d1ec12b3afc5", "sighting_of_ref": "indicator--d0ad375a-97aa-4160-8951-cca64644c900", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f639bacd-de80-4d92-98d7-afc8dd011bf9", "sighting_of_ref": "indicator--d0ad375a-97aa-4160-8951-cca64644c900", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e01e15b-1daf-445b-b8f0-78a60096412c", "sighting_of_ref": "indicator--c2d8317c-de02-4db1-afad-eaba0339b7b0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1582066-b817-4895-88ca-126332b2b36f", "sighting_of_ref": "indicator--c2d8317c-de02-4db1-afad-eaba0339b7b0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e6d18b-283d-49ab-a287-bf562e740bce", "sighting_of_ref": "indicator--89aef501-95f8-45de-8f79-34f7fc583443", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9c6c49-4c0a-471b-a9eb-9066ba1cb137", "sighting_of_ref": "indicator--89aef501-95f8-45de-8f79-34f7fc583443", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fc29dc-0d0e-492e-8b72-e1f2e9290dce", "sighting_of_ref": "indicator--89aef501-95f8-45de-8f79-34f7fc583443", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074da990-6669-4ed2-95bb-a6b1cad37367", "sighting_of_ref": "indicator--b1b420d8-3f26-44e6-95e8-446afe646e60", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2edf50-e5ab-4b76-baef-e20dc89beb58", "sighting_of_ref": "indicator--ec5d24b7-5bf3-4b06-8057-5d900530f4fd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a4c2fd-8f9b-42f4-9c3c-bb6981f8eb01", "sighting_of_ref": "indicator--ec5d24b7-5bf3-4b06-8057-5d900530f4fd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7e14dc-b8f1-405e-abde-4a3adbfd7fc0", "sighting_of_ref": "indicator--ec5d24b7-5bf3-4b06-8057-5d900530f4fd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da58cd83-e2e5-4a11-b8c6-919310732ecd", "sighting_of_ref": "indicator--6fea7b60-0954-4dcd-b56b-fd1c7e15ccd0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a47c81c-c221-4097-bc5c-481bd329fe89", "sighting_of_ref": "indicator--6fea7b60-0954-4dcd-b56b-fd1c7e15ccd0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ac09a0-c143-4015-9882-2d53720d0c42", "sighting_of_ref": "indicator--6fea7b60-0954-4dcd-b56b-fd1c7e15ccd0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5ba01f-2aff-4a42-9e9d-5c5a6696bb24", "sighting_of_ref": "indicator--eb8ba7bf-15e9-4432-a990-a5e8662b3412", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d565a621-89d5-46b2-93f6-7668dcd61b43", "sighting_of_ref": "indicator--e085d4ea-3eac-420d-a0b1-9bc72a17a8ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552068bc-10bc-4345-aa07-4f06a9631b44", "sighting_of_ref": "indicator--2baebd58-9492-4f68-b0e9-9485156e894f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5541189-1640-481f-ae26-12ef60adb40c", "sighting_of_ref": "indicator--2baebd58-9492-4f68-b0e9-9485156e894f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c4e9eb-6b27-40b5-9306-fb174d1fee34", "sighting_of_ref": "indicator--0cb9efcd-3647-4fec-9ddb-a5c3b92bbdea", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d71fb89-6f65-4bfe-86a4-4c3381faf52d", "sighting_of_ref": "indicator--1611c227-35b3-4e94-8d07-d39e0f03b7d5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5468e00-57ac-4b57-9c36-668f39a67efe", "sighting_of_ref": "indicator--2a085223-b3e7-41d1-8878-5958dd6edf32", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a597df29-a272-42d1-ad45-97d4b2eb9646", "sighting_of_ref": "indicator--2a085223-b3e7-41d1-8878-5958dd6edf32", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f563d571-c6ce-4009-b0cb-58851ade2264", "sighting_of_ref": "indicator--c484da66-1fdd-4f82-a9e3-211ee0763a9d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60b4966-39f7-49eb-a62f-1aa514dfdf5f", "sighting_of_ref": "indicator--c484da66-1fdd-4f82-a9e3-211ee0763a9d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b61ddf-a4b8-4d4f-a194-35895b5caa5f", "sighting_of_ref": "indicator--c484da66-1fdd-4f82-a9e3-211ee0763a9d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f5f802-e2bf-4ccc-b779-a7d14f48e5c4", "sighting_of_ref": "indicator--2f9c3f15-7d94-4c54-b5ad-22ebd7ed86b9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0d9552-15d8-45e8-abf5-2ec896f79e06", "sighting_of_ref": "indicator--2f9c3f15-7d94-4c54-b5ad-22ebd7ed86b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6365d4-c1b6-4063-937e-704b17052fbf", "sighting_of_ref": "indicator--e37c1949-3992-4260-a82d-365aa7e070b9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7439f077-1319-4b3e-b85d-965405cf7153", "sighting_of_ref": "indicator--e37c1949-3992-4260-a82d-365aa7e070b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861e139c-32c3-463f-b099-01adb9daeaf0", "sighting_of_ref": "indicator--d1fa46dc-1323-45f2-8025-6947be52b7e0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4919d8-b196-4518-a7e1-0591cb925fcd", "sighting_of_ref": "indicator--d1fa46dc-1323-45f2-8025-6947be52b7e0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6917e304-3b26-4dee-8f4c-3681f1529dac", "sighting_of_ref": "indicator--3fb9ba99-05d7-4a50-a4ef-e252b233acee", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714a4a24-65a6-44bb-8d59-b4d59ab0fab0", "sighting_of_ref": "indicator--3fb9ba99-05d7-4a50-a4ef-e252b233acee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d377a679-7443-4844-952c-584d62b5cb6c", "sighting_of_ref": "indicator--791fc5d2-f507-41c7-a997-1bcc8fa43184", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d00c5b-d1b8-4423-ade1-475244b099ce", "sighting_of_ref": "indicator--388e2ff3-08a9-4853-9e92-9a1ac5c72e82", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d642c671-bb5d-4725-8f38-72661f2b3a68", "sighting_of_ref": "indicator--388e2ff3-08a9-4853-9e92-9a1ac5c72e82", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fffddcc-7935-4fa4-b1d7-021f07938bd9", "sighting_of_ref": "indicator--67b8b747-31cd-4b7e-a932-cadf01015fc8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8ba3ee-d873-4afa-b973-56580dd9dcea", "sighting_of_ref": "indicator--67b8b747-31cd-4b7e-a932-cadf01015fc8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9980ec-aba0-4a31-a4e3-20fe4d7ea708", "sighting_of_ref": "indicator--c54c4f51-2752-4514-9799-24d19b01a117", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21410aa-2154-43b5-b538-8e798db46658", "sighting_of_ref": "indicator--c54c4f51-2752-4514-9799-24d19b01a117", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad31f09-44f8-4b5b-aaa4-619b74c87433", "sighting_of_ref": "indicator--c54c4f51-2752-4514-9799-24d19b01a117", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f129fe-3d3d-4e7c-9009-480278fc8075", "sighting_of_ref": "indicator--81e46d9b-ee82-4372-adb8-1e6e6cd9a6a6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2ff488-c201-4536-a3a9-fb2d784eb6d4", "sighting_of_ref": "indicator--85d94fd3-0ec1-43d5-94c1-6bac4e796920", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150a0410-6b00-4339-b5d6-d5c050499a4f", "sighting_of_ref": "indicator--e10ea5f3-edcb-43a0-9a91-27ee69ab1b22", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05834685-162d-4abd-bf4d-104e90f319f3", "sighting_of_ref": "indicator--aba6ce5b-077b-4026-9b08-3f980cec5e59", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810720ec-f31c-4932-badb-b3f9f98d87ef", "sighting_of_ref": "indicator--3bcbcd45-298f-4e67-b3eb-03c88c667525", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35219e59-c8c7-4668-8977-009faf4128a7", "sighting_of_ref": "indicator--e8fccc3f-7587-422c-b2fb-a60d18a13b9b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988c133d-96b3-4a1c-bf3c-ff8c72f57c41", "sighting_of_ref": "indicator--e8fccc3f-7587-422c-b2fb-a60d18a13b9b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3f2863-3ddf-4acc-8d93-f08f10166c3b", "sighting_of_ref": "indicator--e8fccc3f-7587-422c-b2fb-a60d18a13b9b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209af64a-5d87-4d23-8ba0-cd004cb419cd", "sighting_of_ref": "indicator--f7831394-8a36-4500-b513-7667479db8d8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd998af-fc90-4f76-be4e-b107c69dab96", "sighting_of_ref": "indicator--f7831394-8a36-4500-b513-7667479db8d8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96739157-3fa6-4690-bc68-8cead98128dd", "sighting_of_ref": "indicator--44805b4d-885a-45da-a8a7-cb708e9b649b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b0f291-df07-495e-838a-1520ac90d67e", "sighting_of_ref": "indicator--44805b4d-885a-45da-a8a7-cb708e9b649b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ab3f95-6b1d-4a6c-a6cb-aa463f827696", "sighting_of_ref": "indicator--867225c8-9485-4ffc-b5bf-703403b1eb1e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2270839-f9ef-4a99-a4d3-28f68dceaeb1", "sighting_of_ref": "indicator--867225c8-9485-4ffc-b5bf-703403b1eb1e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cb9752-f7b1-42dd-a5b4-ea521c331967", "sighting_of_ref": "indicator--899c4689-e697-404a-a031-f0fb553fb20d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92947cb8-55ae-4bae-a308-eedb671bcd93", "sighting_of_ref": "indicator--38cef1fa-f798-4269-b62a-dffc3ef1cd81", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a2717b-a49f-44da-89f3-9c4488e0b13e", "sighting_of_ref": "indicator--38cef1fa-f798-4269-b62a-dffc3ef1cd81", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054d01a1-aa4a-4a1c-9f17-7aabc9edfd20", "sighting_of_ref": "indicator--b70448b4-08c0-41a4-800e-80080372c9e0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ea52ad-1e7c-4eb0-87e0-f2a6bcf3f63e", "sighting_of_ref": "indicator--b70448b4-08c0-41a4-800e-80080372c9e0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466a6ba8-f939-471e-9d84-ad16cd83083e", "sighting_of_ref": "indicator--cb2798f8-da39-4599-a2de-ad5a41a2fb0c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecab1995-6dab-4d5d-ae3f-3f1a4bc8f8c0", "sighting_of_ref": "indicator--cb2798f8-da39-4599-a2de-ad5a41a2fb0c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb13ba80-6cac-49b9-af88-d4810a6a8848", "sighting_of_ref": "indicator--b8525829-7d38-4ea7-989f-aab4d0b0dd78", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6a4d7a-b890-4cb9-b29e-d1ed7e9e12c7", "sighting_of_ref": "indicator--9b748a33-0b4c-4420-adeb-64cb1088dfa4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a54153-891f-4d9e-8316-369874c25e62", "sighting_of_ref": "indicator--9b748a33-0b4c-4420-adeb-64cb1088dfa4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62118279-46ae-4231-a9da-9c82b21420cf", "sighting_of_ref": "indicator--5b5de9ff-f3f5-4a8d-b959-e4fc459dadf6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f7e774-1f84-4e51-8a7f-8e27fe3904d2", "sighting_of_ref": "indicator--5b5de9ff-f3f5-4a8d-b959-e4fc459dadf6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baedaea2-f827-41fa-a5e4-9cd1fffe8443", "sighting_of_ref": "indicator--096b4750-e566-4255-a9bd-195b4cd9ad07", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740a0bcd-3d73-462e-9365-dcb85baa1233", "sighting_of_ref": "indicator--096b4750-e566-4255-a9bd-195b4cd9ad07", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fef7efd-f390-4c26-9fc8-4317a9b42afa", "sighting_of_ref": "indicator--096b4750-e566-4255-a9bd-195b4cd9ad07", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db13e01f-314d-4610-9f41-bd861090cd4f", "sighting_of_ref": "indicator--c7187019-bcfa-41bc-9395-1dad853684ff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388f8115-dde4-4ed8-8f95-fd526ec56e0c", "sighting_of_ref": "indicator--8d4e8304-e164-4bcf-9491-b5c195f1cfc5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de143e7-950d-473b-86f6-d359d8c3a0ab", "sighting_of_ref": "indicator--8d4e8304-e164-4bcf-9491-b5c195f1cfc5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f4c7d8-5298-4897-8e91-6e792743c85d", "sighting_of_ref": "indicator--d0d244f1-f3ca-463b-8470-cba0f13618ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df230a9-bd08-4f68-8dbd-9509c0fad973", "sighting_of_ref": "indicator--d0d244f1-f3ca-463b-8470-cba0f13618ab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bf9983-ad58-498f-b7b7-d0b6a75e98dd", "sighting_of_ref": "indicator--130629e9-4f2e-458b-b289-13eed274bdce", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b87b10-de4c-4042-bd86-ef8e2e87afa2", "sighting_of_ref": "indicator--130629e9-4f2e-458b-b289-13eed274bdce", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8ed3a1-57f6-4eae-a9d3-dc22b2eae02b", "sighting_of_ref": "indicator--dbfb4d1c-0d3c-447c-ae7a-d79f6a867e63", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49907a56-feed-4df0-8a1d-c87a81a50078", "sighting_of_ref": "indicator--dbfb4d1c-0d3c-447c-ae7a-d79f6a867e63", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b08b8b6-77de-4ded-8ea6-0b9d8873807d", "sighting_of_ref": "indicator--dbfb4d1c-0d3c-447c-ae7a-d79f6a867e63", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca845c6-8032-4503-af99-71ac55534f9a", "sighting_of_ref": "indicator--b26a9422-9677-472b-8cf5-15e540a8456a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd695de-41dd-4d6a-9f15-e5ab73eb8c56", "sighting_of_ref": "indicator--b26a9422-9677-472b-8cf5-15e540a8456a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6546cb6-70e8-4116-b8c4-3258f71545c5", "sighting_of_ref": "indicator--c50a28f7-b73f-4831-9ca5-9861a78b6e9f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3d08a6-e6d8-42e7-b16e-b2caea7416d4", "sighting_of_ref": "indicator--46fc1d80-ec2c-427d-85c7-2c85dbf9906f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d5891a-191a-4e58-9afb-2ed8235b355b", "sighting_of_ref": "indicator--46fc1d80-ec2c-427d-85c7-2c85dbf9906f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1dc5d63-12f8-4ef4-9951-689bd6eecfe2", "sighting_of_ref": "indicator--46fc1d80-ec2c-427d-85c7-2c85dbf9906f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb996b67-4f31-4220-bc2a-03d2b3a68239", "sighting_of_ref": "indicator--10422f82-8fbd-4e74-8ad5-9dd0fdf2e9bc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6eb3e8-96d8-4e79-8ed1-828a686af574", "sighting_of_ref": "indicator--22d2f3b9-837d-47b3-9262-b4bbac9716d3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee028255-62e3-4fc1-a39d-ff07c5b7bcea", "sighting_of_ref": "indicator--5b0194d2-6d73-426a-9a3c-c2f7179221db", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d3048d-8db9-4993-80a3-5c30f5771306", "sighting_of_ref": "indicator--a297b43d-55c3-480c-b987-39588a25b2cf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a67e69-80e2-46ec-aed0-2331fe32863c", "sighting_of_ref": "indicator--a297b43d-55c3-480c-b987-39588a25b2cf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf3d47e-9e79-4fd0-9fe4-7aa07dcb1ced", "sighting_of_ref": "indicator--a297b43d-55c3-480c-b987-39588a25b2cf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bf0488-7bfd-4504-9b7d-38375c3e0752", "sighting_of_ref": "indicator--ccf600c4-31f6-4765-ba8b-1364d6da56b4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbbd740-b142-48f2-af9a-44ec5123bd8c", "sighting_of_ref": "indicator--9d4db107-d5df-4720-a7bf-128ce6d566eb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c26149-d620-4a74-b609-239291b447be", "sighting_of_ref": "indicator--6d5ec004-46c6-4ba9-89d3-fa4bfd4206a5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097d0626-e339-481d-b40f-288dc89e8243", "sighting_of_ref": "indicator--3f523747-f7f0-47e7-9261-0f363eb4e540", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5611c38-8e13-439a-9a38-8173d20421c0", "sighting_of_ref": "indicator--ce416792-896a-4b06-82c5-6a4edf6fb5f8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5dd3df-bbea-4758-9b64-00aa776e9883", "sighting_of_ref": "indicator--b3ad3c42-58a4-443b-b18b-dd7e9c0f1b14", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136e848b-27b7-45ef-ac61-2119b6a8a798", "sighting_of_ref": "indicator--1d84f7a7-802a-467d-9e74-08b66c77f06e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48b490e-4bf7-4195-8afc-db31fc2c5c56", "sighting_of_ref": "indicator--80bd7fe2-ea51-419f-af50-e8929bd6a3ff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec4cb5e-35fb-4f6d-8311-53377d309332", "sighting_of_ref": "indicator--026e9a9b-ed8e-4650-81ca-e1480022cc14", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d8c794-5d9a-4c40-8f4e-a3f65039913a", "sighting_of_ref": "indicator--f78839e4-f55f-426b-a17c-3bd558caea56", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfb6685-f6de-4e9c-b6b5-2d723e768a09", "sighting_of_ref": "indicator--9224759c-6bce-461b-862f-d9474723026f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfff6de-0ccf-4a78-a713-ac6a8b129e2d", "sighting_of_ref": "indicator--9224759c-6bce-461b-862f-d9474723026f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2bf4e0-882a-4f64-94d0-1f452f991717", "sighting_of_ref": "indicator--939cc6ee-2e40-4861-906a-71486922c114", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de73406f-2cbc-4a1b-b0c1-46ebcfa12bee", "sighting_of_ref": "indicator--939cc6ee-2e40-4861-906a-71486922c114", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128b1a88-0dd7-4b99-aa64-a5b03e77dfc2", "sighting_of_ref": "indicator--939cc6ee-2e40-4861-906a-71486922c114", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e630d8c-6d92-4c07-9c3d-15a9ead44094", "sighting_of_ref": "indicator--238fa041-5fa7-44b8-adbb-e4acd761967d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d699f14e-f07c-4c33-9394-13cf3bb3602a", "sighting_of_ref": "indicator--238fa041-5fa7-44b8-adbb-e4acd761967d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32b4c83-48e2-4e62-be79-abc9d5c8132f", "sighting_of_ref": "indicator--238fa041-5fa7-44b8-adbb-e4acd761967d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d338d5ca-d528-4316-9e09-e4ef134c8e90", "sighting_of_ref": "indicator--f35ce4a1-dbe2-465d-961d-c0dbd78df850", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c978d64-a8fa-44bb-86bd-ec04baf063cf", "sighting_of_ref": "indicator--9a849803-7f3c-4c84-9024-af4a1db81c0e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3702c85c-10b8-45d7-b41c-d91ade5f0094", "sighting_of_ref": "indicator--9bff288c-58e3-41dc-b45d-a386dfb5c598", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b2991d-0acd-4047-893a-242ca47fe3e3", "sighting_of_ref": "indicator--3d208b1c-f474-49a7-9ae8-b1179de3b4b5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2e6d3a-e887-4232-b50a-2814ee419285", "sighting_of_ref": "indicator--a4d98392-957d-4af1-977f-d609364ebb6f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c084cd-a53c-46bb-b39e-b7ce7f52ffb2", "sighting_of_ref": "indicator--7fb5f73b-a77a-4eb9-a396-22643adaaaa2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ded3d2-f94f-42e6-aa87-7c79cdd4e008", "sighting_of_ref": "indicator--e193f684-e471-4246-9cc2-03c211550df0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c024f383-93d5-4c90-a986-22e55448abca", "sighting_of_ref": "indicator--a4721477-4e7f-4d29-8f9e-6a8f00713b70", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f1d9a9-2d6d-41d9-972b-03aaf93ae4e0", "sighting_of_ref": "indicator--a4721477-4e7f-4d29-8f9e-6a8f00713b70", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff196d9-f0bb-4918-a8dd-f069fb81ca40", "sighting_of_ref": "indicator--e32f562b-af72-42c5-ac14-98d2a9209b89", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6773fd-b2f8-4d56-9c4d-8cdc3d1dfaa8", "sighting_of_ref": "indicator--cea98e45-c04f-452f-9453-e800d9426de3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd1621d-1b9a-4211-8ff8-ddf449b35962", "sighting_of_ref": "indicator--44e2c1b7-ab6b-4311-b052-d2ddb9da2517", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9debfc6c-9266-44bc-86b8-86fe9374ee51", "sighting_of_ref": "indicator--405e8da9-89cf-4f47-abe4-b5aa092512fe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bb9542-0267-4b38-a60f-990fe57cbd82", "sighting_of_ref": "indicator--405e8da9-89cf-4f47-abe4-b5aa092512fe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2fc61e-2fc0-4241-ab44-e627652d5404", "sighting_of_ref": "indicator--405e8da9-89cf-4f47-abe4-b5aa092512fe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38548352-d4d9-4d6f-8111-8967e123111d", "sighting_of_ref": "indicator--5f7b5487-79c7-49ad-b894-eb32252bbb57", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97216f57-1297-4c9c-8794-3544ca53a61d", "sighting_of_ref": "indicator--3732c3e0-597f-4c4a-9bec-9085c7ced6d6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61916f92-6d7d-4074-94e6-78130dee89a1", "sighting_of_ref": "indicator--3732c3e0-597f-4c4a-9bec-9085c7ced6d6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f644191e-ffb1-4d6c-a76f-827e4ddf27be", "sighting_of_ref": "indicator--3732c3e0-597f-4c4a-9bec-9085c7ced6d6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f699adcd-9998-4db0-b178-f9f415b76ef4", "sighting_of_ref": "indicator--076d9cf5-0ce8-4829-a90e-0d2c437a4ee7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1096cf5d-e790-4fa5-ac1e-c77217a7e9a6", "sighting_of_ref": "indicator--e6bbe980-beae-47a5-a915-6415f212b7ca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54985f99-c9b5-4513-9fc4-4f37f6718f48", "sighting_of_ref": "indicator--8cb6c5ff-ad28-41c0-994b-aeeccf1179a1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128afcee-6994-4cd7-93b3-78f766026977", "sighting_of_ref": "indicator--8cb6c5ff-ad28-41c0-994b-aeeccf1179a1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996de285-c589-43cc-91e1-4f40e2f501c5", "sighting_of_ref": "indicator--568c6e19-e3d4-46f7-8ba6-0c5474947faf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbed3892-b70e-41df-9502-f83be5e52fca", "sighting_of_ref": "indicator--51fe1e40-d15a-45a5-ae09-70553511bf27", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5f27e3-614f-46eb-9257-42641198d79c", "sighting_of_ref": "indicator--262233ef-d1d3-4f48-9c77-52c77441a416", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58d3bdc-e8c5-45b6-87be-f2c64fa7d5de", "sighting_of_ref": "indicator--4b9e0071-27ea-4081-b8b4-9d61d6ba90b5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d30ba13-bcb0-4eab-96b0-c914ebbda0e4", "sighting_of_ref": "indicator--128d7193-d5ab-49f3-b386-1c7a822c10a6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d315ed5e-01ec-43f2-8cc2-d8a0daf11b45", "sighting_of_ref": "indicator--128d7193-d5ab-49f3-b386-1c7a822c10a6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e112ef-3308-4c3c-a56c-374b5ef5374d", "sighting_of_ref": "indicator--128d7193-d5ab-49f3-b386-1c7a822c10a6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f04c8eb-c59d-4209-8e7d-7465800d7996", "sighting_of_ref": "indicator--ae1816cf-5432-4cf8-ab0a-f0122cb9000d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acc370f-6947-4444-9a5e-12288a5051e8", "sighting_of_ref": "indicator--1d76d827-8c0a-4e64-9821-f56c962ad05e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9167ca5-357e-45b8-8eea-aa94d720e708", "sighting_of_ref": "indicator--170b8df4-e0a9-4921-a45f-9658126e3ed6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72be77c1-7f3b-4c6d-8e58-ceed60ce03fb", "sighting_of_ref": "indicator--0d73222b-d85d-4f0c-84ac-a886f207356d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b557a9b-bc8f-490e-81a4-f3a06846cbe5", "sighting_of_ref": "indicator--4d8fe769-e3b4-4457-bc63-f371f6f3d222", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a303574-6a87-4d74-90cf-00e1f3dae0dc", "sighting_of_ref": "indicator--12991cb1-187a-4a02-b71e-1aa6245e5eb7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45d1dc8-3132-4fe1-88d4-b421c07ed725", "sighting_of_ref": "indicator--96b16763-968b-4865-8285-5ab9fa467dc3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e55d84-0ed3-4bf8-b944-17856f27f9bd", "sighting_of_ref": "indicator--b3b4f813-ee9c-4b83-9b53-15f1207917fc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2115f9b5-e62e-4ec9-9168-e4d8e28e8971", "sighting_of_ref": "indicator--b3b4f813-ee9c-4b83-9b53-15f1207917fc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a24582-0d16-4cd9-97a8-25abaab8e89e", "sighting_of_ref": "indicator--ce294fb6-1959-48af-a793-523df79e2d6a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c594820f-db61-43d8-a9ab-7e239a981b53", "sighting_of_ref": "indicator--97e8f881-7fea-43af-9b2e-ea27129efcff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff070dd-6258-4c7e-b06a-e72704c6cf5a", "sighting_of_ref": "indicator--0064c91d-baa9-4e10-9e09-5e3cd63ee140", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33889bb-febe-448a-890e-031dee0f1cfc", "sighting_of_ref": "indicator--9bd4a980-ddf5-4e27-98b6-9325cf022b71", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73dce496-04b4-42cd-95f2-717edf6b54a7", "sighting_of_ref": "indicator--4315e13e-4ae1-4b02-9ab6-ce8bdd1a7370", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8750da93-dfbf-4c5e-ab51-0ffdfb99e08c", "sighting_of_ref": "indicator--4315e13e-4ae1-4b02-9ab6-ce8bdd1a7370", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030633f4-51d0-4c2e-aa8f-882b9e646785", "sighting_of_ref": "indicator--4315e13e-4ae1-4b02-9ab6-ce8bdd1a7370", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8dc24a-7232-41ee-a9e8-063c80bba79c", "sighting_of_ref": "indicator--a4d6ff8a-bbca-4c67-b19e-4dd0db4fe377", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9edcd3a-0132-47e8-9afd-f666dc6e8509", "sighting_of_ref": "indicator--398ed752-6f40-4526-a8c5-0681c116338f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820cb0bc-8651-4fef-a71a-77dd73bfb3a5", "sighting_of_ref": "indicator--398ed752-6f40-4526-a8c5-0681c116338f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad297f8-8e3c-4c13-822a-0966d4091156", "sighting_of_ref": "indicator--8094bfef-f792-4e13-b514-c6b98e89fbfe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662fefad-5b99-4419-ae75-e29b045fe650", "sighting_of_ref": "indicator--59f46d1c-52f0-4467-80f0-a5be5dba3277", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febab398-b6ea-40a7-8b10-8cbb4c95b58a", "sighting_of_ref": "indicator--b08f5a24-d34d-478e-a7f5-61cb7aa176fb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b078d3-2e86-4f0f-86c6-8b9f4158abf3", "sighting_of_ref": "indicator--1d27b91a-7a17-49ac-9112-fbe030f1fcf5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3232abc-d3a3-4cbc-a21f-fcb67c4ee285", "sighting_of_ref": "indicator--1d27b91a-7a17-49ac-9112-fbe030f1fcf5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f11108-6b4e-4493-bcb6-bdc8d40bb5ff", "sighting_of_ref": "indicator--a1fe071e-2d6c-4555-bd44-d281b9958da8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fde4e04-37da-4b7a-93d5-fab5f0c64ada", "sighting_of_ref": "indicator--db2ee661-a482-433f-94b1-e7547f78df79", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0ea70c-1c59-4cad-b4ca-414e51daf56e", "sighting_of_ref": "indicator--4ac709c3-77ca-4cf3-889e-405c9e0ddaeb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee866c59-198f-407a-ba86-dadc40683d4a", "sighting_of_ref": "indicator--1149a407-b140-4b60-8ed7-3eef3aff9c59", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0159a1-3cc7-4868-aea2-dfda42a69298", "sighting_of_ref": "indicator--1149a407-b140-4b60-8ed7-3eef3aff9c59", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fbcd3a-185b-4559-ab12-2f75e0dd4157", "sighting_of_ref": "indicator--46b24a0f-3234-44c8-bbef-c61c2a9af14b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d9e489-cd1a-427b-ba99-99798e4124f3", "sighting_of_ref": "indicator--46b24a0f-3234-44c8-bbef-c61c2a9af14b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bc299a-da96-48ed-ab21-db5ef43bf8e6", "sighting_of_ref": "indicator--0572fc37-6775-4626-86aa-1e446dd1d3b4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb6a8a0-f568-41cc-8c69-ed7872ab7004", "sighting_of_ref": "indicator--0572fc37-6775-4626-86aa-1e446dd1d3b4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e73e069-daae-4934-b259-d892ba9c7a72", "sighting_of_ref": "indicator--548fef9d-2557-47ec-a978-170b5c9450c4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9286f770-62bc-4684-a729-95ebd8491b07", "sighting_of_ref": "indicator--cfa8a465-d094-4738-a815-44615cd82b9b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ab4270-39f3-4779-9dd9-c4c6e8970d8d", "sighting_of_ref": "indicator--cfa8a465-d094-4738-a815-44615cd82b9b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d80add-dc9f-4f07-992f-8c181390c381", "sighting_of_ref": "indicator--e2d6e1ee-dc6e-48e9-9df0-dbda74afd843", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c81bb8-3541-48d0-93f7-11ca071b1c3a", "sighting_of_ref": "indicator--31f52d57-daf7-493c-9b79-0432c1aa72d3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043ea847-55db-453a-9ddc-2ff5dda81141", "sighting_of_ref": "indicator--e9d8c3da-4f35-41ca-a1df-91396f1532bd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f578c1-70d4-4e69-b007-32fe99484be8", "sighting_of_ref": "indicator--e9d8c3da-4f35-41ca-a1df-91396f1532bd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d94bbf-2892-44ab-9369-31f369815e1c", "sighting_of_ref": "indicator--e9d8c3da-4f35-41ca-a1df-91396f1532bd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d853544-4c16-4fd1-9b53-631e1b261ac6", "sighting_of_ref": "indicator--bf0b026f-b887-4cf8-abaf-1ebb2a936f6e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e866af-55f1-4fc4-84e8-d2bf41d9dd23", "sighting_of_ref": "indicator--bf0b026f-b887-4cf8-abaf-1ebb2a936f6e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2afe36-a801-40ec-8c6f-77c6f9288583", "sighting_of_ref": "indicator--bf0b026f-b887-4cf8-abaf-1ebb2a936f6e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cc5d96-5f13-4abb-bb0a-9f847b1245bb", "sighting_of_ref": "indicator--d33e41c8-1572-449c-9436-ade82eea1c83", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540c7a59-0103-4439-9b34-9cab53f85042", "sighting_of_ref": "indicator--4d4c2a47-e1bf-48b7-a449-79846f33d6d7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e0cd67-e40c-4839-80b8-0b2f293f5bb0", "sighting_of_ref": "indicator--1756ef16-c58d-43d3-b941-bc7004341145", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64407dc3-59dd-4be2-b4d4-b1682d3470dd", "sighting_of_ref": "indicator--b809d930-4832-4ea2-a9ef-e93d35394759", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ee4503-7142-4d60-96ed-f7ccfe1c11c2", "sighting_of_ref": "indicator--cac3837e-34ac-4bac-8c1d-246eb9427e15", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1428ee82-773f-411e-a870-ad1aa0d38684", "sighting_of_ref": "indicator--cac3837e-34ac-4bac-8c1d-246eb9427e15", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bae499-082a-4c8e-ac56-4a851d300363", "sighting_of_ref": "indicator--50bdb22c-e931-4bd5-b1eb-61419a99bc8b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e0ed8e-213d-41cc-9612-a33c0064aac0", "sighting_of_ref": "indicator--18e655a3-bcf6-4b81-b09c-db588c98eedb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e722c1f-1c57-4a0d-9b66-8cd3613d798d", "sighting_of_ref": "indicator--5e1fe1e1-d5aa-4e43-b49b-bc300e99624b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01130b8d-e25b-4b4b-a49c-b7917b0e5b9f", "sighting_of_ref": "indicator--7ee776e4-2495-49a1-b5b8-5f1b5c209a57", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12615d1f-f16f-4d3d-b6a8-64bc89e95b42", "sighting_of_ref": "indicator--612a30fc-7067-4112-a32d-337ba302ecf5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81c56d2-c9c9-47e5-a2cb-47d1f90e86d3", "sighting_of_ref": "indicator--8640abd7-35e6-4433-934a-12d34d10c720", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fda9f93-cf6c-4a7f-974a-47f9d46af65a", "sighting_of_ref": "indicator--01de5c3b-90a5-4cf0-bff7-2d4b70d16c9d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954e7bfa-6b5b-478b-826a-796979034304", "sighting_of_ref": "indicator--3fae5a40-6b51-41c3-a8fe-0925bc2280d7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c36986-ad63-4730-a1a4-d25404fb0e55", "sighting_of_ref": "indicator--3fae5a40-6b51-41c3-a8fe-0925bc2280d7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c392b04-e0bc-43e2-a11c-eef00cc84758", "sighting_of_ref": "indicator--5143e34b-e5ae-4343-a459-d8828a218c0d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9aa53b-f338-4da5-aa7d-97cca4eaec76", "sighting_of_ref": "indicator--3523083e-f92a-4154-9e1b-9d13c93dcc52", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca09625d-c321-4b82-a31c-c50ddc076cab", "sighting_of_ref": "indicator--6fd8646f-d4c1-4d46-988a-f2aef5a3b5c2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7022cb3-8f8f-4bc5-8e3a-27a512d43f0e", "sighting_of_ref": "indicator--6fd8646f-d4c1-4d46-988a-f2aef5a3b5c2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c417b835-828e-47d2-a406-049d466a27a8", "sighting_of_ref": "indicator--bd66dc2b-8b46-4844-ac46-7b2012e4b4f5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35ebee1-b16a-40cf-8fe3-69dd1860b2f4", "sighting_of_ref": "indicator--31ce3d16-75e6-4de2-b49d-0b52022fecc9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ed89b9-afdd-4d0c-b2bd-bd3d8c512c38", "sighting_of_ref": "indicator--31ce3d16-75e6-4de2-b49d-0b52022fecc9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b28930-d6fd-42f4-a092-6a4aff71d493", "sighting_of_ref": "indicator--31ce3d16-75e6-4de2-b49d-0b52022fecc9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f094cd0-6655-4f7b-a894-dacc026131c8", "sighting_of_ref": "indicator--16d7315b-7c55-46a6-b80f-2222639be36d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e5e645-8011-4387-825f-beb3ea0f5e5f", "sighting_of_ref": "indicator--7879bce1-ac50-414a-88f1-337d15e97984", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52b78e9-87ba-406e-8cd7-4f172101a28a", "sighting_of_ref": "indicator--056a07a5-e4fc-4b82-bded-00b4df9cd352", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f64539-8f29-4b06-b8f4-84d84e8dd75b", "sighting_of_ref": "indicator--056a07a5-e4fc-4b82-bded-00b4df9cd352", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd07833-6fab-489d-893d-3d68f9d3efc6", "sighting_of_ref": "indicator--ce2c06c4-8fbe-45ed-9a24-b6f2e51f73d2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b36550-5c26-41ee-83cb-3b4c23a0c6c1", "sighting_of_ref": "indicator--0e40d1cf-06c8-4b04-9172-a63feb099579", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009ae68f-e69c-4eac-a0db-b3799df32d2d", "sighting_of_ref": "indicator--a66840c2-d3be-4e57-999e-2963b05f3fc5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8384419-fbc5-4647-ad64-3e2f4860f6c9", "sighting_of_ref": "indicator--8cce3acd-991a-43c5-8f5e-e3ecfba3db4c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb32c16-7490-4bc5-b95e-dc031fa935a6", "sighting_of_ref": "indicator--8cce3acd-991a-43c5-8f5e-e3ecfba3db4c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962fb5b0-79f8-4ac0-98c9-5d040b3c58a4", "sighting_of_ref": "indicator--8cce3acd-991a-43c5-8f5e-e3ecfba3db4c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b198caec-f5f8-4b36-a480-023cdee3b691", "sighting_of_ref": "indicator--311293a0-157a-413d-b387-08ec4d42f5fc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591cd756-87fd-4258-85dc-087cb4a432fc", "sighting_of_ref": "indicator--311293a0-157a-413d-b387-08ec4d42f5fc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e849299-fbc7-4424-a68d-cb03ec90edf4", "sighting_of_ref": "indicator--5e7ebb26-17e4-464f-a233-7d61bb4d6f27", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f277cf18-0cdc-48e9-a19f-9bb4aa38bc02", "sighting_of_ref": "indicator--5e7ebb26-17e4-464f-a233-7d61bb4d6f27", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f5b1bc-6e67-4521-b2f1-de5cf0924032", "sighting_of_ref": "indicator--a3ae37a5-eb3d-4dc2-89e6-1965c62c93b7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92bab43-71cd-4791-a0e6-ac881c7747ca", "sighting_of_ref": "indicator--a3ae37a5-eb3d-4dc2-89e6-1965c62c93b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998ec084-3b82-4059-9704-1f8ad054ee50", "sighting_of_ref": "indicator--d6b7cf62-655c-4a5d-b8d1-477be0fba5f0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd62c96-9b48-4051-9ce9-f2e22a9634c2", "sighting_of_ref": "indicator--cc496564-6901-4150-8212-4d81c735460e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9722591e-0141-48af-950b-0fea57d990dc", "sighting_of_ref": "indicator--cc496564-6901-4150-8212-4d81c735460e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04560ba-cb19-4cc0-bf14-8d8c886bbb88", "sighting_of_ref": "indicator--26e9dca2-dcc8-47b2-a725-e20f9edb295a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b44bdd-4404-4baf-b1a9-5e1596a7ea6c", "sighting_of_ref": "indicator--74ccc614-22a5-4690-a0a2-b30f8cd187a9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ad07a0-3a11-4260-9611-5a411ff82e45", "sighting_of_ref": "indicator--a8d3c1a0-c349-4dd5-a05f-52628db2ef43", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc46757-683c-40ac-a250-56b881f516f1", "sighting_of_ref": "indicator--ffe710e6-cf75-4cac-a52e-7d34c63f5323", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84799dc5-4364-4462-8aaf-b8a01214ed05", "sighting_of_ref": "indicator--dfe783fa-e721-4f6e-9001-0b34e1a365b7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcde2af-6176-44d4-96d1-b5fcd582eb7e", "sighting_of_ref": "indicator--84c2c8ea-e02e-46e6-858b-7a7d04d2159b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e39cc32-b25e-4bdf-969c-495a9790283a", "sighting_of_ref": "indicator--6b9a6475-f686-4527-af1f-6bb30a11e71c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9e6e2c-5640-402d-a061-5bf0eb12fc12", "sighting_of_ref": "indicator--6b9a6475-f686-4527-af1f-6bb30a11e71c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51095bfd-9981-48b1-bb68-9e42150df770", "sighting_of_ref": "indicator--906c69bd-8ca3-4f52-a6d6-748321dee645", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c026b13-6f87-403a-ae2c-0231c398d98c", "sighting_of_ref": "indicator--31083e95-8ca4-4937-b642-c16632426d8f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8351fccf-edba-41f3-b890-f565b0dedaba", "sighting_of_ref": "indicator--377affd5-66eb-443f-bd5b-25c00060c6aa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7fb8e1-7137-429e-ac91-824308b9518d", "sighting_of_ref": "indicator--377affd5-66eb-443f-bd5b-25c00060c6aa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66e03cf-8807-42dd-a0cb-f073bcf2fba8", "sighting_of_ref": "indicator--61cb3e6b-0ec9-4e51-8aa9-3074a2d07804", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5526c3-5c5e-4985-b9df-4101e6e7509e", "sighting_of_ref": "indicator--f7704a6c-e7d5-4e58-a604-aea7a5743748", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef56cce-8fb6-4386-9ff5-4411226c72b2", "sighting_of_ref": "indicator--eb556064-5dae-4432-9dd3-58c14b70cd74", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51770c0-dbfc-44b1-ac63-c680bbef6c44", "sighting_of_ref": "indicator--4c157729-69d0-4a90-a481-a92a6cf47cba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d36cdd-a1b2-4432-92dc-0d11880a33f4", "sighting_of_ref": "indicator--a5b9ac3a-4458-41f8-add0-315a58e23a23", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c933fcd-53b2-452a-a63d-084f6e4f8513", "sighting_of_ref": "indicator--7a00e94b-d3c8-4917-8e0e-0a2b200ad658", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc62f568-71d1-4e13-97d7-5a38f7ee26a0", "sighting_of_ref": "indicator--4e725052-bc23-4f0a-bf56-4c9775a22841", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a85b284-4259-4bbf-a8df-992a11d691ce", "sighting_of_ref": "indicator--ac0f3a5f-a943-4372-bdd4-0ce8dbc42045", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9bda1e-bda7-4867-8162-fe6030f31dce", "sighting_of_ref": "indicator--ac0f3a5f-a943-4372-bdd4-0ce8dbc42045", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebc2664-27bd-475e-875a-603aab287b5e", "sighting_of_ref": "indicator--3ae867f0-ce41-4b6b-9742-a6fefd640ad2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4963ff0-328f-4030-92e0-e194a2285ac9", "sighting_of_ref": "indicator--2ad5e393-5d9d-4ba6-ada9-daf357bbdc79", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d207cfa1-0f0c-49eb-9cb6-6844241b4b70", "sighting_of_ref": "indicator--a4a983a3-52f4-4a83-95d6-30426affa2e3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b5e3e2-2f73-4b2d-970c-0842093b82ae", "sighting_of_ref": "indicator--a4a983a3-52f4-4a83-95d6-30426affa2e3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8798a493-1f19-4025-ae93-13da3ef676c1", "sighting_of_ref": "indicator--ba12a5a6-2cbc-44d1-a7b9-8c77ba2ff799", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd92a9fc-6b1a-4ada-94fd-91af7ec96977", "sighting_of_ref": "indicator--ba12a5a6-2cbc-44d1-a7b9-8c77ba2ff799", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c606b2c-2e44-4c83-a3ad-8e42bb274ca1", "sighting_of_ref": "indicator--fb15b9e8-4a7a-46ae-80b9-cf860201ad4c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b378454-d71e-4f29-bb59-22bdd720c913", "sighting_of_ref": "indicator--fb15b9e8-4a7a-46ae-80b9-cf860201ad4c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b62fe0-d1e3-4bb3-ba5f-a742c757a721", "sighting_of_ref": "indicator--4d96a509-c7f9-4104-b3b8-f4dd6b748e32", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6699484-2ff2-40c2-aa3b-9533b2b9de20", "sighting_of_ref": "indicator--4d96a509-c7f9-4104-b3b8-f4dd6b748e32", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1847ae36-ca84-4060-9b5a-a517a85e96d1", "sighting_of_ref": "indicator--293b7e1a-62d5-4dad-93e3-16771ead3138", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf34f94-fbba-4859-a872-554100662673", "sighting_of_ref": "indicator--b0580162-2cb5-4316-91ff-018fa7c4dd1a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea665521-9932-42e0-896d-e67a5e852e79", "sighting_of_ref": "indicator--9443c23d-6cec-4fd5-a9ad-aa50ce3b1590", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3056a4e8-dede-4488-85b5-406966a1340d", "sighting_of_ref": "indicator--9443c23d-6cec-4fd5-a9ad-aa50ce3b1590", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c472709-d381-43ce-8f6b-558960566b58", "sighting_of_ref": "indicator--9443c23d-6cec-4fd5-a9ad-aa50ce3b1590", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35477937-d6b8-401c-b4b8-a4e1c61dd985", "sighting_of_ref": "indicator--50df19eb-0b2b-4dda-8eeb-ffbe0d92063f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5575fc3d-b5ad-4511-87da-b144410be7f2", "sighting_of_ref": "indicator--50df19eb-0b2b-4dda-8eeb-ffbe0d92063f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55fd356-2e7e-46ef-b8e9-e5eca741edc0", "sighting_of_ref": "indicator--456f4488-77a6-45ff-8e9b-ff1c6f3067e3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84061443-1f13-4d29-814a-d30586cddb5e", "sighting_of_ref": "indicator--00a0d802-7945-4577-ae09-8df67be1d5d2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921c5733-08b7-453a-bac3-a5cd381d2ae3", "sighting_of_ref": "indicator--3ed7c534-053c-4cd7-a03b-dc3e78582a13", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230cbbd7-1058-4fef-a7ab-a5400c1bf41f", "sighting_of_ref": "indicator--3ed7c534-053c-4cd7-a03b-dc3e78582a13", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214ab7fc-4ecd-4ca8-a24f-8ac63e194d5d", "sighting_of_ref": "indicator--3ed7c534-053c-4cd7-a03b-dc3e78582a13", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368bbb07-f9d3-4d94-8938-1d89f01f93bb", "sighting_of_ref": "indicator--fe250509-3c2f-45c5-bd29-347d80ae2bbb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056d835b-3119-4730-a486-9c48b25923ac", "sighting_of_ref": "indicator--43b35112-8e57-4759-a2d1-5738fd33169d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd749cbb-3aac-46ae-9637-aec4dbff5920", "sighting_of_ref": "indicator--535beacf-7d90-4d18-8c05-ce827cdefda1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b2ad1c-79bf-4627-8ecc-45d0e1f40764", "sighting_of_ref": "indicator--83d2e440-0b3a-4cf7-bee7-dad2905f7ebb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff05402-b265-49f3-a409-0f6b1d5e04bd", "sighting_of_ref": "indicator--e12b2ffb-fc45-4498-a60d-681aa9070b7d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d826c4-f163-4a58-815b-0fe8b21e9288", "sighting_of_ref": "indicator--2e377b2b-2327-4eeb-b847-75973f220d70", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69efdf44-622c-4697-87b0-b9bc48979e28", "sighting_of_ref": "indicator--d1ae7b71-3064-45bd-843b-9a97b236faf7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9906a960-811b-4cb0-8412-4e962c93a285", "sighting_of_ref": "indicator--8b764546-04d6-49d7-bf4b-ca6fe1765510", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95e5916-4c69-40b8-a90c-b67d070fdb91", "sighting_of_ref": "indicator--8b764546-04d6-49d7-bf4b-ca6fe1765510", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433309ac-301f-4ce6-82d0-438dec4bf573", "sighting_of_ref": "indicator--249700be-3880-46b7-8af6-20300dbd47d5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff36b2ff-2017-4f42-aa80-68fab339c429", "sighting_of_ref": "indicator--5366ae05-5981-42a7-896f-8154913f7f1b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8f30fe-aa13-4b8b-8598-85441af72174", "sighting_of_ref": "indicator--17f9edd9-bce6-40e0-8e5f-0736bcb58ac1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0df0bf-9f72-4528-b35e-44c0c8912219", "sighting_of_ref": "indicator--17f9edd9-bce6-40e0-8e5f-0736bcb58ac1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3dd5a4-5f0b-48fb-93f9-bb018e15e748", "sighting_of_ref": "indicator--d6acbedc-03b5-4e45-95d7-74563fd3bc20", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c662061b-185e-415f-a7b7-09ba7697e5ce", "sighting_of_ref": "indicator--d6acbedc-03b5-4e45-95d7-74563fd3bc20", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee248225-f7dc-4cb8-8a0c-55a90e25f13e", "sighting_of_ref": "indicator--98cfa3d3-8771-40be-9469-5ab4149e5c3b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1a1f38-702a-4dfc-b91a-3adb74881b2d", "sighting_of_ref": "indicator--d90b31a8-3c91-4c68-97e9-01f36c3007fa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb5841a-f2e4-4cb8-b727-1c5ae9d86b4b", "sighting_of_ref": "indicator--5f3ec5c1-1a20-4b36-b8b5-7f467c5fdbd8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4d843a-3406-424d-b130-2a0c243205c8", "sighting_of_ref": "indicator--e8d25a9e-83be-410a-b961-3512ed638491", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a217747e-38e7-4a80-84db-6a37e3217ce3", "sighting_of_ref": "indicator--0e0ef655-6ed3-4c39-9be5-3e416c9ff456", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1bc8ba-ea50-463f-adcb-a376840d0d6d", "sighting_of_ref": "indicator--417b0ba7-7e13-4a3b-8aa3-076be7740faf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0951fd57-b853-434f-b2af-90fa63baddc4", "sighting_of_ref": "indicator--aac7b157-b744-41cd-9f3b-9f7fb9b07a54", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdf922c-09c7-48ea-8a8e-6f53b770d8d9", "sighting_of_ref": "indicator--2804f056-8eef-4f84-830e-56c3bf54a20f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5e643f-9aac-4b1e-921d-0d31290cf982", "sighting_of_ref": "indicator--2804f056-8eef-4f84-830e-56c3bf54a20f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a754a6-a024-4ac6-98e4-f375fd1fb19b", "sighting_of_ref": "indicator--4716a360-43a2-4a85-a54c-8b776d3f8039", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26334ddf-2f9d-4801-a5a3-372f0195d01e", "sighting_of_ref": "indicator--a63cda7f-dde7-4bb7-b37b-f57b4621c203", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdacdfc-02b6-44c5-b485-b82b36d726d3", "sighting_of_ref": "indicator--248f0475-bf94-495d-82fb-e74e45f96158", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134a5cac-8148-4928-90c2-68cafd9bb849", "sighting_of_ref": "indicator--5d522434-faed-438b-bc2d-16df464377d5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197bae08-0508-47c2-a6c5-82f49bcab058", "sighting_of_ref": "indicator--3f416686-bdbe-400b-bc00-ee7496f76bff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f28b487-1b28-4a35-aff9-c44538a0d857", "sighting_of_ref": "indicator--dd59b2cb-5d49-44ad-9206-632d4759ce00", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a734d1f9-1635-40a9-8381-cdeb842649a1", "sighting_of_ref": "indicator--460350cf-b955-4a82-9a26-bbbb648d88d9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833d896f-c529-4f12-b763-c309afde7bc6", "sighting_of_ref": "indicator--460350cf-b955-4a82-9a26-bbbb648d88d9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff49ffd-b1fe-447b-b650-8b52ea90c854", "sighting_of_ref": "indicator--460350cf-b955-4a82-9a26-bbbb648d88d9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66342d1b-4e63-4aa9-a3d4-0d9fc1aa6f2a", "sighting_of_ref": "indicator--52d2fc4b-e239-41ef-a910-083fb676e22b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed3ad88-9086-48f6-af0d-be8504ad0d04", "sighting_of_ref": "indicator--52d2fc4b-e239-41ef-a910-083fb676e22b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2eb1b23-7c59-439a-8a43-098e88af33e3", "sighting_of_ref": "indicator--52d2fc4b-e239-41ef-a910-083fb676e22b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac4fe99-80bf-4264-a146-08576892d31d", "sighting_of_ref": "indicator--0a02655a-74ac-4907-989e-2c551751e301", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049cb091-98ba-4379-8360-119c43674512", "sighting_of_ref": "indicator--0a02655a-74ac-4907-989e-2c551751e301", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1922975b-a572-4917-8986-3ad3fe351342", "sighting_of_ref": "indicator--5d31eaa3-1da8-4389-8ef1-4dce4a02dd22", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb43520-2866-4f89-bc02-65113393c665", "sighting_of_ref": "indicator--0c7d25b9-0f53-4d60-b9fa-bd46719d2d9e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560d6461-2079-450c-a3a9-feca59bbfd1b", "sighting_of_ref": "indicator--0c7d25b9-0f53-4d60-b9fa-bd46719d2d9e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86eb1ff2-12ae-4296-b3c1-f4f11a4b1e38", "sighting_of_ref": "indicator--0c7d25b9-0f53-4d60-b9fa-bd46719d2d9e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ea53f8-5d68-4862-99bd-892d8f6afa9f", "sighting_of_ref": "indicator--59f0fc6e-3284-4bf7-a90f-fa97b21bebe9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9148d422-aa75-4917-8fe3-df84e4e9910c", "sighting_of_ref": "indicator--59f0fc6e-3284-4bf7-a90f-fa97b21bebe9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc94319-4691-43af-a7b5-134f487d1b30", "sighting_of_ref": "indicator--59f0fc6e-3284-4bf7-a90f-fa97b21bebe9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a91ed5-6936-40e5-94f9-71341ceb6e38", "sighting_of_ref": "indicator--3a45cf4f-08e1-4fb8-813e-7687f66e52dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8245d11f-4574-4f70-84ad-7f2952681e51", "sighting_of_ref": "indicator--e58af11d-7df9-4639-a138-24e9579af0ab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3221403-4197-4a85-a92a-8811740fc4c1", "sighting_of_ref": "indicator--db753ad6-fbf9-43f7-88cd-f1579ae35544", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17075e3-93c7-41b0-a85a-91bb0acebfd2", "sighting_of_ref": "indicator--9e21a7e7-a05d-48da-85c1-a2d0d7aef9ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4e17b3-2472-4fec-ad15-5605a11e4f94", "sighting_of_ref": "indicator--84fd1198-c9d5-4cef-b39a-fe871760220b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d63695-1840-4703-99ee-de33585e673c", "sighting_of_ref": "indicator--2f689737-c19d-413a-9cd8-b9bd85ebbcdb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdb53eb-bed1-4bab-8cbd-32f2eb6eadc5", "sighting_of_ref": "indicator--81fd4489-2216-4a24-b5eb-dbf57135f120", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b549c9-2385-4588-8c51-0e3d3f52642d", "sighting_of_ref": "indicator--22692cbd-a539-4da5-8daf-7b4aa3d2f11b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9604b4-b94c-47b3-9cbc-242bc715367c", "sighting_of_ref": "indicator--22692cbd-a539-4da5-8daf-7b4aa3d2f11b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5eb3540-56ec-426e-a189-c65c3c5c9c69", "sighting_of_ref": "indicator--22692cbd-a539-4da5-8daf-7b4aa3d2f11b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31a3002-7e64-468f-84ce-c586b76e621f", "sighting_of_ref": "indicator--871d33ea-1223-4f59-b2ca-b8c023fea0a2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e043ac37-84c5-4b93-8048-0ab4cd45f44c", "sighting_of_ref": "indicator--d24748b6-914a-43cb-a331-1e5869b83cf6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e3e504-ef7c-485b-af8b-434969cf30b8", "sighting_of_ref": "indicator--d24748b6-914a-43cb-a331-1e5869b83cf6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd2ed48-b137-4afe-ab59-14dc830747e0", "sighting_of_ref": "indicator--d24748b6-914a-43cb-a331-1e5869b83cf6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff92651c-602e-47c7-a93d-fa18b3df24b0", "sighting_of_ref": "indicator--bcfcd3af-c930-4f51-9890-55a6c8ba2ce1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fab1b5-8b30-41ec-81ff-70073476643b", "sighting_of_ref": "indicator--1adce6e3-94b3-489f-89cf-4cf6c1092717", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b16fd5-6037-4216-9994-63c3fe80cc2c", "sighting_of_ref": "indicator--3f17b492-927b-4fab-adaf-7f7a6ec17170", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7154d5-7ad3-49af-826c-cd2951944ab2", "sighting_of_ref": "indicator--c812c7ea-bc21-441d-9a27-2a2a0b841f3b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab38fba-56bf-47dd-b043-e57805dba5e6", "sighting_of_ref": "indicator--3e41b797-1834-491e-b047-3154d7ede3bb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0e7d2c-846b-4927-8e37-712cdc7d61d5", "sighting_of_ref": "indicator--c4b1e08b-0099-4e7c-9da3-cea801c25744", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94276f51-c6f4-4118-bd08-77a95b53adbb", "sighting_of_ref": "indicator--ccc37427-a147-4e09-b389-d964a2b71bae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3fa544-3928-404a-8613-1ad5c5909353", "sighting_of_ref": "indicator--ccc37427-a147-4e09-b389-d964a2b71bae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650dcb07-f9db-4480-976c-b5905fa943d4", "sighting_of_ref": "indicator--35f31d7e-4425-4714-bfcc-2d9bf08f5314", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e65c92b-b788-4b44-8624-d720011acb67", "sighting_of_ref": "indicator--35f31d7e-4425-4714-bfcc-2d9bf08f5314", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b24eec9-54dc-49bc-8976-e4e55b7c628d", "sighting_of_ref": "indicator--35f31d7e-4425-4714-bfcc-2d9bf08f5314", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2579108-60dc-4faa-817f-fbeb9a57fba3", "sighting_of_ref": "indicator--32cf25b1-afd2-4c49-ab62-f50f355ad92b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b9da77-4c40-47ac-b57a-cf2cbbb0e3b0", "sighting_of_ref": "indicator--a50a7f2c-4a90-4997-8b11-64d6f4bb4b7b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6561f587-7f6e-4ab1-abe9-83ede2a2235b", "sighting_of_ref": "indicator--ab74f7c2-ab06-49e5-a49f-d7a2e3db0805", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d318db0-55d6-4158-88a3-8e9456473bcf", "sighting_of_ref": "indicator--82cf7ca8-85c9-4e88-99af-be24dbfdffe5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626d138b-710d-4515-92f8-8ff04f57793c", "sighting_of_ref": "indicator--82cf7ca8-85c9-4e88-99af-be24dbfdffe5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ab1e39-6e8d-4bbc-aa21-05a29984a227", "sighting_of_ref": "indicator--d2ba71eb-bcae-49db-9efb-118221beb843", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562fd644-8a62-4c65-bc7d-3dc60f9014e2", "sighting_of_ref": "indicator--3adefcac-c1ad-47ce-9271-2466a48a2908", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d5204e-7621-4b54-9e3c-5d38fb93f3b4", "sighting_of_ref": "indicator--d666f942-3114-4a3f-9556-58b654f69a3b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c71113a-570a-4f48-889a-8a9904258d0f", "sighting_of_ref": "indicator--281df473-266b-4f6b-828c-72362e3f18cd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eaf71e6-6b8b-4a56-a168-4028ce523cca", "sighting_of_ref": "indicator--281df473-266b-4f6b-828c-72362e3f18cd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd7d1ac-dee6-4eb4-90a6-33e00656a8aa", "sighting_of_ref": "indicator--d9c5654b-093c-4cfe-943b-f1d4d6a3d6c5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ca4af7-a423-46a5-8b00-6f90d81ab925", "sighting_of_ref": "indicator--39fe68cc-6579-4945-9523-c038e3c46823", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15310e95-0ab5-41d6-8f85-b655ae8881fe", "sighting_of_ref": "indicator--39fe68cc-6579-4945-9523-c038e3c46823", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7ebbb7-cad7-42df-9707-e16fd871c961", "sighting_of_ref": "indicator--2314d93c-80e2-4381-a186-1d25b3706f87", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a91e28-b259-4e11-962a-8f38bc0a3fe8", "sighting_of_ref": "indicator--115d67c9-9b1a-4a95-8bc5-563c13afa2b5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcebda9c-4d84-454e-9b84-4eea4d8fdb14", "sighting_of_ref": "indicator--115d67c9-9b1a-4a95-8bc5-563c13afa2b5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7cf9d4d-e09f-46a4-998d-724c4b3f0d02", "sighting_of_ref": "indicator--3f16ed5c-df93-4e5b-a5e5-8715d16bc0f3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8aafb3e-78e1-47f3-92f0-18006397ad21", "sighting_of_ref": "indicator--681d3e92-105b-4ce9-8eb1-45ca73e9e6dd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41cd5981-0e4a-43a6-815b-69847c24913f", "sighting_of_ref": "indicator--681d3e92-105b-4ce9-8eb1-45ca73e9e6dd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfc8923-6f82-468f-83d9-2ffa591a16b1", "sighting_of_ref": "indicator--dd63371b-83d6-4401-bdce-946b873761f7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92922e74-80ca-48a2-ad8d-402276b66f81", "sighting_of_ref": "indicator--dd63371b-83d6-4401-bdce-946b873761f7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e0516d-c1f0-455f-ad4a-3047d361dc54", "sighting_of_ref": "indicator--dd63371b-83d6-4401-bdce-946b873761f7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5890e698-8cbc-4f50-9163-92c7f7ce24a3", "sighting_of_ref": "indicator--a4e6e0b5-f1ee-4405-816b-2622cb69d087", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90684030-9ba5-483c-ae99-c5920a6e3eab", "sighting_of_ref": "indicator--a4e6e0b5-f1ee-4405-816b-2622cb69d087", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac469b9a-c6ba-4ef9-a27f-fb641cf41b9a", "sighting_of_ref": "indicator--e9fdd431-fd30-4cfe-921a-e1e7f3eb7e9e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e5379f-2c87-445b-b492-e456e9848c83", "sighting_of_ref": "indicator--413d4ccc-8960-4777-9085-4a478f60b6ae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b2566a-f543-46b2-a887-b647e3582d1a", "sighting_of_ref": "indicator--413d4ccc-8960-4777-9085-4a478f60b6ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868ba940-5f9d-44d3-9566-596c9d17f35c", "sighting_of_ref": "indicator--413d4ccc-8960-4777-9085-4a478f60b6ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622f2552-d3cf-4236-bbad-cc42dbe436a6", "sighting_of_ref": "indicator--5c8ab7a4-85b4-4de3-b307-04ed928111bc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455ceed3-e03b-4253-8493-92440adbf974", "sighting_of_ref": "indicator--d009f27c-e7de-4e4b-a788-dbf3d2197cf0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720d6449-b8aa-460f-b12f-54a8422066ea", "sighting_of_ref": "indicator--d009f27c-e7de-4e4b-a788-dbf3d2197cf0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d6f750-a280-4f2c-b893-7703eae97207", "sighting_of_ref": "indicator--979e9383-d589-4859-b919-24a56190583f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e4d181-f89f-4dc4-b1ef-0d9ec4f3287c", "sighting_of_ref": "indicator--1889d55c-42b7-4272-9766-3d62ccc024af", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c23e19-2bbe-4cc2-94d1-c231e8da42c2", "sighting_of_ref": "indicator--cfed5476-e213-44c6-bcf9-0adc15e29b17", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b10c96-1454-491f-8701-fcdb5d260c62", "sighting_of_ref": "indicator--cfed5476-e213-44c6-bcf9-0adc15e29b17", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c3b0c6-d6ca-44b5-aede-fc5c52efc461", "sighting_of_ref": "indicator--0be4f2ce-d674-4b63-a420-74dc2f0b2e0c", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3b6e0a-6421-481b-bdef-108d57517628", "sighting_of_ref": "indicator--292f4db7-aa35-4727-810a-a7c7d37e9bbc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b129713d-d303-46c7-8822-9ba79ccc8407", "sighting_of_ref": "indicator--292f4db7-aa35-4727-810a-a7c7d37e9bbc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9663eb-8b53-4fff-9a2a-d7f074fff742", "sighting_of_ref": "indicator--292f4db7-aa35-4727-810a-a7c7d37e9bbc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361eae90-9d1e-445d-87d0-49f6be66f29b", "sighting_of_ref": "indicator--06af8fd4-a1af-4ec0-b9bc-0110622bf726", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfde036e-cf2a-45e5-b3c6-fa50ae02c08e", "sighting_of_ref": "indicator--bfb31bec-dc23-40fc-83be-f9ddc21ae348", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa730e8d-7c0d-4809-b317-bfebccd5a46c", "sighting_of_ref": "indicator--dc624f81-172f-48a4-988e-d7631df8d3ff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e36bd71-a9d8-4473-a940-6379c7fe7777", "sighting_of_ref": "indicator--dc624f81-172f-48a4-988e-d7631df8d3ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831147e6-4dba-47d6-aad6-675fdbeb9448", "sighting_of_ref": "indicator--66756c03-2cef-4063-bad3-f45d9b0fa104", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824ec39a-055a-42cd-9208-e1935860e8fd", "sighting_of_ref": "indicator--81d20f2e-e4a2-4d05-91fc-f79097c2b572", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e9470d-f270-4eaa-9c11-6181dbb728e5", "sighting_of_ref": "indicator--81d20f2e-e4a2-4d05-91fc-f79097c2b572", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c741b6e6-48a1-4f2f-b8e0-037f63a37fb4", "sighting_of_ref": "indicator--81d20f2e-e4a2-4d05-91fc-f79097c2b572", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2dbd02-55a0-4588-892a-9f75f2b96644", "sighting_of_ref": "indicator--1a80039e-e956-4633-b059-70bd2474a8f3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d9d3dd-8047-421b-af85-f9554cbd0d72", "sighting_of_ref": "indicator--1a80039e-e956-4633-b059-70bd2474a8f3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d93a3bc-45bb-4832-9214-753889a701a2", "sighting_of_ref": "indicator--1a80039e-e956-4633-b059-70bd2474a8f3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9daf18d8-1c99-47e4-904f-44a817d649a9", "sighting_of_ref": "indicator--883da02b-bb21-46f9-b556-078183d0d487", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c55449-62ba-490e-9cc8-14719c76fc48", "sighting_of_ref": "indicator--883da02b-bb21-46f9-b556-078183d0d487", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138dd88b-e7aa-4b75-8637-61b9322a6f8f", "sighting_of_ref": "indicator--883da02b-bb21-46f9-b556-078183d0d487", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5bf565-56c0-4306-808b-e9e7de526cb8", "sighting_of_ref": "indicator--0e81b760-1b9e-4f3d-b7c3-21a3bbf2c9fe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792647eb-4c28-49df-92d4-c4c7e7b52629", "sighting_of_ref": "indicator--14c785d8-e29b-4a8b-8a9d-2362b0175a5e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dac8980-6c61-442b-b64a-946af590324a", "sighting_of_ref": "indicator--c4f99276-3bb1-4875-a41d-4f0ed56bc8b2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f33f0d-0b04-4ad2-a2b5-f1830ee787f5", "sighting_of_ref": "indicator--c4f99276-3bb1-4875-a41d-4f0ed56bc8b2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977dc2d5-a1d2-419b-9d7b-bba30f779281", "sighting_of_ref": "indicator--15930d89-0e03-4cbd-ae32-a19feee6ea80", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12394c6c-a957-4fe7-89fb-1630193769bf", "sighting_of_ref": "indicator--4b054d82-1b4a-47c3-b607-23b6cd98da74", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c6d614-26e0-43ae-a1d8-a7fc46672916", "sighting_of_ref": "indicator--cbc30c14-c251-41a7-8eed-9a673e82f411", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172120db-4793-483f-9177-50c0e667bfde", "sighting_of_ref": "indicator--469e0b98-f9d2-4175-b077-65b9cfe2489c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4ac4f5-521f-47fb-bfbe-7ac5018eb1e4", "sighting_of_ref": "indicator--cf3abd3d-ca65-4e30-b492-07c3edb39999", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cbbca3-1e52-4487-affc-34b2efcde0ed", "sighting_of_ref": "indicator--42493f6f-27a1-4066-b46b-5367b8df7d9e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78abb8ee-3692-4dc1-8975-e5b3345dbe3a", "sighting_of_ref": "indicator--31527df8-42bc-420a-aa08-b37f0eab8aa5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166cd6cf-8b85-4fa9-b9b2-e307fcb77ae1", "sighting_of_ref": "indicator--31527df8-42bc-420a-aa08-b37f0eab8aa5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e904679-8e04-440a-825a-679d92074052", "sighting_of_ref": "indicator--385b88bb-0db2-4c35-b8d4-d7bbc6f3a3be", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fef33f6-da14-4fbb-95be-4b335e391acd", "sighting_of_ref": "indicator--e54784bc-d708-45e8-9097-24ee8fd1fa32", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f93076-6381-4128-a9ce-984e6f6a239b", "sighting_of_ref": "indicator--e54784bc-d708-45e8-9097-24ee8fd1fa32", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53027bae-76bb-49e6-b590-ddfb565dd413", "sighting_of_ref": "indicator--e54784bc-d708-45e8-9097-24ee8fd1fa32", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcae25af-8505-416b-8b75-fe33d90e2f2e", "sighting_of_ref": "indicator--9a050c01-3b9e-4a23-8f30-bd07e7ea0c3b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91ec928-4f83-44f0-9364-d92db351f341", "sighting_of_ref": "indicator--9a050c01-3b9e-4a23-8f30-bd07e7ea0c3b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6618a3dc-072a-43a3-9778-ceba7028d799", "sighting_of_ref": "indicator--1d40fe85-b862-424d-bd53-03f2e32a6fa3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fcf61f-88a8-4433-bd69-d72f8833a186", "sighting_of_ref": "indicator--1d40fe85-b862-424d-bd53-03f2e32a6fa3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d105e4a5-10c1-4d91-959f-41efd39d5ef5", "sighting_of_ref": "indicator--50ca8fe2-6a6e-4695-997a-8118d5800fe4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c072aa-172b-43ea-a8c8-6ec78e0ac7e1", "sighting_of_ref": "indicator--50ca8fe2-6a6e-4695-997a-8118d5800fe4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1844e34d-1df5-4de9-8f36-5f4fe2cb2137", "sighting_of_ref": "indicator--58be5b20-75fa-4e4a-8315-8f3ddaf43d9a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2625e79b-2b3c-4189-904c-ad319604c023", "sighting_of_ref": "indicator--58be5b20-75fa-4e4a-8315-8f3ddaf43d9a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2624361d-e6be-4314-a8fc-5975fc2dc472", "sighting_of_ref": "indicator--77d98d4d-df9c-48d8-b0df-25813eaa84ad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c8778e-0026-424a-a818-6591126f429c", "sighting_of_ref": "indicator--fa4d449d-ebf5-476c-8ca7-042e7f1cd2bc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f1d46a-266c-4842-9548-3de68c3809d2", "sighting_of_ref": "indicator--29bc28b9-acf7-4c24-b8c4-4f9533f2e42f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcab55c-4081-42d3-8f20-8481e8e3fed9", "sighting_of_ref": "indicator--3e227463-6b32-48ca-aaf3-ed8bd434432e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6068f0c5-b4d6-4edf-8e28-b9636921456e", "sighting_of_ref": "indicator--3e227463-6b32-48ca-aaf3-ed8bd434432e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07dce1cc-6280-4fee-a125-585e6b2014e1", "sighting_of_ref": "indicator--d776d3c0-af4b-4be7-9894-d7fbc2b35844", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a352173c-a598-42b8-9f4c-c4a3a92efb59", "sighting_of_ref": "indicator--d776d3c0-af4b-4be7-9894-d7fbc2b35844", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0a83a0-bc29-4c11-bb62-f872ec0afcc3", "sighting_of_ref": "indicator--d776d3c0-af4b-4be7-9894-d7fbc2b35844", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c87476-472d-438c-b89f-0026c5c93e7c", "sighting_of_ref": "indicator--e82436ae-9b2d-451f-b954-fc13b70cd190", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c48244-3e7c-46d3-b1e9-722ce7b4e371", "sighting_of_ref": "indicator--a1d4e427-aa42-4bda-be79-dcb815ab2d24", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7a043d-2e7f-4f40-a586-c718a427d1f8", "sighting_of_ref": "indicator--a1d4e427-aa42-4bda-be79-dcb815ab2d24", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b9544b-e364-47af-b011-d279b76fb26f", "sighting_of_ref": "indicator--a1d4e427-aa42-4bda-be79-dcb815ab2d24", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7fa45c-4613-4dde-99d1-75d8173c0200", "sighting_of_ref": "indicator--3d991f88-6da3-490a-b729-952bdf568d8c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15e2943-8f20-4f65-b5cf-6cd692e4fdb5", "sighting_of_ref": "indicator--3d991f88-6da3-490a-b729-952bdf568d8c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5108bec8-1c4c-4c96-88e9-f08daa8602a7", "sighting_of_ref": "indicator--83a46d77-e724-46b6-8932-6ab8c08d5973", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556ad2a1-ee25-4586-bab8-b34a4ca6fa21", "sighting_of_ref": "indicator--83a46d77-e724-46b6-8932-6ab8c08d5973", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d936dadd-cf3f-4bd9-ab3f-40df99367010", "sighting_of_ref": "indicator--12e25878-db31-4d41-b011-528a57745991", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d8cfb2-225a-4c6e-bd5a-925e0956e829", "sighting_of_ref": "indicator--8ae6d620-4702-47df-960e-15f050299126", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd3e9d7-24a6-4a49-8571-4e13a96671c1", "sighting_of_ref": "indicator--8ae6d620-4702-47df-960e-15f050299126", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b0e065-96dc-48c9-90c8-84918e68203c", "sighting_of_ref": "indicator--c402ccfe-1ffb-4fe8-8295-836b598db533", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddf163a-e99e-47f7-9290-4ca6e6c2cd07", "sighting_of_ref": "indicator--c402ccfe-1ffb-4fe8-8295-836b598db533", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866cef71-ad33-46a5-b3d3-0ae8c221b181", "sighting_of_ref": "indicator--d5fa152f-aee6-4156-bd39-705f5dbbe422", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59880ba1-ed51-4382-a7aa-bb6e48388467", "sighting_of_ref": "indicator--d5fa152f-aee6-4156-bd39-705f5dbbe422", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535bc680-8bf4-479e-998b-537b252b0253", "sighting_of_ref": "indicator--a8e70b65-2ea8-4134-b010-cf4cf8ca95bf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d9a2d5-1ecf-4e01-bf32-f1f44bf47c2a", "sighting_of_ref": "indicator--a8e70b65-2ea8-4134-b010-cf4cf8ca95bf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156ce7fb-cacd-474e-947a-0ee69c3aa1b3", "sighting_of_ref": "indicator--a8e70b65-2ea8-4134-b010-cf4cf8ca95bf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb64e9f-912a-4078-8637-49b5a5fe786d", "sighting_of_ref": "indicator--2c655a86-c23e-43eb-b724-cccbc8c5a144", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaab4e4d-07cf-4aee-9b26-1be10f2f0cf6", "sighting_of_ref": "indicator--3f5e827c-f2c6-45ca-9884-ed48cc5ad8f0", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57323f1-a06a-40da-b963-a7dc0bbe8cf4", "sighting_of_ref": "indicator--96dba17d-9b96-49a2-8563-f4d468caf7a5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e083c8fa-644a-44e7-b6fa-2b8971eff996", "sighting_of_ref": "indicator--32693f73-77f6-468c-b2a4-12bc0091c185", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7ed067-807b-41ce-84be-f2a1679d71c1", "sighting_of_ref": "indicator--31d6f00c-48ac-42ad-a0e1-df9eab926efa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080c4e23-58c4-42e1-843c-a93cc1057c3e", "sighting_of_ref": "indicator--57d0c4c4-e18a-49c9-9981-08b3471d835a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2dd1a0-84e8-4b36-92ea-f14aa061d62f", "sighting_of_ref": "indicator--d1c9291e-eb64-44a9-82cc-950673f87605", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0889b6e-4e6b-4491-94cb-1a9033b37e7f", "sighting_of_ref": "indicator--691aa8b8-3c5e-46bb-9b42-b8764aea6d38", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125f0dd1-d5de-4391-b534-66789c964b18", "sighting_of_ref": "indicator--a6da057d-2df3-4b7a-a1ed-c7ceaea3317d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fabad12-9026-44ba-b484-96bbd5aea293", "sighting_of_ref": "indicator--a6da057d-2df3-4b7a-a1ed-c7ceaea3317d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2ce16e-70fe-46f2-b578-54f782afe279", "sighting_of_ref": "indicator--47e65ef7-aee4-4aa0-8823-6653264bb9fa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10228f2-0d89-4fff-8891-8bb3eec5353e", "sighting_of_ref": "indicator--d0bf97bb-947e-4f6c-8697-d5751e97d8c9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabcd60d-ca51-46ad-a28e-be5ab187d67b", "sighting_of_ref": "indicator--9b64d3cc-588d-49d1-b5a7-fc8609f81149", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42216206-c835-4efb-bc2b-5f4bdeb7a28c", "sighting_of_ref": "indicator--a846e6ad-952e-446f-9c4e-ed7326d423ae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de3f1ce-7e1a-4fb3-bcf9-263d8b0fff2b", "sighting_of_ref": "indicator--a846e6ad-952e-446f-9c4e-ed7326d423ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098443eb-eaaf-407c-a121-a643d3de4fcb", "sighting_of_ref": "indicator--770ab51d-b9ab-4906-a681-83cf832e9f98", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f718223-784f-4b5c-973c-82a0cd6f95c9", "sighting_of_ref": "indicator--9d7319d9-97ca-4e9b-9477-1fc95db5b6d1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542e7145-469e-4313-affe-c6ffaf381e53", "sighting_of_ref": "indicator--d1249090-3302-49cd-b69d-bb3873c26aad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be676087-b42c-46ce-b5e0-818b5279f1ff", "sighting_of_ref": "indicator--b1fb20b9-7c01-4ceb-918c-825e9254f8ba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3964c0-ab84-4353-bf05-70ead2fdec2f", "sighting_of_ref": "indicator--0a9f4843-ee4f-44ef-a19b-7dfc48a158f5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f69adb5-3ab5-482a-b697-c112d79fb5bd", "sighting_of_ref": "indicator--0a9f4843-ee4f-44ef-a19b-7dfc48a158f5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a79304-4418-4d2a-a6e8-67d6a57e8a56", "sighting_of_ref": "indicator--0a9f4843-ee4f-44ef-a19b-7dfc48a158f5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccf5993-44ec-47c6-98d9-6147830a029c", "sighting_of_ref": "indicator--aaafd50b-c80a-4651-93b8-1b3cd414ffdc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eba9fea-8025-4551-badc-9351d44659e4", "sighting_of_ref": "indicator--fe591a78-0568-4ea5-818f-19e6bb8fc1ef", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26fb6e8-6097-43a2-9803-4161a2b98950", "sighting_of_ref": "indicator--140db8c1-f7ff-423a-a338-3db69036bb98", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075e9d57-19ae-4588-938d-0336f042338d", "sighting_of_ref": "indicator--5bb86e7b-32a0-4635-b66f-15b7fbf429bd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063f57a8-81bb-400e-9dce-99da8f69d819", "sighting_of_ref": "indicator--715503ff-a174-4800-b52b-75b80fea985f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82f1f61-ad39-42ec-ab2e-8d7b5d8099da", "sighting_of_ref": "indicator--f0f2fe8e-60f5-4abe-9a93-6c57d944d419", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26f572a-0ab1-4599-ae4c-f8ed3b07e226", "sighting_of_ref": "indicator--402e29c1-63fc-4240-b3d6-2ae460aa30fd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b31124-2df1-4883-bd92-44033d5177db", "sighting_of_ref": "indicator--a6514b5d-d32a-43c6-a819-4766159637ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a9d373-c31f-4734-9d5f-5eeccfcb436b", "sighting_of_ref": "indicator--bb7f8a57-9423-4ee1-9ef3-3622ea1d7130", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356f3c60-c454-4b2e-a403-3a9acd42332f", "sighting_of_ref": "indicator--9e523ca3-6038-48e3-add0-87a0be61a1c9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea456b93-61b3-4af3-8919-9642173dade1", "sighting_of_ref": "indicator--cd36e043-48e6-4a2c-a9e7-baec1e97a9b6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc6d289-6bcb-4d97-8255-4d0d70c43cc0", "sighting_of_ref": "indicator--cf3d9d31-e29d-4d19-9b70-ad8eb3fff20c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56da1913-2943-4c38-87de-475009e9ebf1", "sighting_of_ref": "indicator--e1322891-68c6-4640-b467-b0bcab333d80", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fe0103-cdb1-41f7-907f-4c43a3b62519", "sighting_of_ref": "indicator--993e5ccd-9ad5-41b8-a2f6-8ad409153754", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3b7287-9205-4e73-a1a8-8f175a08f1e8", "sighting_of_ref": "indicator--1bd6c717-129c-4aad-94c3-fd5bd386b745", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d68528b-50b6-4dd7-8ea9-49e05ab91986", "sighting_of_ref": "indicator--061e25a7-577b-4312-a0c9-70a34592bec2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bed73fb-9e62-4a65-b06d-314edc440594", "sighting_of_ref": "indicator--367700d7-b6a0-4bc8-b767-464b633f5d3b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1164bb-10b5-4572-890d-a1f006027f23", "sighting_of_ref": "indicator--1540abfd-4eb8-44bd-ab9c-2d4d62b12ec3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a115fa-3868-4b9c-93e0-2cf0e69a5b89", "sighting_of_ref": "indicator--1540abfd-4eb8-44bd-ab9c-2d4d62b12ec3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614b7802-ef74-4db4-873f-fd32e6757fae", "sighting_of_ref": "indicator--3f4ca208-73b8-442a-9181-141b60a18b80", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8bdd96-3862-4dd2-a37b-97ced36faf12", "sighting_of_ref": "indicator--32065f8b-bde4-40a7-8625-01f6e3d226fa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9baf9c8b-39b1-43c6-825f-4de698eccfc9", "sighting_of_ref": "indicator--cf6355f2-26ee-4599-9525-1c6577739631", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e97a558-ea66-46d8-81a5-ae53e55adb6a", "sighting_of_ref": "indicator--cf6355f2-26ee-4599-9525-1c6577739631", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc235ae-02c9-46c9-a53e-945212b57005", "sighting_of_ref": "indicator--ac96a2a3-b345-4302-b42d-77014bb2f467", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665d05b0-1d15-4554-af3c-c234ef1b516a", "sighting_of_ref": "indicator--ac96a2a3-b345-4302-b42d-77014bb2f467", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bcde5f5-a945-44b0-8641-59e42680b57d", "sighting_of_ref": "indicator--7a1396c3-a044-4e97-851f-4af3b2cd394e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbc504b-5386-445a-bb8f-7df908c10593", "sighting_of_ref": "indicator--7a1396c3-a044-4e97-851f-4af3b2cd394e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a9168b-f7fb-460e-bb9d-d0367f136808", "sighting_of_ref": "indicator--7a1396c3-a044-4e97-851f-4af3b2cd394e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7da0e8-5d88-40bf-8c57-bae7d0708970", "sighting_of_ref": "indicator--e7cc8c54-2268-4fb3-9cb3-28769444cd65", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf1b7dd-9638-4558-94db-04aef71e66e6", "sighting_of_ref": "indicator--657b307c-c9e9-418d-85a3-15a6ccd573c0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5284b828-62a2-497d-8691-18c3558e2760", "sighting_of_ref": "indicator--657b307c-c9e9-418d-85a3-15a6ccd573c0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25934671-f115-4e7a-bf69-1dbf9a93f3ad", "sighting_of_ref": "indicator--a181481e-318c-4cac-954e-5ca0d7b0e411", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40352e0a-4866-4a05-b8ba-9f5b3b85f577", "sighting_of_ref": "indicator--a181481e-318c-4cac-954e-5ca0d7b0e411", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8626956d-396c-4a05-ac1b-c2577b7cd3c6", "sighting_of_ref": "indicator--89c40719-f291-4a6e-a87b-58ab10108c06", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af5d8cc-3c7e-4461-b972-d129045df23d", "sighting_of_ref": "indicator--89c40719-f291-4a6e-a87b-58ab10108c06", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337eaa5a-2032-4c61-ad22-0fe41615db8e", "sighting_of_ref": "indicator--89c40719-f291-4a6e-a87b-58ab10108c06", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b75fa8e-f41e-441c-b5bd-6df1b6a4853b", "sighting_of_ref": "indicator--1d41784a-9797-4ab4-aefe-d919c6e47f5d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d825408b-6fd8-4705-9ceb-c4de6e64e24f", "sighting_of_ref": "indicator--1d41784a-9797-4ab4-aefe-d919c6e47f5d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360d885a-5a44-4558-b781-ea7abc361c67", "sighting_of_ref": "indicator--1d41784a-9797-4ab4-aefe-d919c6e47f5d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93656390-c64d-47f8-90b4-01e648a01e63", "sighting_of_ref": "indicator--edc4180e-8232-4fdd-a67d-ddfdb4d76bdf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8174dea-0aea-4ec8-bba7-f936c665f709", "sighting_of_ref": "indicator--edc4180e-8232-4fdd-a67d-ddfdb4d76bdf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7969e98-e5de-4a89-9add-029ec1140d81", "sighting_of_ref": "indicator--edc4180e-8232-4fdd-a67d-ddfdb4d76bdf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4dbad92-c66e-4c47-954c-53b048b48c30", "sighting_of_ref": "indicator--779af169-b971-46c2-97e2-64a660aff78d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b33287c-66be-48f4-b767-3ed801eaa89a", "sighting_of_ref": "indicator--daf4c8d4-9e60-403f-9a15-9c55ed8cd5ec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39328971-abb7-4a6b-a062-619c66fc75f3", "sighting_of_ref": "indicator--daf4c8d4-9e60-403f-9a15-9c55ed8cd5ec", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266d0600-7580-4d56-865e-14479f17f8c8", "sighting_of_ref": "indicator--daf4c8d4-9e60-403f-9a15-9c55ed8cd5ec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7d3c09-5c99-42e7-84b1-5d39e17add02", "sighting_of_ref": "indicator--9ec3f677-638a-4750-ac5a-438b01f2e061", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962f3d26-f9c5-4344-8cf3-95721d302e58", "sighting_of_ref": "indicator--9ec3f677-638a-4750-ac5a-438b01f2e061", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7a23f6-aa5f-4a43-8bfd-f942aecf3b8d", "sighting_of_ref": "indicator--9ec3f677-638a-4750-ac5a-438b01f2e061", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a41f446-5941-4202-aee3-7d5b33c5ebc1", "sighting_of_ref": "indicator--5cec718b-f194-41a2-b971-cc2488767780", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18bc4e4-121f-4952-8c07-8242499bf964", "sighting_of_ref": "indicator--5cec718b-f194-41a2-b971-cc2488767780", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68d5d4c-a413-499c-95e6-0eec62ca8ab3", "sighting_of_ref": "indicator--5cec718b-f194-41a2-b971-cc2488767780", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78257824-b75e-41c4-a288-4d4c563095ee", "sighting_of_ref": "indicator--efd4d00b-b105-46ac-b74b-272a68873e2b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b03733-1d2a-48ef-97ad-fa25797d5542", "sighting_of_ref": "indicator--efd4d00b-b105-46ac-b74b-272a68873e2b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7888a74f-e7af-4a0b-8a16-00177ce96e5e", "sighting_of_ref": "indicator--efd4d00b-b105-46ac-b74b-272a68873e2b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf0a0ac-2a4d-4051-9817-8e2cd49c2dd5", "sighting_of_ref": "indicator--d2d53b10-cf1e-41ec-8e24-1dcfb9c3896d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a9f0fe-4a41-429e-8191-0e6c9b17fa88", "sighting_of_ref": "indicator--d2d53b10-cf1e-41ec-8e24-1dcfb9c3896d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3215251-2351-403f-a869-2cd1957d98bb", "sighting_of_ref": "indicator--d2d53b10-cf1e-41ec-8e24-1dcfb9c3896d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e025ab-c702-431f-acde-4ac008d77a6d", "sighting_of_ref": "indicator--5844183c-4a9d-4eda-987e-bf0dc6a81486", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71dce37-c128-4121-b2bc-52870c8cb234", "sighting_of_ref": "indicator--5844183c-4a9d-4eda-987e-bf0dc6a81486", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d5b6ef-e321-4be6-942b-b830cccfda76", "sighting_of_ref": "indicator--5844183c-4a9d-4eda-987e-bf0dc6a81486", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0264aa28-209d-4330-9634-0765f07a3bdf", "sighting_of_ref": "indicator--b55cef45-6575-4b00-acdc-bcb2eeb3cf6e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b683bd7a-df7d-488d-97bf-d7c65bef66aa", "sighting_of_ref": "indicator--b55cef45-6575-4b00-acdc-bcb2eeb3cf6e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf51973-3934-467d-a029-8d71a49b79c9", "sighting_of_ref": "indicator--9582ad65-7908-4272-9766-d82eca106212", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84018270-1a68-42c2-b41d-73839a19a620", "sighting_of_ref": "indicator--9582ad65-7908-4272-9766-d82eca106212", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d2af76-fafc-4ea4-84b8-e38a92806e83", "sighting_of_ref": "indicator--9582ad65-7908-4272-9766-d82eca106212", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2932dcfb-578e-4ee4-a3d0-b79954681155", "sighting_of_ref": "indicator--293543eb-80ea-4d33-80eb-3a7b8387fb02", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b407652a-bfcc-430d-9042-55cdd3bb0796", "sighting_of_ref": "indicator--293543eb-80ea-4d33-80eb-3a7b8387fb02", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030075b9-761b-4107-9774-2b2eddba9205", "sighting_of_ref": "indicator--293543eb-80ea-4d33-80eb-3a7b8387fb02", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c2f98c-e318-4901-9e96-b2a7aa8ccb06", "sighting_of_ref": "indicator--6b9e249f-9d6c-407b-86f6-791d7c08f8ac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616a4b77-e3a0-4a19-b732-e3f0609069cf", "sighting_of_ref": "indicator--6b9e249f-9d6c-407b-86f6-791d7c08f8ac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879a1af5-29d6-4590-8500-76d76323e0f8", "sighting_of_ref": "indicator--6b9e249f-9d6c-407b-86f6-791d7c08f8ac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b26d7f-20dc-4d4c-8c13-fc19434293c2", "sighting_of_ref": "indicator--d04efec9-560a-471c-992e-7c2082666788", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04d1f70-c6af-49d4-abae-c1e95b97c0c1", "sighting_of_ref": "indicator--d04efec9-560a-471c-992e-7c2082666788", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49375cac-abf2-43fa-826d-c946ca7421fa", "sighting_of_ref": "indicator--d04efec9-560a-471c-992e-7c2082666788", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1385bae9-4362-4ec2-b7e7-f35f840c0d34", "sighting_of_ref": "indicator--06efcc3c-1cc9-4f14-be09-e481e52fcaa7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdab576-7693-4d64-ad92-bbf165d41640", "sighting_of_ref": "indicator--06efcc3c-1cc9-4f14-be09-e481e52fcaa7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9d634c-fc3d-4e7c-ba99-065728d4721a", "sighting_of_ref": "indicator--06efcc3c-1cc9-4f14-be09-e481e52fcaa7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba41eb5-7b4b-4203-95b6-6d34ef2a2c08", "sighting_of_ref": "indicator--eee01277-c66b-4f50-8509-9f19d015fa68", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dae6cd9-9f99-4d0e-8400-aaa3ec1f9d65", "sighting_of_ref": "indicator--bfe737b4-f1be-47f3-aa6a-4b3ccc7195ea", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7f4e0f-ca5c-4076-9caa-698e34eae531", "sighting_of_ref": "indicator--99952bfc-b0f4-481b-a3bd-84301116b0fb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610e4140-3ea2-4b9b-9e9c-b4277421ee46", "sighting_of_ref": "indicator--ef1cfe95-d7c7-432b-8101-a9962ad87227", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee434e2e-bcd0-4634-8466-2981a0b25f90", "sighting_of_ref": "indicator--907fdae5-7b8d-48da-9693-2fce32c51c2e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b94fb92-bcc7-4ce4-9819-5ed69fdfe925", "sighting_of_ref": "indicator--b3d8b291-80a8-4f9b-9edd-334d9fd6ed10", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46086a0f-ddfe-4fd2-9b36-9965e5deef87", "sighting_of_ref": "indicator--e50473a6-3139-439b-86c7-fc11fc923f11", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64770a15-f039-4faa-8a02-d9c89d8e00dc", "sighting_of_ref": "indicator--807fcfe4-2a28-4f0b-83f1-467f29d23c3e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7751d959-e525-4c5e-8968-ba4326761c23", "sighting_of_ref": "indicator--9af2f5e6-66ff-4fab-9b10-810b2e8861a9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97487aaf-edec-47cb-a527-2c971df83d64", "sighting_of_ref": "indicator--72881a33-bad7-4cc6-93ae-e73b86f338c5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0772d6-93c9-425b-ba5b-0960f901f660", "sighting_of_ref": "indicator--6dfd4426-39be-4b88-b9d8-bd74383cffa8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2e8d68-6546-4199-8e0d-b54383ae8be2", "sighting_of_ref": "indicator--c8b8d322-2fa1-4f95-975e-928ac8acde7b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9067feb6-04f1-4967-99d0-6e621ada065e", "sighting_of_ref": "indicator--c7c3310b-8f47-4e61-b087-a907544d94df", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30b46aa-1ce2-4b25-bc8a-3025ef5d39a3", "sighting_of_ref": "indicator--f63b7fe9-a6d1-4fb6-b2fb-f2b3dd2f6f11", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78724f71-5a0d-4e3d-bca6-ae003e7e70a8", "sighting_of_ref": "indicator--f58dfcfb-84bd-4f66-85f8-8b7b466c59d5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152f35d7-ed44-4436-9419-63e2a1d2f2e8", "sighting_of_ref": "indicator--c9ad80f7-d376-414a-9e29-6a2649f67aad", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d409849-1057-40ad-9c35-9b291121ef2a", "sighting_of_ref": "indicator--377ffdc6-a096-4c74-a5d9-967b4774b10d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15731d0-6496-4399-a35b-21cf23317edd", "sighting_of_ref": "indicator--687e694f-b2ad-4ac8-8f39-4174c190ce7b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9621401f-32f3-4c0b-96ba-f34b6791c1f2", "sighting_of_ref": "indicator--6fdabb06-cc58-40dc-bd62-f7bc490b4ffd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e43c104-1098-4223-b27d-846e5b5cf9e9", "sighting_of_ref": "indicator--8a4247f1-1657-4da3-86ee-45e85ce19b85", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bf1591-183a-4ecc-931f-61ae490f7812", "sighting_of_ref": "indicator--250efa1b-ea76-4d39-ae37-779229288178", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cde5053-16df-4e3f-9cc0-5a5d104d7076", "sighting_of_ref": "indicator--516da50e-8272-4ce9-887c-5d5461478ed1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e6b006-fbc6-4b01-9373-7040c4952181", "sighting_of_ref": "indicator--38a4d6ff-638e-4aee-8739-88c0e53446d2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0aa9ba4-5a5e-422c-8d3b-c1322bdf67ed", "sighting_of_ref": "indicator--22d97061-ab0c-4757-834e-c0e960f1243b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4777cbd8-bff9-4aab-a655-a02187cd0e85", "sighting_of_ref": "indicator--182eb5ea-4be1-4b47-ab42-4d6ab31e2320", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f53a733-7c91-4618-a895-8db16e365bc2", "sighting_of_ref": "indicator--6499138a-e920-4131-bff0-9ea19d66cf18", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ea5efd-1d4a-4bdb-a29e-6c87b5407ff5", "sighting_of_ref": "indicator--6499138a-e920-4131-bff0-9ea19d66cf18", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a6588d-b478-40f7-96ea-4f5bcae4c145", "sighting_of_ref": "indicator--243d6e64-b330-4eb9-8d81-a43e456550fe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece5274d-3ca5-450e-b4af-14fc279f7933", "sighting_of_ref": "indicator--243d6e64-b330-4eb9-8d81-a43e456550fe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53fc190-b551-47f7-9403-996a9ce1eb23", "sighting_of_ref": "indicator--fb74b2b2-7d2b-4d64-8b4b-fc1830e010df", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2dda89-e11a-435f-af11-0198c59b4bbb", "sighting_of_ref": "indicator--fb74b2b2-7d2b-4d64-8b4b-fc1830e010df", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73c9f86-6993-4b3f-9347-6b94dcd8ebfa", "sighting_of_ref": "indicator--53a4082d-aef4-4166-868e-a241d8923d37", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8309d964-2492-4ca3-b4a1-d709ab0f6ca8", "sighting_of_ref": "indicator--53a4082d-aef4-4166-868e-a241d8923d37", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13e5b37-f2fb-4e13-8178-5563f71da93a", "sighting_of_ref": "indicator--53a4082d-aef4-4166-868e-a241d8923d37", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb668a6-f324-4f15-86c8-69fabde0f98e", "sighting_of_ref": "indicator--fa5bafd0-f6b8-460a-bb84-0d4d73aa7e53", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426df512-3eb8-4831-ab96-10d72489afc7", "sighting_of_ref": "indicator--e24c8582-ce90-4dfd-b585-453124c9aadf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd3b47f-9d51-4fc4-ab8e-717ab6eb4df7", "sighting_of_ref": "indicator--e24c8582-ce90-4dfd-b585-453124c9aadf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a747775-7f64-4550-a153-8f9f948d7a4b", "sighting_of_ref": "indicator--abb4f618-e781-46b4-a7d0-69d0a8c535b9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76b577f-edab-4751-8d5f-26722639886a", "sighting_of_ref": "indicator--abb4f618-e781-46b4-a7d0-69d0a8c535b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee59edc-bd91-43d8-8b80-f58939655f9f", "sighting_of_ref": "indicator--24853dc8-9067-45a2-955c-f8bc2db5e2df", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e05a45b-395b-4d77-8358-fafac39ba7b7", "sighting_of_ref": "indicator--24853dc8-9067-45a2-955c-f8bc2db5e2df", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bece1939-de2a-4e74-870a-9527a46cac53", "sighting_of_ref": "indicator--24853dc8-9067-45a2-955c-f8bc2db5e2df", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67795185-e428-4b4a-a1a3-ed60fed9d812", "sighting_of_ref": "indicator--4026edee-3c54-4ad2-8da7-4814956c2783", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267beb36-6075-4dbf-8303-2164c45f8642", "sighting_of_ref": "indicator--4026edee-3c54-4ad2-8da7-4814956c2783", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d2cd43-0a3d-4c6e-b97f-cc5b70c1cf5d", "sighting_of_ref": "indicator--4026edee-3c54-4ad2-8da7-4814956c2783", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed946393-a5f4-47f3-be39-10977997798d", "sighting_of_ref": "indicator--6bb4c1b1-e3b3-44af-aa23-32c520cfe47b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc18a97-cd13-4eea-beb2-d641f3e6e592", "sighting_of_ref": "indicator--6bb4c1b1-e3b3-44af-aa23-32c520cfe47b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38cef24-b25d-491b-a13c-86bedbc0dca1", "sighting_of_ref": "indicator--b8479bc7-2378-42fb-90ce-a7ad069c1cbf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafc157a-cd83-4377-9738-a62f420a020e", "sighting_of_ref": "indicator--b8479bc7-2378-42fb-90ce-a7ad069c1cbf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5dbdb6f-48fa-47b6-bf6f-2c64a52f8289", "sighting_of_ref": "indicator--2d380bd4-7b7f-4722-9fe0-0ffc0224ff25", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b31f7b7-14c8-4022-a3a9-4029b0ce7f0b", "sighting_of_ref": "indicator--d3331a48-1e44-40f5-904b-b080a94ffb04", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec1bc76-1bfb-4903-b017-7574532e28af", "sighting_of_ref": "indicator--d3331a48-1e44-40f5-904b-b080a94ffb04", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca98dbfc-f274-4e65-af10-20d4c92e09c0", "sighting_of_ref": "indicator--d3331a48-1e44-40f5-904b-b080a94ffb04", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc798545-d6e9-499a-85ec-ea0adc943bfb", "sighting_of_ref": "indicator--3b15de77-75a8-4dd2-aebe-1558a343538f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff080155-bd61-46f2-8396-079201149463", "sighting_of_ref": "indicator--3b15de77-75a8-4dd2-aebe-1558a343538f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfd49f0-80d4-4a01-b913-8da49cc4986e", "sighting_of_ref": "indicator--bdb0ea97-d8dd-45b6-a5c6-370d0aecaaac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111aa5d6-d7f9-425f-9116-7e2bff947453", "sighting_of_ref": "indicator--bdb0ea97-d8dd-45b6-a5c6-370d0aecaaac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449d44e8-2f9a-46b9-a245-f7c387662654", "sighting_of_ref": "indicator--903bdacf-0aa5-4c3d-8dcb-cc1f6a61732e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5e4357-6485-4622-9d72-1b206355645c", "sighting_of_ref": "indicator--118878ec-f4d1-4e2f-a17e-78ffa0988112", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881cf3d5-151d-479d-97aa-dbca2debbaf7", "sighting_of_ref": "indicator--7d480657-a682-4fa7-95c4-99e3fdc6c213", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edea494-45fd-4c00-bbcc-836b18aa4e92", "sighting_of_ref": "indicator--0b8fe518-41c7-4c0c-9428-c9b35fed0aa1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bb5ae4-7d15-4beb-a8a4-3e2e358af80b", "sighting_of_ref": "indicator--258b66ba-4a74-408c-9bef-654c7a13850d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5e3e79-4285-46bd-b7e9-492652fba93d", "sighting_of_ref": "indicator--f49661aa-d59a-43f6-84db-b3136afa54ab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b08c07-19de-40dc-9243-fc02b1cf1acb", "sighting_of_ref": "indicator--ab27d1f9-6d86-41dd-88af-c0e574ea4d47", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1f7e2a-c3af-408f-b51c-3b8d44f94ba9", "sighting_of_ref": "indicator--fa13d925-a2fc-4ce5-a281-9e8f164e8dec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca3510c-238a-40c3-8145-58e67d500ecd", "sighting_of_ref": "indicator--cf529719-9811-4661-a697-5eb07e312fe5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7dfbf6-f11b-4807-9ef1-cd41f688dc23", "sighting_of_ref": "indicator--cf529719-9811-4661-a697-5eb07e312fe5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de03f76-7b36-4fc9-aa58-7a6a0e2099a8", "sighting_of_ref": "indicator--cf529719-9811-4661-a697-5eb07e312fe5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1eb65b-3d24-4833-bb40-537ea7a1ab3b", "sighting_of_ref": "indicator--32f91643-bb02-46cb-885b-8c9a29fc5f15", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f724e3-63b7-4dfc-97bf-e293f3acc1a5", "sighting_of_ref": "indicator--9e3a8869-a637-4ddd-acad-e5cbc9a5bf71", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8dd1a70-4bd4-46cf-b3e7-f8ac2260bec4", "sighting_of_ref": "indicator--025d6a10-4944-4f80-b7a2-ced533455925", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2bbc44-41da-46c1-bbb1-d3c846d89156", "sighting_of_ref": "indicator--c1eb7fe3-b55b-4c28-9154-7193a0701c5a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d3bdde-0e36-4c79-8f5a-5781a000c87c", "sighting_of_ref": "indicator--9a78b8ac-a885-4aaa-b873-e6acb1ddc8d4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33ddf2d-9432-41eb-97bc-5d544d490b97", "sighting_of_ref": "indicator--9a78b8ac-a885-4aaa-b873-e6acb1ddc8d4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e8380a-8f39-4629-a487-65ecd5dbf2fe", "sighting_of_ref": "indicator--11b4d878-1865-480c-b54f-3b4e14be9751", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef44789d-e4c1-4947-aee5-dd84a77936b8", "sighting_of_ref": "indicator--11b4d878-1865-480c-b54f-3b4e14be9751", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6633b97-448f-4031-a233-faf329db5b64", "sighting_of_ref": "indicator--b317b809-e2e9-4aaa-bf71-4fb2f3d14d7f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92b406c-fd99-472c-ae36-19c9740677df", "sighting_of_ref": "indicator--ab51977d-a008-4a8c-8da6-230ca78781df", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03002cd5-f0f2-4899-a168-2f183e7fe6f7", "sighting_of_ref": "indicator--ab51977d-a008-4a8c-8da6-230ca78781df", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d9cc37-15ba-49d4-9568-f46a378a2d2e", "sighting_of_ref": "indicator--ab51977d-a008-4a8c-8da6-230ca78781df", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4585d168-4652-426c-8ed7-c0d4cf91e5ee", "sighting_of_ref": "indicator--3bf01d60-bfc2-43d7-9832-dc62ab94ddee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cefd95-cf45-4cb4-904f-33086a3d8aed", "sighting_of_ref": "indicator--add80ca6-a4be-418a-8797-fa306a3df806", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac22f2b3-335c-4dea-a69d-8660ac95ba09", "sighting_of_ref": "indicator--2a464ea8-ee31-4cc5-8a2b-12eb90c46bdf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427186ff-3bc7-4686-b70c-bf6ed48a2dd6", "sighting_of_ref": "indicator--58e8e2a0-ae79-41ce-9161-1c940f3bb207", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81598939-488a-4ba4-927c-f65d564e25cf", "sighting_of_ref": "indicator--2afe72b5-5264-4a64-8540-108836f6bd28", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da433386-d6bf-4923-945c-ac9e680d5612", "sighting_of_ref": "indicator--a336d6b5-be49-458c-b2e7-6928065ed439", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113b8d49-6e2d-42f2-a1b7-09c9803332c2", "sighting_of_ref": "indicator--5d68ab1a-3b33-4f5a-99a4-26b712c8c17c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a49de6d-e085-4c15-8849-a7c943fcadc4", "sighting_of_ref": "indicator--acdf09d2-7233-4864-8e4a-4acee2275d50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b16712-1188-4448-b47f-f3edcff11b77", "sighting_of_ref": "indicator--b170a92e-84db-4aba-ad81-d83b5d34c707", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b020b14-5185-4f36-b7e6-6f0f7890bf36", "sighting_of_ref": "indicator--8131efab-3425-4ac6-a88c-b76a056413e3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baedcb15-7c0f-4fe3-8fd0-5d7e39e6f73d", "sighting_of_ref": "indicator--8131efab-3425-4ac6-a88c-b76a056413e3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5dbed1b-cce7-4931-a0c0-7212e65d9587", "sighting_of_ref": "indicator--8131efab-3425-4ac6-a88c-b76a056413e3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bce6daa-1726-4f7d-89c7-4603172a42fc", "sighting_of_ref": "indicator--9886823c-bcfb-4b16-98ba-e1f9d7abf66c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404c2f99-c3cf-46c3-bcbb-c7bde020f2c4", "sighting_of_ref": "indicator--9886823c-bcfb-4b16-98ba-e1f9d7abf66c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8152fc78-6ded-4f08-9fa1-a42e9b163ed3", "sighting_of_ref": "indicator--9886823c-bcfb-4b16-98ba-e1f9d7abf66c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfd6ed4-f7b1-4c7d-a95d-e735bfaf085a", "sighting_of_ref": "indicator--59f6f1b2-c503-4355-9c44-d44aa85c7e7e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d5b912-f122-496a-9e53-6d13aa28e77a", "sighting_of_ref": "indicator--59f6f1b2-c503-4355-9c44-d44aa85c7e7e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c82284-aed8-4256-87af-1697aa3f612b", "sighting_of_ref": "indicator--59f6f1b2-c503-4355-9c44-d44aa85c7e7e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30abaaa0-8977-485f-a1a3-68ebdcd89128", "sighting_of_ref": "indicator--d7feb2d8-d661-48ed-99c9-ce6af92d67ee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5985cbed-bca7-4140-900a-be6b5e635f77", "sighting_of_ref": "indicator--d7feb2d8-d661-48ed-99c9-ce6af92d67ee", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af945b08-5b29-475d-bcce-9e46f0d49797", "sighting_of_ref": "indicator--d7feb2d8-d661-48ed-99c9-ce6af92d67ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6390741d-dad3-4597-adf4-aa1cee27e7a4", "sighting_of_ref": "indicator--8fd64d60-6b29-43ef-adeb-26fd0ced47ec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71c293f-e855-4fae-bc5d-5a83de671920", "sighting_of_ref": "indicator--8fd64d60-6b29-43ef-adeb-26fd0ced47ec", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4962516c-231a-4001-bbab-13d7b60a3552", "sighting_of_ref": "indicator--8fd64d60-6b29-43ef-adeb-26fd0ced47ec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593c2652-4cbf-4463-96ca-5f0bbcc9d96e", "sighting_of_ref": "indicator--1a653f7e-7a1b-4e49-8b36-7692cc5bde8e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18f8d8c-762d-46c1-84d4-f04166136ca3", "sighting_of_ref": "indicator--1a653f7e-7a1b-4e49-8b36-7692cc5bde8e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3af428-8363-4a94-ad44-0ccf48c4ba71", "sighting_of_ref": "indicator--1a653f7e-7a1b-4e49-8b36-7692cc5bde8e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a18e8b-dbf9-4986-a7b4-d899e355bed9", "sighting_of_ref": "indicator--ea476371-a932-4410-8712-2b0a6814a7ac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef13d770-937b-4f28-aaeb-15f48fd2f9eb", "sighting_of_ref": "indicator--ea476371-a932-4410-8712-2b0a6814a7ac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cff7d18-9003-4c82-9fed-59597a012477", "sighting_of_ref": "indicator--ea476371-a932-4410-8712-2b0a6814a7ac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7017559a-aca5-4f60-9a1d-9027416e810a", "sighting_of_ref": "indicator--ae821841-be53-471b-884f-f6056b79594c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4fdbae-d41f-45bd-bc4a-d2ace912ff42", "sighting_of_ref": "indicator--ae821841-be53-471b-884f-f6056b79594c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf94e47-c324-41d7-941f-cbe47f3972be", "sighting_of_ref": "indicator--ae821841-be53-471b-884f-f6056b79594c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54a4caa-b14a-4853-982c-6df65c3b0ae5", "sighting_of_ref": "indicator--aefc6436-ac35-4602-99d0-f53449b86a9a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc4c893-b2a5-4bd6-95fe-4f7b4f63b3e1", "sighting_of_ref": "indicator--0669cb30-9575-4658-a5cc-30d6b749d62e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352f7663-8d0d-4a9d-a5f4-1ef714015193", "sighting_of_ref": "indicator--fea9a1ee-a332-4bd9-b1c7-8678e482ceff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f470d578-8384-496f-ae6b-1830ff01b41c", "sighting_of_ref": "indicator--fea9a1ee-a332-4bd9-b1c7-8678e482ceff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52debd7-618e-40b2-b8f1-98bfc3b0361b", "sighting_of_ref": "indicator--2e6d99fd-1d26-47a1-8bcc-91639eeacf28", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c562af-335e-4fc0-98cc-1577a10e4578", "sighting_of_ref": "indicator--c577f65a-babc-456c-a636-80777c7636aa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f072563-1e38-4df1-b46e-c3b3d92d5eb8", "sighting_of_ref": "indicator--c577f65a-babc-456c-a636-80777c7636aa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca7db23-0380-4fc9-bfa2-20ab52439717", "sighting_of_ref": "indicator--468a0d24-ee01-41fe-bee3-ce7e8ab10621", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8232c589-bd60-4ce2-83bd-0930b06c31f8", "sighting_of_ref": "indicator--468a0d24-ee01-41fe-bee3-ce7e8ab10621", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf50e9f-6eeb-4b39-9f96-236e821d52bd", "sighting_of_ref": "indicator--b1baae70-de60-4796-9eca-53049148d2dc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fc9b02-6cef-4cb0-8713-2a3c28a97d85", "sighting_of_ref": "indicator--05710aa4-57fe-4938-a9fb-83dba2b4d5d9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f75a14-0338-4a10-94a7-9f2b4d76b33f", "sighting_of_ref": "indicator--67c39e3c-dbe1-44f2-8108-7156efbfd7c2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f7045a-7beb-4f8f-ae6d-922106990ee0", "sighting_of_ref": "indicator--12f5c63a-e260-4138-a801-12554454f57c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221aa312-5128-4140-9c1e-caa6cc4e5558", "sighting_of_ref": "indicator--5a26ca6f-8122-4970-93e5-58ada9fc9d33", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f7b207-dfe5-4b6f-919b-923cedf8d99c", "sighting_of_ref": "indicator--ed283a68-1d16-4995-96c4-88ed7a2a8e94", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61627db3-075b-4d5e-8f36-b9e281a1ee94", "sighting_of_ref": "indicator--21e135a7-1f45-4e57-9403-c661e618aa03", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b84a4c-590b-4824-b140-439b199a9f27", "sighting_of_ref": "indicator--cfcf16eb-5dd5-43e6-bea6-39fb334dc09c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4eb645d-6fe3-4778-83f7-959fc0f0367d", "sighting_of_ref": "indicator--517df748-cbbf-47d1-8cbd-97e4deabc961", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a73493-eb83-45e0-8985-219c03480cff", "sighting_of_ref": "indicator--4b53265f-2c2b-4b1e-8f42-fc233bfabe4f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cafaec83-4f26-40a0-87da-d18bac161099", "sighting_of_ref": "indicator--938d17f5-b54e-4860-832b-976fb5276b9c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2627f369-aecc-4223-8dbb-8ace7dc484c1", "sighting_of_ref": "indicator--af0e8161-22ce-4579-8702-cea06b9d621f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91908a5a-f9b9-4af8-bc85-bcacaef507d4", "sighting_of_ref": "indicator--112c9047-e32c-40f2-b222-c2856f438490", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b7be6e-0b1c-46d7-9690-6417890cb2ee", "sighting_of_ref": "indicator--13a3ff5e-7f02-45b4-a815-578bd9cadf02", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640f12ab-1933-4751-8147-ff07c69fecea", "sighting_of_ref": "indicator--13a3ff5e-7f02-45b4-a815-578bd9cadf02", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c684616-bc43-44d7-b1c0-e8edca5343c8", "sighting_of_ref": "indicator--5e4f95a8-45db-4175-aa96-3a0af62311f8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662f3b62-e1e6-4045-a235-1daca34381ba", "sighting_of_ref": "indicator--69cd2f35-9308-40cd-8041-f5c655c7f2d8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b863aeef-a5ad-4e2b-b08c-35ac1e2bd664", "sighting_of_ref": "indicator--26961425-448b-42d2-ad9b-87958bf44703", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b4954a-71cc-44e1-b635-0db6285bcbf6", "sighting_of_ref": "indicator--26961425-448b-42d2-ad9b-87958bf44703", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b6e0fb-bed0-443b-84dd-e9a65f2dc950", "sighting_of_ref": "indicator--b4800eee-90b0-459b-87b0-22a20d7d8d99", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e98839-733a-4d8b-81f3-fa207b642a89", "sighting_of_ref": "indicator--b4800eee-90b0-459b-87b0-22a20d7d8d99", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c0184a-450c-4929-bb68-ab16a8cac078", "sighting_of_ref": "indicator--4a6a07a6-09dd-4b65-832c-91f0b06170b5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc39f23e-a7e1-404d-a56a-c90c348f74ec", "sighting_of_ref": "indicator--4a6a07a6-09dd-4b65-832c-91f0b06170b5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddb1e0b-3390-48cc-9757-4b1519e413af", "sighting_of_ref": "indicator--4a6a07a6-09dd-4b65-832c-91f0b06170b5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d299fb0-9bae-488c-a3a7-3fb1e80e7fea", "sighting_of_ref": "indicator--052e7874-52cc-481b-9f0c-acb61e91625c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7769f0fb-511e-4ec6-87f4-53fca4ec6b9a", "sighting_of_ref": "indicator--4ef3acec-35aa-4fb8-9f44-0aa390f844d7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3f2bcc-61f2-492b-894f-3d33e018d447", "sighting_of_ref": "indicator--066821ef-a343-4a5a-802c-9873330ccefd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccd3fc8-ee17-47c4-b4f9-eb7ae39bfbde", "sighting_of_ref": "indicator--066821ef-a343-4a5a-802c-9873330ccefd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1468867-5758-4466-a2d7-49a671ed445e", "sighting_of_ref": "indicator--07851957-cc3e-43c5-9bc8-8a53e26e1b7b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aed5c7b-caf7-4174-8c3f-3f83f1d533c0", "sighting_of_ref": "indicator--1de1c332-aacb-4228-a2ee-0325c8deacc9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0f3581-c415-49d3-a520-5dee89bda31b", "sighting_of_ref": "indicator--b40dfd54-7310-4e65-8a65-24462ddcdef6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b0a8cd-5c78-45b2-947f-1758f268804b", "sighting_of_ref": "indicator--d382aa24-3816-4143-afb4-9241fe53fffe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7012da6-9835-46c9-b966-7831eae268fa", "sighting_of_ref": "indicator--4c86e558-d82f-40ef-82f4-badbb2fba980", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7361f5e-1a46-4c82-9342-7942b499ef54", "sighting_of_ref": "indicator--92ea75d9-dcb7-465d-bb6e-38647e8e6035", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1ff633-9ea6-487d-9cf4-21d14b1bb946", "sighting_of_ref": "indicator--cd16b754-e895-4b59-8a6d-aece61debed6", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a582d9a5-a2c3-46a3-97a1-23931e14a923", "sighting_of_ref": "indicator--0224f60c-7c5e-4086-8f14-b0d292dd863a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5bbc4e-0e9b-4601-be90-9f218db5cf36", "sighting_of_ref": "indicator--0224f60c-7c5e-4086-8f14-b0d292dd863a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ae085e-212d-4308-b1e5-798cd8d8b68c", "sighting_of_ref": "indicator--0224f60c-7c5e-4086-8f14-b0d292dd863a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a509a93-e475-4dc9-97cb-b37d88fbb34c", "sighting_of_ref": "indicator--81410483-ecff-465b-af53-1c2fa9f75801", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e104b64-67e0-4041-9b8c-2289eb3aa0a6", "sighting_of_ref": "indicator--6c66b2d6-24cc-4882-b79f-505d7b8beb21", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1c939c-7a0a-4ef2-8a3f-631b02aa70cf", "sighting_of_ref": "indicator--8362ed16-a5dc-4d2c-833b-6aac5e86bbba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22dc92f9-9499-4ef2-9c74-6e0c3a042b96", "sighting_of_ref": "indicator--063f2b76-3964-4e99-a08b-2e8ccb4f6f46", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fee2cc5-15df-42e3-a84c-0ea3a8968027", "sighting_of_ref": "indicator--60af58f1-bc42-4f7c-b3e3-bc818e77a814", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb203ab-b27e-42bb-97b7-c526aeb7fd25", "sighting_of_ref": "indicator--811550ab-9abe-42f5-819d-c0fb47161f5a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8a0a87-76c1-4050-8264-dfbbc2f094ed", "sighting_of_ref": "indicator--87e18db6-625b-45dc-ba0a-9ca5e86163c7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f326a4-b777-4cf0-b8a4-7af789f005ac", "sighting_of_ref": "indicator--0468e20c-c454-4c2c-a4bf-b67e38135e6e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec266a8-b452-45d4-bc0e-0c9144c1a024", "sighting_of_ref": "indicator--81e186c3-7189-4990-91fe-3320179dbdcb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071fb177-d498-4e6e-9dd3-7a3e324e5acf", "sighting_of_ref": "indicator--5304b6f5-9d95-4dd3-be07-5ffa56c7fa38", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b01369-8ef5-4837-9d87-a119b1716aab", "sighting_of_ref": "indicator--fe53aef0-523d-4142-8c59-3d5802e5cd40", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b01c2e2-b938-40ca-a72a-a4bdfc01ec65", "sighting_of_ref": "indicator--fe53aef0-523d-4142-8c59-3d5802e5cd40", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9cc89c-662d-42e9-b489-13904454a762", "sighting_of_ref": "indicator--02bd4ecb-998b-4c5b-a437-a0074456ceaa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7ae06e-3590-49cb-82a0-2ceb63efc84c", "sighting_of_ref": "indicator--12e95715-c449-4d46-b27b-0a99edf4b564", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0feead6-3213-498b-85be-c71507f68157", "sighting_of_ref": "indicator--ebf2f28d-ece6-4a97-b7fc-5c7d2f416c16", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b1e617-acba-4a58-be13-2150d7d7dc7d", "sighting_of_ref": "indicator--c98ffd29-608b-492f-87ab-5e9b2709d344", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f80c5c-b220-4130-8810-a62f0abdabfd", "sighting_of_ref": "indicator--200fab23-7ecd-4422-8c0b-63d03236180c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be23133-c3a2-480f-a63e-28da26b7cbd0", "sighting_of_ref": "indicator--bcc65414-b79c-4ebb-95ef-a93f206f9516", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5770a4e-a1b6-45b3-b913-bbaf2f0d4631", "sighting_of_ref": "indicator--b9031e6a-f61c-4456-bff6-6e51d362347e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f827f86-6b9b-47db-87bf-3c9f68b6b37d", "sighting_of_ref": "indicator--5f152132-7650-45ad-bcca-2e8d3d8cfc2e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78111a2c-1304-4845-87cd-ace20404e88a", "sighting_of_ref": "indicator--7f82f692-3a75-4b64-bb9c-2ee1b3146a66", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7692e6bd-d2cd-40a6-98ce-a86114f1f478", "sighting_of_ref": "indicator--7f82f692-3a75-4b64-bb9c-2ee1b3146a66", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66267dc0-07ff-4476-a484-8c190d52b061", "sighting_of_ref": "indicator--0e36e753-6b96-431b-83ce-3cf3c7db3e0f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e3b590-eeea-408f-9b00-c859cd934bcc", "sighting_of_ref": "indicator--bfb3cb40-fec8-481b-b93a-0910ff7b7073", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7faafc-7463-4203-83a4-86abcff0e34b", "sighting_of_ref": "indicator--c83da82a-9c4d-40a5-92c4-4fa8de7b26d7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4146e122-5818-475b-bc86-eec41483dbe9", "sighting_of_ref": "indicator--82f6f45c-1ff2-4385-ace9-4d12f37e5c0b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0660bd69-6598-4175-98cd-d05223ab1369", "sighting_of_ref": "indicator--ec1d339a-bf1b-4094-a75d-7c253d723bc5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa03a1a-cb1d-4e00-9d98-6efe12ec3467", "sighting_of_ref": "indicator--1a49451e-ee85-4493-9349-a7be89943a01", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58783fe-73b6-42c0-9c02-17f653868222", "sighting_of_ref": "indicator--12ef6cbb-a510-4d7e-a757-d1cc5c583801", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c105ad-1a12-4dcc-a7a3-242ed3c5d4fe", "sighting_of_ref": "indicator--12ef6cbb-a510-4d7e-a757-d1cc5c583801", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a02dde-0873-417a-8c23-a54b78e3717c", "sighting_of_ref": "indicator--0ec23d6d-a292-423b-9a23-e756ff24a01a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321ce272-e1f7-413a-98e4-a0b627532150", "sighting_of_ref": "indicator--42cd1ea7-dce8-48e5-9777-b3b89d6e90de", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a2cbc1-41c3-4a17-abf8-85ef727a6a1b", "sighting_of_ref": "indicator--76902c47-156b-4a2e-82bf-29e25c5c1833", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76137bc9-5eb9-4c6e-84e9-ceffead1ce9d", "sighting_of_ref": "indicator--76902c47-156b-4a2e-82bf-29e25c5c1833", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247ad6df-388a-41f5-a733-cbcef1790cb2", "sighting_of_ref": "indicator--76902c47-156b-4a2e-82bf-29e25c5c1833", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8f822a-3f9d-4992-9a5c-18c07fdb2d8d", "sighting_of_ref": "indicator--52ec8343-4e82-45d8-aa2a-3784451986e0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdd48dc-f20b-49ed-bfae-a46a98887c3e", "sighting_of_ref": "indicator--ec1c21a1-6340-462e-95e4-a8e10c6cd646", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec0e0ed-5b6a-4e00-a0db-9863a1677992", "sighting_of_ref": "indicator--becc9e7f-0fb7-46c8-b271-58042bc251af", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f333325-6a1d-423f-8bb7-e09372c0c6ae", "sighting_of_ref": "indicator--becc9e7f-0fb7-46c8-b271-58042bc251af", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecb701c-1c6e-4def-b5b0-b143f01bc718", "sighting_of_ref": "indicator--becc9e7f-0fb7-46c8-b271-58042bc251af", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56aebb2-13fa-4467-951a-2b7eadec84a1", "sighting_of_ref": "indicator--b2cc63f8-e326-4ab3-9647-f8c8c0fe6d27", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08490f02-7f63-4fa7-be85-d261661e39c4", "sighting_of_ref": "indicator--b2cc63f8-e326-4ab3-9647-f8c8c0fe6d27", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351a336d-25df-4308-a0a7-c99c532a0a2c", "sighting_of_ref": "indicator--4c0a603e-def2-42de-9f77-1f50a8da9aa0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a896c3-fa4c-4097-b4af-01ef2bf05f0c", "sighting_of_ref": "indicator--071f664e-6818-4827-bd7b-29701ce7522a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a7cddc-9fab-4d98-a2b6-7cddbb3adc8b", "sighting_of_ref": "indicator--19c6063e-af56-44c7-a2f0-1a2135c2ac01", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2c6748-65e7-4892-8bfe-1be5ec4fe571", "sighting_of_ref": "indicator--957d7399-d576-4f82-9e32-6c424f686a37", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bcae9c-8af9-4ae8-bb36-ef4d35bd9556", "sighting_of_ref": "indicator--cd49e3b9-bb05-4fe6-9f85-ff2118c944e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbded85b-f57c-4a27-94a7-49d4dcb3f1b8", "sighting_of_ref": "indicator--8780092c-cf2e-4fa3-b0be-c9bbf2f7e663", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6004d027-ee25-43b3-b210-1a8173a45901", "sighting_of_ref": "indicator--825e9ffc-a678-48d5-8ba3-25c7ad6bb776", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2492d93-4750-432e-a2a7-e454d2df5b56", "sighting_of_ref": "indicator--824e5549-bfa2-42b2-875f-6bff173f9c64", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3511a23-ccd6-420b-9038-3df0f6f03593", "sighting_of_ref": "indicator--824e5549-bfa2-42b2-875f-6bff173f9c64", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4889fd45-0b52-4da9-a003-3d7f8f5b6d9f", "sighting_of_ref": "indicator--29fbb6b9-f4c5-4458-840e-7f31703c2ce0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af119ab8-c848-42ec-ab8f-d7d199b96d5f", "sighting_of_ref": "indicator--b60b02bb-4845-4f57-9119-af3e59383e5a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0049586-f0d2-486b-a019-8caafc96bdcb", "sighting_of_ref": "indicator--b60b02bb-4845-4f57-9119-af3e59383e5a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ec9f7d-56f7-41d6-aab8-6deadd0f25fb", "sighting_of_ref": "indicator--108a56da-e289-47ac-9b31-aa1d2e56a5a8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa8e74d-e17e-4adc-bac7-a8e8de1b9967", "sighting_of_ref": "indicator--108a56da-e289-47ac-9b31-aa1d2e56a5a8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe245194-f341-47a6-b58a-ad2287b9f665", "sighting_of_ref": "indicator--0177f777-01d4-4c7b-842a-71764a208ca5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09df2f66-a644-48fc-8e1e-286384b214ea", "sighting_of_ref": "indicator--9acef32c-ee30-4c58-b724-e302b510571e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec3c031-0d9b-47f8-a590-40a1f5dcb64b", "sighting_of_ref": "indicator--a02228a5-7c85-4ab2-ae30-1ad479246e0c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e6fd98-092c-4045-865d-d815eea8d93d", "sighting_of_ref": "indicator--be677056-b27a-4753-84a9-4a4868d52f7f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24396c3a-6baa-4983-b5e9-17152960d6b6", "sighting_of_ref": "indicator--f7f9e5f1-5d1e-4324-ad5a-19527f18d3e0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f9ac45-b867-4e67-80bb-edd690943bc4", "sighting_of_ref": "indicator--a91ef7b5-500a-42e3-b8a9-5b62b1aef25f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505191c6-4abe-464f-9c5a-d1f1060e4252", "sighting_of_ref": "indicator--6ee6968b-673a-4e0f-ba7b-46873f90a9d4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d972ad2a-d90f-442c-8976-c24a92934a9f", "sighting_of_ref": "indicator--7c9fab9c-e2c6-46d4-8650-e10564908fc6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c449f0fc-5737-4409-80d2-adc64c4faa8e", "sighting_of_ref": "indicator--5a257329-5981-425f-b8c2-a7be47174dcd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f57464-b646-48b4-9053-9360395535ab", "sighting_of_ref": "indicator--5a257329-5981-425f-b8c2-a7be47174dcd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850f2821-749b-4a88-a27b-9fe40357003b", "sighting_of_ref": "indicator--de5e3042-acad-4f86-9960-6ebdd4617736", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f882eca-44cb-4141-9270-6d28286d3bd2", "sighting_of_ref": "indicator--c042c32c-2dc0-470f-a77d-26f2494b8211", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273bd887-2158-435d-8439-f8675c3fa68e", "sighting_of_ref": "indicator--b15d95ea-b7a5-42e8-a994-eaac3f9b2858", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3665aa92-c13c-4b6c-8d0a-dcd02017f698", "sighting_of_ref": "indicator--06f78065-849d-4cdc-96af-fa73844afdd1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbacc1b-de87-431f-9a1c-a127061aa9ef", "sighting_of_ref": "indicator--5de4e6f8-d009-4acc-bcc0-35509f43cd24", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64b0e64-6622-4809-aa1d-0110c42f1f1d", "sighting_of_ref": "indicator--5de4e6f8-d009-4acc-bcc0-35509f43cd24", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8226dc6-d98c-4c37-acc5-1a22b549db75", "sighting_of_ref": "indicator--bea0145b-a237-4cfd-8b0c-56fd7908aa1c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1058add1-f17e-4c63-a02e-3941cca582da", "sighting_of_ref": "indicator--bea0145b-a237-4cfd-8b0c-56fd7908aa1c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b351410-2093-48b3-8917-2743d59b729f", "sighting_of_ref": "indicator--d08441ad-f78c-413c-9e09-f958637ca51b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90a09f3-f3f0-4f33-9f53-d6da7dd8466e", "sighting_of_ref": "indicator--a4e192f9-1d15-4cc6-aebb-eb055a242fe0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8ddfb6-32d6-4223-9b13-76df10f8c3f5", "sighting_of_ref": "indicator--cce90448-b530-433e-82c7-733885d4396c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ced7cf0-022a-4211-abe0-5e9abf274854", "sighting_of_ref": "indicator--735489ba-81dc-4619-89aa-ff167d43d54b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db762978-1ab9-48be-8de7-ba9893e2d799", "sighting_of_ref": "indicator--4c6bb85c-5eec-4216-b544-124e6f24f9c1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba932d6-6bfc-47a0-9bcc-c5cfad047b9d", "sighting_of_ref": "indicator--50b6086c-d2fd-4ae6-b15c-c28412d5f713", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8becbe6-1092-405d-a44d-16639125ecb7", "sighting_of_ref": "indicator--ec3f53f6-5c38-4b99-9322-91945e495f49", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9167c6b8-9f32-46ee-861b-61a95ca66eeb", "sighting_of_ref": "indicator--ec3f53f6-5c38-4b99-9322-91945e495f49", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7dacb45-a459-4d73-bf36-ad3e5d7c4a68", "sighting_of_ref": "indicator--832f424c-62b3-4aa3-8ee2-fdc66615a3b7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d049913a-db75-4315-9cdb-1d9ed52eb87c", "sighting_of_ref": "indicator--b5e0a254-79a0-4e3d-a8f5-a1df502c30df", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7492a7b3-e367-4f4e-9156-bf8ccacdb30a", "sighting_of_ref": "indicator--f0b77547-6cb6-458a-a2a4-4a99d30fa73d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad88fe5-95fb-440b-ab4e-c204961e6d41", "sighting_of_ref": "indicator--e518c950-065f-413a-9d84-356ec4544348", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b303e5e-2c94-4ba6-af00-b1bbfc9c8cef", "sighting_of_ref": "indicator--8887f863-f00d-4dc5-a592-05209e655c9a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22c7091-47cb-4508-994a-ba63392d03f9", "sighting_of_ref": "indicator--bc4626db-6303-496b-ae6f-e47b8a019caf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563eb7ff-5046-40d3-8fcc-f9899d211d09", "sighting_of_ref": "indicator--876db0f4-0323-4a61-a4e1-4f6156de50cb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e6d91a-1e92-468e-aa59-ab558f623d1f", "sighting_of_ref": "indicator--8a1869df-fa34-44b5-b753-20c4926b9175", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2cb31a-b3b0-46bd-8c45-146baf36a00e", "sighting_of_ref": "indicator--1eb494b7-517d-4c56-98a1-d9513570de45", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cec3468-0968-4c9a-ab9d-03c697c638e5", "sighting_of_ref": "indicator--78496c3f-51a4-4876-860a-cbe02fe8d3b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9eda502-ecba-4a10-8766-3c2991ccb001", "sighting_of_ref": "indicator--b10633a8-78ec-46e7-bd41-59ee0dd1be61", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85caabd-68be-430e-9252-05a8fab5e729", "sighting_of_ref": "indicator--64e44e95-8602-4ea8-af1a-4aacf0bea778", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273986b9-833d-411d-94fd-2596fdbc10cf", "sighting_of_ref": "indicator--e9f0f7ca-4e7e-456c-bf34-c7e41e990c7a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657e9acd-c84f-47a3-8347-b2ee5e6ae870", "sighting_of_ref": "indicator--b2d8e04f-daef-40f8-b58c-b98e11364c9f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec54602-64ee-4ff4-9004-f2ed8d5ecee1", "sighting_of_ref": "indicator--e61f7d50-9371-4c02-b043-e832cb1b26c6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ed93a7-2604-4af2-9eb9-88a1e495f676", "sighting_of_ref": "indicator--2390ac5e-0d73-4b9f-9540-bf00535af71e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73394a0e-86b6-4f14-b179-dfa9345f63da", "sighting_of_ref": "indicator--084aa286-d1e7-4d89-b979-60c2be77d1ee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2017a3e-0566-4550-8930-e7789d5326fa", "sighting_of_ref": "indicator--e226e02e-0d43-4606-9d0c-9df7895c5e25", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f54dcb-09d7-4775-a3a4-bd50a515294c", "sighting_of_ref": "indicator--a40965d5-003f-44f5-864a-80202374db90", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac3e7e5-7d15-4ee5-9799-49b448904064", "sighting_of_ref": "indicator--fb900a95-afe5-40af-8671-a2724b15c56b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15253ea1-6f22-4aa9-8cb4-869bef377d74", "sighting_of_ref": "indicator--fb900a95-afe5-40af-8671-a2724b15c56b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b61156-491b-45f6-9424-ff2c180d6293", "sighting_of_ref": "indicator--4eb70be0-c4e9-4ec0-9b89-3f335d5a7af6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b7ab76-5ce1-4225-bd5b-052bc1b22680", "sighting_of_ref": "indicator--9a42de47-7464-4204-a4b8-bc985836ba13", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d25c3d-8795-45c2-a117-e7d2affd101c", "sighting_of_ref": "indicator--c7687b7b-8dea-474c-ac4e-80598e277aa3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9266ed6a-bd65-49c9-90ab-edefaf085a86", "sighting_of_ref": "indicator--48166a72-767e-4ca1-b646-6e71eb2bec88", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6adbdc7-ee8d-4fa7-8c28-b175dae9685a", "sighting_of_ref": "indicator--67c03e78-db1e-4786-a07b-30bc5808546c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc169e7-9278-46f8-b6a0-b31e7b7ba1d8", "sighting_of_ref": "indicator--0907f8c1-bde4-4aac-9e44-bbceb5c523ab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5483cf-e605-464a-898e-3037ae31f5f2", "sighting_of_ref": "indicator--7608f101-8b24-40be-bd6c-81ffa6f5af4e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a39f5b-c6e8-4e4e-a4fc-f5634b4176e9", "sighting_of_ref": "indicator--89adaf40-aa34-4325-b258-92a3e98b2442", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6520228c-67d7-4675-a117-ea2754c2400f", "sighting_of_ref": "indicator--b6f3ae1d-4fe4-40fb-a3ca-8c393fcf3a6b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a788fe-8eb2-46d4-8356-e08c022d2fe8", "sighting_of_ref": "indicator--b6f3ae1d-4fe4-40fb-a3ca-8c393fcf3a6b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dee8709-69fd-47c9-8adf-09d3f521a304", "sighting_of_ref": "indicator--b6f3ae1d-4fe4-40fb-a3ca-8c393fcf3a6b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c1aea5-1139-411e-9c8b-7a3078280e21", "sighting_of_ref": "indicator--39438c9b-9d85-4f46-8cc3-71de2cf26e21", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f773cdb-601a-4478-8bc5-411747f88831", "sighting_of_ref": "indicator--39438c9b-9d85-4f46-8cc3-71de2cf26e21", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a96ef38-c68c-4117-bee5-003b40ff4c8d", "sighting_of_ref": "indicator--39438c9b-9d85-4f46-8cc3-71de2cf26e21", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ba605f-32d6-4e39-b10d-30b547f225ad", "sighting_of_ref": "indicator--7061125d-8df8-45bd-b026-bf1eec7cfa41", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d14f640-d5a2-47e4-846a-c304427ca3f1", "sighting_of_ref": "indicator--7061125d-8df8-45bd-b026-bf1eec7cfa41", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4bae40-3590-4c28-a63a-7c5e37866838", "sighting_of_ref": "indicator--7061125d-8df8-45bd-b026-bf1eec7cfa41", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a1d7d2-6c7b-426a-88d9-97b47dc24ff8", "sighting_of_ref": "indicator--a1c6b587-05e8-481a-abf8-022275a675ae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665958ee-2636-4f9e-9578-e3b025be00bf", "sighting_of_ref": "indicator--a1c6b587-05e8-481a-abf8-022275a675ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4dd69d-d38c-47d0-b813-b13c6420d7b0", "sighting_of_ref": "indicator--a1c6b587-05e8-481a-abf8-022275a675ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05494819-fa5f-43aa-a40c-92bd0454a8b3", "sighting_of_ref": "indicator--6402121d-ee6d-4e52-bb53-a711ea22ab7a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c7eaf6-6d0a-48b9-9c0c-d9567085e1d4", "sighting_of_ref": "indicator--6402121d-ee6d-4e52-bb53-a711ea22ab7a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528992a6-bd5a-467a-a84f-d0cfce5881aa", "sighting_of_ref": "indicator--6402121d-ee6d-4e52-bb53-a711ea22ab7a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb55e53c-7944-46e6-b322-f1c96a23101a", "sighting_of_ref": "indicator--74db4ab5-57fe-4368-a800-c7ce6590b7a9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc150cf-5d41-47d1-851b-fb5a7cc3df37", "sighting_of_ref": "indicator--74db4ab5-57fe-4368-a800-c7ce6590b7a9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9115d334-352f-442a-b0e4-0171775237cd", "sighting_of_ref": "indicator--74db4ab5-57fe-4368-a800-c7ce6590b7a9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c0cf5c-71a3-406c-a5d7-017778c4e981", "sighting_of_ref": "indicator--592449c9-11a3-41fe-99f3-7bf88cba170f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11aebd6-1132-426c-80b8-2f054ca17d70", "sighting_of_ref": "indicator--592449c9-11a3-41fe-99f3-7bf88cba170f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54da1e52-3da3-4eef-8a94-3e290060c827", "sighting_of_ref": "indicator--592449c9-11a3-41fe-99f3-7bf88cba170f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b986a3f-59d2-4e36-ad37-544699b6e451", "sighting_of_ref": "indicator--ba92f7a7-eba1-42cd-bc1a-36310c1369aa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9e8787-aada-41c5-9c7f-a3556036e220", "sighting_of_ref": "indicator--ba92f7a7-eba1-42cd-bc1a-36310c1369aa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2c8882-669a-48f6-960f-796b64ba4bd7", "sighting_of_ref": "indicator--bf1403fb-8d3d-41f6-ba1d-a542448f7033", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b4a74b-b67c-4837-a2e0-b4a28b886ba6", "sighting_of_ref": "indicator--bf1403fb-8d3d-41f6-ba1d-a542448f7033", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d67fb3e-5bc2-476b-9377-1abdef074451", "sighting_of_ref": "indicator--bf1403fb-8d3d-41f6-ba1d-a542448f7033", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23945f46-418e-431a-ae47-635436535245", "sighting_of_ref": "indicator--99451258-a7db-48b5-8b71-b0e50a4b6ca2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31660cf6-bca1-48b9-80a6-fab7dd9c7c50", "sighting_of_ref": "indicator--99451258-a7db-48b5-8b71-b0e50a4b6ca2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7b729c-b42e-4a14-b563-af80d62e349c", "sighting_of_ref": "indicator--99451258-a7db-48b5-8b71-b0e50a4b6ca2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22183f0f-a1ec-4e7e-b638-67921664b7d7", "sighting_of_ref": "indicator--86c708e6-c476-4579-80e5-8d230322634d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39bcbba1-5373-40a4-aff7-8ce96576a5fb", "sighting_of_ref": "indicator--86c708e6-c476-4579-80e5-8d230322634d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04237227-a38a-45f3-b8b4-1375362166e2", "sighting_of_ref": "indicator--86c708e6-c476-4579-80e5-8d230322634d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10e2393-91c4-449b-bfbb-9413eb2cfdb8", "sighting_of_ref": "indicator--36031469-d964-4a31-b827-bda2dc0dc697", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50f14f3-aae0-4a5e-9751-c8e3b198e47b", "sighting_of_ref": "indicator--36031469-d964-4a31-b827-bda2dc0dc697", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5939590-fb72-44c9-b58d-fb9d21a2848b", "sighting_of_ref": "indicator--36031469-d964-4a31-b827-bda2dc0dc697", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f6cc5a-f905-408e-bd89-1e9d64798b1f", "sighting_of_ref": "indicator--6a91b85e-4f2d-4187-80db-d214b54006bf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed182883-c562-432c-94d7-50bf6ea9bea0", "sighting_of_ref": "indicator--6a91b85e-4f2d-4187-80db-d214b54006bf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38070cfb-03dd-4095-9c1e-eb8e5a035c70", "sighting_of_ref": "indicator--6a91b85e-4f2d-4187-80db-d214b54006bf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7b78e2-1b0a-4304-87df-e19b9bd14729", "sighting_of_ref": "indicator--9edbec5d-e677-4fc6-bb3b-e6ee6a3385e0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9e7a39-6ad9-4465-9525-aaee33590409", "sighting_of_ref": "indicator--9edbec5d-e677-4fc6-bb3b-e6ee6a3385e0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533ed81f-e625-48e6-9696-08213eaa9f75", "sighting_of_ref": "indicator--9edbec5d-e677-4fc6-bb3b-e6ee6a3385e0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5aca4db-a35d-42b7-a713-4e2ee72bdb51", "sighting_of_ref": "indicator--c5c58994-a4a4-46b7-ba6f-6b7d2b3fbcf7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73111399-0f70-4d7a-95dc-905df0e2ddd0", "sighting_of_ref": "indicator--c5c58994-a4a4-46b7-ba6f-6b7d2b3fbcf7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1fabc2d-0e79-47c4-9b20-c2f1846620a9", "sighting_of_ref": "indicator--c5c58994-a4a4-46b7-ba6f-6b7d2b3fbcf7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02f6a5b-4ebe-4e74-aeed-cabf9e5aa419", "sighting_of_ref": "indicator--0f0fa7e5-755d-42b6-94c7-4264c0b148e8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbc02e8-1d40-4363-9b67-0b67f738054a", "sighting_of_ref": "indicator--d9b83610-3d6e-40ec-85f5-f647322e5b54", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bec06dd-7147-4703-bed6-58e94e5f6f94", "sighting_of_ref": "indicator--d9b83610-3d6e-40ec-85f5-f647322e5b54", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f14b21-48d5-48a9-bd96-81d4c12faa0a", "sighting_of_ref": "indicator--d9b83610-3d6e-40ec-85f5-f647322e5b54", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827e7b67-5564-4a42-a144-b6bc79f9ce0b", "sighting_of_ref": "indicator--2f543347-7217-4799-ac05-f020e83366fa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7243f64d-4f6b-4be7-9453-7e2e23868ec1", "sighting_of_ref": "indicator--2f543347-7217-4799-ac05-f020e83366fa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc50feb2-6c63-42a8-bc5c-d4c6cbcf9a90", "sighting_of_ref": "indicator--2f543347-7217-4799-ac05-f020e83366fa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a1218f-7931-43ab-a22e-1075ac921eb9", "sighting_of_ref": "indicator--b5db3aa2-210e-4823-ab24-5ca6233b12f6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b98f3b-cf1e-481a-b3bf-34163c784e20", "sighting_of_ref": "indicator--b5db3aa2-210e-4823-ab24-5ca6233b12f6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1af3629-42ee-4bd1-9c24-2d560f590693", "sighting_of_ref": "indicator--b5db3aa2-210e-4823-ab24-5ca6233b12f6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b7d843-f737-4963-9f67-37ddd44c64c5", "sighting_of_ref": "indicator--354db8f5-be2a-4882-80cf-2b039445b49b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7539ed5b-37d3-42bc-8398-15ce52733532", "sighting_of_ref": "indicator--354db8f5-be2a-4882-80cf-2b039445b49b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074bbf81-ad4f-4e08-8ba0-6007d1810fe9", "sighting_of_ref": "indicator--354db8f5-be2a-4882-80cf-2b039445b49b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c512ca23-52b1-4ba6-a8eb-3e9db8c536c7", "sighting_of_ref": "indicator--9d15a294-ff79-417e-b844-fd94d264b14a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2443cb73-fbb6-4d7f-bcf1-85ab178d98ca", "sighting_of_ref": "indicator--9d15a294-ff79-417e-b844-fd94d264b14a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9a07c3-ff2e-43d3-908d-cff80416ed67", "sighting_of_ref": "indicator--9d15a294-ff79-417e-b844-fd94d264b14a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1878f8-54b4-444c-a3b7-93de8018d621", "sighting_of_ref": "indicator--78b4aaf9-c2bd-4952-ae0a-038403d91b38", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a297bcc2-583c-47b7-b781-b3355777bdfd", "sighting_of_ref": "indicator--78b4aaf9-c2bd-4952-ae0a-038403d91b38", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b70178-314b-44d1-8c4b-5d493d8b027d", "sighting_of_ref": "indicator--78b4aaf9-c2bd-4952-ae0a-038403d91b38", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec9f76f-5c35-4d9a-a4b0-618e4ac69363", "sighting_of_ref": "indicator--f6db37d0-b5e9-48d4-837f-044582844e0b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68b780c-8413-41bd-9435-9b661cc78def", "sighting_of_ref": "indicator--f6db37d0-b5e9-48d4-837f-044582844e0b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc156dcb-3348-46a5-853d-e04902511b60", "sighting_of_ref": "indicator--f6db37d0-b5e9-48d4-837f-044582844e0b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa84c3a8-4fe3-4d6f-83cc-25f5185b49d9", "sighting_of_ref": "indicator--8c23a737-36cf-4441-83b1-90eac927afd1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41953219-5da6-417c-9be6-96851dfba138", "sighting_of_ref": "indicator--8c23a737-36cf-4441-83b1-90eac927afd1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f4d12e-c77a-4347-b448-bc9e380b8ed5", "sighting_of_ref": "indicator--8c23a737-36cf-4441-83b1-90eac927afd1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412b5c72-a4f0-452d-a518-5104ba31d4bf", "sighting_of_ref": "indicator--a4323746-07ab-4332-b19d-d7731b1b4cf3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06c3d52-2d86-426d-ae32-6dd8a668c653", "sighting_of_ref": "indicator--a4323746-07ab-4332-b19d-d7731b1b4cf3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be9aec7-3725-4f69-94b3-1a030dff56ee", "sighting_of_ref": "indicator--a4323746-07ab-4332-b19d-d7731b1b4cf3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3478487e-4f6f-4c22-8ed2-f1557e43404b", "sighting_of_ref": "indicator--9210e326-3301-495e-9352-57d79645219f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e48921-e6b6-4771-aef6-006b9b9ef44d", "sighting_of_ref": "indicator--9210e326-3301-495e-9352-57d79645219f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20acf03a-09ca-490d-a2da-38414733c711", "sighting_of_ref": "indicator--9210e326-3301-495e-9352-57d79645219f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89234c64-5a03-44db-9dab-a1f8436f91d7", "sighting_of_ref": "indicator--d5e6e935-51c9-4466-87b6-cdb650da9b04", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ff5c2b-4186-47ab-bb6d-4560c61bc61d", "sighting_of_ref": "indicator--decdb41e-941c-4007-9a98-e1f94d06cca2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363f4721-631e-4b92-bd77-d918fbda5ddf", "sighting_of_ref": "indicator--decdb41e-941c-4007-9a98-e1f94d06cca2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73eea0d5-5930-40e3-8ab3-d8e681350d9f", "sighting_of_ref": "indicator--decdb41e-941c-4007-9a98-e1f94d06cca2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9149e29-a8dd-4ef7-9c10-d3b509c2ec79", "sighting_of_ref": "indicator--814a0fbd-90e4-4562-b20c-be78393f60fa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab073c27-0f56-4aee-8a83-d17b7dd13540", "sighting_of_ref": "indicator--814a0fbd-90e4-4562-b20c-be78393f60fa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae394c38-2bbd-4d25-b6bc-ee38ca88453d", "sighting_of_ref": "indicator--814a0fbd-90e4-4562-b20c-be78393f60fa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebeff865-b3b3-41fc-93ff-9bda8fdda068", "sighting_of_ref": "indicator--565f32b6-894b-4ca2-aac2-ea7380ffa8ba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39b2616-52a9-423f-95f6-05841ac10b3c", "sighting_of_ref": "indicator--565f32b6-894b-4ca2-aac2-ea7380ffa8ba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24a4469-9895-4be1-8077-bdf1acceaea5", "sighting_of_ref": "indicator--565f32b6-894b-4ca2-aac2-ea7380ffa8ba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6fa3e9-ab8a-4470-bb81-2e072fb9c323", "sighting_of_ref": "indicator--eb62f57f-72fe-43bd-9207-d0fe8dc76d9d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d6c234-f1ef-4d0b-8d44-e95234ed9481", "sighting_of_ref": "indicator--eb62f57f-72fe-43bd-9207-d0fe8dc76d9d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feac9c6d-fc82-4044-a40e-8f982990bf0b", "sighting_of_ref": "indicator--eb62f57f-72fe-43bd-9207-d0fe8dc76d9d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940f1b76-ee52-4c9e-aba7-f5de5b30aafe", "sighting_of_ref": "indicator--b41f35d6-2211-49c0-9826-84cd57ead7ba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a8ba93-469f-4532-8b63-152e15bb48e2", "sighting_of_ref": "indicator--b41f35d6-2211-49c0-9826-84cd57ead7ba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc011fa9-4054-4ce7-9dac-331775359402", "sighting_of_ref": "indicator--b41f35d6-2211-49c0-9826-84cd57ead7ba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491d2edc-3f0b-4fad-9743-d2368c48ce6b", "sighting_of_ref": "indicator--a2cc540e-03f7-4297-919d-fd880482e4fc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e0b89b-f368-4a1a-b937-ee994d5dbb2b", "sighting_of_ref": "indicator--a2cc540e-03f7-4297-919d-fd880482e4fc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636abed6-0d09-41a0-bad7-916eebd0eaee", "sighting_of_ref": "indicator--a2cc540e-03f7-4297-919d-fd880482e4fc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75bfcc4-248e-4ee9-a758-de166f58c512", "sighting_of_ref": "indicator--471a0ef7-c857-4930-92df-a571fc4f9880", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6dbd28-112b-4e0f-9940-8a0eea60d2a1", "sighting_of_ref": "indicator--471a0ef7-c857-4930-92df-a571fc4f9880", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d534fa12-7bd2-44a0-88e3-5f78fbc39cba", "sighting_of_ref": "indicator--471a0ef7-c857-4930-92df-a571fc4f9880", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd0cb25-fb53-463b-b3d5-43e51bf50bd4", "sighting_of_ref": "indicator--91f91428-417f-49e6-81af-9ca158bf632b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fda147c-c9f4-4057-bb35-3e0cd2c3c6ae", "sighting_of_ref": "indicator--91f91428-417f-49e6-81af-9ca158bf632b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb0915a-b97e-4806-a2e8-ea9249ee6b5e", "sighting_of_ref": "indicator--91f91428-417f-49e6-81af-9ca158bf632b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6deb2011-b355-4cb5-9fbf-659be90802a2", "sighting_of_ref": "indicator--17c82d18-debb-4be3-9bf2-89697e4dcf87", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e44d953-c191-4615-b8ce-db2590964879", "sighting_of_ref": "indicator--e704df51-0a81-4f44-bbe4-96ef2012a32a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1b58a0-85e7-497f-981f-167793b7580b", "sighting_of_ref": "indicator--3f2c2fb7-acbc-4cea-8931-7afcce98f1f5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96df736c-2226-4d7c-a652-c723939b91ca", "sighting_of_ref": "indicator--11d58590-6d57-4a99-a248-7b74bd82b9ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d858e44-310f-4927-9ae0-bf7b59298f96", "sighting_of_ref": "indicator--5127e928-37f9-43bf-add7-d72c2249b4d6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484467fd-8aed-49e7-8813-8a63419b0e7b", "sighting_of_ref": "indicator--35483242-4735-4441-bc33-e51c2def9e3f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a831efdb-f0ca-48a3-949d-38af87073024", "sighting_of_ref": "indicator--35483242-4735-4441-bc33-e51c2def9e3f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3328fb2-b12b-431a-89bf-391cded8b9bc", "sighting_of_ref": "indicator--ba919975-211d-4df5-9ce9-1d7eca22ffdc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c7edb7-4926-44d6-9b62-08df44a6efd4", "sighting_of_ref": "indicator--ba919975-211d-4df5-9ce9-1d7eca22ffdc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d9b0f2-cedc-472b-b3f4-3719aad2d2d4", "sighting_of_ref": "indicator--ba919975-211d-4df5-9ce9-1d7eca22ffdc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52d441c-237d-43ae-a477-1bfb072dd8e3", "sighting_of_ref": "indicator--95afef0a-4f15-40df-bffa-de9ccf3bd4e7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d901243-bcfe-4aab-86a7-16209052c8ea", "sighting_of_ref": "indicator--95afef0a-4f15-40df-bffa-de9ccf3bd4e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e84f806-e032-4d2b-8d9c-7749ef20cfcd", "sighting_of_ref": "indicator--95afef0a-4f15-40df-bffa-de9ccf3bd4e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d674c6-96f9-4c1b-9c81-0188b8903b97", "sighting_of_ref": "indicator--85ff1e12-832d-47cd-b1c5-bcb10f897c29", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5890fd1f-4769-4c07-ad80-4fe0d9a1bcae", "sighting_of_ref": "indicator--85ff1e12-832d-47cd-b1c5-bcb10f897c29", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641261ad-022c-46a3-9848-d20b087fae22", "sighting_of_ref": "indicator--85ff1e12-832d-47cd-b1c5-bcb10f897c29", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318ae664-75e6-4f60-9a37-2a381a7a70eb", "sighting_of_ref": "indicator--1e7132c8-29b1-442d-b544-c60509bbc0cf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cba137-fd4c-43b2-a8d3-d41e74a2a94e", "sighting_of_ref": "indicator--1e7132c8-29b1-442d-b544-c60509bbc0cf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc409b9a-0441-40b3-896a-1f72c68c8152", "sighting_of_ref": "indicator--1e7132c8-29b1-442d-b544-c60509bbc0cf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efafd87c-e9b1-4e40-b819-faa2d130defe", "sighting_of_ref": "indicator--f12ce68c-2b92-43bc-9347-e6696108e2c7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9d98c8-7f69-4ea0-a29c-6e120574dc51", "sighting_of_ref": "indicator--f12ce68c-2b92-43bc-9347-e6696108e2c7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8e0a93-d58e-4384-9f76-6d9152ac64cd", "sighting_of_ref": "indicator--f12ce68c-2b92-43bc-9347-e6696108e2c7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3c9234-409b-4fe6-a9ef-6cc328fac7cf", "sighting_of_ref": "indicator--8067d0f8-25b2-4a78-9ff6-7bdbe7050452", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4e7d5f-482a-4a0c-9a48-128d672cac65", "sighting_of_ref": "indicator--8067d0f8-25b2-4a78-9ff6-7bdbe7050452", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d28caa-4886-4b2a-86cd-a04a62013f03", "sighting_of_ref": "indicator--8067d0f8-25b2-4a78-9ff6-7bdbe7050452", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a32f178-e2dc-4b6d-bb88-ae7e1187902e", "sighting_of_ref": "indicator--b71f2ed0-d1c9-4bbf-9be6-19c201dc7023", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440ab87e-b142-430d-a637-732df87cce0a", "sighting_of_ref": "indicator--b71f2ed0-d1c9-4bbf-9be6-19c201dc7023", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b088a9a1-c08d-4c1a-8c70-b0e43de09866", "sighting_of_ref": "indicator--b71f2ed0-d1c9-4bbf-9be6-19c201dc7023", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97576a3f-2535-4fba-a34d-0f19f24d90a5", "sighting_of_ref": "indicator--330eb0c0-196b-404a-b941-3dce50835b70", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40267871-c3b0-44c8-b647-906f16afb298", "sighting_of_ref": "indicator--330eb0c0-196b-404a-b941-3dce50835b70", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90ba8dd-2089-4b89-b731-7458e2dfb2db", "sighting_of_ref": "indicator--330eb0c0-196b-404a-b941-3dce50835b70", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b042121-b687-4789-8072-99d51bc9d2ef", "sighting_of_ref": "indicator--68bc4b19-3f79-4a3a-947c-644564a26acd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a4d2d5-739c-428f-a543-1b84373eb793", "sighting_of_ref": "indicator--68bc4b19-3f79-4a3a-947c-644564a26acd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f11371b-3328-42ef-9e0a-fd7eb55db02e", "sighting_of_ref": "indicator--68bc4b19-3f79-4a3a-947c-644564a26acd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cd8881-4e94-40ac-8c49-833a88d5ba1a", "sighting_of_ref": "indicator--fe4bf44b-332e-40e1-918f-1df2c4577af5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d194200-c181-47b2-95bf-052a07b5a6e4", "sighting_of_ref": "indicator--fe4bf44b-332e-40e1-918f-1df2c4577af5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f98d50f-3aa1-4b02-9a13-6948b3ea17b0", "sighting_of_ref": "indicator--fe4bf44b-332e-40e1-918f-1df2c4577af5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a88b5f1-6d46-452e-917b-7e969f11e554", "sighting_of_ref": "indicator--1e3da5f6-7a10-4612-b75f-142ad35be1fb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc774589-e0e8-4ff6-9a9c-89551d306b4d", "sighting_of_ref": "indicator--1e3da5f6-7a10-4612-b75f-142ad35be1fb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91283c0-eb06-4b01-804d-efa562970cc9", "sighting_of_ref": "indicator--1e3da5f6-7a10-4612-b75f-142ad35be1fb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc4aa8d-87de-4c8d-a2af-3748325862c9", "sighting_of_ref": "indicator--31af0f43-6aff-4b9c-9108-3c8dda4e705e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600cd5e5-b2d8-451e-a6f6-3039b730002e", "sighting_of_ref": "indicator--31af0f43-6aff-4b9c-9108-3c8dda4e705e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c96855-1986-4392-a1a1-141c5357d63b", "sighting_of_ref": "indicator--31af0f43-6aff-4b9c-9108-3c8dda4e705e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0a823a-028d-4d00-b16e-9e7f212e840e", "sighting_of_ref": "indicator--c8edfff9-644c-44f1-bf1c-20c5551311cf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b805082-d44c-4ef6-a69c-50a777b6d8eb", "sighting_of_ref": "indicator--c8edfff9-644c-44f1-bf1c-20c5551311cf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23c0fb2-bfc1-4dc6-8920-adbb3e1b3f96", "sighting_of_ref": "indicator--c8edfff9-644c-44f1-bf1c-20c5551311cf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cebe3748-2f99-4b8c-b2e9-31e92f7a2c36", "sighting_of_ref": "indicator--cb9d8251-1cf4-4126-8a9a-b80624863f8b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbc285b-9c1f-468d-b486-e5b304ce1560", "sighting_of_ref": "indicator--cb9d8251-1cf4-4126-8a9a-b80624863f8b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946101a9-7a72-4cfe-8d58-cbde26c264df", "sighting_of_ref": "indicator--cb9d8251-1cf4-4126-8a9a-b80624863f8b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b4cb07-d059-4bfc-b1c6-b90345ea73c6", "sighting_of_ref": "indicator--348829e7-bb56-4d7b-abe0-3eec31651920", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74c94b3-2043-4bc2-9ca3-bff50bede1b9", "sighting_of_ref": "indicator--348829e7-bb56-4d7b-abe0-3eec31651920", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6229e01e-fb48-4661-bf2e-c1a23e2c443a", "sighting_of_ref": "indicator--348829e7-bb56-4d7b-abe0-3eec31651920", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589e7b65-4303-4eb8-b509-c0160c835c2e", "sighting_of_ref": "indicator--6f606cb4-1576-4a11-a201-f50e53e0ec87", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6667f759-9f48-4088-98c1-36e44867700b", "sighting_of_ref": "indicator--6f606cb4-1576-4a11-a201-f50e53e0ec87", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b72157-b689-42fb-8c0d-f1daa32308dc", "sighting_of_ref": "indicator--6f606cb4-1576-4a11-a201-f50e53e0ec87", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1445e576-3944-4ab7-8a0b-8df7374e18a7", "sighting_of_ref": "indicator--ee9b5dfd-4ffb-4237-bda9-6c07e12e1483", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c435f1-141e-4a32-a9c3-5e98d4660cf7", "sighting_of_ref": "indicator--bc1bacd4-4720-4fa6-b92c-757f7da988b3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b490e0-7c91-4dfd-9caa-f33f73a5eb93", "sighting_of_ref": "indicator--725bf198-edcd-4fea-a71e-42000ff025ee", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2a1f13-83c3-416b-af7b-cc353e27da03", "sighting_of_ref": "indicator--5fc6e5e5-8242-494b-ad11-583bbbde8806", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88e82d7-bf10-4870-8e51-c33b888c50fa", "sighting_of_ref": "indicator--fd517956-e571-4ace-8e89-d53e37e6e1e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419e360d-5afd-4bd3-b87b-17978f89dc1e", "sighting_of_ref": "indicator--fd517956-e571-4ace-8e89-d53e37e6e1e5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22929f7-95cd-480e-8727-8d57c5cbdf60", "sighting_of_ref": "indicator--a646dfcd-0864-458e-acf5-e41ba3cfebe3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299e49bf-3305-45b5-a657-6c9a03ee748a", "sighting_of_ref": "indicator--e86b0f70-07c9-44fd-bf9f-537af4832382", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db03ad8-39e8-448c-9725-d93bd89a6361", "sighting_of_ref": "indicator--243a8a0a-5760-48b9-b445-5962e84cf5f7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ccc398-c0da-4c1e-be76-24c19287bbaa", "sighting_of_ref": "indicator--d1d491b8-0b8e-41b6-acb6-daf62ac270ad", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a114e2-bcb2-4007-9f91-9e318466e96a", "sighting_of_ref": "indicator--7f17f612-63b4-4f54-9799-af80800579a9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e3df4d-b80f-4436-ac7f-f2c18bb78e3d", "sighting_of_ref": "indicator--7f17f612-63b4-4f54-9799-af80800579a9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdaa854b-5b3d-489d-aa6c-7f5b2c0c50bf", "sighting_of_ref": "indicator--7f17f612-63b4-4f54-9799-af80800579a9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0b302c-cdc2-42d0-abcd-f21608ceada1", "sighting_of_ref": "indicator--76d26348-365c-4aaf-94b0-4ab1fef91afd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2470525-a96e-4c97-bfa2-d79e08e32cb0", "sighting_of_ref": "indicator--76d26348-365c-4aaf-94b0-4ab1fef91afd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c082af0-aad7-4a2b-93d2-f03133a7da5f", "sighting_of_ref": "indicator--9ea8859b-7a2c-4c5f-a38a-58ef0b5517f5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cafc7cc-557e-452d-8dfc-11a4e192e252", "sighting_of_ref": "indicator--9ea8859b-7a2c-4c5f-a38a-58ef0b5517f5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8718c0e-9738-4998-9393-2115976fb64c", "sighting_of_ref": "indicator--1fdb9766-d2cc-4040-adff-b5e8d761cd8f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf739c1-a8c0-4d09-bf82-09070c4b17c0", "sighting_of_ref": "indicator--149f0747-b14f-46b3-872d-b394280f8075", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e922a483-41c7-4519-bfbf-088b41b4ba11", "sighting_of_ref": "indicator--9b3f646f-f456-4934-89f5-2f088a277e6f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def37a5d-8cf9-4b22-9f3a-767fa1a33a64", "sighting_of_ref": "indicator--296566d9-4e09-44bd-9006-f886b28e532e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533ce5b3-bc9e-4663-aba0-42cf97bbe307", "sighting_of_ref": "indicator--ef608cab-caaf-4f45-b821-9c756b114f6d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7239f86-8f28-4562-adb4-b2a54f01dd61", "sighting_of_ref": "indicator--2db7e568-c55e-43d1-a7f9-9f9210c54370", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982f5fd1-a547-4415-bc4e-124fa0d5a360", "sighting_of_ref": "indicator--c0a8855b-444d-4ba4-b6e0-d098137d57fe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af035adb-46b8-4ed8-a54f-8f14e3059d3b", "sighting_of_ref": "indicator--c0a8855b-444d-4ba4-b6e0-d098137d57fe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a880e9-5d2f-491b-bb9a-31c8ae24f3c6", "sighting_of_ref": "indicator--20e537bd-37e6-4299-81d7-427bd693d1a7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4b1cba-5d52-4b37-aa50-4d318208938a", "sighting_of_ref": "indicator--20e537bd-37e6-4299-81d7-427bd693d1a7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ebafa7-5006-40be-bb81-50febaddf3fb", "sighting_of_ref": "indicator--20e537bd-37e6-4299-81d7-427bd693d1a7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d323f59-b61a-43af-8425-4e09413f8def", "sighting_of_ref": "indicator--10a34638-3725-4543-8a94-a523ddfc82dd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e122fe1d-220f-4140-b849-cdc5dc2e46b2", "sighting_of_ref": "indicator--b9d29e10-9718-4717-8fed-5da90b2eec1f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb78111a-04ff-4f32-b045-c916b6b6d394", "sighting_of_ref": "indicator--bf658f44-be06-4508-977c-ca0ae9a6f746", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faeb8566-e0de-4e3c-a83f-5ae34983cd81", "sighting_of_ref": "indicator--577b8d69-4541-4b10-a850-c5a0bf0a47ba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6cff76-2237-44f9-8ed0-009c14da9f54", "sighting_of_ref": "indicator--e884105e-1a25-4dc6-9d4c-e208d93d4224", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc68a2df-edd9-4042-8474-ada867e4d7f0", "sighting_of_ref": "indicator--c3c720c0-3334-4762-9721-f480e9e8538e", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487ab06b-c11d-4ab0-b3ee-395e594fc908", "sighting_of_ref": "indicator--1f8dffaa-a940-46b6-96ae-f331bef6ba01", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037a7e3b-73b9-44e8-8a4c-f6fb3a014706", "sighting_of_ref": "indicator--63c88e52-4b42-4633-b73a-bb8d74eda51a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec551d1-0be3-47c2-b61f-6bdd16d6caa9", "sighting_of_ref": "indicator--63c88e52-4b42-4633-b73a-bb8d74eda51a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442ba3a0-bc43-40e6-bf84-d8752f12156a", "sighting_of_ref": "indicator--63c88e52-4b42-4633-b73a-bb8d74eda51a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7121f97e-8de5-4e79-b0ac-7f84f2078c9c", "sighting_of_ref": "indicator--b0fdedf5-0f86-47ff-ac26-f6be4d2c337c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7526b9e2-b82f-4eab-9c44-023c4243dbd6", "sighting_of_ref": "indicator--29066055-ab6a-4d1d-9319-e0a528b73ad1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f73ebef-f4e5-4546-8872-24bdb58c715e", "sighting_of_ref": "indicator--7a555b52-c8c6-436e-8345-5e2eb41cfeba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f223863b-88e7-4bab-a743-f372d718e67d", "sighting_of_ref": "indicator--8e2c9325-099c-4213-9ecf-88d09ef82315", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4a7b48-7e97-4a2e-85b8-54014165e360", "sighting_of_ref": "indicator--8e2c9325-099c-4213-9ecf-88d09ef82315", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce788f2d-9b9c-493d-a5c4-89e699b7f980", "sighting_of_ref": "indicator--8e2c9325-099c-4213-9ecf-88d09ef82315", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c49a823-25ae-454f-ab2e-32d3207baf38", "sighting_of_ref": "indicator--ee42a1e6-9956-4bb6-956c-5b82a9c1bfc2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4410d0-cf1e-400f-a021-a3becc6429da", "sighting_of_ref": "indicator--ee42a1e6-9956-4bb6-956c-5b82a9c1bfc2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870cdcb7-567d-48bc-910e-a0ece0e1e6e9", "sighting_of_ref": "indicator--ee42a1e6-9956-4bb6-956c-5b82a9c1bfc2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a38588-71e1-4e92-8be2-f2ec490c4767", "sighting_of_ref": "indicator--b3c02738-48af-4a9e-9a69-adc71d3c608b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb1ada9-e1e1-44bb-b155-2d46e3290151", "sighting_of_ref": "indicator--b3c02738-48af-4a9e-9a69-adc71d3c608b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88dcb4c-c963-45ba-969b-5106d517587e", "sighting_of_ref": "indicator--b3c02738-48af-4a9e-9a69-adc71d3c608b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e64adf6-8071-4fe0-81d7-55855badd7ed", "sighting_of_ref": "indicator--53b9503a-e217-4677-8ee6-0830c2c9d8ba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21de213a-2617-4007-b882-aba5f551ca0b", "sighting_of_ref": "indicator--53b9503a-e217-4677-8ee6-0830c2c9d8ba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580dbf5e-0230-468e-a219-7ee58475e27f", "sighting_of_ref": "indicator--53b9503a-e217-4677-8ee6-0830c2c9d8ba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4731a9-10a7-491c-a926-c695a632852c", "sighting_of_ref": "indicator--b2f05e3e-db8e-4d05-8a1b-35c1b558e6c3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d74682-8e52-46c8-a050-6a1f80ac73aa", "sighting_of_ref": "indicator--b2f05e3e-db8e-4d05-8a1b-35c1b558e6c3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514cb242-eecf-49f8-bd2a-6c9ef6400c37", "sighting_of_ref": "indicator--b2f05e3e-db8e-4d05-8a1b-35c1b558e6c3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbe8fe3-52e0-4bf7-a93c-a88bd8cacbeb", "sighting_of_ref": "indicator--146d5d40-d1c5-4163-9745-3c13e862e49c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ca48d5-6f65-4fed-b436-007dbf77953b", "sighting_of_ref": "indicator--146d5d40-d1c5-4163-9745-3c13e862e49c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e784d2-0ddc-429c-ac58-f163ce645c8e", "sighting_of_ref": "indicator--146d5d40-d1c5-4163-9745-3c13e862e49c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c767575-5de1-4000-8f02-e5eaacc7002a", "sighting_of_ref": "indicator--9fa24331-f6a3-41f2-bac2-4574902f232b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c944570f-6f99-4551-856b-768df797c816", "sighting_of_ref": "indicator--9fa24331-f6a3-41f2-bac2-4574902f232b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1de0f2-8e70-4bdc-8b41-56b18ca945dd", "sighting_of_ref": "indicator--9fa24331-f6a3-41f2-bac2-4574902f232b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08340441-27b9-4bfa-a97a-6057768b0f6f", "sighting_of_ref": "indicator--a6814948-ee5d-4685-ac5e-1d07affe2561", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe278c7-5778-4fae-84ae-64b0c4916d49", "sighting_of_ref": "indicator--a6814948-ee5d-4685-ac5e-1d07affe2561", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed4677c-9133-49ee-a896-6f811ff24560", "sighting_of_ref": "indicator--a6814948-ee5d-4685-ac5e-1d07affe2561", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f42c25-1927-43c6-9b57-82a699be5057", "sighting_of_ref": "indicator--1d2794ae-8058-4401-a600-84f6ad16eddd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf51698-ab98-4352-84ca-a2c088a4f2d7", "sighting_of_ref": "indicator--1d2794ae-8058-4401-a600-84f6ad16eddd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8d09be-cbe0-48ab-af66-13c7d3de8d94", "sighting_of_ref": "indicator--1d2794ae-8058-4401-a600-84f6ad16eddd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed7ec9a-36dd-4780-b4df-e4ccff6316d3", "sighting_of_ref": "indicator--19a9dddc-4cbc-45b1-b6fb-c0eb4f8ead57", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7ca40b-62c9-40bd-a090-2ffb0edb96eb", "sighting_of_ref": "indicator--19a9dddc-4cbc-45b1-b6fb-c0eb4f8ead57", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad4e9a9-763f-4c32-8a4b-1e00ad763876", "sighting_of_ref": "indicator--19a9dddc-4cbc-45b1-b6fb-c0eb4f8ead57", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2960ee66-67b5-44cb-ac33-f98fb5c316b2", "sighting_of_ref": "indicator--fee5d8fb-004d-4639-ad09-f54ffb7fc1da", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46ec191-5e17-4963-8264-3083abbb05a4", "sighting_of_ref": "indicator--fee5d8fb-004d-4639-ad09-f54ffb7fc1da", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff7d156-b0b9-4f2c-b0d6-ba3bb30b0313", "sighting_of_ref": "indicator--fee5d8fb-004d-4639-ad09-f54ffb7fc1da", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45304a0a-5d9f-4612-aa2c-5ec58e1d3f18", "sighting_of_ref": "indicator--c99d9b3a-22d4-426e-9b5b-a842c7d20c12", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe79cd85-b76d-434b-97cc-87ce5f9e416e", "sighting_of_ref": "indicator--99e92328-de4d-46ed-bd04-473c4e8debc5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f789dcc8-750f-4199-86d1-2c3f561c25e7", "sighting_of_ref": "indicator--99e92328-de4d-46ed-bd04-473c4e8debc5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c202c34-fcfa-4be3-92ab-931289051a23", "sighting_of_ref": "indicator--1810b46c-8961-4c63-9738-70471d030149", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfa7fd8-bf00-4f47-a73a-689ead528156", "sighting_of_ref": "indicator--93a2bfe1-5f73-4f63-9be8-cb0f44ceaf1d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7fa318-84ac-4b81-8bfd-80d146b0139b", "sighting_of_ref": "indicator--c322cb20-2e52-457c-89d4-3af9da67d302", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3708f9-5c89-4844-814f-ccfb0c042a09", "sighting_of_ref": "indicator--c322cb20-2e52-457c-89d4-3af9da67d302", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023eda61-5939-4362-b193-d67a22ddc046", "sighting_of_ref": "indicator--dfc0d98e-cd91-4986-8040-fa4e8ec51d5b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794c9055-3c79-433c-ad53-819aab80fc48", "sighting_of_ref": "indicator--d5a6f8f0-16e8-42bb-b885-e1bccb8e6845", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25e7336-9c8c-4b59-acd2-b7b59113c00b", "sighting_of_ref": "indicator--a836ff2e-0d94-47cb-b9bd-b3a14e296312", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9785f6-f5e2-42b2-b05f-d7fc0febb829", "sighting_of_ref": "indicator--72ff4624-b47e-43e4-b5ab-3c4f4d3c3abd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f702e6-a66a-4bb1-830f-5cfee9f75bf9", "sighting_of_ref": "indicator--72ff4624-b47e-43e4-b5ab-3c4f4d3c3abd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11c6081-3058-4ebc-a6fd-18a08c413a9e", "sighting_of_ref": "indicator--fb65507b-d304-4636-8862-1729922540d2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f075748f-1a21-4b91-af5f-e2847d92787d", "sighting_of_ref": "indicator--19fc01f4-3961-419f-bd2d-6b90eabf99bc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78d1238-f87c-43ec-9a06-8484c2d40fea", "sighting_of_ref": "indicator--1e2a13ed-3317-4612-bd1d-8bcca6874d40", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d79901c-aa04-475d-9775-69a967e20f17", "sighting_of_ref": "indicator--8f905b21-8cbd-42ab-b219-c990a7a9e7b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4103957c-7c5e-44e5-a5a6-0a816fcefcef", "sighting_of_ref": "indicator--f92ffcae-fe3e-477c-a609-9038fc97686b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f11f8c-2373-4205-8482-4923bd18c6eb", "sighting_of_ref": "indicator--78732361-38dc-41bf-9a98-3f452966ddcc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f33923-3b25-477e-8eaa-6b9383e4a737", "sighting_of_ref": "indicator--78732361-38dc-41bf-9a98-3f452966ddcc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d957b506-7209-4816-ab41-34b597561432", "sighting_of_ref": "indicator--2f6728bf-5867-4247-a2df-f6ab3ab2b4bc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3ffb9b-8c5c-4644-8d6b-17b3dc3aa915", "sighting_of_ref": "indicator--bc54be58-a4d3-4579-b508-774fe461bbc4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d36dab0-bebc-4e06-9345-e9708110d52b", "sighting_of_ref": "indicator--714b5e57-32bb-4472-8555-b9bb48c3e242", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f56106-28f7-4063-b612-65a86361be2c", "sighting_of_ref": "indicator--0c1bc181-98ab-465d-9fa5-bb8ffd532551", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c752abd-ba47-495b-a450-8118b0d34dd7", "sighting_of_ref": "indicator--44d8f864-977e-4496-8838-940e02bdfeaa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56880f2-6e35-4138-b08d-b471bbc0d76b", "sighting_of_ref": "indicator--de34eb09-f484-4c76-be2c-b8b828e5b537", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b486b7-9e79-4267-bf2d-9d8e03afa039", "sighting_of_ref": "indicator--b433e621-3472-4daf-a55a-a29d1833586c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f60495b-7cb7-43fc-8138-5ea443138b13", "sighting_of_ref": "indicator--b433e621-3472-4daf-a55a-a29d1833586c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a02cb9-b923-453a-8971-5913507c8c05", "sighting_of_ref": "indicator--b433e621-3472-4daf-a55a-a29d1833586c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24208ae-ba8a-4297-85f8-11812fed9bd4", "sighting_of_ref": "indicator--4ecb0285-d777-40b6-ada7-7a7ff4e07b8e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f79fd27-c9f2-4965-8d6c-361bf8795eb5", "sighting_of_ref": "indicator--4ecb0285-d777-40b6-ada7-7a7ff4e07b8e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b73713-7569-4f93-aadf-fb126ea6d070", "sighting_of_ref": "indicator--4ecb0285-d777-40b6-ada7-7a7ff4e07b8e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c937d5c-e7fe-45fa-94ad-e65658d433ca", "sighting_of_ref": "indicator--48a36da6-1ebe-4328-bfc1-88c139fdfe0a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9034278b-66aa-4132-9d5b-84ae30c16d66", "sighting_of_ref": "indicator--56467ccd-fa11-4a73-981d-31d5d71195d5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e389e84b-8443-4e96-ac31-c4b44e9ec994", "sighting_of_ref": "indicator--a3140ee8-3acb-4da3-8a39-4efc02b60d5e", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f660675-b9af-4867-b169-e640b5a8e005", "sighting_of_ref": "indicator--bc7474c8-72b3-4479-abcc-7bd5afccc94a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6840e17e-a95d-4172-b0e1-7b2edfffb91b", "sighting_of_ref": "indicator--b130a4a5-4fb5-4fef-a14b-9302ecba9cd3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8ef4fb-03c1-45e8-afbf-2356f5eda772", "sighting_of_ref": "indicator--b130a4a5-4fb5-4fef-a14b-9302ecba9cd3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0707176-aa09-456d-93f7-80e6c0a3b77c", "sighting_of_ref": "indicator--b130a4a5-4fb5-4fef-a14b-9302ecba9cd3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758f3075-a00c-43fc-bdec-dcff5e15d41f", "sighting_of_ref": "indicator--11392c3d-73ca-490e-b645-883e4a0804f1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29029d9c-e292-4a37-b19f-3746e9c07bd3", "sighting_of_ref": "indicator--6f2db612-e9d2-4be8-8b5f-3e1ace47ead8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988ef089-6e94-4049-ad5d-5461d16ea5c9", "sighting_of_ref": "indicator--40a0e0ed-5101-4306-806c-009a6ca74bbf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69ab82f-fb7e-4ae2-b0d5-5593c2d466cc", "sighting_of_ref": "indicator--8653cefb-e7de-416c-8d73-b96166dae947", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d9babe-583a-4a0e-9ec0-31ce06472ad1", "sighting_of_ref": "indicator--ad7b5d6c-eaa3-4dc1-bc04-cab25bbceaaf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bb004b-adeb-4818-a05a-71da5b3b3d58", "sighting_of_ref": "indicator--1333b5d4-d58e-4606-aebb-672b0a7d74af", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2d1ec3-a0d3-434d-9225-93801ef543e9", "sighting_of_ref": "indicator--0c5e4687-675e-4da6-be2d-c6270731d2c0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056202f0-aa99-4809-84ac-2b3f7ed8d0b2", "sighting_of_ref": "indicator--3b9aa6be-fbcc-4144-a547-b7d209fcc928", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d52556-46c5-43b2-9a60-038b5f443bc9", "sighting_of_ref": "indicator--2867c88e-82be-4406-a97f-bea7760aebef", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ab5c1e-ad08-4da8-942b-1285503977d5", "sighting_of_ref": "indicator--dc9f1c2b-371b-4d46-acb6-90b26e597528", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2a2da9-dea9-4474-bf80-e2a5a0ace89b", "sighting_of_ref": "indicator--6077e083-2cdf-4c03-a8e1-5c05159ca5b0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c1d1f2-baa5-4ec1-97b6-2d2da70bc21a", "sighting_of_ref": "indicator--c0ec6a30-7362-4dcb-846a-35282cf145e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffab1b3b-23f6-48f0-9648-63769382d52d", "sighting_of_ref": "indicator--66b428e8-d6df-4d63-bbc1-8f80b6f3d273", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe617fa-54df-47a2-865f-a13e2721f886", "sighting_of_ref": "indicator--66b428e8-d6df-4d63-bbc1-8f80b6f3d273", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8893bdc3-3ee8-4416-9da6-c45295ee1e6e", "sighting_of_ref": "indicator--66b428e8-d6df-4d63-bbc1-8f80b6f3d273", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd202f4-83e8-4815-976f-711e6c223fd9", "sighting_of_ref": "indicator--859b1d74-1f68-43e3-af11-e97b115e7613", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a22e09-7128-4366-b59e-cabe7ae815c3", "sighting_of_ref": "indicator--859b1d74-1f68-43e3-af11-e97b115e7613", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c49a1b5-06e4-48bb-9203-144fa3fd44ae", "sighting_of_ref": "indicator--859b1d74-1f68-43e3-af11-e97b115e7613", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1816e5fb-8519-4e97-b816-130f79244a33", "sighting_of_ref": "indicator--fb2132bb-d59d-41ca-9378-89b70970fc92", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a6bd92-de7e-482c-b55d-6bc2e923dba0", "sighting_of_ref": "indicator--fb2132bb-d59d-41ca-9378-89b70970fc92", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae185c15-6fc6-4929-bae0-6fdc90c962a3", "sighting_of_ref": "indicator--fb2132bb-d59d-41ca-9378-89b70970fc92", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41429515-e242-48b6-94aa-34bb5024d9d0", "sighting_of_ref": "indicator--fa4d5979-7746-4ecb-916e-444634a006f6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acc25d6-80e4-4007-9ed0-badefbea0bbb", "sighting_of_ref": "indicator--fa4d5979-7746-4ecb-916e-444634a006f6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaea54c7-e23b-4ce8-bafe-a2125fb6c4fa", "sighting_of_ref": "indicator--fa4d5979-7746-4ecb-916e-444634a006f6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c773606e-b2bd-49f9-9b33-74b684220d66", "sighting_of_ref": "indicator--9796b0c0-43e0-478d-abee-08f3a593a219", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5513f4f3-69c9-4d14-b3f4-099d5b4d21f8", "sighting_of_ref": "indicator--2ecb1d3a-c8b9-4fc7-aacc-79b70258d173", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e28fa06-0c90-46b5-8490-86e1a8168b65", "sighting_of_ref": "indicator--5d0d6288-d199-4769-ac43-25e748fccfd6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2386af9-da7c-4d57-a2fb-4d1a8c03fd09", "sighting_of_ref": "indicator--d2291a30-29b6-4d67-9cdb-468365bb3731", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c74c63-a939-44bc-823f-d2dd40f370c9", "sighting_of_ref": "indicator--d2291a30-29b6-4d67-9cdb-468365bb3731", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2f0ce3-a840-4428-93c9-144616f45544", "sighting_of_ref": "indicator--cae23d1e-c3c0-40cf-922d-4b19ac97da1a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d0231e-5ac8-4b1e-b9f9-d7e7341a609a", "sighting_of_ref": "indicator--cae23d1e-c3c0-40cf-922d-4b19ac97da1a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40bae13-c6ac-4cd0-b04c-6d2ab5931b58", "sighting_of_ref": "indicator--4b39269c-b2e2-4461-8d6f-bc3fb01af8ac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0837d7aa-fbd7-4f8e-b07e-6cf795c50669", "sighting_of_ref": "indicator--4b39269c-b2e2-4461-8d6f-bc3fb01af8ac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ebc61e-41b7-4750-b416-15c8d8a4ef35", "sighting_of_ref": "indicator--4b39269c-b2e2-4461-8d6f-bc3fb01af8ac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f665ea-f8e8-4931-9a95-2935c1424cf7", "sighting_of_ref": "indicator--da56687f-d7ec-4ca3-8fce-7923d0485d14", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e18311f-9891-4c2d-8bb0-7807149836b7", "sighting_of_ref": "indicator--da56687f-d7ec-4ca3-8fce-7923d0485d14", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53e484e-425e-43ff-b7f5-3c0ca0af194c", "sighting_of_ref": "indicator--20e65555-074e-40e5-8811-cecd48578ba2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb416cf-915d-4a70-bb40-5401cfe8117d", "sighting_of_ref": "indicator--20e65555-074e-40e5-8811-cecd48578ba2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe64db4-20fc-479b-8f40-967133d60d3f", "sighting_of_ref": "indicator--b1f04edb-ec19-4908-8adb-32ccbb222520", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec6983c-84e4-4c9e-8e05-10c7064106aa", "sighting_of_ref": "indicator--7cd2135b-a696-4648-98fa-954fcb062db5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879238a0-e4f9-4d79-b798-0eee9c910254", "sighting_of_ref": "indicator--1250ced7-b9e7-496f-a092-288338493bf9", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25deced-fd17-4f0c-9d17-3aa5fb8c3194", "sighting_of_ref": "indicator--1da71131-6338-4067-9512-ccef20755a36", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf7ebe4-be49-4d2b-b0d8-5e80e017494c", "sighting_of_ref": "indicator--b45edd2d-57f7-4eb5-a563-bfd883026717", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65826793-0347-4418-8f6e-c34e3039d83f", "sighting_of_ref": "indicator--1cc51ed4-cc55-4ca5-befe-10de9e0bb5b6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacfca42-1e09-44f8-8295-10e07ec9b74b", "sighting_of_ref": "indicator--21147eee-6101-486a-af65-049b7a34590f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66eb6ec9-6e51-4d51-a340-5becbaabc0f5", "sighting_of_ref": "indicator--1c3881d3-7030-4f70-b458-dd4e2276522e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07687580-74f7-4609-81b7-c7d3c0a8a1bc", "sighting_of_ref": "indicator--1c3881d3-7030-4f70-b458-dd4e2276522e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e669da88-39e0-42b4-a09e-79e4eb42167a", "sighting_of_ref": "indicator--1c3881d3-7030-4f70-b458-dd4e2276522e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6135b3-cda3-4e0f-ba77-9a1b54224d94", "sighting_of_ref": "indicator--ba07d47b-9259-47fc-a44d-3a3d56b1a57f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c206bf5-ccd2-4760-b1dc-f680cf0819ae", "sighting_of_ref": "indicator--ba07d47b-9259-47fc-a44d-3a3d56b1a57f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7035e7-a83d-4ad0-90d3-b5d6fb827c4d", "sighting_of_ref": "indicator--b1b5fc08-5125-4571-a3bb-e1b596dfe363", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3168a380-8f44-4d32-a9f1-5c6b779543c4", "sighting_of_ref": "indicator--b1b5fc08-5125-4571-a3bb-e1b596dfe363", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777007d6-1547-43f7-92a0-7cd4e1f1cf25", "sighting_of_ref": "indicator--b1b5fc08-5125-4571-a3bb-e1b596dfe363", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53dbd612-e3e2-42f0-87df-5276499ae846", "sighting_of_ref": "indicator--8ecf3d15-5ad6-4604-8395-f020ba20cbf9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffb07e2-b9c5-454e-b235-bd1ed1bf0acd", "sighting_of_ref": "indicator--b60ea2b1-de48-47c6-85a1-b2916a1869ec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ea3bca-8a27-4fe6-8256-80b2e5448d04", "sighting_of_ref": "indicator--8a4e975b-1b04-4de4-8e74-f6175ede0855", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbb75dd-33d4-4f29-aefe-b9f991eccb97", "sighting_of_ref": "indicator--8a4e975b-1b04-4de4-8e74-f6175ede0855", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6bd096-cc8c-482e-bdda-2e9632554671", "sighting_of_ref": "indicator--8a4e975b-1b04-4de4-8e74-f6175ede0855", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe99990-7425-4f7e-a3f8-1b5ac1dd0e29", "sighting_of_ref": "indicator--8a4e975b-1b04-4de4-8e74-f6175ede0855", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28f5a11-a926-4d90-8296-f340dcdc4b8b", "sighting_of_ref": "indicator--95986e0e-f33f-4452-9eed-74ca45ee9c69", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd64dc3-ba77-4929-82bd-2255e6c6f941", "sighting_of_ref": "indicator--a8f9c78b-68e2-4abb-89fe-0cca92f96e56", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361e3bec-731b-4e28-81fe-8820f55b85a9", "sighting_of_ref": "indicator--a8f9c78b-68e2-4abb-89fe-0cca92f96e56", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d84f91-c05c-42e9-8d9b-e003cdb60b24", "sighting_of_ref": "indicator--a8f9c78b-68e2-4abb-89fe-0cca92f96e56", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0207ab8-fc1a-4909-963f-e8c51893a115", "sighting_of_ref": "indicator--8758e76f-ffb1-45a0-9614-d1f912b704ae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1844aa53-8e03-49e5-8772-6c219c782e6c", "sighting_of_ref": "indicator--8758e76f-ffb1-45a0-9614-d1f912b704ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad70e3f-d29b-4a4e-9c59-353c7c6ed466", "sighting_of_ref": "indicator--8758e76f-ffb1-45a0-9614-d1f912b704ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7bc47fa-2947-4bc9-93ef-35b2ec9eafdc", "sighting_of_ref": "indicator--a765eede-7499-46c3-bda7-3501e8f60d18", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59287bd2-ba26-446a-8822-aa1e46fc55ac", "sighting_of_ref": "indicator--52b2407f-fb36-4ff4-99b9-86a94e46f719", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf294f4-ba48-4de0-9ac9-cf3470c749d2", "sighting_of_ref": "indicator--e67043d1-0c7f-4964-95f4-9f89dcfa1d35", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640ec40b-e82d-43d0-81c9-e2bea065e50c", "sighting_of_ref": "indicator--e67043d1-0c7f-4964-95f4-9f89dcfa1d35", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc41376a-c6dc-498b-88a8-9979a61b094b", "sighting_of_ref": "indicator--e67043d1-0c7f-4964-95f4-9f89dcfa1d35", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d76da0-461b-4573-b5d3-99f7fc8d91f7", "sighting_of_ref": "indicator--df9f554b-1bd1-454a-8f00-10377a7cd0dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a8529c-3d88-4056-9fb3-9b5925c07698", "sighting_of_ref": "indicator--df9f554b-1bd1-454a-8f00-10377a7cd0dc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d8fdd2-19f2-4042-81f6-f1a05bc04b9f", "sighting_of_ref": "indicator--df9f554b-1bd1-454a-8f00-10377a7cd0dc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a122bdf8-f4a8-443a-b1da-6dc994604ccf", "sighting_of_ref": "indicator--0b86549d-5139-4ab8-8f3a-bde4526126db", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a743cc-1a65-425c-80dc-e36059f1db7d", "sighting_of_ref": "indicator--fefe525a-4396-435c-9288-3394fa7dc665", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49fdf5d2-41ef-4bee-ada1-a3ba65c43a14", "sighting_of_ref": "indicator--fefe525a-4396-435c-9288-3394fa7dc665", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b903435-0e0c-4caa-8d89-a22760850989", "sighting_of_ref": "indicator--fefe525a-4396-435c-9288-3394fa7dc665", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb8b44d-b10a-42ae-98e8-75ac64f843dd", "sighting_of_ref": "indicator--24a0af96-733f-4226-a537-4cc2e6901e0d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88a71a6-6501-4345-9034-87c8a89fb180", "sighting_of_ref": "indicator--24a0af96-733f-4226-a537-4cc2e6901e0d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afac4e5b-4f6f-43b8-b367-1799c5de5983", "sighting_of_ref": "indicator--24a0af96-733f-4226-a537-4cc2e6901e0d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c6f23c-80a3-4888-a1f8-9e9d3db7b878", "sighting_of_ref": "indicator--4964a158-2885-4054-b96c-252a99710357", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e969fed1-ee03-4693-b9e9-1d833270fcf5", "sighting_of_ref": "indicator--4964a158-2885-4054-b96c-252a99710357", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b81a95f-96a5-4e72-b731-d110558a220b", "sighting_of_ref": "indicator--4964a158-2885-4054-b96c-252a99710357", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859818fe-3cd0-4de1-8ae8-d3bbf1f84fc5", "sighting_of_ref": "indicator--90bc8896-438f-47c5-b050-f1fecff5e77c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c279db99-3ad0-4872-ba44-d16501935b52", "sighting_of_ref": "indicator--90bc8896-438f-47c5-b050-f1fecff5e77c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7950f6-f6d5-4d00-874b-8a1b97310839", "sighting_of_ref": "indicator--90bc8896-438f-47c5-b050-f1fecff5e77c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71dcc5c-46a1-4b52-a074-bc3329710406", "sighting_of_ref": "indicator--66d044f8-ccf4-4024-84c5-fd4499759702", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67784775-4497-4ab7-bd61-6e33134c341e", "sighting_of_ref": "indicator--66d044f8-ccf4-4024-84c5-fd4499759702", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ded9abd-00bd-4872-8ed3-aaf40a99449d", "sighting_of_ref": "indicator--66d044f8-ccf4-4024-84c5-fd4499759702", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a15b820-541c-4b39-ac27-1e9005ead973", "sighting_of_ref": "indicator--e93e78a9-c5b1-4037-b25d-071e5632facf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621ad9f9-f3c9-4446-be1c-bb470eb593e2", "sighting_of_ref": "indicator--bf9b1464-dbe6-48da-a25c-e9ea2fe5fcee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e43f46-647d-4912-9fb3-20633c21d988", "sighting_of_ref": "indicator--bf9b1464-dbe6-48da-a25c-e9ea2fe5fcee", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb036cf9-1a45-4333-b06e-28ef0701bc1c", "sighting_of_ref": "indicator--bf9b1464-dbe6-48da-a25c-e9ea2fe5fcee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac11df1b-4e7d-4545-b782-da7a02c8a6ca", "sighting_of_ref": "indicator--8a74f69d-110e-4780-9d11-691e2df9c79d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1cd784-49b0-4cd8-8db4-bcef75c7be8e", "sighting_of_ref": "indicator--8a74f69d-110e-4780-9d11-691e2df9c79d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42734ccc-c387-4a71-81c4-6ac8224a47df", "sighting_of_ref": "indicator--8a74f69d-110e-4780-9d11-691e2df9c79d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a6d454-d448-41d2-9865-104a3f3e9245", "sighting_of_ref": "indicator--316745a1-97bc-4207-8307-27046d8e8d2e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1998bb-54e6-4a48-b084-856a59cbd1d4", "sighting_of_ref": "indicator--316745a1-97bc-4207-8307-27046d8e8d2e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ed11c8-86fb-4383-bcd4-844a1ce2713a", "sighting_of_ref": "indicator--316745a1-97bc-4207-8307-27046d8e8d2e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04093803-ae34-40c2-9055-edef80cc1815", "sighting_of_ref": "indicator--ab48af21-d204-4f91-aeb7-8ac31d76a2f9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d077c2a-abd6-4119-8791-04cc7227b18d", "sighting_of_ref": "indicator--ab48af21-d204-4f91-aeb7-8ac31d76a2f9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9107b686-0267-4ad1-8411-cb38d3a52611", "sighting_of_ref": "indicator--ab48af21-d204-4f91-aeb7-8ac31d76a2f9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23ed3bd-c881-4cd2-a8f8-efa49a50a888", "sighting_of_ref": "indicator--8e6573e9-c695-4597-b838-b4dc313d1d32", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4564c5f2-a670-4ce5-a7a0-4307452ff2c6", "sighting_of_ref": "indicator--8e6573e9-c695-4597-b838-b4dc313d1d32", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a41ed6-ff8e-49f2-be4a-873e9b8a1121", "sighting_of_ref": "indicator--224354f4-a7f8-4a33-b655-b7f6acf0e7c7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7a911f-dc67-4b96-8fce-32b9e772f1d0", "sighting_of_ref": "indicator--224354f4-a7f8-4a33-b655-b7f6acf0e7c7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9627dfc0-466f-48eb-b3f6-6787cb0e9bf2", "sighting_of_ref": "indicator--224354f4-a7f8-4a33-b655-b7f6acf0e7c7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcfd4a6-e8c7-4c71-a91c-da36502c368a", "sighting_of_ref": "indicator--77bb339a-d751-4dad-816f-58458e3a0209", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1fff21-5659-464b-a40c-a5e380453db6", "sighting_of_ref": "indicator--1f72cac0-43ca-4c1c-ac1d-a3180dbb6c9f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed86c1f-f6cb-4a02-9d74-9abbd8f2584c", "sighting_of_ref": "indicator--af848fee-a193-4d29-95e3-ee8c67d649fa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1846bcea-fa9b-4be0-a673-c31301c90f65", "sighting_of_ref": "indicator--cf4d59dc-c503-499b-9c97-22fec900bfc5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b49e6e0-533f-402e-a5a6-e5225e4b4264", "sighting_of_ref": "indicator--9c7ac9d6-877c-416c-8e29-095d700b2475", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b5c322-fade-44af-a7de-bfe14eff2fa2", "sighting_of_ref": "indicator--7d4bbed6-d743-4ac4-adb3-3f0553c5dd30", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5748aff6-f0d2-4259-9dcc-d48a29ad48e8", "sighting_of_ref": "indicator--7d4bbed6-d743-4ac4-adb3-3f0553c5dd30", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1362c4-b2e0-4f4f-8ca3-bd64edb5e301", "sighting_of_ref": "indicator--7d4bbed6-d743-4ac4-adb3-3f0553c5dd30", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231f4519-5971-4b6e-9488-6b46667cfb0f", "sighting_of_ref": "indicator--760677ed-409b-4247-bc82-881b3ccf551a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17786a2-31d3-47aa-bb6c-5b13c93565a7", "sighting_of_ref": "indicator--0f0fdc27-0b19-4994-af16-6d654114b78f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe383f1-d91d-427f-a770-692aafa80568", "sighting_of_ref": "indicator--0f0fdc27-0b19-4994-af16-6d654114b78f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb94b2a3-b58f-4f97-bad8-df3fd1e62ed6", "sighting_of_ref": "indicator--ac9220da-9dc7-4d6c-8fe0-8c904924ffe7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ae5b90-82a9-420c-a8a0-e5aeac6ca241", "sighting_of_ref": "indicator--ac9220da-9dc7-4d6c-8fe0-8c904924ffe7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206dff3f-6f72-4424-8328-0df0eec6f66d", "sighting_of_ref": "indicator--ac9220da-9dc7-4d6c-8fe0-8c904924ffe7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a34444b-ed3a-4d13-b49b-ad8c538014ad", "sighting_of_ref": "indicator--392265d2-5990-40cf-a79e-223c308ca4c2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c16c6a-9999-48f8-ad87-687c7291a267", "sighting_of_ref": "indicator--392265d2-5990-40cf-a79e-223c308ca4c2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fd7716-0f8e-4882-96c1-849654abc63a", "sighting_of_ref": "indicator--392265d2-5990-40cf-a79e-223c308ca4c2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9944c7-10e7-4fb8-a037-f5ee16d0760e", "sighting_of_ref": "indicator--9c75f7bb-787c-42b2-be75-e65ed53ff5dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c5adf3-6a17-483f-ac56-5432300ade09", "sighting_of_ref": "indicator--9c75f7bb-787c-42b2-be75-e65ed53ff5dc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276aab44-1857-4798-b1b6-87e97c29bcc9", "sighting_of_ref": "indicator--9c75f7bb-787c-42b2-be75-e65ed53ff5dc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8adea4d-552f-4b47-8c1a-9e271e79d69d", "sighting_of_ref": "indicator--686c74f6-3453-4595-999d-d4d9fb35fb56", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d224a1-6806-41db-ba07-69d9ec274eb0", "sighting_of_ref": "indicator--d76143a2-48c5-4a3d-b565-2da1217de739", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31f586e-552c-4bc2-96c8-b00eff0d9ad7", "sighting_of_ref": "indicator--8cc7c825-19aa-478f-8503-3813433d00f7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e8bf3b-aed5-4a54-9afa-010301e7f062", "sighting_of_ref": "indicator--741a631f-cbdc-41d1-9197-23625d10fc57", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e712a3-59b2-4b3c-8fd7-972db9856914", "sighting_of_ref": "indicator--741a631f-cbdc-41d1-9197-23625d10fc57", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63f80fb-ab36-4529-b37d-8476939ee57e", "sighting_of_ref": "indicator--b518fcc8-2748-4135-aa78-93e4a685f61d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff185316-255f-42b3-9977-af73ef713f23", "sighting_of_ref": "indicator--ffd04f1d-64aa-4cb9-a1e6-b672d52bafa5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c02b14c-58ca-40f9-aa4e-243d600cc055", "sighting_of_ref": "indicator--a82251fa-ad91-427e-a80b-1fc971f1d8f3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6f1830-89fc-48e6-a8a2-f7cf24d8bc76", "sighting_of_ref": "indicator--61c7c021-6255-41e2-bd60-48c51e237815", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55cc7c13-c397-4b48-9642-9a163fae5f3a", "sighting_of_ref": "indicator--64adc946-a460-4c98-9737-7ee4ef172d59", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d59b75-5d63-4b01-91ea-567ce7329fe9", "sighting_of_ref": "indicator--e99923ac-2743-433a-93a7-5225c0f6ffae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515ce05b-b74f-4654-842a-d964a5871d0c", "sighting_of_ref": "indicator--7be66130-df04-4836-b861-3dcc0a26aed7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61663f4f-ea4a-41ab-85c4-b2120a62aa7c", "sighting_of_ref": "indicator--8db09be2-94d7-4530-a17c-22f0de0a8a7c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783a02f8-7d2d-4c8a-9a33-6feeb01f9758", "sighting_of_ref": "indicator--8db09be2-94d7-4530-a17c-22f0de0a8a7c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a336553-aa77-4973-8c8f-f8cd48f45489", "sighting_of_ref": "indicator--7a52627e-3017-480a-b18d-0cd0b111a626", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07dd7e94-5d99-4388-966c-52bb0e1305cd", "sighting_of_ref": "indicator--4e6e1d64-29a0-44ee-8e96-30538347201c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3424e39f-e47a-4d16-b5d9-0a9aafad0b78", "sighting_of_ref": "indicator--fcde7bda-3d5d-4f0a-b370-07b200a297e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7f6647-aff2-4548-8598-511f06338b59", "sighting_of_ref": "indicator--fcde7bda-3d5d-4f0a-b370-07b200a297e6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92b6646-724b-4c1c-88f6-73cc275f5c47", "sighting_of_ref": "indicator--fcde7bda-3d5d-4f0a-b370-07b200a297e6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3703c589-50b4-440a-8d02-f7c88ed2299b", "sighting_of_ref": "indicator--fb393bdf-131a-45ba-98c4-d22b7dd591cc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9ed058-be40-4b07-9427-9b83acd2bfaf", "sighting_of_ref": "indicator--7b6b1acd-7136-41d7-abae-564fa1ae498c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903adf9e-e440-4150-b2e5-7abc20f40e2a", "sighting_of_ref": "indicator--297592e1-ae9c-41f1-b7d8-584b0795d8c8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83a52fd-4c99-47df-a11c-f82ea6aa608c", "sighting_of_ref": "indicator--297592e1-ae9c-41f1-b7d8-584b0795d8c8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f2c1c6-6226-437c-854d-eb16fdbd911e", "sighting_of_ref": "indicator--297592e1-ae9c-41f1-b7d8-584b0795d8c8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130b0e12-5405-45de-a1f9-4ccb4fb9340f", "sighting_of_ref": "indicator--df20ac4e-a95e-40d6-b4ed-028c5c149ca0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd57e894-094a-4ef5-be60-7599ba69cdd4", "sighting_of_ref": "indicator--df20ac4e-a95e-40d6-b4ed-028c5c149ca0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f2f9b8-5551-4643-aee5-ac84fe5aa154", "sighting_of_ref": "indicator--df20ac4e-a95e-40d6-b4ed-028c5c149ca0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25721fbc-756f-4d52-8077-60e02ea632b7", "sighting_of_ref": "indicator--2f9eb0f2-6b5e-4854-8899-e8e577badc8b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4abac5a-74d6-4caa-8e9b-e184dacad107", "sighting_of_ref": "indicator--2f9eb0f2-6b5e-4854-8899-e8e577badc8b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb182eae-2266-4e44-8767-972e0d1bce7d", "sighting_of_ref": "indicator--2f9eb0f2-6b5e-4854-8899-e8e577badc8b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015ebe52-a558-47eb-955b-ef4a32fb9b9f", "sighting_of_ref": "indicator--adeec26f-109b-4e33-8de4-fae20bda3b88", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39f4bb5-2c61-4b74-bceb-9e35f81aafe2", "sighting_of_ref": "indicator--adeec26f-109b-4e33-8de4-fae20bda3b88", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93730c4-af0c-441d-91c8-56483cf419ef", "sighting_of_ref": "indicator--adeec26f-109b-4e33-8de4-fae20bda3b88", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14c7437-4329-4c55-b9c5-69a29c9fe5e5", "sighting_of_ref": "indicator--98054662-152d-46b2-b1f4-6c0eda0669ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1483802-e7f7-409e-93a8-54651d9127bd", "sighting_of_ref": "indicator--1bf70cba-40bb-4236-a75e-72ddafce49fe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb2050f-97c2-4d23-bcb8-2091cc48cfb3", "sighting_of_ref": "indicator--9ca965c0-81bb-4a81-b5e4-db117484d929", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d494cba-74ca-428d-be77-c237505a768a", "sighting_of_ref": "indicator--9ecd373e-dc20-4806-907d-f25a5235706f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bb2979-8ef6-433d-81db-b04ce138223c", "sighting_of_ref": "indicator--69f81641-1d9f-47ef-9257-f25db7e2c067", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35983a6-7c58-4aaf-b021-e8de20a0e8ad", "sighting_of_ref": "indicator--8137a002-a38b-4440-9cbf-426ea4cbc19e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5270d6b-ad9e-4a59-afbb-5695c712ce3e", "sighting_of_ref": "indicator--8137a002-a38b-4440-9cbf-426ea4cbc19e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4adccd-3420-4186-9ef6-cc8f7203be9a", "sighting_of_ref": "indicator--8137a002-a38b-4440-9cbf-426ea4cbc19e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8dc3556-6557-440a-a050-9265a32db7fa", "sighting_of_ref": "indicator--abb9689c-b509-4878-95b4-3438f8701cb9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb47bbfc-4ce1-4a3a-946b-37aaa0a50e7f", "sighting_of_ref": "indicator--28677afd-93a5-4a83-a24c-39264f64d88b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5551e9b-2fe6-409c-9d0c-8ed7c7ddd516", "sighting_of_ref": "indicator--8453381c-36dd-4d98-a911-84686001a67c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5819b7a-d325-4c38-b8cf-c64cca1595d0", "sighting_of_ref": "indicator--72c63332-805c-4c85-a45f-84d504d2f2ac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73e36c7-a306-45a1-ab66-f5aa5e86f738", "sighting_of_ref": "indicator--72c63332-805c-4c85-a45f-84d504d2f2ac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840a4afe-96bc-4d3c-b784-d724cc266986", "sighting_of_ref": "indicator--72c63332-805c-4c85-a45f-84d504d2f2ac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd64feaf-afab-42a5-8c92-c169dcfd4909", "sighting_of_ref": "indicator--40d46f01-3188-4996-92e4-7e97c5328d5d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef36e13b-7870-4b0e-8cbb-fecf3e046d49", "sighting_of_ref": "indicator--3381a047-85b7-4245-af3e-b4b95eb52728", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa7b3cb-541c-49a6-ae31-570b6cff55ba", "sighting_of_ref": "indicator--3381a047-85b7-4245-af3e-b4b95eb52728", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bd5268-2f3e-4d3a-bd7a-14b682020ff2", "sighting_of_ref": "indicator--3381a047-85b7-4245-af3e-b4b95eb52728", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837ca785-c382-4267-bffd-21915c9c61e0", "sighting_of_ref": "indicator--bf07380b-b9ff-457e-b090-abd8448ac971", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b479525-6303-49d8-ab83-7ec250365f85", "sighting_of_ref": "indicator--ea1a01d3-f125-4660-aa4c-910513678a43", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5307de-0189-4fff-87b9-31db50e979ed", "sighting_of_ref": "indicator--1c537ee0-b986-42db-8e91-a4c680d9d431", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2854ea-7dde-424c-a618-c73f22d83df7", "sighting_of_ref": "indicator--43014124-9a93-418f-859d-bda09c2cda14", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4109deb-969e-4abe-8592-0af0998d765b", "sighting_of_ref": "indicator--43014124-9a93-418f-859d-bda09c2cda14", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25aa4a5d-a201-4574-9d04-a03d09c2fcfd", "sighting_of_ref": "indicator--43014124-9a93-418f-859d-bda09c2cda14", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e766e3-9739-4b16-a378-6d511ad59c9f", "sighting_of_ref": "indicator--57a42b5c-c8ed-4d3f-8222-85c8583c6395", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95f7a73-aae4-4626-9cfe-b8e0cc3b1140", "sighting_of_ref": "indicator--adafe171-ae94-46c4-9a74-b720be4e75c8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1815e70-b7fb-4a9e-91e0-61475fecea5c", "sighting_of_ref": "indicator--4719f7a6-70ce-465b-a263-10157e983018", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5eb782f-b2f5-4e76-ae6e-a3ea6ae10324", "sighting_of_ref": "indicator--4719f7a6-70ce-465b-a263-10157e983018", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86e69a1-b389-49b0-87e1-beeb9e8b3edc", "sighting_of_ref": "indicator--4719f7a6-70ce-465b-a263-10157e983018", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923dd9c9-05f0-484f-b6a1-7235a35884e5", "sighting_of_ref": "indicator--4c6e99d8-2ab7-4c73-8dd2-30fff1260f78", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8172f9aa-24ef-453f-87c9-73dea6901721", "sighting_of_ref": "indicator--4c6e99d8-2ab7-4c73-8dd2-30fff1260f78", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a42241-d6b5-4ada-b759-9def4b16da2a", "sighting_of_ref": "indicator--3c00456e-af85-4c57-8a62-3fb655ac05b3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fcaf63-63ae-4354-a3d1-dbe7f1b3b699", "sighting_of_ref": "indicator--d798f8b1-2c79-43b7-949e-3d94fc6557be", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c187425-2546-4c8d-bb11-d7be587ab114", "sighting_of_ref": "indicator--77c0fb11-1c90-4276-bc73-ef4209cbcc92", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127d4d4c-cb3b-46f7-ac9a-cccd48ecae97", "sighting_of_ref": "indicator--71258ea9-d264-4dd5-a500-5577c2d1fdaf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383c4cb6-3fe5-41ed-926c-1c5ff5b8490e", "sighting_of_ref": "indicator--71258ea9-d264-4dd5-a500-5577c2d1fdaf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad01f58d-c750-4112-908d-b5dd0b398a94", "sighting_of_ref": "indicator--71258ea9-d264-4dd5-a500-5577c2d1fdaf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1e93dc-9adf-455b-a4f6-48908c348592", "sighting_of_ref": "indicator--1d3f940f-50c8-4568-b16e-9040d51923b7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509eeac4-e4e2-49dc-986d-184be51de4d3", "sighting_of_ref": "indicator--1d3f940f-50c8-4568-b16e-9040d51923b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab70c24a-f8b1-432d-9b86-378f369fd663", "sighting_of_ref": "indicator--1d3f940f-50c8-4568-b16e-9040d51923b7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f960b830-1e6e-4f06-975a-3c6db7cca094", "sighting_of_ref": "indicator--49de4dcd-7cd6-4580-802a-7e7b22312e7c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a96f64-5337-4e25-a219-e03a7dd1a5a1", "sighting_of_ref": "indicator--b52a2f21-7e93-4ede-a2ac-2b30dc151b48", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9071818-5bc5-45e0-a5c3-3413a121f079", "sighting_of_ref": "indicator--b52a2f21-7e93-4ede-a2ac-2b30dc151b48", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672bbea8-1b20-4c15-8016-0393f78396e5", "sighting_of_ref": "indicator--b52a2f21-7e93-4ede-a2ac-2b30dc151b48", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0b8c84-94c9-4c1b-8b95-e415d9699e58", "sighting_of_ref": "indicator--7ff2aaf7-05ea-4539-bbad-03043b6695c2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270601d8-8f87-4fa2-bb4b-eec0a7a083e9", "sighting_of_ref": "indicator--7ff2aaf7-05ea-4539-bbad-03043b6695c2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cb0cda-b474-4466-9ac5-fc99575aab05", "sighting_of_ref": "indicator--7ff2aaf7-05ea-4539-bbad-03043b6695c2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ae7a97-41e7-4a4a-aef4-8a6ec7fed8bb", "sighting_of_ref": "indicator--7cde36ad-6b9c-4c61-857e-d2aa77723387", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3743bd0b-a303-4781-a2bc-89240d773346", "sighting_of_ref": "indicator--1976b8ca-4939-4330-81bc-f329aea360e2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cbce76-e006-42fe-b097-8c655f852416", "sighting_of_ref": "indicator--1976b8ca-4939-4330-81bc-f329aea360e2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9bf426-030f-47b3-a4da-a8a00d50cfab", "sighting_of_ref": "indicator--1976b8ca-4939-4330-81bc-f329aea360e2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca1827f-dc1b-414d-8d0d-7c866a3beac0", "sighting_of_ref": "indicator--f938a381-d5a8-46fc-a3fd-a1afacbe5e0e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e30fc2-fda9-43fe-b72d-4099512f2b67", "sighting_of_ref": "indicator--04006077-d6b4-427a-aeda-f956cd64261b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f49e36-8cb4-4a3f-801c-ea8603d13205", "sighting_of_ref": "indicator--e3253cbe-fb27-47fd-843a-f6de50a27271", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a078ddd8-4b4d-4984-9b92-7f8cef92d8dd", "sighting_of_ref": "indicator--a9dc388e-5d65-4582-a29b-128e4b147ce6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78cf0db-b2d2-4005-9e1b-38f71a449890", "sighting_of_ref": "indicator--e57d3c66-dc54-4129-bf52-440447dcccf5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a7b905-c6ce-4a88-845a-e005fee61dd8", "sighting_of_ref": "indicator--d7fb07c0-2385-4729-aac9-deebe0abfb46", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd07c524-669b-4902-9d2d-71e0bc578a7c", "sighting_of_ref": "indicator--2a3f608f-7b78-412d-97e9-42aa6ea7bf64", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74da803-ae94-4034-9fab-7d2c2a45355c", "sighting_of_ref": "indicator--270444de-fe4f-45a8-995c-99bd3bf28481", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edc82a2-fc63-4ee2-a798-1df79900bfca", "sighting_of_ref": "indicator--270444de-fe4f-45a8-995c-99bd3bf28481", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae06451b-62ba-48ab-8ae4-256341542b6e", "sighting_of_ref": "indicator--93c0cc63-ae7a-4565-8826-77438948f161", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96809d2-7152-42fe-acd3-50ee35c789ce", "sighting_of_ref": "indicator--93c0cc63-ae7a-4565-8826-77438948f161", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7c92de-ba19-4368-8c2c-3ef2ed0450df", "sighting_of_ref": "indicator--93c0cc63-ae7a-4565-8826-77438948f161", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703a76f1-6e33-44f8-a674-6dc15acb275c", "sighting_of_ref": "indicator--f5691ab1-b680-4020-a92f-a899836642b4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e403a162-2c60-4d64-b12a-7e7cc8da4105", "sighting_of_ref": "indicator--f5691ab1-b680-4020-a92f-a899836642b4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf066e9a-5f0b-4b56-8206-59e2b7ed9caa", "sighting_of_ref": "indicator--f5691ab1-b680-4020-a92f-a899836642b4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886d3d9b-a600-4662-9999-09ad4886f39a", "sighting_of_ref": "indicator--0094afe6-68d2-4eb9-8642-0fddc4fa90ad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e8a834-fe94-412f-92dc-ff8e9e0cd27e", "sighting_of_ref": "indicator--d45498e5-0fb0-401d-8bff-f9b97eba930b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ab03fa-7c87-4969-87e9-7c9c37551b7b", "sighting_of_ref": "indicator--640e7e2a-5e35-4d5a-9613-726e7d45724b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0905b302-7902-4ed6-95b7-6794ed5840d9", "sighting_of_ref": "indicator--e87a03f5-c63b-43e5-8c4c-9fa1c99b9e6c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e396666-ed5d-42bb-9567-cc5ec69f0cf8", "sighting_of_ref": "indicator--e87a03f5-c63b-43e5-8c4c-9fa1c99b9e6c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62fcd48-e0a8-40c0-8e5a-960f3f3c2812", "sighting_of_ref": "indicator--e87a03f5-c63b-43e5-8c4c-9fa1c99b9e6c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54d4b33-9fbb-40b0-9128-3361a441a013", "sighting_of_ref": "indicator--52846dea-34c3-4c91-8c41-cffe2acacf91", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f316b76-cb30-428a-b8c6-d358ea24240e", "sighting_of_ref": "indicator--52846dea-34c3-4c91-8c41-cffe2acacf91", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f456209-8fb2-4958-90ac-a2065a88ed1a", "sighting_of_ref": "indicator--fdcdbe5c-b9ce-40a7-90af-5efb8106b18c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acf4c22-7f24-45b6-bad5-eec0344d5a31", "sighting_of_ref": "indicator--1c1b01be-22c4-4a86-8624-a97d7199ef04", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ccda47-37fa-4b5b-826c-5634dcec7327", "sighting_of_ref": "indicator--61f39bf6-17a0-417a-9e54-30a0bffb2d5b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b0824a-825d-499d-9550-d3eaa6a5ee56", "sighting_of_ref": "indicator--0e16032d-4873-4b7d-9489-676d6ec55546", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0b28e9-40b8-4849-8325-c0c89864c8af", "sighting_of_ref": "indicator--0e16032d-4873-4b7d-9489-676d6ec55546", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74eece8f-05ac-4131-81ce-5ce2c48e777f", "sighting_of_ref": "indicator--e027c228-f042-4cae-be7e-7d3829471c55", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753211ca-8aed-4b27-b352-b29aebe6489b", "sighting_of_ref": "indicator--e027c228-f042-4cae-be7e-7d3829471c55", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfaf0dce-89ce-4c2f-af37-6e035ee91c54", "sighting_of_ref": "indicator--3aa192e9-e8ed-4026-9510-1fc74b8f6195", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d40742e-9bf0-49fd-9053-5627d01ecd96", "sighting_of_ref": "indicator--c35b4745-1be0-49a1-a3b7-93acd7fd5416", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe40fa5-3cf9-4f35-9ec1-9c9d6f3f9402", "sighting_of_ref": "indicator--3abfc4bd-a9f3-4faa-bace-bf5a35f11696", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b2d5a4-96d6-48b1-b2f0-bc947557ce25", "sighting_of_ref": "indicator--8accb794-9823-4ece-9776-78e3a475b473", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5f10db-8dd9-4103-ad2f-74b269e4143b", "sighting_of_ref": "indicator--c81b53eb-8d5a-45b6-a37c-a3c81409e0dd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db299af7-d28a-421d-a15a-b1f25d5e2606", "sighting_of_ref": "indicator--4808396c-fab6-406e-851c-2e3498470154", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929f5e6a-8b38-4a99-91d0-ea62a7b5cfca", "sighting_of_ref": "indicator--4808396c-fab6-406e-851c-2e3498470154", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce6228c-6de8-463d-858d-ec4111178ff5", "sighting_of_ref": "indicator--4808396c-fab6-406e-851c-2e3498470154", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec55fbb-1045-44e4-915f-ff411b060cdd", "sighting_of_ref": "indicator--9215379a-277f-4593-a3a4-450bc1ed60a7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13be757d-7904-4af1-9363-8e202631cb9e", "sighting_of_ref": "indicator--bfce42ab-0ada-44ab-aa1f-4c508c30ab2f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb45b218-74d5-4a83-baab-e2e7134b4614", "sighting_of_ref": "indicator--bfce42ab-0ada-44ab-aa1f-4c508c30ab2f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861cc93b-49d3-42de-a1d1-199e97f446b0", "sighting_of_ref": "indicator--3f4f683e-b78f-4a69-8097-31702509a988", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d4e183-076d-4526-953a-7e9987032230", "sighting_of_ref": "indicator--89ec87dd-6bc4-4144-89e3-ca18a96d2f01", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e13e4c5-275d-40cd-9cb7-f69504553e85", "sighting_of_ref": "indicator--e57a05bf-5005-4bb0-a833-1265ef80d0a2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398049fa-1760-4077-8cf4-2d7d5d8f4f1c", "sighting_of_ref": "indicator--dff56d46-33a9-40ea-bf4e-7263a05971b5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d70cbbf-8a39-4e1c-a37d-56bd6f5fd6fb", "sighting_of_ref": "indicator--6763768b-0d06-4922-b8d9-0f07726a8bb1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b2be1e-5318-42ef-802e-e3ce294f2355", "sighting_of_ref": "indicator--6415b68a-7f6d-4bcd-b557-e8af57108c0b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42348706-2286-4fde-97f9-af77b0756fb9", "sighting_of_ref": "indicator--d3031417-dbc0-4d2e-b60f-f2e139bbe41e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4be94a-7a47-417a-a250-53c030f6f262", "sighting_of_ref": "indicator--83f429ad-684b-4e72-a5ed-a49e86094416", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fef6305-5748-4e0f-9385-a2bfabdd05ff", "sighting_of_ref": "indicator--b1d63e23-736f-4616-aa45-b41adf1caec8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce4cac2-b618-4ef8-991e-aa84d4529e0e", "sighting_of_ref": "indicator--2c1bd86a-076d-48f1-ae0d-d0d68614b086", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4aac18-b6d6-49a9-9480-16ed696fec37", "sighting_of_ref": "indicator--4805d71b-2f10-48c1-95b2-56cceffe4601", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ed14df-455c-4f0a-a2eb-b796d720b5fb", "sighting_of_ref": "indicator--7bde696a-eae8-4aca-965f-27e70816c02f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d50703-7ec7-488a-99a0-1e3053552021", "sighting_of_ref": "indicator--195f4c7c-2ac1-43b5-bf2d-e5a0fad1f599", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1fb64f-4bb3-486d-89e0-071ce9f69b8e", "sighting_of_ref": "indicator--85f2e872-b7d1-4b45-ac75-d369ca635209", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25112dc2-b810-4fdc-8d58-85e7b8813506", "sighting_of_ref": "indicator--d45c7989-063c-4b62-b15b-498f84ea57cf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e843e08b-d6fe-49a3-bacd-5fb40e687ec7", "sighting_of_ref": "indicator--f3312ee1-b30d-4815-88e3-d35259535682", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03439d60-c4f7-4f12-88b1-05fe7cc90dec", "sighting_of_ref": "indicator--2c0ed66c-c0ec-42aa-a9ff-e533a8e46ab2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9834a915-c6e7-4e27-99af-9c4f560206fd", "sighting_of_ref": "indicator--a1c5955f-f6c9-415a-9493-493f53a1d1cb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc4b545-6068-48dc-82cb-3c899028c39c", "sighting_of_ref": "indicator--d5e9ad9c-8a13-4392-af88-abdab56f2413", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324b9ac9-f1ab-41c7-a071-836e183e262b", "sighting_of_ref": "indicator--f6e93b6e-3f88-40e4-9d1a-137d3b9fe999", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84cb7a3d-f279-44d4-b51d-75af65375876", "sighting_of_ref": "indicator--ee1a1223-3446-4e53-ae48-686840dd64fd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21377183-d695-4247-8705-cb5c27d8462a", "sighting_of_ref": "indicator--14ba2224-4fda-4234-a2c7-c2126f609cf6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8be1c96-775f-4893-bc5c-042dddb56eb9", "sighting_of_ref": "indicator--14ba2224-4fda-4234-a2c7-c2126f609cf6", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcf81b8-5e4b-4423-a325-7aacf9b3c30a", "sighting_of_ref": "indicator--e1d33524-2690-4cf8-84ff-2b9e59385cb5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e596f6a4-345b-44a7-a34b-9074b428bacc", "sighting_of_ref": "indicator--15492f11-37be-4c36-aabd-5b615b31281f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e3a09a-5df5-40d9-83f0-7b62e9818d91", "sighting_of_ref": "indicator--5132c4c6-5d17-4efb-8178-4c3d389a6467", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ec80e9-4af3-4d8d-a37c-784118e82af3", "sighting_of_ref": "indicator--e2aacc40-389c-4c6b-8f92-9473eeda34b2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baaf4a36-4ab6-4b98-89ba-2caafbba3669", "sighting_of_ref": "indicator--9e770dc9-0056-4ce9-991f-bb90367bd5b9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d01e7e-0d61-49bf-a7c8-d6de0f45dbcf", "sighting_of_ref": "indicator--74dd9e9d-4553-41f3-b212-42bc77a6d8fb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30b9f02-7c13-4e47-83d8-847e1ca4916f", "sighting_of_ref": "indicator--475e0f58-811b-407f-b170-10fda1265730", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53146e28-d606-4e11-b0f6-415ba0075100", "sighting_of_ref": "indicator--f80eb649-70dc-4095-aec2-47a82fcd94ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbba476-607f-4b7c-a1ec-d881e742ff1b", "sighting_of_ref": "indicator--4a7d6943-e4cd-4ef5-ae84-43914dc31cc3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef2cf90-3853-4db4-93c2-f4d781d45502", "sighting_of_ref": "indicator--ede11cc9-d6a2-4b27-86c4-38a70a920098", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5472a8ba-e339-4d59-b364-102d1e9045e5", "sighting_of_ref": "indicator--3ae95948-3cbb-4f34-95e2-19dced4f6dca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fc5d57-6cde-4c51-9137-a01ab18ba77b", "sighting_of_ref": "indicator--3ae95948-3cbb-4f34-95e2-19dced4f6dca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da34275-5563-46e9-a509-fb2c890a3ba7", "sighting_of_ref": "indicator--5a33123e-8f5b-41f1-bd4a-6b5c535bbf6c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a60bd5-e273-4192-833a-2a968dbf2411", "sighting_of_ref": "indicator--0890a6d7-8d27-4cd2-819f-f59b73bd9558", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6831e121-9ce6-48da-a816-4bbfbcc568d2", "sighting_of_ref": "indicator--9bfeee67-85c0-4c46-845a-dba5e56a8520", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf30a9c-4bfe-4fc9-8c57-7c4e1812c1ed", "sighting_of_ref": "indicator--a172c880-d0a0-4654-9ead-f2eb7c6ecfa8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847be67f-d873-4a62-b2cf-92734464a4fc", "sighting_of_ref": "indicator--cf6a702e-a7e5-4c25-bb4a-53b7dd204fdc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da24982-f8d9-4138-a8f1-b4be1ec2daff", "sighting_of_ref": "indicator--95c47c8a-f3d1-4989-98f0-b5cbb8ebe216", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53102472-9dd2-4b87-9a85-db4725f66caa", "sighting_of_ref": "indicator--9699ed24-ffb0-4c1c-b2ef-941b5e3cd1a2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a675b25-1721-463c-92db-e6a39d934e29", "sighting_of_ref": "indicator--3b8407c3-1e7f-4472-8511-1f9a5b14e6c7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4b1217-dad1-4a1e-bfc0-a4b7e232bd1b", "sighting_of_ref": "indicator--72f62fa4-9b1d-41a5-96da-513e6ad6404f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04c3a2c-9710-4f8b-a377-80f435a193ea", "sighting_of_ref": "indicator--768b851f-1f63-4281-8a28-f63eac0188ed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e0704d-eee8-4f00-9229-9c2fc1e6f776", "sighting_of_ref": "indicator--fd4cdf92-b685-4756-bcf5-6510b339870f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ed20b8-048b-4fc3-b128-8b5affbc2b96", "sighting_of_ref": "indicator--fd4cdf92-b685-4756-bcf5-6510b339870f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2f978b-7efc-44f9-9be9-2e1872130547", "sighting_of_ref": "indicator--a2c17db4-ccc7-474d-a081-92fbf89e2307", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d085f59-4326-45a6-88bf-fd041b3ebeed", "sighting_of_ref": "indicator--701b7307-17b6-4fbe-894e-b32bb9515a8f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e85c92-c414-4132-851f-0d23b8d8805a", "sighting_of_ref": "indicator--daee167f-6365-4150-9ce8-5a4e052e6b7b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396542d5-d4f4-47f8-bec1-e8de8da595a5", "sighting_of_ref": "indicator--daee167f-6365-4150-9ce8-5a4e052e6b7b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b5a15e-7364-4df6-ac6a-3ad43e9e2b15", "sighting_of_ref": "indicator--5e33842d-7029-4568-835c-8134b9d480d9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b1357f-7d3f-46ea-a9c9-24cd45fc728a", "sighting_of_ref": "indicator--f42be637-8449-4c37-8f46-3fcb2bc1b075", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d17380-7d9a-4e23-9c91-b042aa0eb9d9", "sighting_of_ref": "indicator--4a18f672-20d9-471b-86bf-b5b4e49198d8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b36cee3-3893-472d-8a53-3cc12e3ccbe7", "sighting_of_ref": "indicator--4a18f672-20d9-471b-86bf-b5b4e49198d8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ce306d-64bd-4f14-be22-fc64c7c2b4ce", "sighting_of_ref": "indicator--1fb36d42-2e89-403c-9dce-47ce7752adc7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3716690-ae2d-4ca4-b7ee-b11d29d847ad", "sighting_of_ref": "indicator--134eae48-8f11-47d2-9b6b-f608a75beef0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd5e514-bc02-40f0-a26d-108458c071f0", "sighting_of_ref": "indicator--e3b98869-511f-4a5f-b260-817cf28b69d3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e170ca7f-2fe5-4bc1-a42f-b3a2cca2fda6", "sighting_of_ref": "indicator--c38ca08a-54da-42f5-91f1-d09109e579f3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23384bf7-9c35-4eda-861b-12e037bfc06f", "sighting_of_ref": "indicator--c38ca08a-54da-42f5-91f1-d09109e579f3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bc1de3-e1c2-474b-b0d6-b4554a43dc7e", "sighting_of_ref": "indicator--c38ca08a-54da-42f5-91f1-d09109e579f3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68f1f3c-3603-46a9-bdc1-fce6fd5570ea", "sighting_of_ref": "indicator--72682193-b67f-4e5f-8bd8-716777108e8e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f27e41-4050-4cb3-a334-e4c8548a6b8e", "sighting_of_ref": "indicator--9ccf989b-9b3f-457b-9c46-4beeb4b7cbd4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c842fc3-b9cb-4362-92d3-bcdb59ce8059", "sighting_of_ref": "indicator--efe9cca3-c462-4d7c-96fb-201690177835", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ee4eee-db8b-4d45-9e4a-8721c8aa364d", "sighting_of_ref": "indicator--960cd289-2840-4202-98c6-109f0df84591", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c474aa0-1224-4008-a362-eab31f103373", "sighting_of_ref": "indicator--6f0f6f0b-c39c-4c74-b029-dd3341f0195b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988d57a1-a82b-4ee9-873d-c87b8d2c5f43", "sighting_of_ref": "indicator--4c02e5a4-d89c-435c-a8fa-6dc1c83c66ef", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97752d4-2152-494e-9a2c-4aa85ce9079a", "sighting_of_ref": "indicator--d3da9cbc-7622-48c1-9226-624a2319e71c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6e1bd1-5c6a-4e4c-821c-1a2726e85cd4", "sighting_of_ref": "indicator--c7147f41-55ea-427a-aecc-db6d0c5facc5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fc1d60-d419-41c6-ab28-b7d37e64b306", "sighting_of_ref": "indicator--c7147f41-55ea-427a-aecc-db6d0c5facc5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36e90db-c3bb-4854-8538-978b272d9650", "sighting_of_ref": "indicator--eea35fdc-3c0f-4ecc-8a81-2bd9f50360b6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98233f65-8011-472c-80b4-131ab8c32b3b", "sighting_of_ref": "indicator--6bfa9de9-9b07-4cd0-9145-6486cefc61e1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b22b153-b134-44b1-a0a8-8189f3db8523", "sighting_of_ref": "indicator--c873dad9-7fb6-4a9b-a03c-3e6c21637b57", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1b8a6b-3ad7-4386-a13b-e4a51bf0f43e", "sighting_of_ref": "indicator--e60b8eed-2aa8-4479-9376-dec8d07d7548", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b12070f-655f-49bd-931a-0192b544229e", "sighting_of_ref": "indicator--e60b8eed-2aa8-4479-9376-dec8d07d7548", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b6adcd-7c8b-4440-9912-1644ad7963a0", "sighting_of_ref": "indicator--b5200ef4-557a-4896-90ff-54789576c48d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bd29a8-7c74-4028-a4b3-2028b749af92", "sighting_of_ref": "indicator--af184bf7-fa21-4046-a190-e526a6429a72", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e432f1a3-cd10-4bcb-b84d-61e7e376b1ad", "sighting_of_ref": "indicator--b23c47a8-af9e-46ca-ae0e-69c4d9ad5770", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9f0859-97ce-43e5-81d2-8a7ef49c5abe", "sighting_of_ref": "indicator--66fe44e7-e415-4b50-af50-c86ce8a1123c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3950c0-c09b-47c7-83ba-abb0a1bab266", "sighting_of_ref": "indicator--66fe44e7-e415-4b50-af50-c86ce8a1123c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79e83c1-816a-4cc0-ba9a-1547c206a3c7", "sighting_of_ref": "indicator--384f5a20-7e0b-4206-9503-5cc8d771b2b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a7ef88-0734-47e6-86b6-17a8553c8f11", "sighting_of_ref": "indicator--c148c875-a578-4703-a424-f3bf77d40f35", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca40b180-fab0-4c3d-9fdc-3bd1f97d3902", "sighting_of_ref": "indicator--77529691-6608-45d2-a76e-f3f2d3bd404f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e969c3-6393-447b-8aa4-c34af3b5d00f", "sighting_of_ref": "indicator--07ed0363-8df9-49c6-91ff-aad67980cbbf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf42d04-26fd-419e-bd06-30cfc42e4ae3", "sighting_of_ref": "indicator--1afffa80-ed0f-400a-9b98-05b42291f5c5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2201f160-983c-4f0e-9580-810e6eb69380", "sighting_of_ref": "indicator--9dc3c7d3-8e19-4873-a984-2a235cb026a4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37dffe3f-8900-4a7c-b746-b13528f724d0", "sighting_of_ref": "indicator--57c3eec7-be67-498e-a4ec-65e494ebee0c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315901fa-a0c5-49d7-aaea-de904fcbe145", "sighting_of_ref": "indicator--82f92546-ecf4-49da-9a01-3d0b94b87a81", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e229b32f-d9cf-4225-815e-8387062a0da0", "sighting_of_ref": "indicator--82f92546-ecf4-49da-9a01-3d0b94b87a81", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb25d819-acfc-4d13-a634-aa29ea1f7cde", "sighting_of_ref": "indicator--6fbd21eb-6149-4c82-84f0-e78dde31ed26", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cc5256-b6d1-468a-9c01-8bc13662f54c", "sighting_of_ref": "indicator--87ab5c66-1862-4dac-b6fc-3042a47b3d0a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fb5c4c-17f2-44d0-a4b6-a3e78c5b04c8", "sighting_of_ref": "indicator--87ab5c66-1862-4dac-b6fc-3042a47b3d0a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4457a1-0219-478c-9cca-29aa602baf60", "sighting_of_ref": "indicator--b029c628-12b8-4fdc-82f8-16f041673f3d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab52f8c-ab6f-470e-92fa-6ddc8057e064", "sighting_of_ref": "indicator--b029c628-12b8-4fdc-82f8-16f041673f3d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91cb914f-d792-4458-a917-6e538d2c3d3b", "sighting_of_ref": "indicator--1500d6c3-8a2b-4bbf-aace-e614b3f920ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7465c8df-954e-4587-8020-966950992250", "sighting_of_ref": "indicator--879700f0-1207-4e73-a4f1-5e1c7b04c788", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9c85cd-2f41-4910-b6cc-9e40b8431d25", "sighting_of_ref": "indicator--879700f0-1207-4e73-a4f1-5e1c7b04c788", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310435be-541d-44d9-88ee-4b1805977e71", "sighting_of_ref": "indicator--879700f0-1207-4e73-a4f1-5e1c7b04c788", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff8d83a-e911-4ec7-93b2-6b5acac1fb3d", "sighting_of_ref": "indicator--7ed20d38-15e9-4362-ae16-d79a9f55c5e6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e86ad3e-0102-4338-9eda-2d4dcdfe05c9", "sighting_of_ref": "indicator--99919b39-2e6a-475a-8715-0c5fc19832d0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5d141c-336b-4558-ab9b-4cfeb4c4b974", "sighting_of_ref": "indicator--6f78d6eb-f17f-4e3c-8dc3-f68afe423861", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0672e0ad-4a7a-416b-949c-7861d95f0a3d", "sighting_of_ref": "indicator--5ce81e18-fc62-4486-b9ca-cb229f1bfcba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c3627d-9267-4d1c-bd8b-f80238abd4d0", "sighting_of_ref": "indicator--6747472f-20b6-4d97-bee6-1f393c3f8f92", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025db84f-f7a9-4826-9315-cdf1eccfe70b", "sighting_of_ref": "indicator--b3e80efb-e27f-494b-98d0-5ffe4dbe7eb2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf22bfb0-f374-48fa-8ad9-ed38fd524f56", "sighting_of_ref": "indicator--b3e80efb-e27f-494b-98d0-5ffe4dbe7eb2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbe6f40-d1f6-437a-8cdc-cc5ada3e8af3", "sighting_of_ref": "indicator--b3e80efb-e27f-494b-98d0-5ffe4dbe7eb2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f24a5a-019a-426f-b0c3-62c0d2cb5eb5", "sighting_of_ref": "indicator--c7566941-6187-42b6-be39-ebf1c8035c92", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b702575-e3f0-4b3f-86bf-dfc45db7864e", "sighting_of_ref": "indicator--3dbfcf5e-418f-440b-81eb-72eea11e2e3a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b78c35-8972-48d1-900e-1f02e25ef2a0", "sighting_of_ref": "indicator--3dbfcf5e-418f-440b-81eb-72eea11e2e3a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa40fdd7-c338-4ac0-955d-67c721e02ae2", "sighting_of_ref": "indicator--013aec8b-f6fe-4a23-aed2-a2265af4b50f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea0fac4-e818-4300-a7ab-cab69cb06d93", "sighting_of_ref": "indicator--013aec8b-f6fe-4a23-aed2-a2265af4b50f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867e7f33-6222-4d15-901e-d1074edee73e", "sighting_of_ref": "indicator--013aec8b-f6fe-4a23-aed2-a2265af4b50f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a382048-c41a-4412-89e6-c0777732c0b5", "sighting_of_ref": "indicator--f26efcf8-5fb1-4804-a8e8-c0aefa946dff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f163665b-be7d-4518-8c1b-bd90371ac481", "sighting_of_ref": "indicator--f26efcf8-5fb1-4804-a8e8-c0aefa946dff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a48fcf-2f82-4827-ad3e-68b5be3d713a", "sighting_of_ref": "indicator--f26efcf8-5fb1-4804-a8e8-c0aefa946dff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b9de11-6d3f-46c3-838f-cf1404a91fb9", "sighting_of_ref": "indicator--75b60944-a54d-4f2e-ad29-4332a59946ce", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae78901c-c7ab-4120-9a34-9df1acc2818c", "sighting_of_ref": "indicator--75b60944-a54d-4f2e-ad29-4332a59946ce", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7086bd7-02dc-4ff1-b92a-b0167e60c4cc", "sighting_of_ref": "indicator--c2b7e638-3f68-432c-a1b0-2aac453ed01b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134ac9f9-7ee9-4538-bdc6-caa99291c656", "sighting_of_ref": "indicator--c2b7e638-3f68-432c-a1b0-2aac453ed01b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84924a3-19bd-48d4-9b65-428a56a49f21", "sighting_of_ref": "indicator--e6977ee6-2600-4ba5-aff2-d85c1cd938cb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facdd966-554b-448c-be37-3a8cc212e32d", "sighting_of_ref": "indicator--44c845b5-6c46-4686-8aa8-6db1f2ca5525", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94aeb4d-22ee-403e-b7e9-66c93b55aeba", "sighting_of_ref": "indicator--dd554a13-a3e2-4c4c-9b3f-be279a76d9d7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7031357e-b0bc-4297-9d64-ed0c57977737", "sighting_of_ref": "indicator--f15ecdc6-617c-44f6-8cd9-8264ec4f46a5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84522ab-badc-44cd-9223-77bc684d7d37", "sighting_of_ref": "indicator--fe9d61f8-072c-47c2-8278-6e87dbd49db1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02963e30-478c-4334-9d79-f6b33fab1e51", "sighting_of_ref": "indicator--d18e92f4-191a-417b-86f2-53617cb76cc6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321ffe0a-ceaf-4e3e-8644-60796091dc5a", "sighting_of_ref": "indicator--d18e92f4-191a-417b-86f2-53617cb76cc6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7791f6b-4c81-42ad-ad28-29643c60f3cf", "sighting_of_ref": "indicator--d18e92f4-191a-417b-86f2-53617cb76cc6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641ffdd2-df9a-4356-b470-38892891b9f1", "sighting_of_ref": "indicator--1afc4628-58c3-4752-9cd3-cfc1dac0634b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7340141-4c07-4d71-a2cf-8a7a07817dda", "sighting_of_ref": "indicator--0f2b37ae-b670-4e01-b08e-900662cd9ec0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7496d3-8e22-47c1-904e-a5338c57c01d", "sighting_of_ref": "indicator--02557606-e9c1-45a0-87c8-bdef5bd28b6a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71078a2-681b-4509-a595-692642b2f7e5", "sighting_of_ref": "indicator--104f0f1b-42b5-4a7c-aaef-67b87215bba1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba3d388-64f4-4e14-818d-5bcd4cf0378d", "sighting_of_ref": "indicator--8a2b8f07-b173-49c9-9d42-39bed7d485a8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40a1891-43e0-414d-9b8b-b087ab75496f", "sighting_of_ref": "indicator--8a2b8f07-b173-49c9-9d42-39bed7d485a8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b13aba3-0525-46a4-b101-75816aad2a68", "sighting_of_ref": "indicator--8a2b8f07-b173-49c9-9d42-39bed7d485a8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf36014-c497-47b0-b745-72abe99222c2", "sighting_of_ref": "indicator--c9d4a92e-48bf-406c-89da-e590a33914a9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ad090b-ab77-45f8-a2b0-57df6aa08003", "sighting_of_ref": "indicator--c9d4a92e-48bf-406c-89da-e590a33914a9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c069ba2e-c043-4379-bb8c-9d5d6a5498e7", "sighting_of_ref": "indicator--c9d4a92e-48bf-406c-89da-e590a33914a9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12176d5-12c5-4a3b-ba0c-ebf7fcc53a14", "sighting_of_ref": "indicator--31f3662c-d7f9-4d2f-9f5e-3303147eca94", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf8c0fc-700f-4a38-b9a3-3340bb78fcb4", "sighting_of_ref": "indicator--31f3662c-d7f9-4d2f-9f5e-3303147eca94", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0cd20b-4582-40c6-b011-56b2c6571a56", "sighting_of_ref": "indicator--31f3662c-d7f9-4d2f-9f5e-3303147eca94", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23689efc-3b71-47be-a188-aea8327f7e1c", "sighting_of_ref": "indicator--82ab33a6-05c4-49fb-b172-5937c1792d45", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe49fb7-a789-4ea4-9545-ea3f7be015a9", "sighting_of_ref": "indicator--82ab33a6-05c4-49fb-b172-5937c1792d45", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68876739-1ac2-4ee2-81ee-ba207c4e7dc2", "sighting_of_ref": "indicator--82ab33a6-05c4-49fb-b172-5937c1792d45", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d04dda-2110-4aa4-851b-dc43c1ac4953", "sighting_of_ref": "indicator--7ed69ab0-aff1-411e-ab25-154ed9ffc070", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a07acb-d155-4d37-bece-d15ed2ba6e41", "sighting_of_ref": "indicator--7ed69ab0-aff1-411e-ab25-154ed9ffc070", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8f8bd7-6ea8-430c-afc4-fad01a7b7de4", "sighting_of_ref": "indicator--7ed69ab0-aff1-411e-ab25-154ed9ffc070", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d2a1b4-697d-4547-bdbb-b7c99faa7727", "sighting_of_ref": "indicator--51305372-4e8a-41cc-ba78-dc86a8b4ac11", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473537b7-3380-4ecb-a66d-b8c618225782", "sighting_of_ref": "indicator--97dc9ccf-e011-40c4-8f22-320c38c9fa3a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e42ca51-a85d-4420-8af2-861952bc1088", "sighting_of_ref": "indicator--c35e019b-c338-49ed-9aef-6a5702ff27ee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ff3527-cee1-469f-b7e2-63bc668148ab", "sighting_of_ref": "indicator--c35e019b-c338-49ed-9aef-6a5702ff27ee", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874511f1-6061-4ec3-b8d3-19b7f7c53cb4", "sighting_of_ref": "indicator--2f1340a9-3202-494f-b93b-8a44b9337fba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e857db35-769b-49d1-8651-d29594fd4d61", "sighting_of_ref": "indicator--4a064dcf-b486-4de5-8766-e229ab2a27b6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7beffd40-9230-4721-bd1d-8f6cde97dbd0", "sighting_of_ref": "indicator--4a064dcf-b486-4de5-8766-e229ab2a27b6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4138cad3-7631-49b6-841a-158aa3467852", "sighting_of_ref": "indicator--4a064dcf-b486-4de5-8766-e229ab2a27b6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf10220-985b-4416-b8f9-a100ce6380aa", "sighting_of_ref": "indicator--7e6724b5-1db8-45cd-95e6-26320103ce9c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac93d41-0a7a-401e-b06c-14b933a880d3", "sighting_of_ref": "indicator--319b7a1c-3abf-443b-82bb-e6a732606571", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf4cae0-8c70-41e5-b775-2d16474fe026", "sighting_of_ref": "indicator--cb731c0e-19c0-472d-87fe-b4280c171b09", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f574c71-e3ba-4468-9b82-ad106e449270", "sighting_of_ref": "indicator--acf1a356-6975-40fd-b4e5-252dccfcfe13", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493eccfb-89dc-476f-9f08-7f31cd23bcfa", "sighting_of_ref": "indicator--acf1a356-6975-40fd-b4e5-252dccfcfe13", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6673507-895b-4094-bacc-4635130ca82e", "sighting_of_ref": "indicator--9d234c82-e686-4d81-b870-bc0dcff73fb2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daac863a-3e67-417a-980f-ce00159d3d19", "sighting_of_ref": "indicator--9d234c82-e686-4d81-b870-bc0dcff73fb2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacf2d60-3796-4f32-8af6-f55c64aa6c46", "sighting_of_ref": "indicator--1cbc0b09-5934-42dd-945b-973456b3f29e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfabb19e-4d40-496e-8fb1-979bc42a82ce", "sighting_of_ref": "indicator--c94972ec-d30c-464a-8d71-86fa11289dec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5711c166-d7a2-4b6b-a0ce-7c7383d68c76", "sighting_of_ref": "indicator--286fb266-258d-46e4-b984-69cf95e55943", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ac30b1-9d0d-4354-a4f8-2bb231e88350", "sighting_of_ref": "indicator--1f3187e9-50a0-43a5-a018-95bbb44d45b4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf26daf-a9d5-45a4-921f-26347364a501", "sighting_of_ref": "indicator--f3666e36-7bec-4206-9361-af28013fa97e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b9d018-01a7-44e5-b210-cf67e4aa8f58", "sighting_of_ref": "indicator--e03d184d-e491-42d3-8465-58acb8e66887", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456b1498-e803-4007-b6db-22a186ce7797", "sighting_of_ref": "indicator--d4b6f876-41b5-4746-86dc-8c169871a694", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e534cfa-1567-4634-a696-707fed2736ca", "sighting_of_ref": "indicator--9dd81fe8-813c-4671-8639-ed4f5a73f5a7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd768b5f-333d-4bee-82a3-c0563e17ba1f", "sighting_of_ref": "indicator--9dd81fe8-813c-4671-8639-ed4f5a73f5a7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff62c521-232c-4313-90c1-1a45fcac5657", "sighting_of_ref": "indicator--c99614bd-6683-4c70-943b-86d53ec9f9df", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92638d66-9e97-4b0b-88ad-8fd17261ad23", "sighting_of_ref": "indicator--c99614bd-6683-4c70-943b-86d53ec9f9df", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b6e369-d8ff-462d-88e4-eeafda93a291", "sighting_of_ref": "indicator--4c1a26c4-3e59-4030-9711-2fc60f7b1ff0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2725af5e-20f0-4d10-8676-ab0f52b71d07", "sighting_of_ref": "indicator--4c1a26c4-3e59-4030-9711-2fc60f7b1ff0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95424769-94f8-419f-99b0-ff07ff5b38d0", "sighting_of_ref": "indicator--2f3e57ac-ff14-4bd8-acab-b5f949775c56", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca905d2b-cc80-4ea8-acec-c582a3ba748a", "sighting_of_ref": "indicator--2f3e57ac-ff14-4bd8-acab-b5f949775c56", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8febb05b-16e4-489d-9fc7-2f2c9dcac839", "sighting_of_ref": "indicator--2f3e57ac-ff14-4bd8-acab-b5f949775c56", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20a6a9a-80e8-4958-8640-80d7e3b42de9", "sighting_of_ref": "indicator--6a57c19b-1069-4e72-b960-1ee5c1235f55", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41622d9f-99bb-44ca-a066-5074d6a08dc9", "sighting_of_ref": "indicator--6a57c19b-1069-4e72-b960-1ee5c1235f55", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3776cebd-0698-4634-8bb7-32160f83ac0c", "sighting_of_ref": "indicator--6a57c19b-1069-4e72-b960-1ee5c1235f55", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d70d65-55e0-4888-90b1-210e28fce3f8", "sighting_of_ref": "indicator--e8f4e768-0f35-428f-9125-e97e4bb3ce16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f701e409-0c8c-41d9-bd50-fa3530ffed59", "sighting_of_ref": "indicator--12aedbb6-51b0-49e0-8f3f-0b3cccf01c0d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d34fcf-6904-4532-a9ca-b3ff16506d21", "sighting_of_ref": "indicator--3c6a0bf3-8c3d-4dd0-8a30-c7da2f57a150", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12755122-8b2a-4879-b9a1-6ed2e9551db9", "sighting_of_ref": "indicator--3f143f3c-9256-4d25-b1d0-cfdce0f8c07f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876df31e-5c96-49ea-814b-74c0e747a8ab", "sighting_of_ref": "indicator--c571f06e-1961-423f-a515-d8d358651a0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1234d18a-e9aa-4e96-8120-d9f40bb03448", "sighting_of_ref": "indicator--f841422c-f425-4ea9-b5cc-0f7d0976c737", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fabe436-5b45-4e16-8aa3-57a728a67a16", "sighting_of_ref": "indicator--ffc7c6c4-09f7-42ba-b273-5788205322ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345285ec-0caf-455e-9336-5b2fd0af42c2", "sighting_of_ref": "indicator--fbef3643-1310-4ea9-8f1b-1225923f3811", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cf32da-b3c0-483c-a3b4-e3b10d04499f", "sighting_of_ref": "indicator--f4dd3bc6-033c-452c-b244-1de2e7da1397", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6acd67a-fd59-4da1-a4ef-058ecfaa6b52", "sighting_of_ref": "indicator--4b6db931-a4f3-42c7-a1ee-22f709bb0191", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d711b17f-b8d9-4ec3-abde-eabf6bd9357d", "sighting_of_ref": "indicator--de81efe0-0169-4854-94ae-719a3ecfe609", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68072b3f-fe61-49c0-ba06-9508bbc2b178", "sighting_of_ref": "indicator--32eaabbc-85cf-49d1-9b1e-9e800ca11307", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76774106-8e3a-402c-a315-f50acaec2741", "sighting_of_ref": "indicator--7abb2159-28b3-4148-ac58-1ad5ab39d296", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a4aa5d-23a5-4b88-b0a2-4e93d7ddd767", "sighting_of_ref": "indicator--39541f65-9d6b-465b-8769-d30f062efdbf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ff7c08-483e-4562-8636-55225ddd6250", "sighting_of_ref": "indicator--86d78194-8473-4d2c-9cc6-9035163ef18d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc590f1-e715-4dbb-b89c-dd0f4fcaca9b", "sighting_of_ref": "indicator--b029c6f6-9a6c-4f52-9cea-5454763a7e72", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d30192b-b0c7-4770-8706-cc891163498e", "sighting_of_ref": "indicator--72cc5e94-8828-4179-bb7e-b5a5ab80d933", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1fe01f-f5ac-45b9-8519-df43183857df", "sighting_of_ref": "indicator--048c1adb-f834-46ff-a559-35303a71ad3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec86be6-4589-4427-897d-2aa33ec61c40", "sighting_of_ref": "indicator--59b90f09-5435-4ba9-8cf8-eb214638d26c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c4417a-fed9-4253-b6b8-36672eaa81c8", "sighting_of_ref": "indicator--737529be-bff7-43d6-9e20-42cf1351f3d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4980ba5-c56c-4854-9999-6feb003a0036", "sighting_of_ref": "indicator--737529be-bff7-43d6-9e20-42cf1351f3d0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515d7c6f-d326-4d59-ae22-d53ff2ff2e06", "sighting_of_ref": "indicator--737529be-bff7-43d6-9e20-42cf1351f3d0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52bb95c-df0f-4879-8f51-99413153a98a", "sighting_of_ref": "indicator--516faffe-3b89-4d46-bef7-7dbadaa94b93", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb4f4c1-b7c9-46fd-ba3b-6940eebe7735", "sighting_of_ref": "indicator--516faffe-3b89-4d46-bef7-7dbadaa94b93", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a8d1ff-6e88-46bb-9e3b-bf4fa4e17c5b", "sighting_of_ref": "indicator--516faffe-3b89-4d46-bef7-7dbadaa94b93", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87c465b-cd11-4a50-9aa4-10fcb9865af9", "sighting_of_ref": "indicator--b2bfe8a4-dd2b-4a67-9312-494257494f15", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7feaf4b7-ff16-4341-a2ce-573c470d1c61", "sighting_of_ref": "indicator--b2bfe8a4-dd2b-4a67-9312-494257494f15", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d607e55-025e-47e8-ab82-7cf35e32064d", "sighting_of_ref": "indicator--b2bfe8a4-dd2b-4a67-9312-494257494f15", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863df636-c927-4e68-a8cf-dc5a42dfb512", "sighting_of_ref": "indicator--5cf4339b-295f-4b1c-a6b5-b72f1af35484", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f16335-a35a-4c9c-bee2-50d9f782eddf", "sighting_of_ref": "indicator--5cf4339b-295f-4b1c-a6b5-b72f1af35484", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c237419e-f8dc-4f57-b303-5851bc1da214", "sighting_of_ref": "indicator--5cf4339b-295f-4b1c-a6b5-b72f1af35484", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77093bfb-d744-4f3d-805d-33eea52bd326", "sighting_of_ref": "indicator--4a11c714-9547-4bbd-bbe3-080be90678df", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f433b69a-6453-4744-80fd-f27253abf6cc", "sighting_of_ref": "indicator--4a11c714-9547-4bbd-bbe3-080be90678df", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4d1c78-b765-45a0-ae8c-6b4b56814cd7", "sighting_of_ref": "indicator--4a11c714-9547-4bbd-bbe3-080be90678df", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e07120e-41ae-4081-8e66-40bd2d11ec80", "sighting_of_ref": "indicator--d7ac06f4-e0b6-46d0-b3e7-6fcf42c6a0f8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd39b3d2-6b01-4128-a2b3-085641fdcc07", "sighting_of_ref": "indicator--7eb9dfc5-252d-4d52-a2e7-1058d71b7a58", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe76cfda-669a-43a6-887b-6b83e9edf65e", "sighting_of_ref": "indicator--7eb9dfc5-252d-4d52-a2e7-1058d71b7a58", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5836857-982d-4147-9387-8b8dc35e25b4", "sighting_of_ref": "indicator--7eb9dfc5-252d-4d52-a2e7-1058d71b7a58", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ad5984-5880-4eef-bd80-a1e2ebacc59b", "sighting_of_ref": "indicator--d55021d5-67d0-4477-9cc6-49b320124c1f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1a7b27-aed4-4307-aaed-6c260365dba8", "sighting_of_ref": "indicator--d55021d5-67d0-4477-9cc6-49b320124c1f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5611a71b-12d4-435a-a32e-922499a9bf34", "sighting_of_ref": "indicator--d55021d5-67d0-4477-9cc6-49b320124c1f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49805a3d-4f57-4fbd-a5a0-dab15c632c1a", "sighting_of_ref": "indicator--12b23ba8-e520-4b95-b14e-73829da103d8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f68856-332d-47bd-bd9c-df3e73b5b2ac", "sighting_of_ref": "indicator--b9948575-3e44-400e-906c-551276d51fbe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111f66f2-c981-4d51-845b-4e98eb0cb2c2", "sighting_of_ref": "indicator--b9948575-3e44-400e-906c-551276d51fbe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91f41cf-8563-40f0-8487-bd1a40093fd0", "sighting_of_ref": "indicator--ba2c1c06-e47a-415c-b2d1-0a48629cc93d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbb6b29-2244-42a4-8de2-e6be019c52d9", "sighting_of_ref": "indicator--ba2c1c06-e47a-415c-b2d1-0a48629cc93d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e74f593-6ddd-4a8f-b170-d070d111cb0a", "sighting_of_ref": "indicator--cd12e07a-d4fa-42ea-a5b4-04063d27ecbf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c132130-9733-4f33-8f2d-12ae7a44dd6e", "sighting_of_ref": "indicator--cd12e07a-d4fa-42ea-a5b4-04063d27ecbf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7bc7110-d27b-4df7-aec4-03e142af26ec", "sighting_of_ref": "indicator--cd12e07a-d4fa-42ea-a5b4-04063d27ecbf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e41721-79eb-49c2-b6a3-f5b43d491567", "sighting_of_ref": "indicator--311ab0e3-85a8-433c-83a7-338400918be1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4374b278-0462-4e5d-ba4a-df6ddae5fdf8", "sighting_of_ref": "indicator--311ab0e3-85a8-433c-83a7-338400918be1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04fb3f29-63e7-4902-b72d-2f371746aabb", "sighting_of_ref": "indicator--aac5e3ae-ed27-47e5-9584-5da19a9850d3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d289fc1f-0e49-4c92-9a55-a70d75566114", "sighting_of_ref": "indicator--866ef643-11ec-4ea8-b09c-f76dd779873e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34170223-9009-49d4-97c4-529fe06b0551", "sighting_of_ref": "indicator--866ef643-11ec-4ea8-b09c-f76dd779873e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c8405b-a3e3-463a-95e7-0035947da754", "sighting_of_ref": "indicator--ffdb13ed-d07d-43c4-9580-fa7f34a1174b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b407333b-9414-4a2a-8f77-e4c42f92b8bb", "sighting_of_ref": "indicator--ffdb13ed-d07d-43c4-9580-fa7f34a1174b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2ec974-786c-4e3f-ad5e-4fbca8f0a2f1", "sighting_of_ref": "indicator--ffdb13ed-d07d-43c4-9580-fa7f34a1174b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97dd6916-302d-44ba-88a5-dfa8fc59e952", "sighting_of_ref": "indicator--2681b02f-aedf-4029-890a-b9b522f7330f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196dcb08-fca1-4956-9d0d-36654e8aaaf6", "sighting_of_ref": "indicator--730217dc-2ccd-4317-af2f-4432801850f2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9a8217-cf9e-4d0d-a9c9-8c353e71a9e6", "sighting_of_ref": "indicator--2a647168-de3b-47b1-bb33-d4a5f98937b0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e4f0db-553f-467d-be11-987e7a8ef66b", "sighting_of_ref": "indicator--d1f3951b-e6ff-455f-be4d-81dea97c672b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e71511-58b5-48e3-9553-dfab88b11fb6", "sighting_of_ref": "indicator--db55a8a8-8cb4-4e2a-a8d1-3e3166b7b834", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80be5eba-2570-4160-8629-e12b154b7128", "sighting_of_ref": "indicator--4596df01-fa1e-4dd4-af20-1e4528c7b88a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac465eb-353a-44e4-a773-623b10e4acc7", "sighting_of_ref": "indicator--7893813b-9173-4ddc-bede-0dd17e36813c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecbd39f-92fd-4970-af4f-7504f83e393a", "sighting_of_ref": "indicator--97c1e466-5c99-49b5-ac44-1e66c4e5b409", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7e1103-2e1b-496f-ba8a-da84405fd297", "sighting_of_ref": "indicator--97c1e466-5c99-49b5-ac44-1e66c4e5b409", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78d4f74-3588-4e73-bcc9-c6c6ff52a240", "sighting_of_ref": "indicator--9013aa4e-3be9-4a37-a4d2-0aeedc77fa2d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf10441f-e68a-45a7-885d-cdf9fee06231", "sighting_of_ref": "indicator--1993d8dc-d5e4-409b-9f43-aee82ddf541f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61104efa-e0da-4d26-a332-813b4177caf2", "sighting_of_ref": "indicator--8bf24941-e8a8-449e-a1f5-8cf5974d40f3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c940712-e5f2-4f47-a0da-31e65c001927", "sighting_of_ref": "indicator--be1a4a5d-7e50-4813-9bff-087ccf215532", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80f6af3-e8a7-4076-a1ef-13dd38f0123e", "sighting_of_ref": "indicator--d36adc17-4964-44e0-b2bc-5a84a0d44396", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff19bb56-25f2-4ad8-8e0a-faf9fedd180a", "sighting_of_ref": "indicator--6f1b0480-12f4-496b-95c1-0f9bbb025f78", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f311d2b-8f20-45b8-997c-5e30290e3ea7", "sighting_of_ref": "indicator--860c5a67-2289-495b-8261-6e6c1c8cdc88", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da0e229-9474-4fe1-b537-f80d304d8ae5", "sighting_of_ref": "indicator--860c5a67-2289-495b-8261-6e6c1c8cdc88", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e098c2fe-cb43-40cd-912d-74326367e47d", "sighting_of_ref": "indicator--55ef6ea1-5534-4329-9e6f-68061b29c9e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b70cb4-3ab2-4eaa-93ad-8c07ea1e51f9", "sighting_of_ref": "indicator--c0455059-67ad-4c40-8ad3-e5f236cabe9b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b94b5cd-acea-4f44-897e-35e9b8749765", "sighting_of_ref": "indicator--290d71c4-ce2b-4599-bf07-2f6743ed75e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e029679a-3e9d-4d0f-942b-71e4fea3c5c2", "sighting_of_ref": "indicator--290d71c4-ce2b-4599-bf07-2f6743ed75e6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b1bbaf-8c78-4eb4-8764-c90e7607ed3d", "sighting_of_ref": "indicator--41dd60da-34a4-4c54-948d-03d237f930e9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799e4d90-9826-495b-bfcb-e078d64f7cdf", "sighting_of_ref": "indicator--41dd60da-34a4-4c54-948d-03d237f930e9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d647d52-d71c-4c35-8895-ccf9fa1f280e", "sighting_of_ref": "indicator--41dd60da-34a4-4c54-948d-03d237f930e9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3f42d6-1dd8-4450-9975-50304025c42a", "sighting_of_ref": "indicator--53969722-087b-46c8-95bf-1060aaed3a5f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b9d669-5c0f-473e-8868-0d61031490f7", "sighting_of_ref": "indicator--53969722-087b-46c8-95bf-1060aaed3a5f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdaf7567-854f-4358-ab7e-a0f59d16b414", "sighting_of_ref": "indicator--13250ceb-7826-4dd1-a4c7-9072e1ae585c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bc7e7a-c081-4649-9d66-fe61d6434cb4", "sighting_of_ref": "indicator--1d68a94e-7446-4715-9434-5ba32f3af4c4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbadcb9d-870b-40c1-bd8f-0b508c48b629", "sighting_of_ref": "indicator--490701f9-d87a-4721-a316-67a0fdfc96fc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec387c93-2ef5-49cb-93f5-e9da8fb788b0", "sighting_of_ref": "indicator--490701f9-d87a-4721-a316-67a0fdfc96fc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51205ca9-909e-4089-9d0c-495ed6e401cf", "sighting_of_ref": "indicator--73685846-3378-4c4f-8418-d89fbb0c5f47", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebe4271-d3ff-499e-b815-9b2b5ff62d3d", "sighting_of_ref": "indicator--73685846-3378-4c4f-8418-d89fbb0c5f47", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6aa877-3dc0-4fd2-b988-dacce94e3048", "sighting_of_ref": "indicator--73685846-3378-4c4f-8418-d89fbb0c5f47", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba6375e-e75d-4588-a393-4eccf07d497f", "sighting_of_ref": "indicator--70c36c58-6de9-4644-b5bf-e2463fc075c3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b19d837-9dad-4a15-bbbe-399ffe195987", "sighting_of_ref": "indicator--70c36c58-6de9-4644-b5bf-e2463fc075c3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08dc7a61-fba9-4297-9def-28669e9e60e3", "sighting_of_ref": "indicator--70c36c58-6de9-4644-b5bf-e2463fc075c3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95285a49-eafe-4a8c-9f66-261bbebc2593", "sighting_of_ref": "indicator--41accbf6-08fb-41de-85d4-15959e77f245", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f5ac73-9fb0-4bfb-ac91-f88766b54f93", "sighting_of_ref": "indicator--ca497e20-a7bd-41c7-8ad8-9e4b6a755750", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92464e65-006f-4377-b0ba-d4b12bf56a9b", "sighting_of_ref": "indicator--8efd6823-467d-413e-b0c6-c7fc02a5cd0d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bf9523-8c09-455c-9a60-63cf4d4abdc2", "sighting_of_ref": "indicator--8efd6823-467d-413e-b0c6-c7fc02a5cd0d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19811c9-5d41-48cd-bb2e-7e9090481c9f", "sighting_of_ref": "indicator--868a0fde-f468-464d-9639-1fe933d2fd9a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bcd945-8607-4f39-bc4b-010494b101bb", "sighting_of_ref": "indicator--164b272b-48c4-4cdb-8940-00be4860fee5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d726b40e-44af-41ec-80ca-32c08ffa933c", "sighting_of_ref": "indicator--67b89202-c4f6-47cd-8ba1-fbae7fc9801e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37c5a1f-fbeb-4100-95df-281db18de1a7", "sighting_of_ref": "indicator--67b89202-c4f6-47cd-8ba1-fbae7fc9801e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be14e63d-417b-4549-a7ee-9aa09c90ab1c", "sighting_of_ref": "indicator--67b89202-c4f6-47cd-8ba1-fbae7fc9801e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee3d0ee-554d-44cc-857b-cecbf478dea9", "sighting_of_ref": "indicator--e4ff84e6-edef-45c6-9a1d-7138ab42d54c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a55412-f985-47b7-84bf-f5b18bc904d3", "sighting_of_ref": "indicator--1cbf32bc-83d1-46ff-95ef-3cce119f97a6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976f5931-9987-4d85-b461-9580666dca64", "sighting_of_ref": "indicator--1cbf32bc-83d1-46ff-95ef-3cce119f97a6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23b6ed8-f665-4722-916b-f1ace4371ac6", "sighting_of_ref": "indicator--eafb4e23-5c47-47af-8d34-433e731359db", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a3abad-aef6-429e-87ea-5cba0a75682b", "sighting_of_ref": "indicator--eafb4e23-5c47-47af-8d34-433e731359db", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8756fc-087e-49e5-a385-abe477f489c4", "sighting_of_ref": "indicator--e8efcd3f-c73e-413f-9f53-dc5f02610c60", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0a94fa-89e3-444f-9582-8157b70c6fd7", "sighting_of_ref": "indicator--e8efcd3f-c73e-413f-9f53-dc5f02610c60", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800372d6-7d50-4c8a-a009-6725b8ad5f20", "sighting_of_ref": "indicator--c0fde7c1-704e-4043-bfba-c3d2d8a67806", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33753af4-b3db-44df-b23f-c55b2e4920ef", "sighting_of_ref": "indicator--aef32020-1c60-4413-a378-d91eaee3cb15", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599533b6-cec4-47c2-937b-f7e27fc2b851", "sighting_of_ref": "indicator--1dd6838b-2490-4562-8b8b-39c3d283d34b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8786e1ba-e8ac-4ee9-9cbb-595b6da8d5af", "sighting_of_ref": "indicator--1dd6838b-2490-4562-8b8b-39c3d283d34b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0200bb4-3e89-47a4-9256-fef8567fde8c", "sighting_of_ref": "indicator--1dd6838b-2490-4562-8b8b-39c3d283d34b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c5555b-9727-4ef7-b327-a328700ea092", "sighting_of_ref": "indicator--d9ed1dfa-6cb0-4ddc-911f-8a0c4978114e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c364b064-1f20-4d0c-aab6-9d001fb7116a", "sighting_of_ref": "indicator--d9ed1dfa-6cb0-4ddc-911f-8a0c4978114e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097281ac-d96a-48d6-97d7-f4e2d30bc4b5", "sighting_of_ref": "indicator--d9ed1dfa-6cb0-4ddc-911f-8a0c4978114e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fba14b4-0540-4e0d-ad5f-a6d3e454a6b0", "sighting_of_ref": "indicator--c65d4aad-5b7b-45cb-a63a-bfa300d15985", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eebd196-2723-4bfe-8eea-56015ad41c95", "sighting_of_ref": "indicator--c65d4aad-5b7b-45cb-a63a-bfa300d15985", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41617894-96c1-4f1e-b568-c44a65f5ed22", "sighting_of_ref": "indicator--c65d4aad-5b7b-45cb-a63a-bfa300d15985", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49b8495-141f-43a6-aee3-540607e3c109", "sighting_of_ref": "indicator--2bc8ba4e-d919-4b77-ab0b-41c388c94e06", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c909a1-a08d-4ead-8e66-14bb043d10be", "sighting_of_ref": "indicator--fa7296f4-61a7-419b-9e41-164faf045143", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba0e804-41de-435c-9659-771bb3141d59", "sighting_of_ref": "indicator--49ab8f23-3c3e-4ebb-bf6c-ab3d614422a5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591d1e50-0891-49e0-add5-dfa78957c84a", "sighting_of_ref": "indicator--81425447-06ea-4942-9dff-25dab33ea433", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb622fbe-b3a2-4555-b587-3666033f6090", "sighting_of_ref": "indicator--60c84813-3c43-4e07-ae73-ed48323b8700", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa2032c-4938-427a-8e1b-8db3227c967b", "sighting_of_ref": "indicator--626d04b2-8f3c-4d85-a604-f6cfd7188132", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2219b929-e832-485b-afbc-6aa77a6ad802", "sighting_of_ref": "indicator--626d04b2-8f3c-4d85-a604-f6cfd7188132", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f902e028-bca0-4cc2-8679-24011d4cbfb1", "sighting_of_ref": "indicator--626d04b2-8f3c-4d85-a604-f6cfd7188132", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c69d5d9-7135-4867-89c9-7dd87d7651ed", "sighting_of_ref": "indicator--87bbd201-057d-452f-a0b4-73bd4412bb11", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f899855b-298f-4be6-915b-94e61afd2fc7", "sighting_of_ref": "indicator--829afd35-f5c7-49d0-a2d5-38da4c175f0f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a910c98-b9eb-44db-a794-068e1cad519f", "sighting_of_ref": "indicator--61060482-7300-4c6d-a9c3-84d436470d0c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0dc9e6-eb17-4dae-8770-1dfacdd7c98c", "sighting_of_ref": "indicator--61060482-7300-4c6d-a9c3-84d436470d0c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfd6c0e-b9b1-4e92-a466-c47611d1dde8", "sighting_of_ref": "indicator--61060482-7300-4c6d-a9c3-84d436470d0c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f84ccc-9d0b-4a36-853f-2cfe6d79d118", "sighting_of_ref": "indicator--3e4d0919-ba9e-4a89-9b07-615f363889bf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24989e1c-45d6-4388-9bf0-e6a2ee9cd9f5", "sighting_of_ref": "indicator--3e4d0919-ba9e-4a89-9b07-615f363889bf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304db1a3-0667-406c-99f6-b902261ecbbf", "sighting_of_ref": "indicator--932cbe85-d3f3-4130-afed-0e1efb6c212c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a7ee6e-f82d-45e5-b191-6e520a991a4b", "sighting_of_ref": "indicator--70e31278-2908-4b82-8a76-ace72c620571", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07d492a-340e-43de-b0f3-d51cae73b384", "sighting_of_ref": "indicator--24457e34-b06c-47f8-96f5-dd28a918ccf3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd58487b-e906-445a-ba48-fe319587c1d4", "sighting_of_ref": "indicator--762bdaf8-777e-433c-a5e2-af924399b7b8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72081244-187d-4247-90c8-77adfc828967", "sighting_of_ref": "indicator--762bdaf8-777e-433c-a5e2-af924399b7b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c78098-8938-4fe5-96b9-0aefb1c59c02", "sighting_of_ref": "indicator--279ce310-f928-4df7-8f27-5f27a8a6a8cf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4997b17-d17a-4c78-b6a4-76f23b0d0adf", "sighting_of_ref": "indicator--6eef18ba-85de-482d-b677-7fcd51a41497", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7420f797-4254-4d62-861f-a16b185d113b", "sighting_of_ref": "indicator--6eef18ba-85de-482d-b677-7fcd51a41497", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b831216-17f7-4a20-a4c6-67f06445c6ff", "sighting_of_ref": "indicator--5a7fd037-dea0-4171-af9f-604397d49b1f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f45f78b-8aac-46cf-972e-32c8828728ed", "sighting_of_ref": "indicator--5a7fd037-dea0-4171-af9f-604397d49b1f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67c5343-ec0c-4ab9-9856-5828d9c13b94", "sighting_of_ref": "indicator--5a7fd037-dea0-4171-af9f-604397d49b1f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccdf79f7-790d-451c-9101-6cf9688cdcfb", "sighting_of_ref": "indicator--90d98259-4625-4053-820e-9e8fd0933efe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e86d1a-8f2d-47d1-8e7e-cdad35f400f3", "sighting_of_ref": "indicator--59f137ba-9584-42f2-aa01-13be12ece527", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2386986a-70c7-40a5-86a9-a3120f039f1b", "sighting_of_ref": "indicator--d99cc3f7-005c-448b-ad9d-9a2559c59f67", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e82f61-b4f9-424d-8931-6cd7c96545ff", "sighting_of_ref": "indicator--ba06a83f-03fd-4af2-b9d1-0923c10c5112", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff6ac48-879d-4ee6-9c86-7120c0dea880", "sighting_of_ref": "indicator--65f2b3db-0e44-4e4d-a646-d084c3b21230", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe977410-8353-425d-93dc-b5c6043674c7", "sighting_of_ref": "indicator--73ed2d5d-f27b-4510-adb5-45cb2922652b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2786fb6f-ab52-46dc-9640-bdfe7e72d9ea", "sighting_of_ref": "indicator--73ed2d5d-f27b-4510-adb5-45cb2922652b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4eeccef-2623-4d1b-8a90-b52ed83409aa", "sighting_of_ref": "indicator--73ed2d5d-f27b-4510-adb5-45cb2922652b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a9d92d-8301-4f8a-92ab-435a364ff630", "sighting_of_ref": "indicator--a1cdabd1-b8e6-46b1-9988-636976a37670", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7779ab5f-263b-4b39-aa69-882b2c50fd1f", "sighting_of_ref": "indicator--93a292e5-6a85-4786-b9c2-a87e54e08bcc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba8ee73-8d35-4f97-a603-955bdd2468be", "sighting_of_ref": "indicator--016c51ce-5a72-43c2-8a41-415d229b058f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b8bbcc-681f-4454-8e1a-bf67f119c4b9", "sighting_of_ref": "indicator--628aaa12-e466-4765-95c0-01e281f520e2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7558e68e-e843-4773-8c9e-56f927ea414e", "sighting_of_ref": "indicator--34f30202-63cb-4053-8974-3c6f569c44ac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914b59a2-8d07-4970-9f3e-ec1a9f532972", "sighting_of_ref": "indicator--73423f25-050c-4a55-9b18-83529921c8cf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fa3a2f-5098-459d-8581-97847386ec13", "sighting_of_ref": "indicator--402baf73-d80d-40b7-a9bb-afb627d9700f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b61db1d-bd86-4a0a-b755-4428a035e5be", "sighting_of_ref": "indicator--402baf73-d80d-40b7-a9bb-afb627d9700f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1111983-f568-423d-9c6b-9a21c7b8d44b", "sighting_of_ref": "indicator--d8702561-cb0c-4531-a8d3-68576acf9727", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3173f693-2edd-4e11-b29a-b34203e8f065", "sighting_of_ref": "indicator--c4f22b0b-82b2-4a4e-becb-e7f71d27b7dc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda42838-0f71-4e7c-b8f0-3fc1a03af6bc", "sighting_of_ref": "indicator--b1d651c0-d1ae-4657-a813-a714225a3d4f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b647c8-9cd1-4c3f-a5d6-aafd5b359dc8", "sighting_of_ref": "indicator--e220fb66-fffa-4a2b-8346-64d2671f1ec9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab324daa-10c0-4972-baf2-c36854cb93a1", "sighting_of_ref": "indicator--7c01f33a-3813-4270-bcec-92b17563746a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d347a2f-0ce6-4bab-a934-612b415014cc", "sighting_of_ref": "indicator--6c79649a-cbb5-4dce-98f9-db340749ea9b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8d6f0f-5861-4f3c-bd6a-6f7a57a5416c", "sighting_of_ref": "indicator--e7d5aa54-becc-4852-a678-99c5fa6f7dd5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2478b12f-44a3-438f-94e9-87b779788016", "sighting_of_ref": "indicator--2d372a0e-50d0-4bd3-b2de-9b789ca4121d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1387d7f0-5cbb-43ca-be9a-a2dab42693c8", "sighting_of_ref": "indicator--2d372a0e-50d0-4bd3-b2de-9b789ca4121d", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5810aca-e1eb-46d0-8949-684f8f262c19", "sighting_of_ref": "indicator--6d294de6-114b-4639-a50f-526010e7bf3e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce5bbc5-d5e9-4f56-9c3c-d1e8976c0fba", "sighting_of_ref": "indicator--975caa81-0f87-4129-9d06-2401f6fc2b01", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0a75d1-04cd-407b-9dc3-e0b3bb6c94de", "sighting_of_ref": "indicator--8c56d7c4-3692-41a4-97e0-f463687992ba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30d8b76-3bae-4d8f-9877-c78fb75c262b", "sighting_of_ref": "indicator--f6554297-923a-4f3e-ac13-28d036bd6d73", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8640bebc-0460-43dd-8d8e-e9c66bad013e", "sighting_of_ref": "indicator--8b3a2014-d400-4182-8594-503622a3bf20", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50d1fee-2401-46f5-8414-8b2343dd91b0", "sighting_of_ref": "indicator--3c5aee08-31cb-404c-812d-a22ffab8d9f6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3478352c-33ba-41b6-b7db-ad45679f474b", "sighting_of_ref": "indicator--6c843f1c-63bb-4aae-82aa-f4888922e6c4", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1acfd86-5d06-406c-b3cd-05600f37e2c8", "sighting_of_ref": "indicator--9eb09830-b3e1-4fcb-8b94-0b219afd6850", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5903c0c5-24bc-46ae-9035-0eaddfe02262", "sighting_of_ref": "indicator--7060932c-2f68-4bb8-a5b3-dc59401f45ee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0509fa74-ce6f-42bd-b0de-93b735678de2", "sighting_of_ref": "indicator--e3a5591d-64cf-451d-93ba-44f9c11bd91f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d36582-da99-4117-94f0-9b478319b052", "sighting_of_ref": "indicator--33f3b8bb-84d0-4e92-bff4-132c46630d0a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ed553b-263f-4a84-a908-cfd30eae11e3", "sighting_of_ref": "indicator--33f3b8bb-84d0-4e92-bff4-132c46630d0a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751b6a1f-07d5-428a-a613-9d576d4e8a1f", "sighting_of_ref": "indicator--1a5f00dc-91d8-469a-a132-2b3995583474", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69f30e7-b1db-434b-bc33-3835945d921d", "sighting_of_ref": "indicator--a307fe68-13b0-4bb9-a66b-870201d92972", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06b4611-09d9-4cff-914e-0814667fa245", "sighting_of_ref": "indicator--58a020bd-efbc-476c-bb1e-6a578654678e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47828a0d-a218-4eb4-b229-0c8a25d8dddd", "sighting_of_ref": "indicator--add6fdd9-e90f-4cff-a975-08c7d6b4d55d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b57eef8-4cf2-4722-b129-b3d72393c062", "sighting_of_ref": "indicator--6821de94-757a-4ffc-a017-c5e33dd0358d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1d60a8-6dfe-42ee-b10e-30645a6cea59", "sighting_of_ref": "indicator--4bd332b8-98b3-4dd3-8dfe-38dbe1ef4008", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f227df21-8f4c-4b03-9389-f26bccd7e5d4", "sighting_of_ref": "indicator--1b614580-a2da-43db-9a70-2cadfc5fa7ed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61eec591-2e8b-4bd3-a36e-972d6dfb019c", "sighting_of_ref": "indicator--7634a72d-c35c-4ae0-a1c8-44295a40ff85", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc6c6e9-6405-40a2-9b6f-84c3d93a66b9", "sighting_of_ref": "indicator--2ad28f9f-045c-4f90-94b4-7771c3a54b3d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314d07be-47d3-4bea-8826-8ece7a96de80", "sighting_of_ref": "indicator--c513ef4d-8b26-4f74-a1a3-a56aad82c33c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c796fa7-cf52-4b44-9ba9-b6b71d20f2bb", "sighting_of_ref": "indicator--4399c0d7-ee2f-4a72-8421-ecfd4fb6b482", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65132c1-c473-45a0-96f0-b22ba1562f9a", "sighting_of_ref": "indicator--9da13b0e-e059-4e57-8a55-1e86d3d3816d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64961c9-973b-4197-97f4-8f7ae9c8231b", "sighting_of_ref": "indicator--6cb87e4d-e7eb-40d4-b94d-ebe7d37b2643", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0947adf-db02-4a8e-bad9-ce7ec997abe7", "sighting_of_ref": "indicator--5ad74e03-fbd8-484d-b985-ddb0809aa6cc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53984202-d0a6-4391-9eb3-06cb3e3d6d74", "sighting_of_ref": "indicator--46654811-1cf2-4710-815b-6b34bb058c9e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3d3958-dec5-4086-a778-5b267136039c", "sighting_of_ref": "indicator--7f75a2d3-0a19-4a90-a3ef-89d0b1d01776", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a598db78-fd69-400f-9078-ac5894bcd085", "sighting_of_ref": "indicator--489abb6e-9f56-4988-92bb-4b6d2a6cba72", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b767208d-93af-4b9b-833c-57ea57161627", "sighting_of_ref": "indicator--e71c42d2-2e92-4344-a728-a19a856b4f7f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539cc2e0-aefc-4b56-ac28-53de48a9f8d6", "sighting_of_ref": "indicator--47a180d7-cb58-497d-a43c-53e82965ff7f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fe799e-d13f-4521-8971-bbec83aaf623", "sighting_of_ref": "indicator--d1e3bc5c-4c27-4beb-81f3-34fbbfb0ca14", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57146370-11b0-403e-af15-f90650ff84a8", "sighting_of_ref": "indicator--a2f4e238-318b-414d-9010-6a820bb2c3f6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aaa0475-05c5-4027-a633-92bd9a9d3651", "sighting_of_ref": "indicator--46437cbf-feba-452a-95d4-a5fdcc11ec72", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cafd568-7bb6-4165-ae21-9c8c574654cb", "sighting_of_ref": "indicator--46437cbf-feba-452a-95d4-a5fdcc11ec72", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f55a8f-5058-4a57-880f-d2b678bbaae0", "sighting_of_ref": "indicator--46437cbf-feba-452a-95d4-a5fdcc11ec72", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a61e109-8358-4a9f-874a-66edbe48ed23", "sighting_of_ref": "indicator--c7d82f68-9631-4680-9bbd-2b351ee09967", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd41b147-11e2-472b-a764-99a73ccd8fcb", "sighting_of_ref": "indicator--e6fd53be-8ff8-4680-a55d-06f418cbd312", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78ee249-9bd3-40b5-a3f7-534464f4a2b8", "sighting_of_ref": "indicator--e6fd53be-8ff8-4680-a55d-06f418cbd312", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696a7074-d3ca-49f0-9867-1547bc45cd5f", "sighting_of_ref": "indicator--e6fd53be-8ff8-4680-a55d-06f418cbd312", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b3c510-7b21-4037-adaf-2585b8db87b3", "sighting_of_ref": "indicator--25bdf686-1859-42b3-8df4-7b9232b997c9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953502a6-002f-470f-bf70-9caa13a06096", "sighting_of_ref": "indicator--2ecb5e7a-f1d2-4d28-95bf-e936490b8c89", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031cdcc5-4bce-4d83-9351-6e15a915b83c", "sighting_of_ref": "indicator--2ecb5e7a-f1d2-4d28-95bf-e936490b8c89", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91ce916-b097-4537-94cb-84a03248ae12", "sighting_of_ref": "indicator--31345fcb-085c-488b-a63a-9e37354c9ab1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0842842-8080-4811-b997-ed08a6c225da", "sighting_of_ref": "indicator--31345fcb-085c-488b-a63a-9e37354c9ab1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c239df-af22-4c4a-8382-b2b325d86f62", "sighting_of_ref": "indicator--76f131d6-d993-4c4e-99c0-bb5ee0a848f9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08054851-bef5-4bd3-9a11-73ab5ecac4de", "sighting_of_ref": "indicator--3cfefdf1-8a80-477d-b70d-d509ee61d656", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4642eaa-7cca-4eb7-a70a-f44f1a94e35c", "sighting_of_ref": "indicator--3cfefdf1-8a80-477d-b70d-d509ee61d656", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c1fa10-2176-49de-8965-a286f383af91", "sighting_of_ref": "indicator--a957c915-f0bc-4655-b26f-771b8501d305", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41252f6d-f081-4804-970e-fe3721548108", "sighting_of_ref": "indicator--8b4595e7-6992-4954-a4cf-448fc8d0146f", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2a8c40-8193-4db0-8b8f-f423a05ddf46", "sighting_of_ref": "indicator--f5bb2fa2-2b37-438b-bde8-0584c693547a", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049d4b30-d343-48bb-9fa3-98776baa8f77", "sighting_of_ref": "indicator--361c76b4-1391-410b-8506-9161466aeef4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98989a93-0c64-4ef8-be85-962d9622888f", "sighting_of_ref": "indicator--361c76b4-1391-410b-8506-9161466aeef4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e93ffe-1a54-4660-b0ae-8d39a39cdcd7", "sighting_of_ref": "indicator--361c76b4-1391-410b-8506-9161466aeef4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99840721-caa7-4db6-ad9f-a47ad7ffd7fa", "sighting_of_ref": "indicator--cedefe1a-a560-407b-a657-bd90fa2c5e70", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6eac113-1ba6-4412-b99f-ef954eb1dbc6", "sighting_of_ref": "indicator--cedefe1a-a560-407b-a657-bd90fa2c5e70", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700e2db4-cdb8-44d8-af1c-805234606a89", "sighting_of_ref": "indicator--cedefe1a-a560-407b-a657-bd90fa2c5e70", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94da001-17a2-46c0-a3a0-38aa06c50691", "sighting_of_ref": "indicator--0152d490-e861-47f9-a46d-9d0622452edc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e49d23-c6a9-4504-bac9-60c623ef7bb2", "sighting_of_ref": "indicator--0152d490-e861-47f9-a46d-9d0622452edc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029b02ef-1aca-40e1-ae39-b8fe753702b4", "sighting_of_ref": "indicator--0152d490-e861-47f9-a46d-9d0622452edc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367b54a8-1bc9-4889-a17b-18e96f194558", "sighting_of_ref": "indicator--5b613b80-5a14-4ab7-9b26-81202c180887", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da364f0-cf4d-4ded-b84b-1ae74a161ca2", "sighting_of_ref": "indicator--759270c3-3921-4fe2-9ce8-ff5cec4b209c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6bdea1-0e9e-43f5-ac92-ff94c5bdea10", "sighting_of_ref": "indicator--9dc65f81-d802-4ef8-945d-a04988b3e23e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489e5184-a5cc-4950-8bb3-103a448e4e78", "sighting_of_ref": "indicator--6dc377d4-6082-4b6c-83fd-78aba3ef5ab5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb9682d-8b6b-4675-bae4-10dbebd1f860", "sighting_of_ref": "indicator--c5cad9b8-1aa5-4080-8de1-dda3ddbd1a40", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8e70ec-e1cc-4422-989b-0383f45e5d82", "sighting_of_ref": "indicator--0947afa9-2f73-4237-8258-bf5b0a138be0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddabdfcf-b219-49b3-80fb-f49aee800908", "sighting_of_ref": "indicator--0bf419e0-2841-41ee-a598-8c3f89f9934d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49b3b5a-09d7-497d-8f19-1016bec585be", "sighting_of_ref": "indicator--b420cab1-b6c7-4fa2-af03-2d007289279a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f5c83c-16eb-4e05-b214-d75ea3f4e582", "sighting_of_ref": "indicator--fdf37da2-a4ab-4fa5-8196-e8bed3f64d0c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfe3de5-3c61-489d-8f75-ca95372f15b7", "sighting_of_ref": "indicator--f807d952-4af5-47d5-949e-35c01b27b39c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09d216a-4176-4ccf-99de-798a6f61ac0c", "sighting_of_ref": "indicator--a60d8283-d8e4-420d-96aa-51630540e3d9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714b7089-e591-4eeb-aa88-8bb679a3c2b2", "sighting_of_ref": "indicator--a60d8283-d8e4-420d-96aa-51630540e3d9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ca8ea2-e209-42cf-a958-06d563d8a37b", "sighting_of_ref": "indicator--a60d8283-d8e4-420d-96aa-51630540e3d9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035c26ff-518c-4a67-817c-ecad1f4797be", "sighting_of_ref": "indicator--8e5043c7-f410-4dfb-8047-b9f76e5ddccf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e0f9ae-c995-4197-95b5-6d006cb8a098", "sighting_of_ref": "indicator--71a30188-73c7-4589-be76-bdb38a2ec4ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1129d722-3944-4b4b-997d-b9767dc4d9c6", "sighting_of_ref": "indicator--018c8c79-1dd5-4cf5-8684-e2cdf684df97", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29adcdc3-02c0-4b5c-b3ce-d36647bcd5e1", "sighting_of_ref": "indicator--550e8ca4-20d0-49f9-abd4-2a1c9e00f132", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e5eb3d-2c6d-44b1-9d61-a6e7e10eef9a", "sighting_of_ref": "indicator--11c1641e-d886-4f42-9960-9a670dce6a89", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258a4a0c-f89b-4d91-9c3e-c4a1e0e52d1f", "sighting_of_ref": "indicator--11c1641e-d886-4f42-9960-9a670dce6a89", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d67366-2938-4a89-8336-82492b88bf63", "sighting_of_ref": "indicator--11c1641e-d886-4f42-9960-9a670dce6a89", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcf7ac9-0cb1-48ad-a0f3-098cf57c8e78", "sighting_of_ref": "indicator--78ac802c-c571-4d28-9504-22ead64ec4b6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1edadbe0-c841-4082-9199-c7851f52914e", "sighting_of_ref": "indicator--76b3f015-b24a-4623-ac6d-a4bd05ed422d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e90bcc-0ec5-494c-b154-2a69cab2ab3e", "sighting_of_ref": "indicator--78432995-f379-48ca-8bd0-bae60a3b6d1b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35208fd9-bb30-4e63-9f6c-7a19b08d12d7", "sighting_of_ref": "indicator--1b48e36f-37e6-4404-bc8f-d454652080e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a174fd4e-39b8-4ef7-b52d-cbf1ca61fd9c", "sighting_of_ref": "indicator--1b48e36f-37e6-4404-bc8f-d454652080e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36346b9-e264-47aa-a04d-f429a17c1f6f", "sighting_of_ref": "indicator--1372d2ad-6a2c-4208-bca0-e310d1cd03c8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee11a96e-2ea2-433f-9354-38689a1f771b", "sighting_of_ref": "indicator--1372d2ad-6a2c-4208-bca0-e310d1cd03c8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fd8ee0-2343-466f-9e80-b10e6583b5fb", "sighting_of_ref": "indicator--82bbc24f-1648-41e7-90d5-6730ac940add", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e678021-8d34-4210-abc2-af3b99d93778", "sighting_of_ref": "indicator--064fde0d-f8e2-4902-91d8-f8b69488bb45", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c83d08a-0ed6-48ce-9b5e-7f86bb3a0900", "sighting_of_ref": "indicator--d952eb18-c17b-43af-a81d-866355511494", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7fbbe3-c692-4d2c-a5e1-3208cbe2447b", "sighting_of_ref": "indicator--fa904059-200a-4213-8a6e-ad70125f11e3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b4aa0a-d092-4628-906c-5fcc5300d384", "sighting_of_ref": "indicator--7b357140-6882-4dcd-a58b-3aa13d8d05c1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e441cd38-053d-4e50-a2b1-8dfb6528cec8", "sighting_of_ref": "indicator--8d24b301-af4d-4920-b66b-064b031dd578", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7d325f-8f29-457c-a18e-de84b8ac939f", "sighting_of_ref": "indicator--e089e1d0-8f3b-4776-9f64-0401cda28f53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53064baf-3df9-497b-9a7e-18a836018289", "sighting_of_ref": "indicator--86950f5d-7d39-4294-b8c3-22f63366c186", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f082d2e8-3245-4147-8858-7ba3f5fa9904", "sighting_of_ref": "indicator--65da876f-313f-4b2d-9fea-3e3288c7b744", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38f8ace-d2c6-4c62-b34d-1ce5c68a3cd8", "sighting_of_ref": "indicator--e2a3b7f7-0c96-49fa-8a21-c462b6228f90", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69464b0a-03c6-438b-93d7-a497ad639908", "sighting_of_ref": "indicator--8df25f5f-a6a0-4386-b79d-8dc0af9bccd5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d83c67-dc65-41f9-aea3-f277f179baad", "sighting_of_ref": "indicator--95266102-2657-4067-b739-53b2fe55babd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c151032-6264-4e6a-bab5-3d03f170e2d0", "sighting_of_ref": "indicator--38a67553-df3c-427f-a9da-aae7757e8afa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e06d3a-42b8-4b87-9a0f-3671066ab5c9", "sighting_of_ref": "indicator--c8691de3-6f8d-48f8-86c3-3c1651fd7488", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8114659-46bf-4551-bc32-557921fdab17", "sighting_of_ref": "indicator--118e9c1c-c1a0-4f06-be8f-926b4381a782", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b7f39a-2633-4c45-9d0c-12a6ff0cb17d", "sighting_of_ref": "indicator--118e9c1c-c1a0-4f06-be8f-926b4381a782", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72511887-a364-42fa-835c-14d7a9b75fa3", "sighting_of_ref": "indicator--2b2748b8-6d61-4dc7-8515-331e454149db", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923c2282-0a29-4e35-87dc-9bc52ba222f0", "sighting_of_ref": "indicator--2b2748b8-6d61-4dc7-8515-331e454149db", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5758ea-f69f-4907-97a9-07a7ece611b4", "sighting_of_ref": "indicator--dd074a30-62dc-42d7-8e65-3a9c99607b40", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46666f77-eac7-4c84-a7a7-d9a1620d476d", "sighting_of_ref": "indicator--dd074a30-62dc-42d7-8e65-3a9c99607b40", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396f7782-2e7c-4e7a-9931-65589e10d9cf", "sighting_of_ref": "indicator--ecfafcaf-99cf-439a-92da-de007318564a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9db398-c679-46d1-80cd-14ef5ec45ac2", "sighting_of_ref": "indicator--ecfafcaf-99cf-439a-92da-de007318564a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d5aca9-ac31-47a5-ac75-4d3b1be5c792", "sighting_of_ref": "indicator--9c663f35-442c-4fe4-9713-8157b5c6376f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac86719-df0b-4687-8a28-b456ae5670d3", "sighting_of_ref": "indicator--9c663f35-442c-4fe4-9713-8157b5c6376f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630f58f9-0731-429a-acb7-9baba14b585b", "sighting_of_ref": "indicator--cf273170-51cf-4280-94ef-6a03d5f4ee61", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e67c88-c7c0-4ddb-8192-121ff46363e4", "sighting_of_ref": "indicator--cf273170-51cf-4280-94ef-6a03d5f4ee61", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37dc7546-54c5-434e-a9da-fc61da5d7ef3", "sighting_of_ref": "indicator--78b331e1-12a0-4e05-9ce9-34ecfe4a2074", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da5f3d8-67b3-4a18-96bf-968bc343ec41", "sighting_of_ref": "indicator--54dcf39e-8075-47d0-b5c4-505267f3046c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76cf6c6-b385-48ed-ac15-27fb29b95eaf", "sighting_of_ref": "indicator--54dcf39e-8075-47d0-b5c4-505267f3046c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4c0ecf-6268-41a1-af07-465e32aca395", "sighting_of_ref": "indicator--51536d61-ce2b-45eb-bcfc-98c3cde8828c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ad299b-0f40-47a7-98f6-a033d257e5d4", "sighting_of_ref": "indicator--51536d61-ce2b-45eb-bcfc-98c3cde8828c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e439f83-34f2-41bd-885b-6545cb0773b1", "sighting_of_ref": "indicator--3b5f659f-f2bc-4e79-bc77-3338b504bd73", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8848b4ff-7db8-4309-9b34-37e6d01c4c3f", "sighting_of_ref": "indicator--3b5f659f-f2bc-4e79-bc77-3338b504bd73", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ddf19b-0486-4740-8168-e9063bbcce7e", "sighting_of_ref": "indicator--bae93885-c9a3-42c4-8db4-577ae968ab6f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97438550-35fa-4ec8-a7e0-32209894d719", "sighting_of_ref": "indicator--bae93885-c9a3-42c4-8db4-577ae968ab6f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2208209d-c197-4ed8-b91a-07cd02f0ca6e", "sighting_of_ref": "indicator--ce8e5e20-fca1-4760-b3f9-d514ed4602aa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f7e894-ad1a-4591-9f37-6fddc1dcbdc0", "sighting_of_ref": "indicator--ce8e5e20-fca1-4760-b3f9-d514ed4602aa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de66899c-e222-4bd5-901a-4d07ad48bfc1", "sighting_of_ref": "indicator--5966441f-2704-4624-bec0-76723c665f3b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de53548d-1979-4f76-9341-e950807ef6b6", "sighting_of_ref": "indicator--5966441f-2704-4624-bec0-76723c665f3b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1529d98-0577-47f9-b230-f1dde787ad29", "sighting_of_ref": "indicator--6132775e-ea47-4a81-b8c0-7653089626c3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffe9db2-2c40-4009-b50d-f2defff0af2b", "sighting_of_ref": "indicator--6132775e-ea47-4a81-b8c0-7653089626c3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85154dfe-9eb9-4ef9-ad23-f3650db15ff8", "sighting_of_ref": "indicator--d1b211ab-35e7-4cc5-aab1-ee15e12fc16a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27ffe45-ee32-4412-82f0-2dc1564dd6f4", "sighting_of_ref": "indicator--d1b211ab-35e7-4cc5-aab1-ee15e12fc16a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eab5f7d-2901-4a05-aa8c-8aa833d55bca", "sighting_of_ref": "indicator--51039323-498a-46c8-a1ec-214ec3c23d83", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34cb2fc0-14d0-44f4-b62b-c803fd367944", "sighting_of_ref": "indicator--51039323-498a-46c8-a1ec-214ec3c23d83", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56514cac-7221-409b-be9b-8a1f74e2a5c7", "sighting_of_ref": "indicator--73c27475-bd01-4c67-af78-73c26d40c62f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb82afea-18c9-4c38-93b3-8713413ae4d0", "sighting_of_ref": "indicator--73c27475-bd01-4c67-af78-73c26d40c62f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30edf32-22e8-404a-bdd8-38ac679c4999", "sighting_of_ref": "indicator--78f4ecd1-7d6c-4b8b-82a6-63edf5647086", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b06b2bf-afc0-4512-9b74-f689e737a57d", "sighting_of_ref": "indicator--78f4ecd1-7d6c-4b8b-82a6-63edf5647086", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708cb126-72f9-477a-8950-8cfa083b348b", "sighting_of_ref": "indicator--71f883ce-e2cc-489c-9e73-ef0b25179bdf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026cf9b8-a2d1-4266-8c4a-62f3ebd11968", "sighting_of_ref": "indicator--71f883ce-e2cc-489c-9e73-ef0b25179bdf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92a284a-e4f5-4ed9-bd15-28a2a52a011d", "sighting_of_ref": "indicator--71f883ce-e2cc-489c-9e73-ef0b25179bdf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f21d9f2-d7ad-44f0-9be3-ade1d8cbc44d", "sighting_of_ref": "indicator--d9e4d42e-0225-4a0a-8c26-17ebe44d0d94", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb017e1-836c-4daf-aeac-defb0c6fefee", "sighting_of_ref": "indicator--d9e4d42e-0225-4a0a-8c26-17ebe44d0d94", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3260240-5944-4989-a668-b3ceb9b6dc92", "sighting_of_ref": "indicator--efe3928f-8917-4461-b9f8-eac0f83bc50f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760ca2f3-3e57-46d7-855f-3abd48ca82d0", "sighting_of_ref": "indicator--efe3928f-8917-4461-b9f8-eac0f83bc50f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4637d80c-90cd-4f11-a299-aba39886bf48", "sighting_of_ref": "indicator--f4afa9cf-cb81-49af-951b-08f2f90f35d3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ae1119-1d09-44c9-a020-2a49dd92c4fe", "sighting_of_ref": "indicator--f4afa9cf-cb81-49af-951b-08f2f90f35d3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250fb92f-72a5-4b1f-b1bd-1f7c1da37ed4", "sighting_of_ref": "indicator--f1509bc7-8907-4d7e-b598-1911345b5fe4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecde1fb3-b40e-429f-a67f-96d511c3afba", "sighting_of_ref": "indicator--f1509bc7-8907-4d7e-b598-1911345b5fe4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aec001a-54a7-4915-aac1-b27d4064d104", "sighting_of_ref": "indicator--564f88fa-6b9c-4906-8736-d94dc9663889", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78cee93-a01f-4a76-b316-f563f5685acc", "sighting_of_ref": "indicator--564f88fa-6b9c-4906-8736-d94dc9663889", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41209114-2322-4d64-98a9-e64fdcb118f9", "sighting_of_ref": "indicator--da473394-a760-4a65-96be-35ba45206887", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecace7f-a702-4689-902e-06d5a28225eb", "sighting_of_ref": "indicator--da473394-a760-4a65-96be-35ba45206887", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532984a8-95ca-41be-93b9-c8ea4b15ed01", "sighting_of_ref": "indicator--d8cd9082-49b5-4e2e-bece-8b709f8f8f51", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea50ad1e-a4bb-4d4d-a8f0-c30c435a4e1b", "sighting_of_ref": "indicator--d8cd9082-49b5-4e2e-bece-8b709f8f8f51", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76e72a9-e18f-4c46-bd6e-561ed82d48cd", "sighting_of_ref": "indicator--52a74e46-83ad-4901-afda-915d9cf09e6e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d248a62-e531-4ff6-83c8-2070f8ce8810", "sighting_of_ref": "indicator--52a74e46-83ad-4901-afda-915d9cf09e6e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602b6362-1726-436a-ab10-72c5aec8e20d", "sighting_of_ref": "indicator--6f5e400a-d809-4051-9e68-d6c4bac6262b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251035ad-c5b7-4912-967e-45ddefa96aab", "sighting_of_ref": "indicator--6f5e400a-d809-4051-9e68-d6c4bac6262b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26037050-eabe-4ea8-af61-6e1f36dbd8c7", "sighting_of_ref": "indicator--844dcef2-9511-4764-a60a-734a3f1d5b05", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32a3fe4-0475-4f38-a558-e2b43a39ab24", "sighting_of_ref": "indicator--844dcef2-9511-4764-a60a-734a3f1d5b05", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f15145b-0ade-4199-872d-4b9efcac7da9", "sighting_of_ref": "indicator--ab0b1461-c760-420e-a3c5-c5044b9ce802", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc051376-c274-489f-b5e0-4999d0cc2e3b", "sighting_of_ref": "indicator--ab0b1461-c760-420e-a3c5-c5044b9ce802", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850ad825-b36c-4b59-b389-a0256f208850", "sighting_of_ref": "indicator--98d3aafd-6daa-4bf0-92ff-cd1a228e0a3d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d37615-8836-48fb-ab7e-c515135fd9d2", "sighting_of_ref": "indicator--98d3aafd-6daa-4bf0-92ff-cd1a228e0a3d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb76a73c-9b99-476e-883f-9b0988531d53", "sighting_of_ref": "indicator--5328ba98-a37c-438c-8543-336f2a4536b2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1b5acf-2b3e-44c1-bc63-4f813e8a340b", "sighting_of_ref": "indicator--5328ba98-a37c-438c-8543-336f2a4536b2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6455c5-c895-4847-8918-ea89fff6a40f", "sighting_of_ref": "indicator--fbf95dbf-26d8-4cd3-862d-144095ef60c1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de54a845-02a9-4b58-babe-983b0bcc8389", "sighting_of_ref": "indicator--077566f7-00d9-42bb-8ed0-a7d3316a697f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6676adea-1b5b-4b6f-9dbe-ea396f4c0ffc", "sighting_of_ref": "indicator--e95efc16-6289-492b-868d-3bc7c6c21ae6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40175fa-88b9-43e9-9e7a-d1f1fb24abe1", "sighting_of_ref": "indicator--e95efc16-6289-492b-868d-3bc7c6c21ae6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a329014-b39a-48c4-892d-e116c8f9a6ed", "sighting_of_ref": "indicator--de9fd200-72a4-42c8-9507-f28d11947c31", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3406d883-9c8f-4e69-b41f-3674a162a30e", "sighting_of_ref": "indicator--fc07ffc6-3f6f-4975-b04e-474ffeeeac2d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0465f236-3fc8-4b14-85e3-886207e73694", "sighting_of_ref": "indicator--ec2fe9f3-4147-46d0-9a13-30fbb2549d3d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7c1650-12c4-425a-aee3-0488234ff414", "sighting_of_ref": "indicator--0ba95c94-035b-449a-8f64-852e99f4d490", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb33886-5293-43b6-86f0-50d1efc9db96", "sighting_of_ref": "indicator--7692bd59-cd43-402c-b8a6-5efca4f0188e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c8ef14-11bc-49e9-8a03-281d1e3e4acf", "sighting_of_ref": "indicator--7ada6cf3-db91-4c53-8ad7-34acba65db4a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1fbacf1-e038-48c7-85d5-f1031993cd68", "sighting_of_ref": "indicator--0488d362-b625-4c59-b462-73d70276b4e6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ddc645-f704-455a-bc08-db5811ef0928", "sighting_of_ref": "indicator--f4b3631c-347a-4f57-9f82-c082232029c0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28ec748-30da-4cb6-9541-49888bdd0991", "sighting_of_ref": "indicator--7412cf36-29ce-4768-87b6-d64f787cb1d9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5731be-6787-404d-8c56-0ed5794d5a3e", "sighting_of_ref": "indicator--9ae2a305-b27b-4df6-a51f-6e1c70b33596", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9afaa4-69af-4f77-a0ef-f51df25c2a99", "sighting_of_ref": "indicator--0b5d2051-e6b1-496c-ad18-f94f58cd9ed9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc150a24-4144-473a-aeed-21ceed6f37a0", "sighting_of_ref": "indicator--0b5d2051-e6b1-496c-ad18-f94f58cd9ed9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8878d010-23b1-4169-bb9a-d16495024501", "sighting_of_ref": "indicator--17d2a5b5-5330-4686-83b0-90bb97562b39", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8788f37f-5595-4e91-a106-799fae58b491", "sighting_of_ref": "indicator--d189871d-41e4-42bf-a1a4-05f256d697d4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccea3cd-c54a-43cb-b008-ec053ebfd791", "sighting_of_ref": "indicator--be36f944-039e-421c-8cf0-48199ba8f7c5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c641e39-5cef-40ca-bf1b-d835d4d3ab9c", "sighting_of_ref": "indicator--63d81f32-67d0-40ac-90e0-43edb9703569", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eadbc27-b2a4-4c34-9a88-4becc10fc3f3", "sighting_of_ref": "indicator--64aeafd4-d317-48f8-91b6-0a320efcc1f2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2425ca0-0464-4cb6-b7f4-8da2f55aff56", "sighting_of_ref": "indicator--180f5712-f178-4d89-b88f-cd950a61691e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017c5eec-af3e-4793-97bf-5b6a22a56fff", "sighting_of_ref": "indicator--62ae2575-14bf-47b6-b94e-c4dae758b374", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0b08d3-b111-4e40-a188-12580a2fb152", "sighting_of_ref": "indicator--257b84b4-d181-4e80-91b8-93e581c09e27", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83de867-bb07-4e12-956f-ae26a84fdd7b", "sighting_of_ref": "indicator--8bf3d160-2753-4d8d-b7df-2345a551d887", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d202194e-5ae8-44e1-a201-7bd426454e78", "sighting_of_ref": "indicator--dc7ab225-ff59-4fca-a142-6a24dc893771", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6111df3-3429-427b-b531-650923957b30", "sighting_of_ref": "indicator--b3a43439-529c-4eae-991d-9f4210401b4f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fe27d3-6d88-4cc8-a384-3e2cf02534d1", "sighting_of_ref": "indicator--b3a43439-529c-4eae-991d-9f4210401b4f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfd9ebd-7c5b-427b-91f7-8801f3406466", "sighting_of_ref": "indicator--26de3e08-2d6f-4ade-89a9-5e7c0a98e49c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde31560-7d79-434e-8dd3-b470235d60b6", "sighting_of_ref": "indicator--23cbfc9b-8a70-4f35-b526-b50f8d19223f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35dc68c0-143d-4a64-a229-0fda6828a624", "sighting_of_ref": "indicator--c2d9c7d0-4793-40d7-b7d7-adcf677f28a0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0410c111-bda2-4aef-b922-edfef6186729", "sighting_of_ref": "indicator--b80bec03-7007-43e6-a36b-ef426f6a17cc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f78baa-f9e6-4a16-b110-1b018d041469", "sighting_of_ref": "indicator--3a81bc45-4aa9-46f3-bdf3-4e8af23028ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69347d86-9bd5-4a77-951b-0be7de47c976", "sighting_of_ref": "indicator--d3660c3c-90e3-4495-b746-c6374ecf917d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2114f8b7-ec78-4cb4-815f-8f8fa3877c49", "sighting_of_ref": "indicator--3bc3ba51-1f7c-4d6e-94df-978218fdc9b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb99250d-cd58-4fd7-86c3-32d779f2176b", "sighting_of_ref": "indicator--83a47943-85ff-485b-ac6e-2a61f66033be", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b7f116-43a3-49ad-91ec-18f421d9f24a", "sighting_of_ref": "indicator--9d5128b6-f0f8-4bd2-8976-1de37e4e13ce", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df11ad2f-75fe-40ef-915f-8eb8dcd9505b", "sighting_of_ref": "indicator--eea9232d-f0a5-4a5c-8245-82603d1315c2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca97241-1fa0-4c52-9aaf-4c4b6f9a4624", "sighting_of_ref": "indicator--eea9232d-f0a5-4a5c-8245-82603d1315c2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200a8490-0f47-452b-b09b-63113836a0e5", "sighting_of_ref": "indicator--2d3c2bff-bdee-4916-adcd-bde2d88f6671", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ce6555-4925-43af-a647-1fb862c7bbf2", "sighting_of_ref": "indicator--0fcc9206-b435-4218-8c23-cf0e60d82997", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fb3370-0e99-4ad0-9d59-74e656d79bdf", "sighting_of_ref": "indicator--a7efaa11-4304-44d4-8c63-ea7f94cf5609", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2e75aa-4230-44ba-ba1d-5c7aa13529f5", "sighting_of_ref": "indicator--c6993c4e-51eb-4df2-827a-d65ff58ef38b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9c5972-0867-421e-a9ba-ce2c90e8df6b", "sighting_of_ref": "indicator--ed923d8e-13b1-4fac-905f-2aea67e560cb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfdac6c-6356-43f4-9e6a-d5a2d369384b", "sighting_of_ref": "indicator--ed923d8e-13b1-4fac-905f-2aea67e560cb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9cb4d2-3214-45da-94c7-c9d4f9177f0e", "sighting_of_ref": "indicator--d75ab818-3747-4b72-8994-9a29e838b851", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b816d927-a7ab-4a97-bcef-626d33ecd759", "sighting_of_ref": "indicator--d75ab818-3747-4b72-8994-9a29e838b851", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882411c1-7bb4-4902-a81d-9f77485e6ead", "sighting_of_ref": "indicator--1795f75a-ab47-4e49-ab8b-fed0f4909611", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e43b397-8ce6-43e2-bc5f-bf1bb4f802ce", "sighting_of_ref": "indicator--1795f75a-ab47-4e49-ab8b-fed0f4909611", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed8a879-c666-45ed-b4f0-d927c13ff6ff", "sighting_of_ref": "indicator--1795f75a-ab47-4e49-ab8b-fed0f4909611", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49e33e6-c189-4052-a5ca-14025305e8c1", "sighting_of_ref": "indicator--ba660eda-08e6-43c7-a901-185a7d928945", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b64e431-c0e3-4000-b612-edfe23ed78d7", "sighting_of_ref": "indicator--ba660eda-08e6-43c7-a901-185a7d928945", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b343c5bb-3de4-476a-b552-7c783aede047", "sighting_of_ref": "indicator--d1159110-cfb6-4884-891c-d7893e48b544", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06e6021-12cb-499b-9d05-7fd3784b677e", "sighting_of_ref": "indicator--d1159110-cfb6-4884-891c-d7893e48b544", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ee6caa-f8da-4b00-97e9-3ff4e31d9c96", "sighting_of_ref": "indicator--d1159110-cfb6-4884-891c-d7893e48b544", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f02a075-24ba-4b4d-9214-6d2e919d8086", "sighting_of_ref": "indicator--58714572-cc54-4e69-aba3-ae1a0e851eb0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6592f7-b5b9-4aa2-bdbb-6cb6bf10f5fa", "sighting_of_ref": "indicator--58714572-cc54-4e69-aba3-ae1a0e851eb0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f3d93b-f6fa-493d-85b1-7b2b047c3296", "sighting_of_ref": "indicator--1e320ff8-6ca7-452b-bde4-a9331e7ffd5d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb98c7a-110b-4be2-ab7d-77ef4841cc91", "sighting_of_ref": "indicator--857725f1-c9a7-46f3-9870-9b18b3dd31e2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270a8090-8337-4ee0-8437-6064d0ebd632", "sighting_of_ref": "indicator--2c59b994-b663-469a-ba89-51665cc2468b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a180405f-abca-4737-b2f5-d4f8caece07b", "sighting_of_ref": "indicator--2b1daf04-5307-4e48-81f0-9381f5ef4425", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9636d96c-f28a-49b1-8173-6fb7d079b0be", "sighting_of_ref": "indicator--2b1daf04-5307-4e48-81f0-9381f5ef4425", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c110f7-8a65-4afc-8692-5f85ed05b1af", "sighting_of_ref": "indicator--2b1daf04-5307-4e48-81f0-9381f5ef4425", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80412dfd-616f-4583-a446-ea3a9ee40d0f", "sighting_of_ref": "indicator--f67e04d3-417a-4523-8da4-25360f38e5db", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc27c36-9db9-45bc-91a4-7f0e70c82fde", "sighting_of_ref": "indicator--f67e04d3-417a-4523-8da4-25360f38e5db", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1420ffaa-3807-4965-950a-cedbefec456a", "sighting_of_ref": "indicator--f67e04d3-417a-4523-8da4-25360f38e5db", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aeca5c6-2b71-47b9-a581-e763d4650a75", "sighting_of_ref": "indicator--9e0db92b-2b8e-4a74-9382-aa30c8f400a0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6bd6d6-409d-4ffe-8f8f-8cd57bcc15c6", "sighting_of_ref": "indicator--9e0db92b-2b8e-4a74-9382-aa30c8f400a0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cec2540-8217-4503-b6c8-64511a8bc792", "sighting_of_ref": "indicator--9e0db92b-2b8e-4a74-9382-aa30c8f400a0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d367034-37bd-4f4d-8c81-82ac6ceb6f25", "sighting_of_ref": "indicator--93acdc9e-2ec7-4396-a68c-42624a71f36c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505c82b8-b6e3-42e4-8672-fef786ccfa2e", "sighting_of_ref": "indicator--93acdc9e-2ec7-4396-a68c-42624a71f36c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef79cff-d5b9-481a-8a71-536c1d151c95", "sighting_of_ref": "indicator--93acdc9e-2ec7-4396-a68c-42624a71f36c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c8e382-7bed-461f-990a-155f26da823b", "sighting_of_ref": "indicator--5abc6580-8d94-4231-b38b-3f7edd3ebb27", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a3b3b9-750e-4c7c-b55b-b71e7b4b0e2e", "sighting_of_ref": "indicator--5abc6580-8d94-4231-b38b-3f7edd3ebb27", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a916d09-15c5-4f42-bba6-e165897c906b", "sighting_of_ref": "indicator--59f912d3-5fb1-4d2a-a375-efaaaf5fc178", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a17f5c-5e0a-463a-970b-8bc02ae554b5", "sighting_of_ref": "indicator--59f912d3-5fb1-4d2a-a375-efaaaf5fc178", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268a2d9b-3ee2-4a86-9eea-342729eb6dc6", "sighting_of_ref": "indicator--de4b1928-ff9e-48fc-a330-00996cff1cdd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0823a17-8c65-4bea-8724-b00f3ce885bb", "sighting_of_ref": "indicator--de4b1928-ff9e-48fc-a330-00996cff1cdd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c300d3-08c0-4fab-af8b-af9b28295f00", "sighting_of_ref": "indicator--351dda25-5be3-4042-a2d0-2239f8c9ac63", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd07ee9-4742-42e2-869f-6e6327e2a410", "sighting_of_ref": "indicator--351dda25-5be3-4042-a2d0-2239f8c9ac63", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc4a2f1-5d4c-42d5-bd34-4a46bc3839c7", "sighting_of_ref": "indicator--f96bd74f-c91e-41f0-843e-1a1e069dda28", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd2abb4-da15-43a3-a5f0-917488d1517a", "sighting_of_ref": "indicator--f96bd74f-c91e-41f0-843e-1a1e069dda28", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5aadb6-aa07-4719-a4dd-992738ea1b7f", "sighting_of_ref": "indicator--39f7736e-41a0-4c7b-85de-9ae1a33cf2a5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5e6fc7-94cb-4ab2-9cec-a20ba4df0845", "sighting_of_ref": "indicator--39f7736e-41a0-4c7b-85de-9ae1a33cf2a5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf49741-108d-4e89-9c8d-1cd16e2a7471", "sighting_of_ref": "indicator--66dd4f63-2a30-4f27-be6f-6b8821aa62a2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ea73bc-f249-49ec-97a5-57ede714f9e1", "sighting_of_ref": "indicator--66dd4f63-2a30-4f27-be6f-6b8821aa62a2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baad5d32-9612-4b97-9db5-bce12db44586", "sighting_of_ref": "indicator--a92258bd-7a97-4147-9831-c5a877b3a4af", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcee21b-6775-40ca-875a-cd4ae73af2b8", "sighting_of_ref": "indicator--a92258bd-7a97-4147-9831-c5a877b3a4af", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9924251-1adb-486c-a347-01b5b5262ab0", "sighting_of_ref": "indicator--a92258bd-7a97-4147-9831-c5a877b3a4af", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238a0be2-ac3e-4068-9c49-60e074d89188", "sighting_of_ref": "indicator--a92258bd-7a97-4147-9831-c5a877b3a4af", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edebc3a1-35d2-45b4-8742-1c1f07b0e2b1", "sighting_of_ref": "indicator--0984b5d9-f234-4eda-9640-967450729575", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17dd07cd-56e6-4d3e-afac-1eaab2a2c10d", "sighting_of_ref": "indicator--abbaef4e-862b-416b-bf5b-750f14cf0ae4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a258c573-c0ae-4adc-aecb-e2077e1c491e", "sighting_of_ref": "indicator--78ab045c-c578-4ac5-8285-c8c7712456ec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31780569-0290-42d3-a812-d4f66b67492b", "sighting_of_ref": "indicator--78ab045c-c578-4ac5-8285-c8c7712456ec", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0beb6d1-6911-433c-bdb4-2c8415831532", "sighting_of_ref": "indicator--4530c5cb-48e0-48ba-964f-da51b156df14", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dad614b-4531-442a-8a17-8bdd927bd2c2", "sighting_of_ref": "indicator--4530c5cb-48e0-48ba-964f-da51b156df14", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d68c02-3c2d-484a-aaf3-bdef1d79f063", "sighting_of_ref": "indicator--4530c5cb-48e0-48ba-964f-da51b156df14", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87fa50c-080d-4869-8232-5ba9f9f80f13", "sighting_of_ref": "indicator--7c0509f2-5021-4570-9fc4-e10e48508aeb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891c2227-8c95-4ae3-beaa-19bd596094ae", "sighting_of_ref": "indicator--7c0509f2-5021-4570-9fc4-e10e48508aeb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd45ded-b586-47df-a21b-101c46b56928", "sighting_of_ref": "indicator--7c0509f2-5021-4570-9fc4-e10e48508aeb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd150b36-e22b-4db3-b3c3-ef1974529701", "sighting_of_ref": "indicator--aa10f9bf-8d3b-4283-999d-d243d078932c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7583177c-f871-421e-9ab3-e19b27e83532", "sighting_of_ref": "indicator--aa10f9bf-8d3b-4283-999d-d243d078932c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac91966-68f3-4079-9799-b3a6de52362e", "sighting_of_ref": "indicator--aa10f9bf-8d3b-4283-999d-d243d078932c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb4e027-2ceb-4954-aede-1e3ec525b852", "sighting_of_ref": "indicator--31805f86-2abd-4c07-a728-bde22fb0836f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fada1db-b9c6-4a63-b3b4-33c7304b55b7", "sighting_of_ref": "indicator--31805f86-2abd-4c07-a728-bde22fb0836f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec1a421-9d1c-4c60-a194-1651f650cc4d", "sighting_of_ref": "indicator--31805f86-2abd-4c07-a728-bde22fb0836f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823a235b-95ce-4cb4-a3ca-befbcdbcc68a", "sighting_of_ref": "indicator--68c8e0d3-ee40-4543-a167-b78a8803ea5a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f5b2f4-5e2d-41a0-b096-f6a4dfc1b291", "sighting_of_ref": "indicator--68c8e0d3-ee40-4543-a167-b78a8803ea5a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fad2d4-90e2-4928-93aa-24a093dcddec", "sighting_of_ref": "indicator--68c8e0d3-ee40-4543-a167-b78a8803ea5a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99528e2d-d332-4d42-97e6-4751d63098e5", "sighting_of_ref": "indicator--8c31e644-a76d-4dc6-8ed3-0ed7deeea3c5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8cb44c3-cb6d-4f1a-98f4-5691c7d7aed7", "sighting_of_ref": "indicator--8c31e644-a76d-4dc6-8ed3-0ed7deeea3c5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df5a13a-dcc6-420b-a7d5-13409c744f7e", "sighting_of_ref": "indicator--8c31e644-a76d-4dc6-8ed3-0ed7deeea3c5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c3484b-56fb-4474-afde-d8361a0cea8b", "sighting_of_ref": "indicator--2a252768-59a0-4731-85ec-60189c142a15", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ec054a-f894-4931-94ae-c7661ddfd8e6", "sighting_of_ref": "indicator--2a252768-59a0-4731-85ec-60189c142a15", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17180150-260e-48c8-b5c8-a9167bf44d0d", "sighting_of_ref": "indicator--2a252768-59a0-4731-85ec-60189c142a15", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20de0041-75de-4c73-9258-70ec8b1724a7", "sighting_of_ref": "indicator--3700d7c4-5a7c-4338-a0c2-60ce0d7a1ad6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edb31dc-5840-4797-aa9f-b8fafa46e71d", "sighting_of_ref": "indicator--3700d7c4-5a7c-4338-a0c2-60ce0d7a1ad6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626dd86a-9542-4fbf-8cbc-a85a9d9ba3ac", "sighting_of_ref": "indicator--3700d7c4-5a7c-4338-a0c2-60ce0d7a1ad6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d306330a-506d-4244-bbb0-9b6b4d99151c", "sighting_of_ref": "indicator--7234145a-62b5-4e03-998c-a9bcf615e255", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a899160-958a-4041-93ea-7b3619d93b70", "sighting_of_ref": "indicator--7234145a-62b5-4e03-998c-a9bcf615e255", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545be70f-350c-45cd-a5fc-3cd5a9f6047d", "sighting_of_ref": "indicator--7234145a-62b5-4e03-998c-a9bcf615e255", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00af49f3-b5d4-413d-9abc-867315f42325", "sighting_of_ref": "indicator--78efd045-ce45-4f63-8c61-d2dffe3de355", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28ae04f-14f4-4972-879d-c833ffd0c00c", "sighting_of_ref": "indicator--78efd045-ce45-4f63-8c61-d2dffe3de355", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5979deae-03e2-42dd-9240-3606c5a7deca", "sighting_of_ref": "indicator--78efd045-ce45-4f63-8c61-d2dffe3de355", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108157bd-b612-4f9d-8d61-64a3e81c9f6f", "sighting_of_ref": "indicator--fb6bc7a3-f337-41c6-93c8-74fdc60dade2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838e5e11-ac36-485e-9358-0285f52fc622", "sighting_of_ref": "indicator--b964e54b-e6ea-4e83-9fdc-82e7da0caca4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89be804f-618c-4669-8044-f737515b6c23", "sighting_of_ref": "indicator--b964e54b-e6ea-4e83-9fdc-82e7da0caca4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a87fe3-98fa-4290-82db-293f1034c046", "sighting_of_ref": "indicator--72dec019-e69b-41ef-ab19-3b81e781acfc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c300154-6db8-4468-b5fd-410b9e41086f", "sighting_of_ref": "indicator--72dec019-e69b-41ef-ab19-3b81e781acfc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1097a4-91c7-4a20-a8ec-b63f5b2a7c53", "sighting_of_ref": "indicator--c30dcaa4-b3e8-4dc9-b8b6-6c1fd4b8a6c3", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03ec2fa-01ef-4d9e-82fc-1c2cfce0cfbf", "sighting_of_ref": "indicator--28d8d656-5e82-43f5-bfb5-1d2624d148f6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0be442-e85c-498e-88c7-75f988629972", "sighting_of_ref": "indicator--7b0c20bc-4d55-4acc-bd2d-75f753ddc551", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdad375-81b9-4a84-8a12-21c5875ed42a", "sighting_of_ref": "indicator--45fa271f-9c00-4b03-829c-6440bda32c22", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b027b7a7-f9ad-477b-be0d-7acaeacb8962", "sighting_of_ref": "indicator--45fa271f-9c00-4b03-829c-6440bda32c22", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebdbff69-6e60-4f5d-bfb0-4e57ffe9424a", "sighting_of_ref": "indicator--45fa271f-9c00-4b03-829c-6440bda32c22", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821c827b-7da8-44c2-b01c-72dff8df30a3", "sighting_of_ref": "indicator--f719a35f-9e2f-48fd-89b0-dd17f107ac3f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85e4a25-f3c1-42ed-82c2-56575ef165a5", "sighting_of_ref": "indicator--f719a35f-9e2f-48fd-89b0-dd17f107ac3f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804e984c-f9b3-454c-952f-a419c8a2b3da", "sighting_of_ref": "indicator--22aa9ce6-e84e-406a-9fa5-2fb159c2de8a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a35ba53-d9d1-41e0-9cdf-c2703200b41a", "sighting_of_ref": "indicator--22aa9ce6-e84e-406a-9fa5-2fb159c2de8a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d442417-2b9e-4c88-a7e3-95597b12c2bc", "sighting_of_ref": "indicator--22aa9ce6-e84e-406a-9fa5-2fb159c2de8a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98b037b-85aa-4b38-86b4-1f6cbb2bebaa", "sighting_of_ref": "indicator--9494a78d-ca41-418f-983d-932b8c34cdd2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cd3f78-0356-4b01-8fef-756efa72e8d1", "sighting_of_ref": "indicator--b3165671-4b4d-4420-9714-41e11cc17168", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b6f828-c650-4e93-aa77-0a7ce724e5d0", "sighting_of_ref": "indicator--68b4b14f-200e-4b9f-ae06-37ad811efc44", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4464fba9-95f6-4a01-beb3-c7fa372bc76d", "sighting_of_ref": "indicator--e24e9bb4-3f01-4042-9183-c9b65bf71bdf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bdf0d6-a314-4cc0-bb60-0836d0c64abc", "sighting_of_ref": "indicator--ec50708e-54b5-46aa-a1c8-d606452bf6eb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddbb959-c36a-46aa-9f20-fd3c10226e31", "sighting_of_ref": "indicator--ec50708e-54b5-46aa-a1c8-d606452bf6eb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e8a082-5fdb-449b-93be-88aae62badb6", "sighting_of_ref": "indicator--ec50708e-54b5-46aa-a1c8-d606452bf6eb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d425c3bc-99ed-46ae-acf3-94748abdd5f7", "sighting_of_ref": "indicator--7b4ef387-7194-469a-b84c-d12f66a01d0e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60827883-3faa-493b-90ad-d4348006c9c7", "sighting_of_ref": "indicator--7b4ef387-7194-469a-b84c-d12f66a01d0e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b53f4c-fd91-4678-a3c6-afed0f3c600a", "sighting_of_ref": "indicator--7b4ef387-7194-469a-b84c-d12f66a01d0e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c69d2a7-3f11-49aa-a5b6-10eb02a0b369", "sighting_of_ref": "indicator--2c7d22f4-f64e-48c9-adac-958daf9f8abf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae33d1d-2c3e-46d2-953c-410ee4c08347", "sighting_of_ref": "indicator--2c7d22f4-f64e-48c9-adac-958daf9f8abf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7ad911-650a-4904-8b67-41d6417ff5b7", "sighting_of_ref": "indicator--2c7d22f4-f64e-48c9-adac-958daf9f8abf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44aa210a-57db-45e5-bbd5-fb0174d0b8b1", "sighting_of_ref": "indicator--234afd40-d7f1-4cdf-aab4-4213493cf048", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a299d9-cdd1-4a5b-bde0-bbc9226beda7", "sighting_of_ref": "indicator--9ce7c0ec-97af-4970-9c3e-6ea12164a3c6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cf19c7-cca2-4b6d-8f66-79f1e7419014", "sighting_of_ref": "indicator--8aa11945-f0b6-43e6-bb64-238bd2d6925f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78f0a34-cf22-47e8-abb8-fe5f637f98e5", "sighting_of_ref": "indicator--c3d40fcb-c2f4-47ed-bce1-5fcdf4123c49", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726e1f49-91f3-4667-9f73-efcf835379bd", "sighting_of_ref": "indicator--69aca5d5-6331-4daf-80a1-0eeed4ac7482", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6f76ac-509b-4891-b0d1-f6d0fd241129", "sighting_of_ref": "indicator--2e7e06ab-f87a-47d5-ae1d-f22a157d3f76", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11488801-ed5f-4737-b87f-39e7f16077c3", "sighting_of_ref": "indicator--66b6c2a8-f462-4b1f-b68f-03cc6e8a5bf5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a864185a-97b1-4c72-a194-cb771857bc46", "sighting_of_ref": "indicator--f419553b-ac8e-4a1a-950d-9514eea3592f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0456d164-9c52-4eb7-8eaa-8c398db21b22", "sighting_of_ref": "indicator--c94e578c-905a-487e-ac56-a4a0b894b7bb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfaa31e-f6e9-4be4-8ee8-a3c3194d2305", "sighting_of_ref": "indicator--8921d5b5-69d3-434a-949e-2101be800703", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ecb1c0-2f08-4e7b-b53f-8b198600937c", "sighting_of_ref": "indicator--6d0b856c-26d6-4dce-b735-24021d276c77", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ed01a7-67e6-4e59-97ff-73fcb007c7e4", "sighting_of_ref": "indicator--6d0b856c-26d6-4dce-b735-24021d276c77", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2f14ee-cadd-4f65-b7cb-971ce9eb57be", "sighting_of_ref": "indicator--6d0b856c-26d6-4dce-b735-24021d276c77", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92531ccb-1f11-4ce6-910c-d6f818786ead", "sighting_of_ref": "indicator--e42747f2-5d25-45f8-a2c4-8bfa758f8f52", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da98c434-c99d-4f2e-b188-887d35af2b2e", "sighting_of_ref": "indicator--629028f8-e09a-418f-aa6e-eeac4fbd276e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1600d3ae-2f6c-4fb3-a0c1-2e001499b9b2", "sighting_of_ref": "indicator--629028f8-e09a-418f-aa6e-eeac4fbd276e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b2f1f9-778d-4d9e-9ed3-d8fa9acf1423", "sighting_of_ref": "indicator--07dd00b4-1e2f-45b1-8846-31bb62c2fd40", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f2e31a-a93c-4a22-a3fd-30e470cddb62", "sighting_of_ref": "indicator--07dd00b4-1e2f-45b1-8846-31bb62c2fd40", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae00e6e5-a96b-4c2e-a876-3da7d9192cfd", "sighting_of_ref": "indicator--f7bdd7ae-2f29-4c00-8c98-2ed926bb6849", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c865652b-9e39-45ea-b03e-f52a111b3915", "sighting_of_ref": "indicator--f7bdd7ae-2f29-4c00-8c98-2ed926bb6849", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b8a291-f228-4c55-8faa-5f1ad09663bd", "sighting_of_ref": "indicator--5b622d00-a64e-4b49-8812-8d26aad57fea", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfbfbda-65b3-4099-8fab-242bd83ea028", "sighting_of_ref": "indicator--7c6d62b2-d496-480d-be4c-9e3b290f57c6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a107a47-dfc3-44e5-bbf3-7e65e7c14860", "sighting_of_ref": "indicator--1aca70ac-b74b-4ea7-b58a-b092d17886ca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff60e70d-47d6-4674-9fed-b164998e5155", "sighting_of_ref": "indicator--1aca70ac-b74b-4ea7-b58a-b092d17886ca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90acd0c-fe21-4d7c-ade7-4e812662241a", "sighting_of_ref": "indicator--1aca70ac-b74b-4ea7-b58a-b092d17886ca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96489853-423b-45e6-ac6d-0bbd2e9011d7", "sighting_of_ref": "indicator--40ce6435-10ac-4292-a7da-d00e2c2810ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0b7cd3-40d9-4635-b9c3-5d48557f63b8", "sighting_of_ref": "indicator--40ce6435-10ac-4292-a7da-d00e2c2810ab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504f5751-1157-4e50-8cb2-3bc853506996", "sighting_of_ref": "indicator--5a0d4bab-3ea0-4fe6-93da-3743499c577f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a83f1a-bc85-4526-bbf5-30eaf7ce6493", "sighting_of_ref": "indicator--29ae3e91-1e2d-45f2-ada0-4d5b57d682f4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358ad2e4-d6db-4800-abc5-fb4a70fb15d8", "sighting_of_ref": "indicator--29ae3e91-1e2d-45f2-ada0-4d5b57d682f4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61950ef-1094-4f1b-ada8-8e16edd23c97", "sighting_of_ref": "indicator--29ae3e91-1e2d-45f2-ada0-4d5b57d682f4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4ff1a3-d3c5-4059-973c-b6d702bd730a", "sighting_of_ref": "indicator--6ee21bcc-d30a-4714-81d9-a09f2eb5ac8e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8537d081-9b24-4866-af58-e721c81b2f90", "sighting_of_ref": "indicator--049ef0a0-920a-4a2d-b0ef-5563e5dae8be", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b08c1d0-bdf4-49e0-8b68-c0fbb7ea21d3", "sighting_of_ref": "indicator--5c040568-76c6-4646-9988-6b0a5cedf91c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f0aadf-3a9a-4387-91a8-dff5eb4c2cbd", "sighting_of_ref": "indicator--5c040568-76c6-4646-9988-6b0a5cedf91c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7af91f-99b9-4b20-8412-9bbaaf187549", "sighting_of_ref": "indicator--1111972a-cc3c-43df-8059-6c0bd91c0554", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd6886b-feca-4680-9bc5-119c32088cf8", "sighting_of_ref": "indicator--1111972a-cc3c-43df-8059-6c0bd91c0554", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593496cc-56d5-418c-b098-a07e9083390b", "sighting_of_ref": "indicator--1111972a-cc3c-43df-8059-6c0bd91c0554", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33506202-8b3f-4e52-9fce-ccbb1d80ae95", "sighting_of_ref": "indicator--850d73b1-fe6f-4757-8a51-07c32f3cd6c6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9576c801-1fb9-4765-92c2-22077952f6ff", "sighting_of_ref": "indicator--850d73b1-fe6f-4757-8a51-07c32f3cd6c6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070e0fab-3bc0-4f4d-9b45-c7489840c393", "sighting_of_ref": "indicator--850d73b1-fe6f-4757-8a51-07c32f3cd6c6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680034fb-b95b-4cd0-ad68-d8d9bb726ade", "sighting_of_ref": "indicator--16e126f5-4b4c-4a25-af44-3caf4942d446", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4080392-8b79-4af8-8b58-516f4c1ec267", "sighting_of_ref": "indicator--16e126f5-4b4c-4a25-af44-3caf4942d446", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a27cbf5-16e1-45b8-9f5f-c7c1eccee146", "sighting_of_ref": "indicator--16e126f5-4b4c-4a25-af44-3caf4942d446", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3492df59-7787-47e4-ac4b-23de3cc8b1bf", "sighting_of_ref": "indicator--3afa2f4b-e055-4a6b-ac05-bb71de9ee79f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093c22fd-8e5c-46d2-902f-fd0cfb9f5bb8", "sighting_of_ref": "indicator--21635278-81aa-4f27-a64a-50fbd4ca027e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89a578a-ef85-4078-9005-54bb8b760cfc", "sighting_of_ref": "indicator--21635278-81aa-4f27-a64a-50fbd4ca027e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff522bb-ae22-4e08-a73c-69204b13e4b1", "sighting_of_ref": "indicator--21635278-81aa-4f27-a64a-50fbd4ca027e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c08e72b-ef1a-441e-bc97-8686b0ba6543", "sighting_of_ref": "indicator--2f733360-c328-44ca-be4f-3554d5f4fdca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8865c3-ca14-40c2-bd5b-7ed2d3922a59", "sighting_of_ref": "indicator--14ff86df-bc6f-4df4-8c66-bda4ad814100", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8469725c-1f24-44a8-bd49-9a91f8d7a0ff", "sighting_of_ref": "indicator--14ff86df-bc6f-4df4-8c66-bda4ad814100", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b37f5f7-3ca7-4359-9555-c32f17aba16c", "sighting_of_ref": "indicator--14ff86df-bc6f-4df4-8c66-bda4ad814100", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c29d8a-f2a0-4d36-99f6-a443cb8fa2bf", "sighting_of_ref": "indicator--8556f1c4-1628-46c8-af44-a37dc528fe9c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e3c04a-8c6c-44dd-bbad-08ddf0ed4e5d", "sighting_of_ref": "indicator--ef091bfe-df21-49f7-8842-cfcf9cc5d864", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5344e99-482d-4c51-805e-e6adfdf621d7", "sighting_of_ref": "indicator--3609f416-5a08-4092-8d6d-306cb934e170", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae073a3-9746-4741-8f4e-a17d7d1e3087", "sighting_of_ref": "indicator--d8277d5e-2542-430b-8833-650211ce8358", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914f415f-7abe-4752-94dd-7ee52dd37ed4", "sighting_of_ref": "indicator--234fc8bc-cb11-4385-b3e1-bb1095372fb9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101c3e81-e3d0-411e-be8d-a6fd3c02e686", "sighting_of_ref": "indicator--567d25d4-08ad-42a6-a344-6d322bf0ecc4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12e51ec-67e7-4e58-8c9f-2b9174c5782e", "sighting_of_ref": "indicator--a2300412-1c9e-4d05-a690-d2ff3faf0e04", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac9801a-c4e5-4f32-81ca-98e74d3d008a", "sighting_of_ref": "indicator--a2300412-1c9e-4d05-a690-d2ff3faf0e04", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f73c02-f7ff-48e9-9763-c6a2b7994ec9", "sighting_of_ref": "indicator--13baf0f0-5a7a-4184-a228-5d817495291a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa9658f-4fe8-4dbe-87f8-a1dd010f15d5", "sighting_of_ref": "indicator--29388602-b6bf-4778-9710-786da1cc2a34", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af963f0e-0ba9-409e-93ee-03e2a68b4a2c", "sighting_of_ref": "indicator--6521f2f7-7dcd-4845-8615-bf58b696918d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3206419-1a10-43c1-afad-70188202344a", "sighting_of_ref": "indicator--5909f73d-82c8-4e21-b116-d7847210b014", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50de8af8-ab80-4c70-a4ed-e85608a0a0a7", "sighting_of_ref": "indicator--113f02cc-f798-4e33-907f-08c8855e17f0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a1af34-97d1-4898-8d32-de4d1695379d", "sighting_of_ref": "indicator--7c2d9a3f-dc5d-4b5f-99a2-846487889f14", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e711c625-581b-4c55-868a-91d4bdcf7a5e", "sighting_of_ref": "indicator--ca7a0d9c-ad5f-47c1-9bc2-014d6b764f1e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49cc6a9-6f39-4af4-8152-e67dda5bb905", "sighting_of_ref": "indicator--c77575df-caad-4ebb-b36d-41d2ac3db6ca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2421e79a-04f8-4aa8-8246-b062f42d6df2", "sighting_of_ref": "indicator--d8cf277d-0e6a-42df-b176-a05fc844a31b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e43d704-1d29-4700-bc49-e2c6f1221fa9", "sighting_of_ref": "indicator--c7cb8cae-8576-496a-a5f5-36cac09bac3d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9894f0f-396c-40c9-9947-0f172eb286c2", "sighting_of_ref": "indicator--c0606797-dd98-4cb2-b20b-5ca0723c716d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7744b0-1594-4a36-976a-4b55c22355f3", "sighting_of_ref": "indicator--1d8ebf44-6062-422e-9f80-040662c112d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8042a3b-9a67-4299-84ee-1a8ffee7ba86", "sighting_of_ref": "indicator--1d8ebf44-6062-422e-9f80-040662c112d0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643028b4-b3ab-493f-9a67-e318349ba04b", "sighting_of_ref": "indicator--608843f9-6246-41af-9f51-ac78a3fda5fe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d2267a-4a84-4c84-b90e-eb2e5adba0d9", "sighting_of_ref": "indicator--fc453656-2f02-47d5-bda8-0d9aacb735a2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08fe8127-685a-4070-83fb-783bb3d24816", "sighting_of_ref": "indicator--5afc3b57-3310-4294-be14-6bbddd8091e4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee540d1c-144c-4ee4-a429-139c2c9c094f", "sighting_of_ref": "indicator--47aaabc7-6056-4119-a05b-157b95f924e6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a5ef5f-7142-4ea1-b669-0f24cf4c6884", "sighting_of_ref": "indicator--cfce1016-fda4-4a52-8c55-429006be3a51", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a952da-6aa1-44a0-9039-f3abdb0a799c", "sighting_of_ref": "indicator--f0fc63ed-5359-4392-9be3-c8c758a67e89", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3787397-ddbe-44ad-aefb-00de41dda397", "sighting_of_ref": "indicator--32cd1711-3ad1-4f6a-8d73-423fdae52676", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73914be0-7313-4925-b851-e9f71f3ce474", "sighting_of_ref": "indicator--32cd1711-3ad1-4f6a-8d73-423fdae52676", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d61b97-edb9-4a83-ad51-595bcf884caa", "sighting_of_ref": "indicator--0a80bfad-14a9-41ca-b027-0ffc5aae5023", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd052070-65a2-4ce4-860d-d44942971353", "sighting_of_ref": "indicator--f3052d88-3f44-4631-b06e-69a718dd7bd2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1eb555-294c-45c8-826b-3862dcc28013", "sighting_of_ref": "indicator--f3052d88-3f44-4631-b06e-69a718dd7bd2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96f6eb2-bf82-48fe-829d-6a81e701d438", "sighting_of_ref": "indicator--a1700987-5085-4e96-a0a0-bbc0e76bc777", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4690280c-5a0b-4fb2-96a6-274884c1bc62", "sighting_of_ref": "indicator--4dd8868a-6c15-4a1c-8781-5dc186e82a2d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78e52f3-a0c8-4c5d-b07c-66b811ae8b8a", "sighting_of_ref": "indicator--31793d3d-00d8-4ecc-b3a2-f6a0a5def347", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae4ff7f-7374-41ce-91b0-422625b480ef", "sighting_of_ref": "indicator--31793d3d-00d8-4ecc-b3a2-f6a0a5def347", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f000ce7-afef-42f1-8d87-bf6ec89c8586", "sighting_of_ref": "indicator--31793d3d-00d8-4ecc-b3a2-f6a0a5def347", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bf4ec8-2f75-42d1-a19e-b8a7f68b7532", "sighting_of_ref": "indicator--33f9db91-d3e5-4d90-9b7d-91aac3690226", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f609dc-038b-4f36-ae5a-e8d5713ecdf7", "sighting_of_ref": "indicator--33f9db91-d3e5-4d90-9b7d-91aac3690226", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fd013d-0bdd-412f-86d7-5382ae19f20b", "sighting_of_ref": "indicator--f5af9a85-419b-4e3b-8018-f4ad40a267d9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca35dc67-570a-4d34-a0ae-b2bfbb277d72", "sighting_of_ref": "indicator--f5af9a85-419b-4e3b-8018-f4ad40a267d9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51848e2b-4fc6-46bf-8519-4e58e44e3e24", "sighting_of_ref": "indicator--b988eec0-07a7-4043-ba31-bab7a8322e2f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3f83d8-d109-477b-9abe-9b1ce5c2fc2f", "sighting_of_ref": "indicator--b988eec0-07a7-4043-ba31-bab7a8322e2f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321914e2-6bbe-487a-b885-0148f5523ad0", "sighting_of_ref": "indicator--b11d1a42-20f5-4820-b09d-cafe4a67907c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3fda56-78f1-4ba9-923b-39452c32f05b", "sighting_of_ref": "indicator--b11d1a42-20f5-4820-b09d-cafe4a67907c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3cb638-c349-4bdc-bb73-43ee93a1cf54", "sighting_of_ref": "indicator--404b4400-0772-482b-b6aa-c674caec56b5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22bb16a-8e0d-4159-a7e9-426c57a38666", "sighting_of_ref": "indicator--404b4400-0772-482b-b6aa-c674caec56b5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f19d6e-7c2f-4b9d-ae0d-d09328f11c46", "sighting_of_ref": "indicator--404b4400-0772-482b-b6aa-c674caec56b5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a311bd-8c07-425c-b6c7-742fe02a03c7", "sighting_of_ref": "indicator--f1e3d134-0555-4f11-9725-46b0a4dc5f6a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccab277-6cd1-4b73-88eb-e922c97c9909", "sighting_of_ref": "indicator--f1e3d134-0555-4f11-9725-46b0a4dc5f6a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ab6e52-005a-4082-9430-f2db43f1b9f0", "sighting_of_ref": "indicator--cb1a3d4f-14d0-4a51-964f-4ce388ca3613", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7b8ad8-e82b-4dcb-b595-f42cec195a67", "sighting_of_ref": "indicator--ce1a34ce-ba28-42a4-9a8e-d0c1f030efc9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12426722-d2c7-4b94-a17d-a9aa89804f3e", "sighting_of_ref": "indicator--3310e2c3-7275-4c72-b4cd-7e94380b0414", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455c52a9-f2ce-4d00-a92b-e99adbac3b4f", "sighting_of_ref": "indicator--62e42972-a6ef-4a3a-94ea-a2d5e42fa4d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76012d1-c830-4652-aa6f-df3b0ee8aea2", "sighting_of_ref": "indicator--f305d4f8-06c0-4367-9d8e-9ce200e74b82", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0e27fe-411d-4d53-aa76-73ff32d0f0a9", "sighting_of_ref": "indicator--c02d57e8-9dcd-43b5-afe8-0e90faf6228c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ef23bb-c70c-430c-be7e-c14a84b064f3", "sighting_of_ref": "indicator--f4f175e0-3164-4f8b-9da7-a08b89bfe937", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122c6f10-0007-499c-82a7-00a3f604ee89", "sighting_of_ref": "indicator--7d2e6b2c-8919-4bba-a7b0-03ce4ce4d80f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7aa665-27fa-44e3-b9ff-c7355d08f154", "sighting_of_ref": "indicator--6c37529a-5bf5-4b72-8c94-885bcb479583", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3de49fa-1cab-46cb-a7fb-9e31125072ee", "sighting_of_ref": "indicator--95a69705-0d8d-4b6a-aa0b-f05a4c3dde2f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc7cbad-c257-4f86-b38e-63258372b2d7", "sighting_of_ref": "indicator--77760915-f004-44f8-bda1-b732d78eab43", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfdfdb2-aa24-49e2-9980-01294430894f", "sighting_of_ref": "indicator--d643c66b-64ab-4de7-89c5-2aefc0d79a16", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3216f2-516d-4023-a474-f0c504cf48b9", "sighting_of_ref": "indicator--4b3f7582-4a9d-4025-bb23-a29f3471bc0c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a83b5a7-0cf4-4536-a9f6-f6b4a173a44a", "sighting_of_ref": "indicator--4b6f1ece-3aef-4ac5-841f-2678c1ba043f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d116a4-f3d0-43fc-a0fe-a24291549cdd", "sighting_of_ref": "indicator--8005512f-9294-44b5-b988-ecc02f9b0669", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f27bad-cf13-4742-bd92-95930ab0024c", "sighting_of_ref": "indicator--ad269240-790b-4726-8c5c-64aa37055eb2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b423beb-5986-42c2-891d-debfcbafe8ac", "sighting_of_ref": "indicator--ad269240-790b-4726-8c5c-64aa37055eb2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffcefc6-9039-4ab3-9bb2-28bc97c79e03", "sighting_of_ref": "indicator--96900891-3e47-4147-93ba-0c6b8d8419e8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e29ea55-caae-4f85-a18f-ce4a296ee3bf", "sighting_of_ref": "indicator--e2df8b9d-d114-4387-b0d6-fce85322d0dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c393bb-1fc9-415a-817b-e807f1ebb9ee", "sighting_of_ref": "indicator--94484e05-502e-4088-a97f-419bba647891", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d37992-55ae-4a96-a52b-d149e6c413d1", "sighting_of_ref": "indicator--efd47004-1146-4717-ad3c-7849f4931d4d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e70dc09-db64-4447-925d-3b4b5a727814", "sighting_of_ref": "indicator--6fa12925-20b5-4390-8c53-1153f036d239", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdb59f0-edaa-4743-99f7-ed6a29e1c762", "sighting_of_ref": "indicator--980c2394-5933-474b-a05f-4c1bc087fe88", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c047ee-e5d6-468d-93f4-62d7165bfe49", "sighting_of_ref": "indicator--c293b86a-4c11-4b57-8db1-618f70c4a045", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f66559-e97a-4acf-8470-84e5980aa2c8", "sighting_of_ref": "indicator--79eeeeb3-5401-4ae8-9c5c-7473f9f9f91b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b93751-9c48-4417-880b-89e6ffaab4b2", "sighting_of_ref": "indicator--8ee652d1-ca38-4b99-90e6-7f50ad828ee9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc828f99-fd4a-44ef-a7a7-b8b464d238c2", "sighting_of_ref": "indicator--e6b13c52-7797-4eac-b402-1bb00dc7513c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276b14a4-4acc-4229-9241-ee83dc47f60b", "sighting_of_ref": "indicator--e6b13c52-7797-4eac-b402-1bb00dc7513c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffec996-b032-4477-8406-19ae241d1495", "sighting_of_ref": "indicator--e6b13c52-7797-4eac-b402-1bb00dc7513c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6956d92-a76f-4df0-8996-274a09bd89cf", "sighting_of_ref": "indicator--d8899469-749c-4e92-a9d2-a6446e787bc3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975e42d6-9e5b-4ac5-b25a-1dbfd197fdb8", "sighting_of_ref": "indicator--05d30dd1-2e65-4ef9-83d1-093777f34b69", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395221a4-aa1c-41bc-a55a-d744e23ebecf", "sighting_of_ref": "indicator--ece2ef37-5d63-4132-8210-fae7dda56f32", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81663444-ccb1-461b-a248-bbc2c0245d29", "sighting_of_ref": "indicator--ece2ef37-5d63-4132-8210-fae7dda56f32", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6870719f-1975-4714-933d-44262110651b", "sighting_of_ref": "indicator--25ca1208-9f2b-4a16-99ba-014520d00929", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40126334-3df9-41fa-b87c-2d025ee2e01b", "sighting_of_ref": "indicator--8d6116fb-0e6a-4d77-9d1b-1cfd1b92f672", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b9944e-b668-4ed1-a7d3-d816eb4ba41f", "sighting_of_ref": "indicator--e5c898e9-1768-4d58-8186-2048fae79153", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f579d76-e307-40b8-bc9f-e30b4e3a063b", "sighting_of_ref": "indicator--15dc63d5-3d93-4550-b88b-3e66ab633ee3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38efe19-266a-4b77-8fa3-f3daca5a83f5", "sighting_of_ref": "indicator--15dc63d5-3d93-4550-b88b-3e66ab633ee3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a866ae3e-414a-4eda-a908-67d5d21326c0", "sighting_of_ref": "indicator--15dc63d5-3d93-4550-b88b-3e66ab633ee3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d4142a-f384-4288-bc54-15054791b987", "sighting_of_ref": "indicator--9559523f-4ad0-4784-858b-637a4f2720e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ee3a37-d973-4c44-a388-6fc9bb08bd62", "sighting_of_ref": "indicator--0e353d80-cc63-4eca-83c0-304c3e0e5f39", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873c9f92-bc36-455e-9286-73bd04312f34", "sighting_of_ref": "indicator--948fd01a-f76a-4d98-bd9f-900444ab412c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff79114-4e1b-4631-acc9-afcb885ea5b6", "sighting_of_ref": "indicator--948fd01a-f76a-4d98-bd9f-900444ab412c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5dc7ea7-7093-40ab-bc47-05d025669d55", "sighting_of_ref": "indicator--948fd01a-f76a-4d98-bd9f-900444ab412c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41876222-401a-44fd-bc66-0ade30b02290", "sighting_of_ref": "indicator--0c8a14f1-bcd3-4388-8339-d223ce5280b5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf9264a-d1e8-46a8-8e4d-b633bc4f0917", "sighting_of_ref": "indicator--0c8a14f1-bcd3-4388-8339-d223ce5280b5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8316af6-b409-4385-84ba-6af3ac6eeac1", "sighting_of_ref": "indicator--8bc3f711-f9c8-4ca2-a22c-6a59f0d672ce", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ed783e-ba56-440c-bfa6-3197f6d2bba2", "sighting_of_ref": "indicator--a588829a-b1c6-403f-a1d2-6581a11312a1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df8d52e-e432-426e-978a-6095035416ba", "sighting_of_ref": "indicator--a588829a-b1c6-403f-a1d2-6581a11312a1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f41b971-2f34-42c4-9b76-11f3f9d22463", "sighting_of_ref": "indicator--7023d047-c304-4017-80cd-45249a370bfd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b23559f-cc58-4444-ad12-3f070be6cf74", "sighting_of_ref": "indicator--7023d047-c304-4017-80cd-45249a370bfd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d048c1b-00ca-4fd0-9056-1cbe6a22d304", "sighting_of_ref": "indicator--e030b07a-0fc2-40a6-afc6-de819a8c64fd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fbac0f-3240-4b62-8403-67cd347ebed0", "sighting_of_ref": "indicator--e030b07a-0fc2-40a6-afc6-de819a8c64fd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4edd25-96ec-4448-9cf1-ae336953dbf3", "sighting_of_ref": "indicator--9593c96d-bfeb-4af9-a94d-47b623d0cdec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ccaca2-eb35-4afa-9da6-ba40a5069b81", "sighting_of_ref": "indicator--9593c96d-bfeb-4af9-a94d-47b623d0cdec", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292d99c4-bc98-4344-b18d-6ad684b0667e", "sighting_of_ref": "indicator--6c558433-1ef2-4ddc-922f-e317a7c3a9e0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e1bce4-9eb5-4b10-b922-eee515fef6bf", "sighting_of_ref": "indicator--2e67937e-d9d5-437d-a799-a7524d8e37e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653ad0c0-9eb3-4fbe-b5e5-915379427793", "sighting_of_ref": "indicator--2e67937e-d9d5-437d-a799-a7524d8e37e6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc53bc66-b6ae-47c1-8e04-a59642ca3a24", "sighting_of_ref": "indicator--2e67937e-d9d5-437d-a799-a7524d8e37e6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffa3621-3005-41ed-b724-f2f58c5e21ac", "sighting_of_ref": "indicator--5984badb-4390-4575-86b8-7686ba0f049c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122d2d68-8c90-484e-9ec9-7dbf1289fff1", "sighting_of_ref": "indicator--4432719d-66ec-4cbb-b1da-238064c2ebe4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e87396-a73e-4f2a-bef4-2197627c121a", "sighting_of_ref": "indicator--8f6f2c2a-c062-41ea-affd-014a7f115c58", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a069bd2f-7d8a-4779-b843-2435b00edf63", "sighting_of_ref": "indicator--9dcf2e06-e880-48f2-996e-4977493c6892", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a440965-fcfa-46e7-80d7-180a7038b06a", "sighting_of_ref": "indicator--9dcf2e06-e880-48f2-996e-4977493c6892", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc2b947-27ad-4fb5-8a33-198f63ac0645", "sighting_of_ref": "indicator--6f3beb28-a186-40c8-b254-84046a8e2c26", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4407d06-c1be-4d03-9951-0e0be1750629", "sighting_of_ref": "indicator--6f3beb28-a186-40c8-b254-84046a8e2c26", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb1451d-da9b-4ba1-b028-9fddce52ee94", "sighting_of_ref": "indicator--5bb0c469-8ddb-400b-8785-af9f7568eccd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3afedd-638a-49ad-84c4-f88b0d97b25a", "sighting_of_ref": "indicator--791e9d54-347f-4da8-9c01-16aeedcc94b0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6ebbc0-2b1f-4354-aaa6-f21c3e4f5093", "sighting_of_ref": "indicator--791e9d54-347f-4da8-9c01-16aeedcc94b0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c1b77c-6589-44cf-a0be-56439d8bcdb8", "sighting_of_ref": "indicator--f9059035-41b9-4ec1-ad28-bde1cb92e839", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbddf1a-2204-4454-8d8c-ab7044803d45", "sighting_of_ref": "indicator--f9059035-41b9-4ec1-ad28-bde1cb92e839", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3182638-9be7-41bf-8a81-5797c790bc87", "sighting_of_ref": "indicator--f9059035-41b9-4ec1-ad28-bde1cb92e839", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0928c734-e224-4242-b698-ac71a547e80e", "sighting_of_ref": "indicator--81e51049-09a7-4546-ad1a-6cd86f5440b4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46365a68-91cf-40fd-929b-d6d662fe7ad9", "sighting_of_ref": "indicator--f6cf5603-f20c-49d4-ba69-d5ad32bffc4d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abcacbd-59cf-404a-9759-9d2a0a9b0c15", "sighting_of_ref": "indicator--31447cbc-ce48-4d9b-85e6-03f08581faa5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9b01b2-2b4d-4510-8edc-299acddae78f", "sighting_of_ref": "indicator--1c13501a-bff5-47d0-ae9b-295458be9cb7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24cf3a5-b699-46f3-9e3d-366ee5001d5d", "sighting_of_ref": "indicator--24ebbcee-12c3-4e08-99d6-49635c53b71a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e53a7b0-b85b-48a4-bb1a-8592ba9ce999", "sighting_of_ref": "indicator--174bb40c-d92c-4945-ad0f-3aa4046d9d43", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e1234a-db5d-40cf-ad18-1ecf06b3c341", "sighting_of_ref": "indicator--c9830420-551b-4f61-a65f-3b46278f3192", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c95a61-f051-4954-8a19-ab2dee419a55", "sighting_of_ref": "indicator--bf1991ad-3f3c-4ce9-a125-159c34defdf3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490ee6cf-102c-4bea-8793-9b6e8d3ebbe7", "sighting_of_ref": "indicator--bf1991ad-3f3c-4ce9-a125-159c34defdf3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6435a2-39e6-45ba-b7e4-f97ed994bf1a", "sighting_of_ref": "indicator--46803a70-a425-4861-bbb2-d2430d1a4300", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6d3c1a-5305-4011-b6ce-2dcf4c545370", "sighting_of_ref": "indicator--08b0d761-11d0-45c0-962a-5d06df71bb3b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3baafc35-3910-4724-8443-4dee592db9c5", "sighting_of_ref": "indicator--08b0d761-11d0-45c0-962a-5d06df71bb3b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667d980a-e449-428a-bdec-96cb5131de47", "sighting_of_ref": "indicator--f590e631-c97d-40cc-a690-bd9e2c3b8448", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb033c5-952e-4d87-81ba-3ed5fac23997", "sighting_of_ref": "indicator--19c5cb5f-2305-4afe-9974-f8d09f36521f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d0a20a-d745-479a-93f0-90e14e3cbb74", "sighting_of_ref": "indicator--19c5cb5f-2305-4afe-9974-f8d09f36521f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782f7ee0-3cae-43c6-97f5-6e44d96b0b43", "sighting_of_ref": "indicator--61e7dc29-3f6c-48e4-b238-901a19d77ac5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252d3db1-dbd1-40ff-bf34-48e6aeb319e3", "sighting_of_ref": "indicator--61e7dc29-3f6c-48e4-b238-901a19d77ac5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91075b36-6106-47f2-b2bb-1d5e7329e415", "sighting_of_ref": "indicator--869166e5-36b0-44cf-87d2-c9b3c6838ee0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71124d79-1488-4a25-9caf-de32ec292cbf", "sighting_of_ref": "indicator--869166e5-36b0-44cf-87d2-c9b3c6838ee0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee6c0cc-2f60-4f95-b267-ebeb0235275e", "sighting_of_ref": "indicator--869166e5-36b0-44cf-87d2-c9b3c6838ee0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c70f850-661f-4bb8-9811-940f7ba5ea8f", "sighting_of_ref": "indicator--4a6e7bd6-70eb-4468-9ff4-e311ec7d9a6e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745f2298-6a68-46ee-9deb-ceaae1fc12ef", "sighting_of_ref": "indicator--788222bf-db4b-4d0f-9107-f0e0582fe694", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e610fec-6dd9-44ba-b4fa-d0e44294b303", "sighting_of_ref": "indicator--788222bf-db4b-4d0f-9107-f0e0582fe694", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd3eb86-f9c8-465a-8c03-da04ae4d8cbe", "sighting_of_ref": "indicator--e4184376-de62-4b60-91d5-0b0022e8686d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c190c4b-5a2e-48c6-9d0a-e461f7a92e2c", "sighting_of_ref": "indicator--e4184376-de62-4b60-91d5-0b0022e8686d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8840a4-9b54-4fc0-b8af-6af7192438a3", "sighting_of_ref": "indicator--2aef2207-42e1-4ce8-a59c-6c8f1b522891", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4d7e4b-7764-4aa4-bc2f-46b69113ca54", "sighting_of_ref": "indicator--3b89d52c-c873-4f70-b59d-ce0848184cca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523e36d3-b5b0-474e-8113-b6f41284274e", "sighting_of_ref": "indicator--3b89d52c-c873-4f70-b59d-ce0848184cca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60c7897-1785-49e8-b1a5-d9180a78580d", "sighting_of_ref": "indicator--96571183-bb82-4933-b470-a2fc28a252ca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ddf94b-f10f-4cba-a077-90afbb4e580f", "sighting_of_ref": "indicator--38c611d7-ff43-4c39-8514-f04317824ee9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0cecd2-e6dd-4b17-92df-96ff046bbe55", "sighting_of_ref": "indicator--cba8ab22-40b6-4577-a4f2-f55312233c76", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724e8b18-5abd-4631-bac8-9f13c8876b41", "sighting_of_ref": "indicator--cba8ab22-40b6-4577-a4f2-f55312233c76", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745010d8-15f1-478b-ac1c-b8c2d551b408", "sighting_of_ref": "indicator--cba8ab22-40b6-4577-a4f2-f55312233c76", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15423b79-d888-40bf-9c16-82bce39749a4", "sighting_of_ref": "indicator--cbc60971-a53b-4c3f-89a3-9b7d7acdd3aa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1232139-b7a5-4a19-9515-b7697c46eed0", "sighting_of_ref": "indicator--cbc60971-a53b-4c3f-89a3-9b7d7acdd3aa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffda96c5-6b31-411a-998b-ad037a54c126", "sighting_of_ref": "indicator--cbc60971-a53b-4c3f-89a3-9b7d7acdd3aa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94086201-6dae-4fbd-bdcf-016226dad8b7", "sighting_of_ref": "indicator--a35a5bb8-3a91-4d12-ba97-d88f01bcd62d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa733517-1867-42fc-b8ab-a0361a532172", "sighting_of_ref": "indicator--3069ebaa-fd09-4685-82cb-a9940b5277fa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2042614-19f6-4b8f-99f7-755e59dbbf00", "sighting_of_ref": "indicator--3069ebaa-fd09-4685-82cb-a9940b5277fa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc606ed-9bae-46c3-84ba-97ce61541997", "sighting_of_ref": "indicator--58060653-7441-496c-a76b-22bdeaaa3a6e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7c3429-3f1f-4799-a361-5c0867779ba3", "sighting_of_ref": "indicator--700f4f6b-6df9-4e77-8763-2c422a30f830", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f3baf9-5f48-4113-a825-2a4a52a47676", "sighting_of_ref": "indicator--700f4f6b-6df9-4e77-8763-2c422a30f830", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4d0b9c-e6c9-4655-8802-94239c7a6521", "sighting_of_ref": "indicator--f394518e-e055-4fe1-9505-d03457c2d946", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751a8047-ece8-4798-ba71-82516a3a2a37", "sighting_of_ref": "indicator--55a541ec-7bf0-4644-bdd3-90b4fd7dfb0c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce01974c-0562-4239-a573-f400b9749404", "sighting_of_ref": "indicator--55a541ec-7bf0-4644-bdd3-90b4fd7dfb0c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a2cc17-13da-47da-b803-7185355abe5d", "sighting_of_ref": "indicator--d0cf57e5-ab3d-4774-b0f1-1bc85398b8f0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d64fc9d-68ab-46f4-9ef5-9c2b9c9927fd", "sighting_of_ref": "indicator--d0cf57e5-ab3d-4774-b0f1-1bc85398b8f0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f2293a-f728-4af5-ae7d-1d8f7502b3c7", "sighting_of_ref": "indicator--d0cf57e5-ab3d-4774-b0f1-1bc85398b8f0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1591699-3e5c-45ce-b874-7a22dbe174de", "sighting_of_ref": "indicator--caacbbf0-1ebe-4dc1-90d0-9abf0a941491", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e4a356-5b3a-47c7-89ab-6f7b78c78d94", "sighting_of_ref": "indicator--b9c47705-b338-423f-833d-445e08565caa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a904e3-8989-4e6e-adde-023c6857ebb7", "sighting_of_ref": "indicator--71c95828-2ab0-4344-99fd-1f7831f28689", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645a5e2d-de34-4e50-8e51-1267d7a50427", "sighting_of_ref": "indicator--e799e216-9b12-4f9b-8c43-e320869687d3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69922938-51b9-4794-ac88-7f028d1e5bed", "sighting_of_ref": "indicator--e799e216-9b12-4f9b-8c43-e320869687d3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e13e728-8076-4a7d-8b20-e7e27db313ca", "sighting_of_ref": "indicator--a5004f5d-8557-4a09-8962-36c2473791b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93b55ac-054b-418b-b778-b4493c7d4f21", "sighting_of_ref": "indicator--31440561-f66e-425c-a90a-238c67f808e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615afae8-da97-4145-ba36-6d3fb801dd71", "sighting_of_ref": "indicator--3c2c8312-3dcf-47ac-af47-61523d331ef8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232f5e37-3383-4d33-92e3-d283d96f34a9", "sighting_of_ref": "indicator--3c2c8312-3dcf-47ac-af47-61523d331ef8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e5a962-70fa-4412-bb1f-c335b7108761", "sighting_of_ref": "indicator--29158497-69a4-4d13-9bd6-cbf857903ae1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642d88d5-aa45-4cf3-a0f5-e4d6e810316d", "sighting_of_ref": "indicator--29158497-69a4-4d13-9bd6-cbf857903ae1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee1341e-0463-439c-9300-70d0661e1fb2", "sighting_of_ref": "indicator--9a4c0776-238e-47ab-8b7c-aa9ed05bc9f9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d30deda-c467-4619-8fc4-3f33b2ee345f", "sighting_of_ref": "indicator--9a4c0776-238e-47ab-8b7c-aa9ed05bc9f9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61466f7c-5e92-4c0c-a981-dc086abb8e66", "sighting_of_ref": "indicator--9a4c0776-238e-47ab-8b7c-aa9ed05bc9f9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28faa34e-e542-4460-bf22-68bf35eac010", "sighting_of_ref": "indicator--448c4925-a5f3-4d81-bf13-8257f96b66a1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a412232-e4eb-4f8b-a487-71598050d57d", "sighting_of_ref": "indicator--448c4925-a5f3-4d81-bf13-8257f96b66a1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4922b36-ed36-4b49-8066-0c68a406c8ed", "sighting_of_ref": "indicator--448c4925-a5f3-4d81-bf13-8257f96b66a1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8205b018-6a7b-4a16-b75f-1ba96960a1e0", "sighting_of_ref": "indicator--e525ad92-0142-4253-9134-3ed7893c2fa5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9278972d-751c-4c48-ab18-79e09dcff9ab", "sighting_of_ref": "indicator--e525ad92-0142-4253-9134-3ed7893c2fa5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58341a70-d1f8-4ded-a27f-aa8622a4e8c2", "sighting_of_ref": "indicator--e525ad92-0142-4253-9134-3ed7893c2fa5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08776cc0-c49d-44b4-a3d4-91323e7257f0", "sighting_of_ref": "indicator--28f60c9f-a02a-42c4-a50d-0d8495eb20a3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c5c563-3b69-4211-8271-915dae74da25", "sighting_of_ref": "indicator--28f60c9f-a02a-42c4-a50d-0d8495eb20a3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb724ea-b147-48e0-ad3b-f0142047393c", "sighting_of_ref": "indicator--28f60c9f-a02a-42c4-a50d-0d8495eb20a3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aaa2c00-ea09-4649-b82e-5710f44df74e", "sighting_of_ref": "indicator--6707d5aa-b798-401d-9b40-9ad255b76af6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bc6e0d-987b-4be5-a3fd-95e8a7b12e2f", "sighting_of_ref": "indicator--cd336939-1217-4962-acce-ed2afbc0434e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf4117a-c750-4336-83e4-88ec7becf962", "sighting_of_ref": "indicator--cd336939-1217-4962-acce-ed2afbc0434e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba248c93-8537-408a-89d5-b41087e89565", "sighting_of_ref": "indicator--cd336939-1217-4962-acce-ed2afbc0434e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05edc77-cca6-4332-884a-bbccc6ffad8f", "sighting_of_ref": "indicator--061d02d6-1f5c-4074-a9bd-360f4e9e0fce", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e297e4-b55c-4084-9b74-4fc3f11bad46", "sighting_of_ref": "indicator--061d02d6-1f5c-4074-a9bd-360f4e9e0fce", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe41aaa-f483-4fc0-bb60-4911201b1ea6", "sighting_of_ref": "indicator--75e1183c-3d80-4de6-bd4a-752a02e6eead", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db9f277-e4bf-47a1-9e47-ca02fabebceb", "sighting_of_ref": "indicator--a87678f2-4aae-4dbf-bef3-172fbac3cfb0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930aa2d9-dd82-4013-b67e-1bc2391ac2dd", "sighting_of_ref": "indicator--a4540ef0-f97c-4a67-ae5c-74217d92da79", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f261c396-5a48-4db9-b945-9f4398f55a83", "sighting_of_ref": "indicator--10015366-8e64-4d02-9024-fca9af280fec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7c0da0-9c2d-483b-98c6-0bc3bf0760e1", "sighting_of_ref": "indicator--10015366-8e64-4d02-9024-fca9af280fec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7cac7fd-66e2-4923-9a70-ed43e0d1b8a9", "sighting_of_ref": "indicator--b80374af-f964-46be-9dc3-045c5673f47a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d95cae-d5cf-42c5-9ff2-2afd0aab196f", "sighting_of_ref": "indicator--b80374af-f964-46be-9dc3-045c5673f47a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35501c2-5704-424e-9d85-3f6e4fce91d6", "sighting_of_ref": "indicator--da995b6e-060f-4383-acdd-5278fdc223ae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948720c1-9491-41fb-8b40-d8e78fd88f9c", "sighting_of_ref": "indicator--da995b6e-060f-4383-acdd-5278fdc223ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3669c76e-173c-4bb6-a854-2c51d4faaff6", "sighting_of_ref": "indicator--de7b637e-99dc-4bed-a708-f1a332837ab9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87674a62-f039-4e48-b926-896d91717b3a", "sighting_of_ref": "indicator--7571491a-cc4c-49c7-8e04-874f5f6418ae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade785a4-9983-457b-8dc2-c79c55194243", "sighting_of_ref": "indicator--7571491a-cc4c-49c7-8e04-874f5f6418ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fa9006-7451-4ff9-978f-56148fabcb58", "sighting_of_ref": "indicator--6e7fc472-752e-4653-b23c-d434a2e78517", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d192a6d-2546-42fd-8305-131a6ab62245", "sighting_of_ref": "indicator--6e7fc472-752e-4653-b23c-d434a2e78517", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fd8cc1-aab7-4993-9532-5c24b399fa8f", "sighting_of_ref": "indicator--6e7fc472-752e-4653-b23c-d434a2e78517", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc072b7-2817-4dd5-bb47-7413cd536f73", "sighting_of_ref": "indicator--e480b83c-e281-4832-92dd-7a7407c27443", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b2a810-3949-441a-ac88-256fcab14ef8", "sighting_of_ref": "indicator--e480b83c-e281-4832-92dd-7a7407c27443", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2307fb-2f7a-488a-b1fb-ce0a57b58f6a", "sighting_of_ref": "indicator--e480b83c-e281-4832-92dd-7a7407c27443", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ebc450-5c24-473f-aea4-e66b071867e9", "sighting_of_ref": "indicator--da7bffa7-30dd-4489-9451-30c966fdd921", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b543ffdc-2560-4eac-8b41-a47e275553bc", "sighting_of_ref": "indicator--d78a49b8-f352-4d0c-bbf8-85a8deb763d8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b8a2d5-acdb-457d-b88d-9fc011975cbf", "sighting_of_ref": "indicator--82c5455f-401d-4a60-9dcc-8cdad1e16128", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433f6771-22ed-4439-a782-90b17cffd1e7", "sighting_of_ref": "indicator--82c5455f-401d-4a60-9dcc-8cdad1e16128", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bbdda2-48b8-45c8-88bc-cfd5b12c3c5d", "sighting_of_ref": "indicator--5320f3a5-088f-4a35-ad0e-f5af21aae55f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33e87c0-c0df-422c-a06b-6356ca83c1a3", "sighting_of_ref": "indicator--5320f3a5-088f-4a35-ad0e-f5af21aae55f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8398d5e9-e5e7-432e-8c3f-1c9925f7d06e", "sighting_of_ref": "indicator--f75a2230-9e9e-4233-a9f8-1bc548bdbd1b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497e1765-7375-4664-8ca3-b1cf169d7167", "sighting_of_ref": "indicator--f75a2230-9e9e-4233-a9f8-1bc548bdbd1b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9284048-0341-4097-99b9-33336d76a2c1", "sighting_of_ref": "indicator--07be22fe-9f30-420e-99ba-83a73307d2b9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2abb88-9729-44c5-bab9-4ec56254c396", "sighting_of_ref": "indicator--07be22fe-9f30-420e-99ba-83a73307d2b9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47eb00c-0507-4526-a6a3-3d8836c072b7", "sighting_of_ref": "indicator--07be22fe-9f30-420e-99ba-83a73307d2b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da748600-5a20-4711-9f84-19cf7a71ed94", "sighting_of_ref": "indicator--751c503e-b858-4480-b7da-66b36bd23bb9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04121731-19c9-4a9a-ab90-446998ea8c10", "sighting_of_ref": "indicator--751c503e-b858-4480-b7da-66b36bd23bb9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888c77e7-dbe2-4e2a-859b-39d53ef9de6f", "sighting_of_ref": "indicator--385de410-b69d-4328-99dd-2c82c2b89929", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62b048e-cf44-48e9-aa38-0dbe63b3c111", "sighting_of_ref": "indicator--385de410-b69d-4328-99dd-2c82c2b89929", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e46970-0bd2-4ead-98be-1e8d9366104e", "sighting_of_ref": "indicator--385de410-b69d-4328-99dd-2c82c2b89929", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bf3355-2856-4c86-af51-169de0c7b046", "sighting_of_ref": "indicator--8cfe4ca9-b026-411a-84fb-78e6d3e89560", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c3c40d-39bb-4977-9885-faa3306bbc2e", "sighting_of_ref": "indicator--8cfe4ca9-b026-411a-84fb-78e6d3e89560", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50344e4-e6c5-4bbf-93fc-70b29572027d", "sighting_of_ref": "indicator--8cfe4ca9-b026-411a-84fb-78e6d3e89560", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f7ef13-b4d3-4ad1-8a83-1318b99caae4", "sighting_of_ref": "indicator--c5478163-5ef9-4beb-b8d8-f7b26d922e88", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6ae148-7633-49a2-afb0-ce3e5c3bc0e2", "sighting_of_ref": "indicator--c5478163-5ef9-4beb-b8d8-f7b26d922e88", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed2b0df-0393-4184-8f60-824c0d7d2e43", "sighting_of_ref": "indicator--0b09008d-75af-4c7e-b592-38f6a0dadbce", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3134c6-a3a1-4413-93cd-454e6a292e37", "sighting_of_ref": "indicator--a3748a21-9f93-48e1-b929-7206ae1cfdb3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a405a85-6aa1-4d81-9127-7d80f1c72c47", "sighting_of_ref": "indicator--a3748a21-9f93-48e1-b929-7206ae1cfdb3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08632d34-48d8-4f8c-aac8-3e40e051ea23", "sighting_of_ref": "indicator--2bf261ed-2adb-4cda-89f9-db668771c885", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e375432a-77d0-4c7e-a77a-82f096c32641", "sighting_of_ref": "indicator--fc237904-9282-4618-a5a3-47504af4fb7e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0165bf06-0102-4343-90a2-95d72e27269c", "sighting_of_ref": "indicator--fc237904-9282-4618-a5a3-47504af4fb7e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46474daa-976d-4b84-9f21-c600d4f4e61e", "sighting_of_ref": "indicator--4ae9beb7-8caf-47a1-8b43-0c565cce86c2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d789c430-2e40-4179-b851-2f30b6b19d2d", "sighting_of_ref": "indicator--9890f469-02f2-4a57-87a8-7ca90e407f86", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693c5167-163f-4c3f-837f-a52878ed24da", "sighting_of_ref": "indicator--9890f469-02f2-4a57-87a8-7ca90e407f86", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535bb9f7-4bb0-4b4b-9f4b-c900aa0ab9c2", "sighting_of_ref": "indicator--9890f469-02f2-4a57-87a8-7ca90e407f86", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0147e070-74bb-4de9-8a27-0313aa5c9253", "sighting_of_ref": "indicator--fbc97bc5-5205-48ab-9efd-760ce6e96224", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d4c020-93e7-4c4f-be27-702cf501401a", "sighting_of_ref": "indicator--fbc97bc5-5205-48ab-9efd-760ce6e96224", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c37c6bf-cc53-4c34-8312-30379f2a1962", "sighting_of_ref": "indicator--32292e30-f8bb-4bd7-adc0-5b55c5c4f16f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37551b02-cecc-4b02-bce5-a59278555cd0", "sighting_of_ref": "indicator--32292e30-f8bb-4bd7-adc0-5b55c5c4f16f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6cbb0c-1732-4afe-ae43-499c6848bb45", "sighting_of_ref": "indicator--c0c5f2b3-7f6e-4e35-af03-5b95f34c8fb3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb6a092-255d-45ee-903f-e4651b4b1ab1", "sighting_of_ref": "indicator--c0c5f2b3-7f6e-4e35-af03-5b95f34c8fb3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2a7ac0-7f59-475f-aa9f-a87555770b00", "sighting_of_ref": "indicator--2ce1ab2c-fde8-43b0-b8df-e82e517c12b8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0322397-6aa9-40fe-be45-aaa0de274111", "sighting_of_ref": "indicator--0711ae8c-08a4-45b5-8e89-176b1800a5d9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1664cc8f-5009-456f-b147-02a1c788b273", "sighting_of_ref": "indicator--e0f5f0f0-1cf9-41cb-94b7-6dc6b84a7de2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5540163b-b0d0-402b-949d-8b29cb3e2159", "sighting_of_ref": "indicator--e0f5f0f0-1cf9-41cb-94b7-6dc6b84a7de2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c5bfc6-94cc-46db-b969-b8bc5ccbf64d", "sighting_of_ref": "indicator--858f0828-7e26-4461-8e3b-88c27fcee471", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a856fc6-c681-4fc6-af09-dc469ed34aee", "sighting_of_ref": "indicator--53cd1084-46fc-410b-b7ef-64c61231bf83", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6401d35d-b4da-46d6-bb29-81b8405c5dc2", "sighting_of_ref": "indicator--53cd1084-46fc-410b-b7ef-64c61231bf83", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d317d7d0-d01e-4e65-aef6-d8f3f2f8c3b6", "sighting_of_ref": "indicator--1b6f60ca-53f9-40a3-85f9-97d86f38fd1f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da594bf-150f-4d1e-9c5d-2d97c699c8e6", "sighting_of_ref": "indicator--1b6f60ca-53f9-40a3-85f9-97d86f38fd1f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b930b3-cc14-4cd8-9e48-6c985c1e1e07", "sighting_of_ref": "indicator--9699a527-e962-414d-806b-e4176177ece1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69e8762-9164-4236-9157-e528af8d76b6", "sighting_of_ref": "indicator--9699a527-e962-414d-806b-e4176177ece1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d69c1e-5713-4e1b-b8d6-5e201da419f2", "sighting_of_ref": "indicator--44be4d3a-f3d5-4356-82ab-01fd58646db0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf47e9c-9ec6-4662-b38e-1b72dd36f4da", "sighting_of_ref": "indicator--44be4d3a-f3d5-4356-82ab-01fd58646db0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90974134-6991-432d-8fd8-1ee6734958e0", "sighting_of_ref": "indicator--8096fed1-aade-440f-9d94-b77ea3db8adc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739d5853-7fa7-421b-8ef7-316174dc4413", "sighting_of_ref": "indicator--8096fed1-aade-440f-9d94-b77ea3db8adc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26a9e93-b083-4340-af71-b97829cd3bb2", "sighting_of_ref": "indicator--d9144961-9688-429c-94ce-d440af031fa9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d79980-a8f6-421e-a547-803c6b10ca26", "sighting_of_ref": "indicator--9396ef46-a6f7-44c1-93e6-e2a4e6242ddb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e567a7ca-5eb9-4540-976c-27b8368a6829", "sighting_of_ref": "indicator--9396ef46-a6f7-44c1-93e6-e2a4e6242ddb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e95efc9-f995-452e-b0dd-8a41d88f2a02", "sighting_of_ref": "indicator--096f67de-dc14-41b3-83d9-c8037386b95e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425a9449-eb45-4ae2-8414-123961f63405", "sighting_of_ref": "indicator--096f67de-dc14-41b3-83d9-c8037386b95e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4a0110-47b9-45d8-bd84-3014554afeea", "sighting_of_ref": "indicator--cdfbe3bf-902d-4991-874f-29b0fae0ecab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5a7414-c7d5-44e9-8cce-91081f8e7d0b", "sighting_of_ref": "indicator--c1b7f268-8820-4209-bf4f-0be74e18843b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33ce0c4-cbcf-4a2f-918a-7a8c222bf112", "sighting_of_ref": "indicator--7a044f41-5eb6-488b-8865-4fb6d2fb5a97", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560297ce-41eb-48b2-8906-c7fd2202e158", "sighting_of_ref": "indicator--fda12dfd-2dfb-44a4-aba3-19bc412ba23b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61618614-a378-4325-930f-c4595843ced2", "sighting_of_ref": "indicator--fda12dfd-2dfb-44a4-aba3-19bc412ba23b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2efd4a-69a0-47b9-8259-1b3d09cbb82b", "sighting_of_ref": "indicator--fda12dfd-2dfb-44a4-aba3-19bc412ba23b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415199bc-61cd-4ef4-9a8c-0905d53a78bf", "sighting_of_ref": "indicator--9a1182fe-8c41-4fa4-87e4-0dcebbd92afc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39690744-723c-4866-a0df-59aa21e7a179", "sighting_of_ref": "indicator--9a1182fe-8c41-4fa4-87e4-0dcebbd92afc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cc2f3d-4ac8-44ba-93ba-8beb01a1b47e", "sighting_of_ref": "indicator--9f7fc442-b695-4294-8c26-0a8ec43e57d2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dede305c-8236-4296-a5bf-3f2443765f2b", "sighting_of_ref": "indicator--9bbc9901-fc37-40e9-af93-c92b40b4cd87", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ba28f3-d8f7-4963-abd9-5509388ba18e", "sighting_of_ref": "indicator--9bbc9901-fc37-40e9-af93-c92b40b4cd87", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e438ff1-8f18-4de4-bb8e-514bbfbf9fed", "sighting_of_ref": "indicator--7ca885e2-dd28-4cff-83ab-aa22207cdab1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3765b9-f034-4c3e-9c2d-229101a7e2c6", "sighting_of_ref": "indicator--2b48355c-e392-40b2-80d1-fb0d13aa14e4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df0f4da-a20c-4631-b538-ff16dd665b36", "sighting_of_ref": "indicator--22204001-942a-4a07-a33b-b2535aeb7a47", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4ec782-65f4-4332-ad6f-30fb9bad58b9", "sighting_of_ref": "indicator--22204001-942a-4a07-a33b-b2535aeb7a47", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e67fe6-6d3c-495f-ba88-035bfbffabe2", "sighting_of_ref": "indicator--4e54cde4-2481-438c-a379-d0dc15e7be0f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd97fc6-909c-4cc4-8689-db700f5b3f9c", "sighting_of_ref": "indicator--4e54cde4-2481-438c-a379-d0dc15e7be0f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fe7c2c-246d-4025-9f61-2068cd886652", "sighting_of_ref": "indicator--4e54cde4-2481-438c-a379-d0dc15e7be0f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49f527c-357d-4caa-b667-d3083d181eac", "sighting_of_ref": "indicator--6bd881cd-13e3-4858-815c-0161a883d92c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e056f8-dc30-4833-9a17-6fd4d464c3e7", "sighting_of_ref": "indicator--6bd881cd-13e3-4858-815c-0161a883d92c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bd7e20-a4d5-4dc6-a1d3-13932c8fb668", "sighting_of_ref": "indicator--1ae98289-5e46-4aee-81a9-498041d99edb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797b502d-56fe-4d62-bb5e-7dd0be23baf5", "sighting_of_ref": "indicator--9bc0e876-e069-4549-b849-842cf527ec09", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a827919-0f17-4bd8-9bdf-b182edb468e6", "sighting_of_ref": "indicator--9bc0e876-e069-4549-b849-842cf527ec09", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49450b9-4449-4f80-bff3-1c81efb803bc", "sighting_of_ref": "indicator--94550339-df1a-4f92-81f1-ba872a46b00f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f189e9e1-8ce1-4ae0-9dad-cff1e2fffe68", "sighting_of_ref": "indicator--94550339-df1a-4f92-81f1-ba872a46b00f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb03a608-ff9b-49c5-b488-be9a1d63a28a", "sighting_of_ref": "indicator--7143793a-aacb-4a64-b98b-b9a4aa1ce3c8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89ce450-56a0-4051-a245-006329037266", "sighting_of_ref": "indicator--545b6659-749a-4da2-aecc-c2ffaaa1bddd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf280ec-dace-4c0d-8d74-3dfa0d583be3", "sighting_of_ref": "indicator--a0cb2027-011b-4c41-9d3e-68762cd323e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfc19f2-b281-4e97-9729-07ee0d90a7a5", "sighting_of_ref": "indicator--a0cb2027-011b-4c41-9d3e-68762cd323e6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d240a346-0889-4a78-8c5a-c878aafcfdde", "sighting_of_ref": "indicator--fa8f7f5b-31ba-4d10-bf3f-49f38a197425", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bc9ad0-c834-4398-97bb-ec2b35cca715", "sighting_of_ref": "indicator--fa8f7f5b-31ba-4d10-bf3f-49f38a197425", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1929cf4-a17f-4ca0-b1ce-f42066f3d5b0", "sighting_of_ref": "indicator--7efe4546-e68a-462c-882d-e927f86ee02c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97e1508-4529-4e97-b504-8cd4d92facf5", "sighting_of_ref": "indicator--7efe4546-e68a-462c-882d-e927f86ee02c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ae503a-c2cc-4df9-aa99-01d34f7dd3d1", "sighting_of_ref": "indicator--8205bd8e-0672-40fe-aad4-a9559b6cf6b8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b252a459-1991-4b95-b0aa-12d59b4bab09", "sighting_of_ref": "indicator--8205bd8e-0672-40fe-aad4-a9559b6cf6b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f685737e-d6d6-4401-854a-27063b0bdcca", "sighting_of_ref": "indicator--47080bc6-f5c1-459e-880a-a2a7d311e510", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdc1c5d-6c03-413c-b8bc-c907908d7e75", "sighting_of_ref": "indicator--8915cd46-5435-425a-b416-c740bb491eed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75b0706-abff-4a48-9ecc-2e2bd6030ac4", "sighting_of_ref": "indicator--8915cd46-5435-425a-b416-c740bb491eed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b304a269-58b5-4ffe-85b8-1df807d7d726", "sighting_of_ref": "indicator--35741d53-7a7e-4e2e-bdc0-bb01859a7cd3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c4609e-6bdb-4884-add7-50987e88f5b1", "sighting_of_ref": "indicator--35741d53-7a7e-4e2e-bdc0-bb01859a7cd3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95960e8e-2c98-437e-a319-c6804d284beb", "sighting_of_ref": "indicator--779ecc6a-797a-4eff-aa0d-10e2b2c8542a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19240ecd-c784-4dbb-99b3-72e634120585", "sighting_of_ref": "indicator--779ecc6a-797a-4eff-aa0d-10e2b2c8542a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b928dc04-d8b6-4e61-99c6-a97a88a15c4b", "sighting_of_ref": "indicator--daeead2d-33f9-4192-9ca5-3b6cecbf56d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036dfccf-1f3d-40ff-a420-88e81fe7a245", "sighting_of_ref": "indicator--b07d56e0-c1ae-46e1-a944-3145f2013917", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15cdcf6f-75ae-4144-be21-702aaf9834fa", "sighting_of_ref": "indicator--739e0d1f-e2e2-406c-918c-4a24d90ed0ca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc506c8-e317-497e-bef5-6bab1eec2448", "sighting_of_ref": "indicator--8a32c520-cfb4-4ca8-9607-6bcf809842db", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb5f72d-b6aa-4178-9501-19a6e51a0563", "sighting_of_ref": "indicator--8a32c520-cfb4-4ca8-9607-6bcf809842db", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2125249-9051-499c-8252-1f8967462d4c", "sighting_of_ref": "indicator--f6b3f224-c6a5-4a5d-800f-95b0b8bbaba2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec08a23d-98bb-47e8-9f3b-f3e4818f4a72", "sighting_of_ref": "indicator--f6b3f224-c6a5-4a5d-800f-95b0b8bbaba2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b90590-8d93-4007-90ff-d9e7c6e7c984", "sighting_of_ref": "indicator--f6b3f224-c6a5-4a5d-800f-95b0b8bbaba2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b43c49-0b5a-44d0-b32d-7abd9b719bd7", "sighting_of_ref": "indicator--d545dfa3-f327-4e7a-987b-5ee9a80fd5c5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3a5a36-980d-4aa0-9fe9-e663939569de", "sighting_of_ref": "indicator--200424d8-161e-4fb6-9dc7-f92a4e659009", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef74dc0c-9429-4063-9afe-c60bf1959a15", "sighting_of_ref": "indicator--200424d8-161e-4fb6-9dc7-f92a4e659009", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903ff85d-5616-4483-aaa8-21a8ccccc428", "sighting_of_ref": "indicator--579cf7f6-8025-4d08-989f-6b88632d0f65", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b803856d-35e2-4f98-b89b-a3d2aca65f25", "sighting_of_ref": "indicator--579cf7f6-8025-4d08-989f-6b88632d0f65", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64289ce5-6391-42e7-a6e4-a35042c15d32", "sighting_of_ref": "indicator--0f9e3497-aac3-4ba9-b91c-642d56d93b28", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8eb789-3e57-4aa8-a059-01bf89e176dd", "sighting_of_ref": "indicator--0f9e3497-aac3-4ba9-b91c-642d56d93b28", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167a73e3-51b5-48eb-a6c4-366508a0cffd", "sighting_of_ref": "indicator--0f9e3497-aac3-4ba9-b91c-642d56d93b28", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7033951c-bd4e-4e3a-af11-7e752bd562e6", "sighting_of_ref": "indicator--41a217b9-9b5c-439e-b72d-ef32081d8c67", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade5919d-8d76-4948-b3fe-cb2f94dd9664", "sighting_of_ref": "indicator--41a217b9-9b5c-439e-b72d-ef32081d8c67", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a30cb5-d57a-4faa-85d7-57df4118963d", "sighting_of_ref": "indicator--87eccc8d-cf3a-40e3-8a41-87339a0188c6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd5f6cc-c2af-4755-a9cb-6e53878627ad", "sighting_of_ref": "indicator--87eccc8d-cf3a-40e3-8a41-87339a0188c6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e48249-b883-4796-bfac-86546224e12d", "sighting_of_ref": "indicator--26e8a869-77d5-4592-9675-e947a965e775", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beaf80cc-8970-45c9-9236-7b3262336ac9", "sighting_of_ref": "indicator--4132efca-634b-408f-bf71-b48c0d21239c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d64e29-40e2-48b1-b2e7-4c7ab880ab1d", "sighting_of_ref": "indicator--4132efca-634b-408f-bf71-b48c0d21239c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed2dd4d-39c8-41ce-91b7-ae4f68e0a2aa", "sighting_of_ref": "indicator--597300ad-9ac9-4f74-8d54-740f9429a828", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bfa8eb-f9b2-4b90-9a2c-e92bb4360978", "sighting_of_ref": "indicator--597300ad-9ac9-4f74-8d54-740f9429a828", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a11ab4-6049-4ece-adac-065759b5bb79", "sighting_of_ref": "indicator--cb342cbd-6e33-449b-8ba5-da08add30d0f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6aa4730-cb5d-4269-b9ce-e3acf2bf5d47", "sighting_of_ref": "indicator--cb342cbd-6e33-449b-8ba5-da08add30d0f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f7e74a-1d28-478d-9b43-297f9e647eea", "sighting_of_ref": "indicator--64172a7d-eecf-4d6f-ad9e-6c8ca63ae8e6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ec9876-beb0-4655-aa1c-7fb1a871e4a6", "sighting_of_ref": "indicator--6e98a838-e3f4-4770-8531-47f136a3da41", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977efe55-96be-4364-9b72-b38dfe2ca5f6", "sighting_of_ref": "indicator--ffee1503-5846-4cc2-bff4-db8d2b997581", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff53e8b1-d0ed-4dc3-b0b2-21933ed27e07", "sighting_of_ref": "indicator--f6b72d21-efcb-43ac-b010-95d33d3cf8e3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fd9bc2-f1ed-496b-9a90-153b87fff461", "sighting_of_ref": "indicator--fe7a0ab9-d39d-471d-aee7-fd291a54a92d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26de6f84-e2f0-44ad-b05c-5357a3232ed8", "sighting_of_ref": "indicator--5ace2b75-ad1e-436c-bd20-d9e3f6d94886", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89b8939-4615-4ace-a20f-eef5cde11de4", "sighting_of_ref": "indicator--5ace2b75-ad1e-436c-bd20-d9e3f6d94886", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10662391-8354-461f-a106-47421563a819", "sighting_of_ref": "indicator--36b5df53-2084-48fa-ab17-9d6c49a226f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a8ffa6-0891-40bd-84bb-5279028a6f16", "sighting_of_ref": "indicator--36b5df53-2084-48fa-ab17-9d6c49a226f7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2f0197-5d94-4707-8bd2-2c5144239550", "sighting_of_ref": "indicator--fa828f95-eff7-437b-8e95-9ff7235ce795", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394ea677-6108-4ea9-a117-07dfecc21f77", "sighting_of_ref": "indicator--061dec61-824c-4912-9d27-50667aea87dc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6402576-08cc-4aca-9501-7c350d4672f5", "sighting_of_ref": "indicator--d133a16e-5c3b-4239-85e9-84edde47e4c8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5f58ca-aea8-4ab2-a408-81adcd565fb0", "sighting_of_ref": "indicator--d133a16e-5c3b-4239-85e9-84edde47e4c8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8427550-1216-482c-8a07-7d6f7fcd4d70", "sighting_of_ref": "indicator--688c6276-7d4b-41cb-b66e-356ae81214f4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd89ce9f-dc47-4202-9da7-8d47b66c732c", "sighting_of_ref": "indicator--79e5823a-3c57-479f-8e55-1acc2c46dfae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953aef19-63bf-45e0-a16c-3d14cc254526", "sighting_of_ref": "indicator--79e5823a-3c57-479f-8e55-1acc2c46dfae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878cf3f0-1145-4f21-bd83-947444d12d4b", "sighting_of_ref": "indicator--a6b8c060-cb92-493d-8a0b-6ad59c65b4dd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4775ec-8655-4de3-a06e-b02f33364422", "sighting_of_ref": "indicator--1164c193-5e67-42cb-950a-80a09d07f600", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3b4f0d-2d2f-47cf-a7b4-9ae5ea9dc3a5", "sighting_of_ref": "indicator--1164c193-5e67-42cb-950a-80a09d07f600", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c41e9c-d177-4328-aff6-409bf9c44135", "sighting_of_ref": "indicator--af4c0cba-9e3f-498a-b8fe-b51961006e6d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cf2ce8-e5a4-4ec0-8278-afae3f8b6215", "sighting_of_ref": "indicator--7e017b8e-8db3-4f9c-8633-8b9cea0d8f34", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d68c6c8-21ab-48f0-a399-ba3eaf086197", "sighting_of_ref": "indicator--ea623407-83ce-47ba-a40d-de9187ac733f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e1ff83-c810-4872-8bab-9682528ff55e", "sighting_of_ref": "indicator--a2b1daa8-d826-4a3f-a157-06693e642069", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d64d92-4778-4343-a599-84b424fc6edb", "sighting_of_ref": "indicator--1cba7219-ef24-4839-adad-416be3f781e2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba9a6cf-300a-4099-aaa0-5b6569766744", "sighting_of_ref": "indicator--1cba7219-ef24-4839-adad-416be3f781e2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d218f9b4-3539-40cb-be9b-813410657803", "sighting_of_ref": "indicator--1cba7219-ef24-4839-adad-416be3f781e2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70300b72-c47b-43de-bcf6-e06205992d32", "sighting_of_ref": "indicator--6e297bdc-92b6-4566-a556-1b239fce98c8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ca3f94-de39-4060-bffb-98b38db8fd8e", "sighting_of_ref": "indicator--6e297bdc-92b6-4566-a556-1b239fce98c8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114c9d9a-7a93-43a8-9428-00a32d7f1fb0", "sighting_of_ref": "indicator--17f55400-d417-497b-b1aa-2e7452641e78", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212b5853-ff2f-4b4e-93f0-d04024f00679", "sighting_of_ref": "indicator--5a3a3c67-0ceb-41be-8a1f-631ec1d6bddb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4856d1c9-371e-47ca-a2aa-a52f2a7de988", "sighting_of_ref": "indicator--024c2ac3-884c-4bb4-990f-72c9714963d7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694c9372-4bc7-45b5-a31b-e92633697def", "sighting_of_ref": "indicator--024c2ac3-884c-4bb4-990f-72c9714963d7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0981fcd-0687-4f43-adc9-3484486b87e8", "sighting_of_ref": "indicator--3d6b4875-c45e-4bba-b418-ed74f6a121a5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2af3f2-1fba-48c6-8cbe-8c1749b972c9", "sighting_of_ref": "indicator--e17494c2-c21e-49fa-b95d-bbe2b87ddefc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8605d4bf-576f-4326-b845-6f8c81738e08", "sighting_of_ref": "indicator--e17494c2-c21e-49fa-b95d-bbe2b87ddefc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b55e39-aa0a-4f97-bfc7-45638eacb87a", "sighting_of_ref": "indicator--e17494c2-c21e-49fa-b95d-bbe2b87ddefc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacbe67c-151a-489c-9a3b-a7f309776930", "sighting_of_ref": "indicator--36b0a3e4-55c7-42d6-b266-ff9d0af2ab07", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29ce0f1-f478-47ea-9110-0b0ccab2fc40", "sighting_of_ref": "indicator--36b0a3e4-55c7-42d6-b266-ff9d0af2ab07", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36d2237-0e91-4a35-b2c7-cc0d45929767", "sighting_of_ref": "indicator--619446a1-efa0-46cc-88b6-27e50bb80627", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa7faf0-0258-4af9-aa54-99e04626ad4f", "sighting_of_ref": "indicator--619446a1-efa0-46cc-88b6-27e50bb80627", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3305e9f0-3493-48f6-adab-472534c38694", "sighting_of_ref": "indicator--619446a1-efa0-46cc-88b6-27e50bb80627", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a545b480-a5ae-4097-8656-b42cb5cfdd74", "sighting_of_ref": "indicator--9cdc5f23-65b6-4770-a5d5-4b023baf1baa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df308942-6ab9-4e46-aae8-d38f11dea7c4", "sighting_of_ref": "indicator--97ef3827-0754-41f9-aa5d-db960a3b3d03", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016d09e5-4941-4226-ab20-f10c6bd24b4c", "sighting_of_ref": "indicator--ab5f7153-8660-4592-a306-e1dace554d10", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3bf631-550e-48a6-98e4-812adc2f982f", "sighting_of_ref": "indicator--ab5f7153-8660-4592-a306-e1dace554d10", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3631dd4-e774-4362-bf12-9426336d79dc", "sighting_of_ref": "indicator--61ec8088-5533-4116-9466-57dbf75554aa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01374933-f7c3-4013-962d-f0a65438d2fb", "sighting_of_ref": "indicator--61ec8088-5533-4116-9466-57dbf75554aa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34918001-0c6d-486d-9fb5-737980efee62", "sighting_of_ref": "indicator--253cc6eb-5c1e-420c-9266-ddaaed1a6652", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421a300d-39b9-4097-9d58-0cb4bdad3fd6", "sighting_of_ref": "indicator--253cc6eb-5c1e-420c-9266-ddaaed1a6652", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7dc3042-e7c7-4652-bb97-96916140d31d", "sighting_of_ref": "indicator--253cc6eb-5c1e-420c-9266-ddaaed1a6652", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5db55f-38f8-4d3d-8ec1-fc5aad7e3b85", "sighting_of_ref": "indicator--65c185e2-96e2-4314-a425-a7d8aff22ed6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1bd670-7809-4695-b843-87ab62dda3e1", "sighting_of_ref": "indicator--65c185e2-96e2-4314-a425-a7d8aff22ed6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4782d80-6331-4b86-b2c6-62e21ee1a443", "sighting_of_ref": "indicator--46c25778-dd75-4c8f-95a8-fce9b33e1f81", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d988a362-beec-492c-8658-f95a9e3ca155", "sighting_of_ref": "indicator--7cba1109-620d-46e2-bda9-c32a363878e3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5fff19-a9d4-4a0c-8a46-083b0c41f241", "sighting_of_ref": "indicator--7cba1109-620d-46e2-bda9-c32a363878e3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828e658f-2c56-4d64-aef3-37e156faf029", "sighting_of_ref": "indicator--43139594-9f91-4f78-b910-fd24e53b8dc5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b40222e-f46d-4f78-bb86-b285478f613e", "sighting_of_ref": "indicator--43139594-9f91-4f78-b910-fd24e53b8dc5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c83ebfb-49ea-4fa8-907e-87b9b331c4e8", "sighting_of_ref": "indicator--3a2af368-0dea-40f2-89ef-6472a088d928", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8ecc34-6208-44d1-bbe3-1b692d95e444", "sighting_of_ref": "indicator--7c6b065b-4a63-4af5-9cc8-1da6c7f9c49a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16dd492d-76d0-46c6-92f4-4ed5c717abca", "sighting_of_ref": "indicator--5f3b3271-e2c8-4cfc-a7bf-01774a0b4934", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996952f8-1ddd-48b0-846f-8065b1b574a5", "sighting_of_ref": "indicator--52ba488a-0000-488b-abdd-97b7c7be25b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77335fae-6a13-4bfc-a629-8c434c0a0cca", "sighting_of_ref": "indicator--52ba488a-0000-488b-abdd-97b7c7be25b7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399c2675-211a-40d9-858a-1a009b4e5772", "sighting_of_ref": "indicator--154be45c-7a56-445f-87c1-b54e4072afa9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2419d94-710f-43a2-88eb-09df185ec101", "sighting_of_ref": "indicator--154be45c-7a56-445f-87c1-b54e4072afa9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ec9949-e09e-4a56-bd95-61175886495d", "sighting_of_ref": "indicator--154be45c-7a56-445f-87c1-b54e4072afa9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ad1c24-d8a7-45ba-967f-37d5a3b1cea6", "sighting_of_ref": "indicator--b7bf63bd-f50f-42af-a474-d4715e05ce49", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe68271-29f0-491c-8459-57d84325d096", "sighting_of_ref": "indicator--469c9bc8-01d1-4c88-b9b9-546a70cccbc0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3e6a6c-64b0-4998-bb50-c87724028474", "sighting_of_ref": "indicator--8845a0db-4032-4b3b-b2de-0f42d56ee936", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1d4cd9-68dd-4001-90a8-058a2f1caeb2", "sighting_of_ref": "indicator--02dc62f6-1d47-4e22-9d3c-0c90f957adf3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8851c50-bf57-43a4-805b-b409aa99a60a", "sighting_of_ref": "indicator--f2cbb82a-ef3d-4649-979a-a5984c93db09", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a577a26a-fad2-4f93-bfbe-a8a21612a7b6", "sighting_of_ref": "indicator--d3033be7-3a5b-4a29-8972-a5dd2d78fa25", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f46834-932f-4a29-a032-be682e4bd437", "sighting_of_ref": "indicator--d3033be7-3a5b-4a29-8972-a5dd2d78fa25", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0151f58-882b-4af0-b302-d1cb94498325", "sighting_of_ref": "indicator--11b874f6-147e-4666-ac95-770cb7e40733", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc21ee7-71de-4899-bc62-b6faeb33a121", "sighting_of_ref": "indicator--fc0afd25-4f6c-4076-a679-f066fc7aadd7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cf9962-0b81-4e6a-99bb-3eca4bc3a3fe", "sighting_of_ref": "indicator--fc0afd25-4f6c-4076-a679-f066fc7aadd7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd67036-a191-45e2-a087-f16c3289c846", "sighting_of_ref": "indicator--504d29b1-b50c-4219-8efc-4ba728d9f754", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc300b8-1c50-4202-8f47-4eb595eb1604", "sighting_of_ref": "indicator--e56193fc-eb06-43f1-8dbf-866532195ea2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4232e8d1-0b42-4a12-9145-ff52847a6fd4", "sighting_of_ref": "indicator--5e72efce-0b35-410d-8678-0fd4ed4154be", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d269b6-b1fc-42b5-998a-749e2e25b225", "sighting_of_ref": "indicator--94801e28-4098-41d4-ba0e-39fa433274ec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71af4214-764f-4d9c-abd9-11641bb8c1af", "sighting_of_ref": "indicator--ed654b06-2a7f-42ab-b480-75a85b390196", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c28634a-28a1-4cf4-8b75-2c7987553f9d", "sighting_of_ref": "indicator--64344892-1670-494d-9b63-a6992d701878", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2725f0d-fe2c-4653-8085-e5637af7c280", "sighting_of_ref": "indicator--9d8ec5d4-6722-42ba-bb12-bef767530b1d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b75bd7-c820-43ed-b77d-534b2e194e0b", "sighting_of_ref": "indicator--d400e5c6-fa93-4fb4-bfcc-e3a816bbf505", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3294d904-98bc-45c2-ae2d-296b5e9e3dbf", "sighting_of_ref": "indicator--40527ee5-d204-4c38-b78a-6ee85ea102de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a9ee7c-cf4e-4f66-b61a-198cb4e813f6", "sighting_of_ref": "indicator--40527ee5-d204-4c38-b78a-6ee85ea102de", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c0be3a-7e2a-441d-93cb-b6cdb940acc8", "sighting_of_ref": "indicator--0034f501-8afe-40e4-b9fc-91fc66d9e351", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2a12e6-3378-4516-9c0b-7fbb19ce5cff", "sighting_of_ref": "indicator--0034f501-8afe-40e4-b9fc-91fc66d9e351", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8d920c-6396-46d2-bd39-ae9c904136ad", "sighting_of_ref": "indicator--c2153999-1244-4c8a-8b2a-c9431f4e70e4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7b1473-4f40-4682-b37a-a025575747f9", "sighting_of_ref": "indicator--0ac6b649-ae90-482f-bb1f-b1dd832bade0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f8bedb-e579-4a95-a327-e6879aea61ea", "sighting_of_ref": "indicator--0ac6b649-ae90-482f-bb1f-b1dd832bade0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccdf989-67d8-4a98-bd83-014a31e063ba", "sighting_of_ref": "indicator--0ac6b649-ae90-482f-bb1f-b1dd832bade0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46006452-8915-4a52-b4b4-11f2abbf351e", "sighting_of_ref": "indicator--d019c08d-f5c5-46b8-8fbb-a0496ceb4d15", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bf9884-287a-43aa-aaf6-18796293920e", "sighting_of_ref": "indicator--d019c08d-f5c5-46b8-8fbb-a0496ceb4d15", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f457e4-ccd0-4631-a378-e85f2e9ff4cc", "sighting_of_ref": "indicator--d019c08d-f5c5-46b8-8fbb-a0496ceb4d15", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f9c0c9-f19a-4cb5-86f7-a070e6d72fc1", "sighting_of_ref": "indicator--5ce0c742-779f-40a4-a03c-4b1e61c63f19", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76972a3-9c2b-42ba-bd30-e392ab93afcd", "sighting_of_ref": "indicator--5ce0c742-779f-40a4-a03c-4b1e61c63f19", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668c3094-de99-43be-bfb2-b06896415cd8", "sighting_of_ref": "indicator--615f582e-5ea6-4ad4-9c4a-7db5661a352b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2182ff9f-4935-47a8-b90c-f710350b5c71", "sighting_of_ref": "indicator--615f582e-5ea6-4ad4-9c4a-7db5661a352b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0589ee08-da7e-43f7-ba4d-d9db1a23bdbe", "sighting_of_ref": "indicator--615f582e-5ea6-4ad4-9c4a-7db5661a352b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52743075-1300-474f-b577-5f8cd048b2d1", "sighting_of_ref": "indicator--06527959-fc85-4855-bf86-dd1b808b1e00", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6832e10-17fb-4a76-af00-941267b9e67d", "sighting_of_ref": "indicator--06527959-fc85-4855-bf86-dd1b808b1e00", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11cd25d4-f215-4d31-b4aa-d035022ce5ec", "sighting_of_ref": "indicator--22b6ed29-0c0e-498d-9809-a1472f12ba0d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3767342-a8a3-4a45-82eb-1efc4a65bd2b", "sighting_of_ref": "indicator--22b6ed29-0c0e-498d-9809-a1472f12ba0d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e35a3a-2e36-4396-971f-436c51fa9fa0", "sighting_of_ref": "indicator--c6beeb26-1b9c-4a60-97d4-ce297a0a7be3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2151021-44c7-4893-b938-ff79644d59e1", "sighting_of_ref": "indicator--c6beeb26-1b9c-4a60-97d4-ce297a0a7be3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11796ad3-955d-4b16-bf15-3c30f4c5879a", "sighting_of_ref": "indicator--c6beeb26-1b9c-4a60-97d4-ce297a0a7be3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43417829-84d3-4527-92b2-e3cc86ef4438", "sighting_of_ref": "indicator--05fd11d6-6512-441f-a0b1-81c19794aca1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775d82de-6cb2-4e39-adb0-6122ad1ce5d1", "sighting_of_ref": "indicator--05fd11d6-6512-441f-a0b1-81c19794aca1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9b2e9f-3186-4039-8767-b0ae835a29c7", "sighting_of_ref": "indicator--05fd11d6-6512-441f-a0b1-81c19794aca1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8013c0c-9bea-4e67-abd6-2ae9886f267c", "sighting_of_ref": "indicator--05dfc76b-e939-4fe7-a743-48cf93d33cb7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216276d2-9ee2-436c-a8a1-3da288b5654f", "sighting_of_ref": "indicator--05dfc76b-e939-4fe7-a743-48cf93d33cb7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c453c6e5-c500-40b6-bc10-533f13c31166", "sighting_of_ref": "indicator--a7b22f10-4417-4ec9-8b68-42672258865c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c52b52b-f33f-4ee5-957e-c268901ec8ac", "sighting_of_ref": "indicator--a7b22f10-4417-4ec9-8b68-42672258865c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c01120-07fb-41a6-8800-fad37ae02c0b", "sighting_of_ref": "indicator--a7b22f10-4417-4ec9-8b68-42672258865c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092dbbc8-67e9-4379-90f6-47723089f85e", "sighting_of_ref": "indicator--362d1604-8afd-4ab5-953c-db479c4168d4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc35366-ae4a-4051-9a92-a91e5f26fdb7", "sighting_of_ref": "indicator--362d1604-8afd-4ab5-953c-db479c4168d4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c625c658-a295-4074-a890-92d4f96c8acb", "sighting_of_ref": "indicator--362d1604-8afd-4ab5-953c-db479c4168d4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9707687b-fe9b-4bfe-ac56-094e305bc508", "sighting_of_ref": "indicator--2f36b108-a2dd-4c83-a0c3-61962de0efc7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab7d9c0-f77c-4a1e-a5fd-cb601403e370", "sighting_of_ref": "indicator--2f36b108-a2dd-4c83-a0c3-61962de0efc7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c498e35-1410-49aa-83be-85515b0dde86", "sighting_of_ref": "indicator--2f36b108-a2dd-4c83-a0c3-61962de0efc7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343f54d6-caf7-41e3-b141-dcde234a2a75", "sighting_of_ref": "indicator--c1c647a9-b537-42c0-bcc9-c3da7da7b396", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b86c87-55c3-44a4-93cf-5d13b0f6d0d3", "sighting_of_ref": "indicator--c1c647a9-b537-42c0-bcc9-c3da7da7b396", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1045000-dde3-4a52-866a-36fb6b5d45a2", "sighting_of_ref": "indicator--c1c647a9-b537-42c0-bcc9-c3da7da7b396", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f9dcd6-7725-4590-a289-3631fdd2532a", "sighting_of_ref": "indicator--513aa445-8799-4ba8-a317-81f03450112f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7183861-66de-40e2-b82f-b99a18980547", "sighting_of_ref": "indicator--513aa445-8799-4ba8-a317-81f03450112f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3cb779-c54a-4f61-b18b-a66649470aac", "sighting_of_ref": "indicator--513aa445-8799-4ba8-a317-81f03450112f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e894d3b-1c79-49ae-9589-ce91d5a7f7ac", "sighting_of_ref": "indicator--7cc6cf37-7f2f-45d2-abce-234048f590a0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece9a186-e4ca-4856-ba30-ad7a94ed77ea", "sighting_of_ref": "indicator--7cc6cf37-7f2f-45d2-abce-234048f590a0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da5339f-f940-43b5-9398-cecaed21d78d", "sighting_of_ref": "indicator--7cc6cf37-7f2f-45d2-abce-234048f590a0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfafddc-1d23-4e6f-9b63-722b38079ca9", "sighting_of_ref": "indicator--bed42f86-b9a2-4af6-a605-a3a57f023355", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cbe6b1-6afd-4d22-849a-bfc1d14b81d7", "sighting_of_ref": "indicator--bed42f86-b9a2-4af6-a605-a3a57f023355", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feecc756-79d0-4143-84f9-8a5907e615c5", "sighting_of_ref": "indicator--bed42f86-b9a2-4af6-a605-a3a57f023355", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a25223-9794-4057-80d3-6e4888721ddd", "sighting_of_ref": "indicator--ccce0e7a-a790-4f00-b2c2-60ee990e34b0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb471ebd-d218-46fe-805b-09fb8529b047", "sighting_of_ref": "indicator--ccce0e7a-a790-4f00-b2c2-60ee990e34b0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d1ad90-3193-46e4-8c52-e51baf65f5ac", "sighting_of_ref": "indicator--fa78e23c-a255-424a-b3b1-afd430d8ebe3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d942437-9bb5-4b68-ab53-fc49b5f7faca", "sighting_of_ref": "indicator--fa78e23c-a255-424a-b3b1-afd430d8ebe3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870c339e-43c5-4a4f-ab90-cad9c81b558b", "sighting_of_ref": "indicator--24110b95-b062-4e2f-9b1c-3316284403e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602ac3b9-96c1-456a-9c88-da3dfe0acab4", "sighting_of_ref": "indicator--24110b95-b062-4e2f-9b1c-3316284403e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558723b5-34c8-423c-930d-06cf2e9006b6", "sighting_of_ref": "indicator--a0347565-3bfe-4515-9610-cb929b779410", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258249c9-1725-4a33-9569-9203ebfabd55", "sighting_of_ref": "indicator--00649da8-258a-4f82-a48c-90c3b2be15fc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489c15d1-77b1-4545-be60-e090c3bf90e9", "sighting_of_ref": "indicator--3386b851-5e1c-42d6-af69-5caa2254f7c9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70892649-765c-4acd-a868-dad526f1a1c0", "sighting_of_ref": "indicator--2a8120c5-de29-4757-95d4-ce7368a41511", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001d3611-28b6-45e6-99ad-9be995c23234", "sighting_of_ref": "indicator--ebcac80c-9f67-4a92-8166-bc484c4a53b1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ab3a7c-0ca9-4b29-b6d3-935c6e40fe70", "sighting_of_ref": "indicator--34a86a7d-1f39-4a27-ab06-f4ff800f8c85", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d20b05c-a3a9-463f-8200-a72629317fea", "sighting_of_ref": "indicator--ff170d06-8e2b-4ef4-83e8-3bf8d0265013", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83dd2707-757a-4e35-bd87-19332daa8f51", "sighting_of_ref": "indicator--cf5e11b6-fcdf-44ee-b79b-e38a29feed12", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b617895-1cf1-482f-bef8-a097334ec764", "sighting_of_ref": "indicator--79199d37-f4e6-44e1-9127-b343538b489c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b77b6c6-171a-4410-9067-ca30559ffc8c", "sighting_of_ref": "indicator--435b5feb-f4d3-4038-9327-88f510e0a914", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc41d492-c210-4034-a46f-26db9165fb0c", "sighting_of_ref": "indicator--77f2a8e6-9bb1-41a5-90c8-8f4a4b20e0f3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ffaa5f-bc71-4315-a293-bcd1f8c6ccdc", "sighting_of_ref": "indicator--aa8b3017-bc98-4f49-8a7b-f98b3b94e4c0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa0abb4-44bb-4dd3-9df3-623932066120", "sighting_of_ref": "indicator--f5cb4b01-b238-440e-bb9f-27fd0583dd2d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0749667d-043b-4a18-ac55-56447cc89042", "sighting_of_ref": "indicator--555fe364-5c02-4369-b0b8-7bfc490c46ab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc32f03-6b8a-42a7-9874-823749c98acd", "sighting_of_ref": "indicator--59248d33-ec35-48d7-95e6-44921debc7b3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aea39df-a316-4efd-be0c-461402426a88", "sighting_of_ref": "indicator--bd2fcd62-df72-4298-b05a-e332bd411c9b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4d70f2-12ad-4cef-968b-12c5b2df0904", "sighting_of_ref": "indicator--bd2fcd62-df72-4298-b05a-e332bd411c9b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf8c50b-9ed4-485a-b7d8-e5702a861b0d", "sighting_of_ref": "indicator--17f0151c-a1c3-4830-911c-6eb69c15d924", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f6bc15-5666-497c-a81d-4bd35c53d0e4", "sighting_of_ref": "indicator--0dd41eac-5ff5-41a0-9d92-549b1678dc95", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf250eb-306c-4c7a-8a5e-856a7083bb83", "sighting_of_ref": "indicator--4d0db0eb-4c1b-4c0e-8518-9913f1f9c347", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a61743-3db1-461d-b800-f027d9cc0d8c", "sighting_of_ref": "indicator--b1643502-8e71-4198-a989-654ee4c741fc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23028dcd-0631-4740-aeba-693d56063536", "sighting_of_ref": "indicator--65a129ca-4ea5-4dff-b578-67b0154d51fc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d5931d-593d-4fba-8d32-8aac5c40363f", "sighting_of_ref": "indicator--53d26ca4-8cea-4098-94a0-53233990da6b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0526231c-80a3-4aa8-8bf2-1f5f53a86448", "sighting_of_ref": "indicator--cf5197c4-7389-4238-a902-57fc111613f5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8453a7f-2468-4be0-b35d-ad9fe577c9a4", "sighting_of_ref": "indicator--f15a5ba9-5429-4c70-97c8-fdfc8f2aef15", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b86276-a92c-4e20-a5e2-9e9a80646933", "sighting_of_ref": "indicator--728ef960-afa7-46e4-a679-828df1dc88ba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f684b78-e32f-43ea-b88a-1ea16ea75220", "sighting_of_ref": "indicator--6575c736-a3e5-4e65-8c50-8560521e0ffe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e852174-95af-421c-8c4a-d82b09d2d9b0", "sighting_of_ref": "indicator--b388b227-f14b-4db4-b050-c40afdfe6ada", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93986473-05c4-4a95-863f-6200dbecf41c", "sighting_of_ref": "indicator--b77eff33-418b-472f-b2ea-b0b6a30ad9e6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af1d7e8-0a51-44e8-aa69-eb0ba0540f09", "sighting_of_ref": "indicator--116d293f-7403-4e2c-8abc-b36e149552bc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a63e26-0821-43eb-8fc9-b79ca0bf4236", "sighting_of_ref": "indicator--116d293f-7403-4e2c-8abc-b36e149552bc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8e0579-523b-4580-a40d-2f7a05111cd4", "sighting_of_ref": "indicator--b46b3851-7c0f-47d1-ab83-9e094fcae219", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226e5b82-0dac-43af-b3fa-4a54160e63de", "sighting_of_ref": "indicator--b46b3851-7c0f-47d1-ab83-9e094fcae219", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8394d0c-e860-441f-b60d-2f1b842a6aba", "sighting_of_ref": "indicator--b46b3851-7c0f-47d1-ab83-9e094fcae219", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f65e8a-5774-4606-9c2e-bbd1ff7f984d", "sighting_of_ref": "indicator--b46b3851-7c0f-47d1-ab83-9e094fcae219", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954b6711-dd8a-4c6b-818f-96f1cfeb345b", "sighting_of_ref": "indicator--54b9ffd2-86f8-4979-9f86-0951db854154", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea603a67-a776-410a-8c7e-5e2b26d69e8e", "sighting_of_ref": "indicator--54b9ffd2-86f8-4979-9f86-0951db854154", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6183ac10-e45d-40d1-a780-e37304c028aa", "sighting_of_ref": "indicator--54b9ffd2-86f8-4979-9f86-0951db854154", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00bb4e7d-fb67-4dfd-8d43-6ad3430a811e", "sighting_of_ref": "indicator--54b9ffd2-86f8-4979-9f86-0951db854154", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14d7329-57ba-4743-b722-8e8607be8f52", "sighting_of_ref": "indicator--c0912a0e-c66b-4e79-bda3-8fca9b06b98f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70dbd96-7f73-43bf-8887-d33caaba024a", "sighting_of_ref": "indicator--c0912a0e-c66b-4e79-bda3-8fca9b06b98f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b841213-bdc3-4bf0-bb77-6c1462d8076f", "sighting_of_ref": "indicator--51d40ff7-8b5d-4b6c-86c4-403a96b86ab6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecff1c8-0089-4fab-a461-d21b3c31f024", "sighting_of_ref": "indicator--51d40ff7-8b5d-4b6c-86c4-403a96b86ab6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e19448a-e736-4502-b8d1-7e646ceb8037", "sighting_of_ref": "indicator--51d40ff7-8b5d-4b6c-86c4-403a96b86ab6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d108c717-3f4d-418a-9c5c-3ecd1095f630", "sighting_of_ref": "indicator--51d40ff7-8b5d-4b6c-86c4-403a96b86ab6", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92bb02e-1c6b-41b4-8065-84a2c1fd98fd", "sighting_of_ref": "indicator--0a0dfb51-b56e-4773-bfe1-6632a442bff1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0af558e-b3fd-4bc8-8f6c-98d9f03e1268", "sighting_of_ref": "indicator--0a0dfb51-b56e-4773-bfe1-6632a442bff1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbff592-e20d-4f2e-8d31-2adb9fb054c8", "sighting_of_ref": "indicator--0a0dfb51-b56e-4773-bfe1-6632a442bff1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955fa511-0d6b-4c3c-8de5-55a6195c3983", "sighting_of_ref": "indicator--df79ad03-5e0d-4501-b8ca-ca36cb4e7b83", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1014e65-343f-4535-af9d-2456b62d32ae", "sighting_of_ref": "indicator--9737b217-6476-4bea-a41d-dccba8109107", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19b2d71-e45c-4fe5-8c27-95fbe4b31946", "sighting_of_ref": "indicator--391d6f9a-26ea-463f-8bd4-7acc046de3ce", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013707d1-e73e-47f4-be01-2cdda304eead", "sighting_of_ref": "indicator--e77254a3-a7e3-4975-9f38-a0cf4bdda1f9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19179dbf-b866-45b5-b6c7-02ad60bdef06", "sighting_of_ref": "indicator--fc905e6a-6d52-4f1d-bde5-17431bd93876", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c1fc6f-932a-45b8-b02f-01463444b45e", "sighting_of_ref": "indicator--7a73c223-10d8-4399-9084-41e790818b06", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659cf64d-5c7e-47af-834c-80ca5e449a33", "sighting_of_ref": "indicator--7a73c223-10d8-4399-9084-41e790818b06", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278c39f3-59f6-46fd-8054-46e1173374d3", "sighting_of_ref": "indicator--7e3dc1dd-b511-4e78-907a-2e63b1007a4d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04fe647a-bc9b-4fc2-830f-9bf9f49b59d5", "sighting_of_ref": "indicator--7e3dc1dd-b511-4e78-907a-2e63b1007a4d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d201dd-d2f4-45af-b724-0180235e5200", "sighting_of_ref": "indicator--38f2f69d-a031-461e-96f9-5a6c3d94636a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f47e85-8648-439d-b9be-218fd940a5cd", "sighting_of_ref": "indicator--8c4cae9a-d34e-430c-8baf-7d4f31c8d5d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2007546-42a9-42ba-a495-5e75ae40cc54", "sighting_of_ref": "indicator--a9ed6d3d-e789-47d8-abda-1cf0d30c26a4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509b261e-c1d5-4112-983c-e5363427260c", "sighting_of_ref": "indicator--c9b4d01f-6bcf-43d8-9a96-9a97d7d10d23", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ce03c7-d8ab-4d5d-b62c-ce39473a2570", "sighting_of_ref": "indicator--49887c85-6873-427a-8050-b712037a4f0b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063e5cc1-5ae4-4490-bab5-1da81f4600f3", "sighting_of_ref": "indicator--83719c04-c06a-4d9b-a638-29e1bb3fff72", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3229d6dd-ccd2-4e0f-913a-577fe9b8bd0d", "sighting_of_ref": "indicator--93b7d919-caf1-49c4-bf5a-7c08b1b59115", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d33758e-8f51-41ba-b219-192c5db3c370", "sighting_of_ref": "indicator--2521b3f3-efe9-4501-bf6b-900d710b0fc5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcc2c18-3091-4078-9e89-1ee271054086", "sighting_of_ref": "indicator--501c543f-8826-4b62-b1c4-0a3127397ca2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23c3ac8-3319-4343-8f9a-44446c710177", "sighting_of_ref": "indicator--b1ed1a09-f9af-41e5-b183-bef358abea7b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e430acdb-ebca-4044-88cb-b62dd1d33f0b", "sighting_of_ref": "indicator--00f938a2-7140-4cd6-982b-6013b25e0bb5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc096f92-22ce-4175-9990-e9d39f6bd2bf", "sighting_of_ref": "indicator--98bfced9-6fc4-437a-8b9b-5c3726476a9a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb50087-3d45-48a6-b813-a51b5a5ad660", "sighting_of_ref": "indicator--8ac73514-a56a-466e-acb2-a70dad72b880", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d11b221-5cec-48e7-b405-aeda8f6e13ec", "sighting_of_ref": "indicator--8ac73514-a56a-466e-acb2-a70dad72b880", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06196fb7-4390-4309-9ab2-6828ae8e8888", "sighting_of_ref": "indicator--b52c65de-22a9-407c-8bbd-6e3c243a86f6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa107cf-c395-48cb-a6a1-87be2c9269ee", "sighting_of_ref": "indicator--8c7e1ec6-a1ec-4a17-ab72-6d65d9606739", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518ed977-4080-4f3f-85f2-e5bc87502bf3", "sighting_of_ref": "indicator--8c7e1ec6-a1ec-4a17-ab72-6d65d9606739", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea55eab4-ab0c-4470-8f0a-371a80521bc9", "sighting_of_ref": "indicator--0bc64dd1-2835-4a00-bd02-f3ddec5bf1fd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15c63a2-3ff2-4655-9f76-b65428f55f43", "sighting_of_ref": "indicator--81851385-7770-4750-b812-5a15b7ac1b8a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f741972-a725-4e78-b51d-b65554013a85", "sighting_of_ref": "indicator--3dee4de9-b5d6-4e95-9389-dcefe4715779", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ed15b2-b609-48d4-9241-39c9224ae74c", "sighting_of_ref": "indicator--dbaec5ad-13e4-4518-a036-660ff4652ae2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d23c2a7-0c3c-4ede-b000-ec3f08a20677", "sighting_of_ref": "indicator--94c4bb9d-5968-48d3-94f9-bcab4b02ac72", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee556ef9-1dee-43ba-a910-52916077313c", "sighting_of_ref": "indicator--e772aa93-1b97-4ac1-aa3f-8758f855aae6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c982ea6-8f7a-4484-a475-c3ab91da0aa9", "sighting_of_ref": "indicator--e1a60d97-9443-46f0-bc8a-4d9f9570fde1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f507c36-8eb2-4e35-942b-aa89ce624e92", "sighting_of_ref": "indicator--41e59c7c-8a42-4021-94de-3a04fd4d6b87", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc8bc4b-b219-4813-a767-4bab52fc5be6", "sighting_of_ref": "indicator--5d865289-1d1f-496b-bc66-ca88ebf63bf4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829ac0a0-209e-48c3-b8e6-d55cedfe1a5e", "sighting_of_ref": "indicator--613a1004-03aa-41e8-be36-6fbe712397f6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e997378b-352f-4ffb-959f-0d3d896e940d", "sighting_of_ref": "indicator--314b5d64-75e4-4cd2-b59f-d63155372a9d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893a7c12-6c31-4c18-afae-2d479ce7c572", "sighting_of_ref": "indicator--df1a23cd-3ec8-4898-9821-25e4667d384c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db8ccaf-3da2-4b22-8405-43651c703943", "sighting_of_ref": "indicator--f328e6f6-e517-4f39-b8ae-aa7d9888ea20", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944fbaae-baa2-458a-b895-98fa5092202a", "sighting_of_ref": "indicator--51860354-022a-4557-9d29-62ed6df04206", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507d9cc5-ea4c-4f41-8eb6-1f8e00fcfbf1", "sighting_of_ref": "indicator--cd89ea0b-8f5e-442a-9058-443dfd224c87", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b64d778-1d81-4304-8348-8e40ac0fa6f6", "sighting_of_ref": "indicator--dab116f3-bb6f-432d-8827-cbbb5f799100", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea21ada-2b6d-4e14-8ced-654810be7031", "sighting_of_ref": "indicator--e6f427a9-c6ed-46bc-afe4-ce27feb818c4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc141aa5-44af-4dd5-8a32-7af56725ba7b", "sighting_of_ref": "indicator--f6cc5bb6-af9b-40eb-9471-1740ac0cf0d2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005830c7-06df-4c45-be46-69bee55d1be9", "sighting_of_ref": "indicator--9240dffb-e06a-43be-8da5-5c406bf33ca5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd8a3b0-c733-408d-99c9-0b37d14cd852", "sighting_of_ref": "indicator--09450731-b52c-40e4-b195-e5452733a361", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b24f0ab-8fca-4baf-bf1b-4e106e8214bd", "sighting_of_ref": "indicator--30d7af4c-f09f-4e6e-a3ef-0cbbe1820954", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd584097-36a4-4f5d-9815-b4c87106c8df", "sighting_of_ref": "indicator--32e4b25e-7718-4b49-a780-40582d64cbe6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023e3570-a8df-4567-a1c0-c8c38d31e1b7", "sighting_of_ref": "indicator--f263dbd3-f8d7-4808-9c40-de5d53d743ea", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadd3fd7-893c-40ec-b60f-260a4bdc4045", "sighting_of_ref": "indicator--e1c88078-6a10-4685-9295-f10ce9762f0a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf1d0d4-dd9d-415f-aac6-9eab17f006ce", "sighting_of_ref": "indicator--91ca3630-6ff8-40a4-b4d7-66a27b00c9d8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd88d9a-e2b8-4708-99a7-fcc9c4357817", "sighting_of_ref": "indicator--7425d053-d14a-403e-ad28-d7a3ba9c4ea3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a775036a-fbf9-4ef1-925c-3a96b981b7f7", "sighting_of_ref": "indicator--03ce5fd9-9fc5-448c-95cf-d6e3bf41b334", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a369b049-7c5f-49d5-89a1-85a3b40182d1", "sighting_of_ref": "indicator--1470be48-e970-41ee-9400-b714943c95c5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf8cc0e-f72b-4194-acbc-a34f527247fd", "sighting_of_ref": "indicator--1470be48-e970-41ee-9400-b714943c95c5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c220f41-86ee-4c99-b0ad-50e72717f1df", "sighting_of_ref": "indicator--92df88d2-9834-40d5-afe2-b54867106260", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292b6c80-66a3-429a-9a35-22c5729e0276", "sighting_of_ref": "indicator--791d7bee-ff7a-4139-8fb5-595d4ca39f67", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7307db7-60dd-4369-8eba-551fc0070bb1", "sighting_of_ref": "indicator--636ee8d2-972a-4cb7-b34e-c3d7094af62b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a79907-0ab6-4e67-8264-933b869f58fa", "sighting_of_ref": "indicator--5a24ac6f-de5d-443d-b51c-321d9e69ba96", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023a4551-a4ac-405c-97ec-361ba175f3d5", "sighting_of_ref": "indicator--d92ddbbf-e3a9-43b9-b1a7-b311f28bc132", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7944d70b-2daa-4aaf-924c-ee83f818b4f4", "sighting_of_ref": "indicator--1f4081b8-7237-4b1a-9880-34c3a8e7eb49", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52247c62-decd-4ad6-9777-7b8132b2289e", "sighting_of_ref": "indicator--6973aad0-6e19-4f3a-a0bd-ac7f7f6c97e0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5068a72f-adf9-42ae-8c61-fc0d38c4382b", "sighting_of_ref": "indicator--e6218152-a76f-4f13-952c-ef7e5e92670c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7a10db-1fd2-41a5-b293-0f12ad063a10", "sighting_of_ref": "indicator--e6218152-a76f-4f13-952c-ef7e5e92670c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f4d65f-6adb-41b9-8467-e90afe1c635e", "sighting_of_ref": "indicator--4086baf1-bf1b-4ee0-8fc3-497e8ce49ab2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72addc45-ae74-4c9e-8133-a0b28a01127e", "sighting_of_ref": "indicator--7b796dca-52bc-4281-9adf-0982ac46ded3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1ef8e5-ef75-4659-8ff6-d585405b7896", "sighting_of_ref": "indicator--cd86e381-0a31-483d-9b76-7cb9d88fbe04", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2dbf26-2930-4632-a92d-d27c1d5df256", "sighting_of_ref": "indicator--cd86e381-0a31-483d-9b76-7cb9d88fbe04", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3170964e-d548-434b-a69b-669b36c2e3f7", "sighting_of_ref": "indicator--2e851a74-5dee-47db-8c46-5ac572210bff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533c6be3-c643-4ce3-98d9-08b8f52c2580", "sighting_of_ref": "indicator--c25c31d5-8062-4cc6-8fca-8a494d250d2a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0ccd6b-3cd9-4730-b4d0-d25f5ccf3771", "sighting_of_ref": "indicator--8b9dbef5-0616-4633-88dd-9ae7f93d4dcb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752d5124-83e6-473e-8135-9ceadf2baa5e", "sighting_of_ref": "indicator--6c45f08c-62e5-458f-9be7-55f5907b2611", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a2f68f-c3ca-4091-b40b-f203a5fcd5a6", "sighting_of_ref": "indicator--83ae2a1b-f30a-4b2d-b945-8d43acab77d0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89fecfb-9e04-4ece-8e5f-1aab6634e54b", "sighting_of_ref": "indicator--daee1c4b-fa6f-4d58-9cbb-06715443d1e6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e1d939-95d0-4682-b71f-cb717f850c26", "sighting_of_ref": "indicator--76e568b3-a0a4-4c2d-8de5-f27802303d82", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693d85dd-c57f-4227-8830-5f49e80f0c9b", "sighting_of_ref": "indicator--e810d880-1dad-40b7-99ea-7d2dbac9e142", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15818a2-512d-478b-b3ae-9283ad73bb2c", "sighting_of_ref": "indicator--de07af72-c784-4f2f-bc2b-d70dc42d20c5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7fa90c-32b5-4f53-99c0-9f9ca509c71c", "sighting_of_ref": "indicator--6842d58a-3b7b-4c20-9109-6e73e433c0a7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b981bfc0-060d-44a9-aa85-dcd43ab4784b", "sighting_of_ref": "indicator--65c22dd6-749c-4988-8903-ef9e96cf75b7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ddff0c-3fd7-4590-80aa-6634b941f394", "sighting_of_ref": "indicator--65c22dd6-749c-4988-8903-ef9e96cf75b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8009f4-ebc0-453f-8d58-268f36ce6036", "sighting_of_ref": "indicator--5c31b139-3fcb-48cb-a27f-eb102b40e937", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edb1c77-34af-45df-bd71-9589f1389bfe", "sighting_of_ref": "indicator--e5a769ea-b617-4a65-8329-48ba7c44fc9a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7889bcb-84b8-4d19-b39d-468fd4e4fba5", "sighting_of_ref": "indicator--0b997a38-2497-4c56-8127-de34be8b8881", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b941a0-acbe-412b-8348-f850fa9e16dc", "sighting_of_ref": "indicator--6a403e0f-5f61-4112-9dfe-23140ba0b9aa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565e42f9-fdc1-46d1-bdff-fd8c4a431ff8", "sighting_of_ref": "indicator--59e1da5d-98fd-4051-9891-fc7805b07bb1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45349ee4-824c-47de-b17a-c7b407703fc5", "sighting_of_ref": "indicator--d8a847e7-7a6f-4a0a-9e09-8518ce7beb75", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17784713-5d8e-4bec-a606-912d25f1c0e2", "sighting_of_ref": "indicator--d8a847e7-7a6f-4a0a-9e09-8518ce7beb75", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0791955c-29a9-4c00-b212-ed1dc0a19623", "sighting_of_ref": "indicator--b35cff6b-4f85-4782-bda2-d8eb630a099c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7baf9c93-335a-4fdc-9bee-dd4a1f95f592", "sighting_of_ref": "indicator--109093fb-8269-4483-83e9-8b2358ae968a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02690204-3725-48de-bedb-3a6c41854b25", "sighting_of_ref": "indicator--4d7e38fa-6dd6-4cc7-bd05-ba7727acf8c8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ab3f1b-ce64-4491-9493-fc068fc3eff7", "sighting_of_ref": "indicator--bf9638de-51c5-47e4-b711-adcd5f5b3ff3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec572f09-ba69-4e7c-80f4-094a322692de", "sighting_of_ref": "indicator--bf9638de-51c5-47e4-b711-adcd5f5b3ff3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60641dc1-a4b4-415d-aa5b-9b7bd79d82c3", "sighting_of_ref": "indicator--a7182b79-b393-4793-b4e4-e88b421fae1b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c837e4aa-d4ad-4899-87dd-ef10f120fedf", "sighting_of_ref": "indicator--7352b8a6-ab66-4f76-bba6-159287cd2c83", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11788ed-82b1-4d66-b0bd-d1625b34b522", "sighting_of_ref": "indicator--3b3d4763-b103-4679-b0a9-3d9f8441d72e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021cf4ab-b810-4326-bf70-6ffb5998a58f", "sighting_of_ref": "indicator--3879162f-d287-40b7-8f3e-15014688e75b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a62bba-ffe3-4a7c-9370-86493db2c949", "sighting_of_ref": "indicator--7c61ceac-60e1-4f56-81f6-6f33ca4f942f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a554cb2-bea0-4cd6-90e7-0d4054cf10e8", "sighting_of_ref": "indicator--be87cba6-068e-4d87-a724-c0bec8d283cf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893e8b5f-206f-4963-b4d3-1732bd4ce6fe", "sighting_of_ref": "indicator--6e8e24dd-c968-4f56-ba25-f5f81400f8b6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268ffc6b-5e90-406d-9073-0dcc7a2afc08", "sighting_of_ref": "indicator--7eaf816d-a01e-4fb7-8fdc-9e5cf33ac360", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44a068c-3545-40a4-ab89-c91d0b406420", "sighting_of_ref": "indicator--f906a852-dedb-4f93-8b8e-2bc96052bc6f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce740e29-4467-4aa6-8924-85448cec2fd5", "sighting_of_ref": "indicator--e8277d28-bc47-454f-9d6a-35ebd5b1b12d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b940cbec-8289-4619-99f9-15e3f6e7ed9a", "sighting_of_ref": "indicator--fff80303-f450-44fb-9dd8-9d5a8f1d5b4a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6aeea2-f3b0-4f6a-ae48-466c787bea38", "sighting_of_ref": "indicator--14bd66db-7332-41b2-a80b-666307acfee9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb38766-5835-4ce3-9657-e1d3ed50e8f4", "sighting_of_ref": "indicator--bba1e469-0eec-4ece-a75f-1df1e0d5d11c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470f5db6-8363-4a47-bf7e-7c5c3d291920", "sighting_of_ref": "indicator--bba1e469-0eec-4ece-a75f-1df1e0d5d11c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6d8f81-9e88-4602-87d3-bb337ce24914", "sighting_of_ref": "indicator--d98b3a11-1757-42fa-b654-365daa188fd2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b3c1b9-012c-43a2-b561-893e8eec34ef", "sighting_of_ref": "indicator--b34a010c-d4f4-405c-9358-edca8440a241", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19005cef-ecfc-4788-9049-5c29236976bd", "sighting_of_ref": "indicator--bc30a491-8483-46ba-a956-a0330d8faf43", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abfd2e0-9124-4e04-b3dd-8fbab31e7da8", "sighting_of_ref": "indicator--eb17edc8-1bec-4a00-ba56-07ddfa03f81d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1018561-266f-4fee-8ef3-f25f1de30f75", "sighting_of_ref": "indicator--253e02a8-7a48-4fe3-beac-c52548122f0b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2395700d-07e5-41a7-91db-52316c3a580c", "sighting_of_ref": "indicator--46f4dcf8-e2bb-4210-8614-28610fc45cb7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed1696e-c3f2-4d20-a283-efd85d883795", "sighting_of_ref": "indicator--f1c5e22e-7d93-46ad-a271-d6ab9393be4f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fa7418-4a68-4293-98cb-1e13a06026f7", "sighting_of_ref": "indicator--af44b128-44cd-425d-b297-b99fd00fa666", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cc9173-0b50-4909-9fd3-0bc6f2e9aa92", "sighting_of_ref": "indicator--96bfb5c6-6b89-4b11-b7ae-c443981f1b7a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502ffb68-0f00-4c56-9e6e-62d9d11503f2", "sighting_of_ref": "indicator--c9111bfe-cd41-4f5d-b450-86d076667d4f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf625daa-48c2-47b2-9742-2c366660c257", "sighting_of_ref": "indicator--654113b7-6169-461d-8fe1-5cfc2dbca852", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017839a6-1a58-4fac-bc29-06e89df4767e", "sighting_of_ref": "indicator--2eb248a3-1a41-4aad-8767-b92a3e8b4eeb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071e7bb3-9df2-4f39-8fe9-dc535808e103", "sighting_of_ref": "indicator--f614b635-687b-4f8e-96af-a4df9c62b273", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89271740-f614-4758-9ecd-7c3c853f1be3", "sighting_of_ref": "indicator--e7ad9c5f-930c-4673-95cb-bfad5651fcd0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec4593f-4fbe-4d1b-b258-c66a6bb5a44e", "sighting_of_ref": "indicator--e7ad9c5f-930c-4673-95cb-bfad5651fcd0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59dc886d-b7e3-41bd-97e1-c3cb5ded1cd7", "sighting_of_ref": "indicator--3c60bb3c-1ad1-49f6-b32b-03673cefd2d2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd1f488-1099-4864-8d66-c2a0cf1d6b1b", "sighting_of_ref": "indicator--62b78ec4-4e03-4678-9ec5-5856f0d9566d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2a23b3-e3b1-4804-be17-1141d11a4dfd", "sighting_of_ref": "indicator--58e27b06-07e9-4602-84de-958f94009153", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a118491-95da-4e35-980f-e8773a910b12", "sighting_of_ref": "indicator--400b505b-24db-479e-83ae-10607fcffc75", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794d7fb0-1664-4c4b-822f-6eb212a85fb7", "sighting_of_ref": "indicator--097d68e0-5191-4976-972f-66d3fcaa1e15", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08660e32-c835-45be-a194-b41d5750dd74", "sighting_of_ref": "indicator--b0466b4d-2165-427f-80e3-2565a3cc9e7a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4dfe33-09d5-429d-ac3c-a5857e8d41bc", "sighting_of_ref": "indicator--766e229c-c477-4619-9304-2da73609cb30", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dad8226-5980-4f52-af62-b9587bea4c46", "sighting_of_ref": "indicator--324299bc-87bd-4366-900a-5a36b9c2235f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c2e0f1-76c3-4b88-a964-b3f0906f6d8d", "sighting_of_ref": "indicator--1deeaac1-b013-4ac1-a1e4-70f756864181", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2d7fd7-92e4-467d-9241-78f566c2d13b", "sighting_of_ref": "indicator--b9d2c98d-7453-4e0a-8102-a50fabbbb8c1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c1c16d-cf47-4154-904a-fd411a9a39e4", "sighting_of_ref": "indicator--38520eff-aa4e-4931-a1cd-4480d21f22f0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4578f78f-b5af-4785-97e2-f37c1b6635af", "sighting_of_ref": "indicator--909079e2-b71e-4018-9351-5e7e28004022", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8607f7da-4d66-49ce-a550-204b781ff454", "sighting_of_ref": "indicator--3e37014f-9120-413d-8a6e-1f0d470ceca9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c2ba8a-5813-43f1-a4e4-1ac3e72e81c3", "sighting_of_ref": "indicator--016b3495-d95d-49d3-a1bb-9ba49843d988", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed74a17e-4f32-4851-be34-efd785386841", "sighting_of_ref": "indicator--9525b78d-5b98-41f9-8abd-2d307c3ce23f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e01a76-a6b9-442d-b55f-f838c76829b7", "sighting_of_ref": "indicator--0acfe996-9d40-4945-b763-00214868a4b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37cb7e5c-b26d-4967-8243-bb441b82a2fe", "sighting_of_ref": "indicator--b420a533-0bf2-4ae8-b65e-0ed65e44d25a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b477267d-4ab5-441e-ab48-f7c398c0b1f4", "sighting_of_ref": "indicator--83fd782f-8e22-4ccd-917f-531d870c9949", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4e0524-5540-45eb-8f62-d41dda9da33a", "sighting_of_ref": "indicator--36f82fb2-503a-4ab8-b0df-09f92c9741c9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef79322-e78e-452d-860f-ce19cef0b52c", "sighting_of_ref": "indicator--75b0719c-6115-4d70-9085-0e0661c7b001", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05d26b1-7954-4def-b5f1-303c1e174cb8", "sighting_of_ref": "indicator--75b0719c-6115-4d70-9085-0e0661c7b001", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368e829c-cf26-4bba-95b7-80dc848b10b8", "sighting_of_ref": "indicator--784722b8-03c4-4fc7-a8c2-a3b6f544036e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41cb1d47-fc23-420c-b76e-8ade379dc044", "sighting_of_ref": "indicator--29164365-8f75-4a07-b9d2-e32944da9ba5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bc4e4e-b57d-4234-91fd-0ab36c5ecbb3", "sighting_of_ref": "indicator--9a385891-814e-4f90-b067-da406e48261d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1770076d-b826-44a7-9a53-9668833a3fe2", "sighting_of_ref": "indicator--9a385891-814e-4f90-b067-da406e48261d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b75bc6-5f13-4424-aef5-7707624ea20b", "sighting_of_ref": "indicator--dac4939d-b4cb-4970-9875-f416ac837d45", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6db04fc-77ac-4726-894e-102d0a1991d4", "sighting_of_ref": "indicator--b9d47f41-e37b-4571-9f52-a5c2c361cd70", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0891138c-d830-4eef-afd5-a7271b53a9cf", "sighting_of_ref": "indicator--e06f3126-0c7c-4b1c-af65-ae19241e1f4c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dc2530-d33e-4334-a806-b09f33f9fba3", "sighting_of_ref": "indicator--e06f3126-0c7c-4b1c-af65-ae19241e1f4c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8f9b06-9f88-40f0-905c-403ef1d38d7c", "sighting_of_ref": "indicator--c5040362-80c2-4655-9dbe-d438614ef305", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80fcfd35-6f03-487b-9983-9d5cef02520a", "sighting_of_ref": "indicator--98760255-37cb-46e4-b75d-7a98249cf861", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22059e72-0133-4cfe-93c5-1d9e66b8a80e", "sighting_of_ref": "indicator--6ec22fe4-fc89-46bb-b2cd-a632b28fb6e4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a08022-43e7-47bd-9182-2114ce6b183b", "sighting_of_ref": "indicator--7c225602-0dc3-4985-a84c-5657000d1f83", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd892d1-9320-4ce9-bb8e-1995b2f5d82b", "sighting_of_ref": "indicator--be0abb60-359a-44f4-bce9-2829f3b3a8e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749a54c2-62b0-4ddc-a7e9-c4bd7538afdd", "sighting_of_ref": "indicator--fcd308f6-66b8-4bc9-a367-393752553536", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39dab08-ae5d-467d-8f3a-044e8a4b82d4", "sighting_of_ref": "indicator--ac53a736-0a71-4c29-9c5b-1a03b40f0144", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17f4d1e-4e39-4dcf-9082-d8c2de5079b0", "sighting_of_ref": "indicator--227e9d81-672b-4b7d-8e90-90f464dacfc5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853adc9e-a0f6-4004-bd63-e61e5266f23e", "sighting_of_ref": "indicator--0dd4cb72-73fb-42ab-98ef-afceeaa468f6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eebfdfe-01d2-4f9a-9509-d93a2cde3520", "sighting_of_ref": "indicator--b460cf68-5455-411f-abe9-47bc96a673b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224a35f0-fe40-4521-9c42-7990525dd741", "sighting_of_ref": "indicator--c9cac3ff-6a4a-4c31-87da-fc386c92d486", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe13fbd-09a9-474a-b3a3-c25811b2893b", "sighting_of_ref": "indicator--9419f5fb-4c40-4afc-a6fa-4b7299d0589f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3d20a6-e889-4d54-a590-ae80fe9354af", "sighting_of_ref": "indicator--9419f5fb-4c40-4afc-a6fa-4b7299d0589f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ab250c-4995-4ebb-84e9-c510941b1f68", "sighting_of_ref": "indicator--9201e28e-d3ce-4862-9e16-ee69a5e1a73b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097fa20d-5447-4524-91fc-fd0204984b33", "sighting_of_ref": "indicator--7487cf75-333a-4694-8934-d70a9d78872d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27a4d76-619d-4fda-ad3b-0441a012e25f", "sighting_of_ref": "indicator--9bae8468-0bfa-43ea-bc6e-d8e9dc94da9d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71e6cb9-a507-492a-9aa5-f8a2d4d8faac", "sighting_of_ref": "indicator--33f219a3-548c-4dde-a9fe-8d9bccbb19e4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f5d42e-abdf-41a8-9086-fa9b8d4b8b13", "sighting_of_ref": "indicator--06955bcf-22c0-4841-bf62-3e1b2e5c6d12", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35dcba41-7f25-4407-928c-9435a209a469", "sighting_of_ref": "indicator--eddae511-458c-4750-ac59-fef8a6dd6157", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a9fd6c-bd32-43b7-964d-43b247c0eb77", "sighting_of_ref": "indicator--eddae511-458c-4750-ac59-fef8a6dd6157", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70103af1-7a78-41cf-bab1-fc8ebaff92a0", "sighting_of_ref": "indicator--016cdf27-fe39-4203-bcc2-7e32ae45d71b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7c5dbd-e535-449c-a7c0-ffdcae72e280", "sighting_of_ref": "indicator--9549570a-289e-4b8a-b19c-6806b9ebe5b9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65d1ae1-7640-4288-8235-cf7402c00537", "sighting_of_ref": "indicator--9549570a-289e-4b8a-b19c-6806b9ebe5b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36229050-96cc-40d1-b67e-68b4e4b5ab63", "sighting_of_ref": "indicator--9d6456fe-62e3-4724-a82f-c7247aaad3ca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2442e1-868c-421f-ac94-d69f4374f0a1", "sighting_of_ref": "indicator--16698542-5b19-4c28-85b4-763f89332f39", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61095a55-8c8c-4622-8046-85eb47c41dfc", "sighting_of_ref": "indicator--16698542-5b19-4c28-85b4-763f89332f39", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fce7023-f104-4eeb-840e-b5edb1f2c894", "sighting_of_ref": "indicator--b763d057-a275-486f-b5d0-30fd50f8c7c5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0558114c-5fb3-48e8-8a73-f3ca192b8c00", "sighting_of_ref": "indicator--b763d057-a275-486f-b5d0-30fd50f8c7c5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e3589b-2928-4d84-a67c-47fc54cab88b", "sighting_of_ref": "indicator--63609883-c4ca-475c-b1c8-97fdf49bec72", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842eac83-717b-43b3-9196-93e59f72eecf", "sighting_of_ref": "indicator--63609883-c4ca-475c-b1c8-97fdf49bec72", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbf8784-bee7-44f6-a143-b1625d8a24a7", "sighting_of_ref": "indicator--1c06461f-4b4f-4aaf-a382-8182310f6393", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b7e02e-765d-44ef-a415-d6c54ceaf222", "sighting_of_ref": "indicator--1c06461f-4b4f-4aaf-a382-8182310f6393", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354e7656-5247-40ce-b7e1-aa7f2df2db45", "sighting_of_ref": "indicator--69376d70-74e8-47e6-b4e6-478036ea0a31", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed77fbc-58b7-45dd-8800-f41d7fec1d15", "sighting_of_ref": "indicator--61eac961-242d-4756-8e57-a0d4e5972ad7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16032390-976c-4538-a2f0-37a6c115ad8a", "sighting_of_ref": "indicator--53a3df75-6807-4aca-b33c-a23090ad1aba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca0e257-7913-4b11-a6d2-8f7a46ac5641", "sighting_of_ref": "indicator--82c6a13e-a554-44d8-ab3d-5c91321d4c05", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32efca03-523f-4c54-806e-463575ef5658", "sighting_of_ref": "indicator--261e72a9-0c61-4d0c-b427-17ca33818b82", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61129db1-25ad-4415-83eb-191fd6cd9574", "sighting_of_ref": "indicator--7ff6e48a-c6ee-4fc7-9c79-747a3ac3cf84", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7be263-439e-44de-8c17-b184f16034d9", "sighting_of_ref": "indicator--89f41efd-a4f9-457b-8b62-0a8ffa1bf696", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9425f33-05fe-4a57-9343-443df9db690e", "sighting_of_ref": "indicator--2cf30db8-ef80-4b7c-8ec8-1f6b5c0c24b6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0952339-16d3-4d39-a488-14a1852ef81f", "sighting_of_ref": "indicator--1c099b3a-4f37-43c3-8100-dd493472875a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45528805-a4d6-4420-9aba-d16563becb3f", "sighting_of_ref": "indicator--982395c1-bb8d-411a-8b26-9e77e1f36fc5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2debb63-abb5-4fdf-87e1-c93056b9493a", "sighting_of_ref": "indicator--ce4ba5b1-77e1-4fae-b111-aeadf8aca844", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6496bc1e-efb0-4126-b6ec-eba8401ac804", "sighting_of_ref": "indicator--344ad339-1e55-4171-bf83-2ae7e3f4934e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553a069f-a993-4fbe-a4ca-fde785966234", "sighting_of_ref": "indicator--496c0550-8014-4195-875d-b37a872544d8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4935bf8-a307-4662-b1d8-02117339d555", "sighting_of_ref": "indicator--977f7658-4f19-4f2c-833a-5918a32544a6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005f4b11-d5f6-41f2-8c8b-97a2f0fb8e6d", "sighting_of_ref": "indicator--977f7658-4f19-4f2c-833a-5918a32544a6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d392d44b-8c6b-482a-898a-de8e586c6857", "sighting_of_ref": "indicator--e61ee588-3e8d-4460-a14f-0e422e44a80a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495024d8-72fa-4cd2-954b-ce19e63b5302", "sighting_of_ref": "indicator--b5c6bb40-4af3-437a-aa50-bc5279eea610", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29592b79-8bd1-4bf8-91bc-e0bab374c277", "sighting_of_ref": "indicator--e61fc42f-0309-49a1-bde5-563f2785d92e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c56f51-6fb1-4410-9983-95bb53a58432", "sighting_of_ref": "indicator--270a5f5f-3624-4f1c-9d7d-4259f6400f99", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3584f34e-af6c-443c-ad42-707bf1debedf", "sighting_of_ref": "indicator--8a335fa3-eeeb-4f39-acd8-dc37a29d890b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2190c13b-18c3-4cd4-a7b1-eed5789fc0f7", "sighting_of_ref": "indicator--16d91d54-3a18-45c5-80c1-7d3e191ae7dc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408e19be-218f-4e47-b054-9c05ad2ec40a", "sighting_of_ref": "indicator--2b20797f-9d8a-4985-9e3d-87ad238be578", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51482261-576c-42e0-9745-51bda8e286ff", "sighting_of_ref": "indicator--3e6ca3cc-0bf8-487e-97f7-96b48b9a4af1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f976e170-6c02-4fed-824a-cff9e087f632", "sighting_of_ref": "indicator--f6e80ff5-bc1a-444f-b686-950ada405d99", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb87c0f8-678d-44bf-b5aa-74ff50fde1bb", "sighting_of_ref": "indicator--3727b1db-799a-4c12-8a2f-875ddbd78cca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d23a0d-1c1a-4292-983a-2a5c6ccd3079", "sighting_of_ref": "indicator--78fada88-9150-4fe2-ab59-5cdde97622d2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121ce938-417b-4322-aec2-52d4655503a4", "sighting_of_ref": "indicator--892eb46f-3c71-44a9-b04a-b247cb10f9a8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23f4c93-f3de-4bfb-9955-b6ea44021111", "sighting_of_ref": "indicator--0bcaf47d-e55c-4b2e-952f-57ff75b95df5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef8a090-c27c-45e9-a0a1-e077fedc0a80", "sighting_of_ref": "indicator--66aa9e7b-1b55-43f5-815a-3948f466f903", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e18ee0a-d71f-41de-ac88-3d1d2048ddf1", "sighting_of_ref": "indicator--21f19c1e-aed0-43d3-9ead-a910a80d4407", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07cf247-daa7-4d4b-87b9-7770f69c6f72", "sighting_of_ref": "indicator--184d7eac-88e7-412e-ba2e-6028ff548aed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f677c552-ceb4-46cc-a757-bbc5a3f8cdcb", "sighting_of_ref": "indicator--184d7eac-88e7-412e-ba2e-6028ff548aed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6a0f98-b47f-4b68-9c21-2ef06d3846e3", "sighting_of_ref": "indicator--25669ae9-89fc-4b83-a064-26df26ce9260", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee53cd94-b65c-4360-a9ee-541e113b3117", "sighting_of_ref": "indicator--3ba51e8a-4c93-4f65-b800-64aba848bc72", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b85c94-876f-43ca-9464-14ea04ef34de", "sighting_of_ref": "indicator--18f37b48-224d-4252-af58-925b36d02fa9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6826dd6a-ac68-4107-87b1-44a81603379f", "sighting_of_ref": "indicator--52a061ac-bf98-4746-accd-e92829e605c9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5973b1-58e9-4a61-999a-d0c971b8ff80", "sighting_of_ref": "indicator--a4410c17-bb9f-4cf1-a4f5-726fdabe2b5f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac9e5d6-25a7-4814-8e09-234ad554f57d", "sighting_of_ref": "indicator--3aa06bce-d32c-4b5b-97dc-d19e4c95d539", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f085005c-841b-47a5-b4cd-3493f142f561", "sighting_of_ref": "indicator--36a6a0b0-aed8-4f35-95b6-3e8f5b6e3741", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3f539c-c5ed-4c56-b7d4-b4452eef8fbe", "sighting_of_ref": "indicator--b86fe0d1-bb00-46d3-8036-7f104bbd39f4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47804a5f-dd4b-4927-b5db-225d36d4fa4d", "sighting_of_ref": "indicator--b86fe0d1-bb00-46d3-8036-7f104bbd39f4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce59d3d7-4ced-4895-814f-5c8dedaa3f02", "sighting_of_ref": "indicator--5bffafba-e930-449c-bc58-c73b2b464674", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2410cb0-0056-4f29-af32-e26d8eb10e51", "sighting_of_ref": "indicator--e7f493f2-48e9-483a-a767-b0024d2494f2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1717b78-03cb-4f89-aa38-1036d229ae5e", "sighting_of_ref": "indicator--65236d0f-143f-46e0-b56e-92d55cb117e4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f23236-1ecf-44f2-a0e8-e9bcdb566d1a", "sighting_of_ref": "indicator--bab850c8-f51e-4986-9dec-f9b8db5b2f32", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ef6fb4-f303-49ab-a9a7-9f3a022372a0", "sighting_of_ref": "indicator--5130e9fe-5770-4981-a641-60c9d0ca2813", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1cce67-f4f6-4d9c-8532-4ee9f1e04a89", "sighting_of_ref": "indicator--e91f1775-d2f1-4533-a1a0-b706c2b4b933", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5c3b5a-92b9-450f-ab38-664f19a03e4c", "sighting_of_ref": "indicator--e91f1775-d2f1-4533-a1a0-b706c2b4b933", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8172563-5886-445d-8d83-13dade8e8b5d", "sighting_of_ref": "indicator--c1635500-adbf-4cc5-ae17-aa395271d511", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d67e763-353e-44cd-9f7f-295220db2110", "sighting_of_ref": "indicator--e12f20e3-f421-497d-ba9d-ec6e4269a05a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e0dadc-f569-4e40-8069-e4fa9fcc6dd1", "sighting_of_ref": "indicator--e53dce08-9065-4c58-8a8a-098fdc3cb756", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3227bc-36c8-417c-979b-3120bddd66d6", "sighting_of_ref": "indicator--b277ff98-5281-426e-862f-651c0526d5a4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e4be77-d773-432e-aa9a-e04199ead3c7", "sighting_of_ref": "indicator--0bbe39e2-efc0-455d-bb0a-0eda1fcee981", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7465452c-acf9-4357-ac84-3bb5dadf40c9", "sighting_of_ref": "indicator--0bbe39e2-efc0-455d-bb0a-0eda1fcee981", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32851533-2a75-4ab0-ab00-62fc53c639c1", "sighting_of_ref": "indicator--e9ff1c22-ae43-4bd7-83f1-a9b577df8ed6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d62cbe-2d2f-4ca2-9200-0fc96e545ded", "sighting_of_ref": "indicator--1beab517-1e3d-45f5-94cb-78e4e7ff6a87", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4051514c-cdb8-41e5-8896-9202d57999a5", "sighting_of_ref": "indicator--7046e6c9-5852-4ff5-bf47-bb467b644619", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd4f38f-b149-4555-94de-e935c46de229", "sighting_of_ref": "indicator--627dfc34-1c18-454d-91ad-49dcf4b5cbf0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648b3999-6c96-4bc0-a929-d5dd244869ae", "sighting_of_ref": "indicator--05a9f588-78e1-430b-bbc2-836f2ac3ce65", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1480848-b73d-4741-bcb3-35326157fe36", "sighting_of_ref": "indicator--6d9adb83-9ebf-44d0-807c-98edb7f2f15a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860a327d-fe6b-4294-a2a8-afdf92923d73", "sighting_of_ref": "indicator--b2a66355-f5bb-4af7-b067-9ffce598ef1e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6c9586-89dd-4cde-a928-127f5e5dc61f", "sighting_of_ref": "indicator--b5c0b964-0227-4c67-9edc-c2624b984615", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace50305-0028-40e9-9b5a-a92a401bb847", "sighting_of_ref": "indicator--3c412c8b-2c01-4e02-bc3a-b00937116759", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3259c2f5-05a1-4651-a90a-55898919d4ea", "sighting_of_ref": "indicator--6d9da05e-9350-45e8-8852-9cd802b8ef44", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba78a9e7-fba7-45a1-bceb-40de886aea97", "sighting_of_ref": "indicator--0200d91e-9838-4adc-bb32-92d198fefde6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0dfec0-ceab-4fc2-99ee-570f8e22c624", "sighting_of_ref": "indicator--2477b19f-100f-43b8-946f-f281f4177009", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c36a27-bbff-433a-a40f-65738e5c6615", "sighting_of_ref": "indicator--2477b19f-100f-43b8-946f-f281f4177009", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc1780d-7510-486d-9617-450020c30c08", "sighting_of_ref": "indicator--af9f9e8b-9c47-4a03-b674-cb44566c96ec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893aaffd-3637-4751-8377-7a411017ed30", "sighting_of_ref": "indicator--0fdc4a0e-c884-41f5-b142-faddc7f59baa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4941b1-5d14-47b7-ac04-e3f09be8e00b", "sighting_of_ref": "indicator--2978b30b-fc2c-4222-8361-24e2b28db395", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2145b16-b3ea-4135-850f-8aef59646302", "sighting_of_ref": "indicator--9c272c5c-6322-4044-b76a-d91af6ebbaeb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffdb637-ed32-40af-9da9-78db9edac7cb", "sighting_of_ref": "indicator--99b1cc88-b090-4dea-85ae-7d496707c569", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fa9252-1e58-4d1a-ba05-1b6b5227ef36", "sighting_of_ref": "indicator--a2463960-9b3e-4b3d-b0a7-2b58bf403f11", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d33e0e7-97e4-4f2c-8234-a0777b211387", "sighting_of_ref": "indicator--22a93b40-9503-4e04-a079-5f1a0d4b8053", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b61c95-7845-443f-82fd-38b552b329be", "sighting_of_ref": "indicator--22a93b40-9503-4e04-a079-5f1a0d4b8053", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b1d264-91a1-475d-a1b7-6b9c813acecc", "sighting_of_ref": "indicator--f631c66c-0383-435f-9386-0f331ecff096", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f9b72c-0e70-4925-87ff-4c8e97b12806", "sighting_of_ref": "indicator--e17ef630-49b2-4ced-b135-c5d3f57dd3a1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ee8adb-737a-4318-b751-0b4adc6e98d3", "sighting_of_ref": "indicator--e17ef630-49b2-4ced-b135-c5d3f57dd3a1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ac84fd-8322-402d-9e52-b05e58a7fe72", "sighting_of_ref": "indicator--16af3608-3893-4f97-9980-43bb83cd0517", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae10a64d-d326-499b-8d1c-91e09784c1f1", "sighting_of_ref": "indicator--8db48b1b-899c-40cd-8b75-e6f71a50c07e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfa67d8-bfae-4fa6-a2ae-b67f8b873266", "sighting_of_ref": "indicator--78359d38-7cee-4a6a-813d-b3b5e5909d96", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ef996d-5aa3-4c94-9cf2-41b9a6e91893", "sighting_of_ref": "indicator--103bcdc7-7acf-4048-8c0d-938fc246ea90", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2177b53-5a5a-4103-aa4d-fa7285ae676e", "sighting_of_ref": "indicator--a7642fb1-90a1-4d8a-bf3e-a4e8a0078a76", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebc7ef7-8f97-4644-8b06-e861e018991a", "sighting_of_ref": "indicator--4359bd7f-682c-4089-b024-4242a11096ef", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956bf37b-cdb3-4d7a-bc02-a080306e80f0", "sighting_of_ref": "indicator--b7ca4923-625d-491c-9df6-5a78e8a0356b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fca032f-bc9c-4032-b8c0-f3f91860c67b", "sighting_of_ref": "indicator--b000dc46-ba69-4650-bb03-9c0fb633a1b0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377caf78-c864-4af7-9768-0bd7311b83ef", "sighting_of_ref": "indicator--2a087ebd-2ad9-41de-aebb-1a1258b39aa5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3cfa18-431e-4058-ab43-eff38aa359d6", "sighting_of_ref": "indicator--ce7619c2-2b2e-4367-ad22-c1c7ec5b190a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f4c4a8-5100-48d1-bfdf-b17b10d6f2c4", "sighting_of_ref": "indicator--78a82cab-4ef7-42df-9b0d-805a090acfc5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949d6d47-60c9-48df-bd08-68bf1be6147f", "sighting_of_ref": "indicator--420097d0-ac41-4468-b188-91e0d6998208", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bd9579-c996-4941-9ac0-c5fb448aba39", "sighting_of_ref": "indicator--4ed47dc6-f781-4893-9809-8e76044eeca8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04d6be6-55d9-41e2-8d10-5bb2e9fa665a", "sighting_of_ref": "indicator--1bf87508-f115-4a82-8920-d7bdea97d338", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c80d757-ec2d-47bf-acfb-c66206f3a05e", "sighting_of_ref": "indicator--01ba3e26-2edc-4f09-9066-31a7a99c36b6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb90fe6-d1f1-46d5-be5d-648f0247dc6d", "sighting_of_ref": "indicator--acabc3ff-61a3-4fac-9152-30b13e84bbc7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1589e415-b0ff-4e8c-b3c7-e817790080b2", "sighting_of_ref": "indicator--8b5d94f9-47b5-4051-b5bc-ad4cc30928e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad60f022-6cc5-4031-bb3b-45ac2be8978e", "sighting_of_ref": "indicator--8b5d94f9-47b5-4051-b5bc-ad4cc30928e0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d6dc19-b5f7-4ea3-99ff-9bd32e999148", "sighting_of_ref": "indicator--accbad40-9b84-4f74-80ef-9ac14203c652", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e964f0f5-30b1-431d-89fb-1719550e89e1", "sighting_of_ref": "indicator--301d36e5-0aa4-4c22-96dd-50e23b6b6ea9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be83bed-f03f-4b67-b91d-bf305c8fceaf", "sighting_of_ref": "indicator--1dab9c42-4d03-497b-904d-60359b6bfc45", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217560fa-d556-43b0-957b-3fa32fd49fe0", "sighting_of_ref": "indicator--54e3f65f-4f9a-4dd8-821b-2b0c4d648cce", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb7a93e-9cf4-4515-b721-1f334c1d6694", "sighting_of_ref": "indicator--a9e0d1a4-0351-4bf9-86d6-66c23dcf6b1d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f10e5f-6dec-4763-b226-7533e9a9b4c2", "sighting_of_ref": "indicator--b639b34c-4249-4d8c-bf1e-3443bcce3f8e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6365aed1-87a1-48a7-9ccf-57dab7bfe474", "sighting_of_ref": "indicator--60f2a8d0-7471-4381-93d8-55fc33515d2f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0af5f7a-69b6-4a1f-8d84-b4455626b3b4", "sighting_of_ref": "indicator--35e70f7d-c98e-4350-b226-899f1e478435", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bd3922-6147-45e4-b817-ec0f848fe136", "sighting_of_ref": "indicator--9b6e2cac-aed0-419a-97a2-052612f6f3af", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bd600c-50ae-4497-bf7c-98b649068265", "sighting_of_ref": "indicator--95609879-61d8-4515-8cd6-868523b78284", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58c67cc-2a27-4b44-8b65-59cc888bd7be", "sighting_of_ref": "indicator--aab1de49-abe7-4c0f-a077-b12518fd6078", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00585d5-2a20-4c5d-8a8d-de2da40c408c", "sighting_of_ref": "indicator--e9dede83-29d4-4de4-91a1-791c0e1fbbca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de77d8c-4f31-46b1-87cc-2f8522dc33fb", "sighting_of_ref": "indicator--e9dede83-29d4-4de4-91a1-791c0e1fbbca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e67d53-398b-4d39-ad62-3f9c383176cd", "sighting_of_ref": "indicator--f16307d4-a9b5-4189-830b-f46c75165835", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f60339-c5ed-4f77-80e8-ae3468b714bc", "sighting_of_ref": "indicator--3d28449e-9268-401c-b878-0a5cdc89f19a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75de3c61-fd43-4dcc-88f1-692634928336", "sighting_of_ref": "indicator--733bc3b0-6fe2-4ccd-8c43-62e6be87c927", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb5e154-fb3f-448d-b197-9dcf58563aa0", "sighting_of_ref": "indicator--0b5777a5-5061-433e-8624-51e5c9ffc187", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a351f082-4894-4dd1-905a-d0ec81d5d847", "sighting_of_ref": "indicator--0b5777a5-5061-433e-8624-51e5c9ffc187", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528b3f01-2bcd-4010-af46-4db885326ae4", "sighting_of_ref": "indicator--fbfa8fb4-087c-48ab-949a-109f5ac16df6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e98640a-0c35-4bbb-b005-936e7f536708", "sighting_of_ref": "indicator--e2f4b95b-b518-4c09-ab34-844601a18969", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9d57a1-7e18-4cd2-afa4-740a0c319ada", "sighting_of_ref": "indicator--af8969b8-f0ac-44b5-a00a-b357cc604fee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae77ad5d-2a47-41c5-a63f-b02bf09ff52b", "sighting_of_ref": "indicator--3e2bba66-9dbe-4fec-8b84-5355d1d9353a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025b27b6-7978-42c2-bcb2-3577e2bb8763", "sighting_of_ref": "indicator--3e2bba66-9dbe-4fec-8b84-5355d1d9353a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e94ae74-e62b-4b18-8f5f-bc536b3ab7bc", "sighting_of_ref": "indicator--259f1e9a-fcb5-458b-b1b0-daf4afb203ba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cc33bb-e546-441b-ac1f-bdee3b5fc37d", "sighting_of_ref": "indicator--12eda723-46b8-4025-85dc-ec999b04a4c0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d7f717-c916-43a0-b22a-a9008897af18", "sighting_of_ref": "indicator--f0d74821-e7b4-408c-853f-c2e1e30896a2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38453073-f094-4ecf-a066-dd07bdeaecc8", "sighting_of_ref": "indicator--46fc0a5f-8a4d-4f19-9a13-2c4e5ad5a138", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4784c74d-33e9-4ceb-bd01-e39799ad0e91", "sighting_of_ref": "indicator--46fc0a5f-8a4d-4f19-9a13-2c4e5ad5a138", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbeb2948-dcfc-4863-9468-d389f0d9aecd", "sighting_of_ref": "indicator--8622c7d2-5c7e-4f51-8d52-fe7bc26067f2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a004ec9-7e1b-474d-b8fd-90fccd8e2a99", "sighting_of_ref": "indicator--16292377-67ee-4ef2-a485-09911c82c325", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6dfaee-62be-48d7-8d23-acef8895b814", "sighting_of_ref": "indicator--49e81e72-dd7f-47aa-84d3-f1c87c82e349", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63bf5ab-b983-4fcb-b2e1-555b6d451ff6", "sighting_of_ref": "indicator--49e81e72-dd7f-47aa-84d3-f1c87c82e349", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c995daa-b8a6-462a-ad8e-b1667c826093", "sighting_of_ref": "indicator--201ae476-d57e-43f9-b7d3-ffe95f56a512", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a89f9cc-56ba-404b-8f7a-e8e0ffeb3f6a", "sighting_of_ref": "indicator--fa5152a7-2ece-4de7-b7a7-ebb3479fa1fe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f671f7a1-def3-4014-932b-8f69f31b2873", "sighting_of_ref": "indicator--fa5152a7-2ece-4de7-b7a7-ebb3479fa1fe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3127cfe3-3187-47df-b8f4-d8da12620d4b", "sighting_of_ref": "indicator--5b552efe-84c0-48bc-97f3-823d9677bb1b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8481275f-4911-4ae8-aff4-1e51daa81615", "sighting_of_ref": "indicator--490c787d-6bc1-4952-9770-fd2ae29a46b4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20c6156-4df4-48f5-9687-ff3578cad235", "sighting_of_ref": "indicator--ec3bea81-86b2-4b98-acbf-70ea76a7db89", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5df08b-c445-4e95-a6e1-c228518ae46d", "sighting_of_ref": "indicator--b918799c-9d5d-41c4-8144-b241bca6cc38", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40f3dd8-3ac2-4b40-8883-dfd4b5ca59a7", "sighting_of_ref": "indicator--91d6741f-f38e-4c3f-b39b-6c7eb52ec9bf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11ccced-c94a-471e-acf2-2f5e225a71ef", "sighting_of_ref": "indicator--c3842cf6-26b4-4c1f-8831-ee12158802bc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d4683e-e608-4f2d-90d8-be6e12787508", "sighting_of_ref": "indicator--5ea1c92a-7d3d-4d7a-95ad-447b68af8b66", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb9d463-5e2f-4ed3-a82a-fca85a348bbf", "sighting_of_ref": "indicator--9e29ecce-9c9f-4c81-b536-e5af58fb7a76", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d6919c-cafa-497c-b1a7-1629da51bbea", "sighting_of_ref": "indicator--a130cda8-9545-480a-8e8d-56b386425d56", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405fd5d4-c7a9-4d0b-b013-830a19035851", "sighting_of_ref": "indicator--a130cda8-9545-480a-8e8d-56b386425d56", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e8b021-6830-44dd-a422-dcd8843b113f", "sighting_of_ref": "indicator--9e4c9117-fa0c-4745-8245-7dc0abac455d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e5d014-d659-4f81-8d54-cd7759d3174a", "sighting_of_ref": "indicator--f9566e7c-32ad-48f4-b9c3-60959dd0fc80", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4861410b-a442-4329-b976-bb6ecafb57f7", "sighting_of_ref": "indicator--e6f8c588-f44e-4c13-990a-2512bd5a93f7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a26317c-3769-4a93-a16a-3968fc22ca5a", "sighting_of_ref": "indicator--be484230-51fa-43a5-89ba-171ae585ff3b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e51be60-971b-4050-b539-b65c299ad079", "sighting_of_ref": "indicator--265c3693-890e-4572-adae-bca26e01457c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00eae992-096a-4a28-b7c6-94871587fd4c", "sighting_of_ref": "indicator--d7054ac6-5832-4656-ac1a-e1e476562c84", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc58b38-2a23-4cf6-9867-a53d34e5a377", "sighting_of_ref": "indicator--c322d86f-0697-4708-8e22-a86ee9844744", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6ac69b-00e5-46df-a188-5a0c88cde871", "sighting_of_ref": "indicator--f2ccc8ec-df20-4a5a-8cf0-7dec6f622a35", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efccf635-d365-4d27-b1c4-37960141ed8d", "sighting_of_ref": "indicator--4ed9a80c-1413-4476-be81-394c710e20a4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2768df9-b83d-4e35-b16c-5f45115216f4", "sighting_of_ref": "indicator--570a8726-2217-48b4-bbdb-8ddbfff1aeab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6ecadb-0b76-47be-8779-37e583071353", "sighting_of_ref": "indicator--c9a30d0c-8fba-469b-9401-fc704539a0a2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1c4af9-3706-4cb0-a998-835c4e6b5044", "sighting_of_ref": "indicator--797959d0-1110-4175-bbf9-181bf04ffb66", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc81e09f-f087-4580-b9db-ccf448cd9e27", "sighting_of_ref": "indicator--797959d0-1110-4175-bbf9-181bf04ffb66", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a48d04b-0cb4-4fad-8356-53dc3679064e", "sighting_of_ref": "indicator--00807e73-b6ce-4561-b0dc-6ae34b9892ee", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dfc8305-0ee2-4641-bb41-864ea87bcfad", "sighting_of_ref": "indicator--6a1b04ec-237a-46e1-9cf0-cb1964542ba0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c830db-3ca6-491e-b259-e1bb1fbd14dd", "sighting_of_ref": "indicator--fe82b4d4-e97d-4f93-9b1a-d82593cbbf15", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32daa645-bdcd-4833-8641-500855b04adb", "sighting_of_ref": "indicator--043b7ab0-47dd-4214-9f79-a1b179f82991", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23d4ae4-1273-45ed-9e91-a0e8b932cbfe", "sighting_of_ref": "indicator--8ceb4472-8f33-4cfe-9a18-588e193f6b07", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb720ad-0c1b-4bb6-8c00-b07e8991e3ef", "sighting_of_ref": "indicator--0bea6218-585c-4347-806a-0e31b4d29fed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2100b20f-e87a-45dc-83bb-819f7ae4afd4", "sighting_of_ref": "indicator--2ff4763a-3571-4aed-9397-79554c8c7e66", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e3529f-92fe-44d8-ab38-d1c27768f6d8", "sighting_of_ref": "indicator--4491ae86-50b1-40e6-801f-0c22f539869f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd50c7b-4240-4bbc-9c79-b4db4ede5ef5", "sighting_of_ref": "indicator--4bd045f1-2a4b-4233-b191-8fa84f5fdc48", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c08b862-4e5d-43d2-892a-59fa47fc95c1", "sighting_of_ref": "indicator--388f589c-f460-40a5-9f6c-0210891cd3e1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c2dff7-6e5e-4988-ba47-53921c33ed94", "sighting_of_ref": "indicator--655148ca-4d2c-4cf2-acb9-30e242220b87", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b9979b-2f1a-4fd4-b401-0f9ac4da0170", "sighting_of_ref": "indicator--655148ca-4d2c-4cf2-acb9-30e242220b87", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658dee5f-5e65-493d-9ed9-98cfe0ed40cd", "sighting_of_ref": "indicator--3747f85b-f10b-4c46-8334-1f756c057c38", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d16314-bd54-4550-a7cd-633bfdadc1b6", "sighting_of_ref": "indicator--a4e3d726-f216-4c25-95eb-63f6dddc6e54", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1831a10a-3e98-4f91-8c12-8c791a382ce8", "sighting_of_ref": "indicator--d281d574-462e-47ef-a9ca-fd5ac7d1d34e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61823d9-755a-4a12-938b-71f5e4ed5d52", "sighting_of_ref": "indicator--47f2b7a7-0005-4317-85c0-f6079fca1aaf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b61992-b381-4ba5-9ff8-bba68610c4e3", "sighting_of_ref": "indicator--b97e7331-0a6b-42f2-903a-892691177283", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e490742f-7a81-4969-a7e0-72426e7e365c", "sighting_of_ref": "indicator--20e1efcf-3791-45a7-bad9-ae939275ea93", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4abd084-e668-4951-851e-984e48174a6e", "sighting_of_ref": "indicator--6e663a1d-febf-43e6-a279-fab9e21cd144", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0fa4f78-1448-43c0-b910-4508df44e60c", "sighting_of_ref": "indicator--b98607c9-5ca4-4550-b537-715efc9fa7a6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3be3d2e-b1dd-4a18-9acb-0c63efb3a051", "sighting_of_ref": "indicator--27c5595b-dbfa-4274-b8b3-092077d3db6f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89471cc0-ba17-46e7-a89a-118925d411e9", "sighting_of_ref": "indicator--e449800e-d65c-4852-8b4c-799d01a15e33", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f49fa9-3f65-4cb2-979e-be3e408d3a4f", "sighting_of_ref": "indicator--040e23cc-e085-4a17-9416-ca9bb3655505", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b7e341-8957-49e6-afe2-845c52c050b5", "sighting_of_ref": "indicator--d6cb5f41-4209-4517-9420-181e9597c64c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7d47d4-77b5-42b9-84b7-55d1d368c200", "sighting_of_ref": "indicator--9587a7ef-7f97-46bc-8007-ca2da8754b2b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3d0fd3-a666-48f8-ab36-13bf367e4c05", "sighting_of_ref": "indicator--8b1a3401-4c97-4e26-8898-3acf03bca255", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3be0f73-da26-46a7-ab84-cc9cbec8ffa7", "sighting_of_ref": "indicator--1ea6375f-67f4-44a0-b874-f1b6e81c8aa1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e6cd9a-5dee-47d6-8d60-da657c78a8db", "sighting_of_ref": "indicator--2e2215de-2bd9-4dc2-a483-4e1c48770b6b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2759725-07a6-4d1a-8018-8c6dea89d944", "sighting_of_ref": "indicator--1743ec5c-5a89-455f-836c-980e69b07da3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecd3c5a-ab6f-4d14-ab27-5c027ef197cd", "sighting_of_ref": "indicator--a4eb89f5-4bf8-41dc-bc46-4fbf920deb48", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9547b9ca-d94b-4410-9ba2-5bce39b18c87", "sighting_of_ref": "indicator--931feae3-fadf-4736-b108-940cbb78d573", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3c9129-d3c6-4c2a-bb5d-e65a0cf7d1e5", "sighting_of_ref": "indicator--72ef1574-5c80-439e-a166-6e26f2bf9636", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1624e015-08c2-41b7-ac4a-7ee64bef2db5", "sighting_of_ref": "indicator--c6a519c5-7b5f-474d-8299-dc23664944bc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28c49c3-64fb-41f7-b782-072c24857c48", "sighting_of_ref": "indicator--7ae7c875-7789-487c-ac2a-6d04a81eeda8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec8a6fa-8fec-414b-b099-f20171df0c4f", "sighting_of_ref": "indicator--dda9a883-8f73-4840-89c6-79ae99e251b5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06145641-e2ad-4809-b8f0-5fd643963bad", "sighting_of_ref": "indicator--a40c6d7e-874c-4fe3-93b3-98cb607b3fc9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfe25e2-b2ea-41e7-88d7-4402a42ed9b1", "sighting_of_ref": "indicator--0c504642-1bba-4e6a-a152-30ce501801cd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6c7c8b-3cba-4e9f-a5f8-00787c001e83", "sighting_of_ref": "indicator--8159ade2-3ab5-4ff6-9c77-63963a68f128", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3e42fd-d2dc-4fa3-847e-c8e240257489", "sighting_of_ref": "indicator--1fed474d-a872-4dbc-b782-5bbf9f1036cd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60458532-1806-40c2-a0b3-f91dec3439d6", "sighting_of_ref": "indicator--6b413288-4b68-4c32-92e9-c5548d483fcb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c719c03-2b17-4e7b-b87b-1c9dd3624548", "sighting_of_ref": "indicator--273ba259-ea7e-4e1e-8193-f10a6ea3097e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e21a44-2164-44d8-9416-1f55387eadc0", "sighting_of_ref": "indicator--273b1692-e19d-4cd9-874c-32e5c6e413f3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35b49f3-e1b9-4de7-bd0f-fa8f307142ac", "sighting_of_ref": "indicator--5f0e1741-6b77-4457-ade9-367f849ce81e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396a4707-b199-48f2-bf0d-b50fc314292b", "sighting_of_ref": "indicator--13628cb6-fbfe-4cfe-b247-895da0095961", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e87f625-daec-4e61-bd15-55d8c5ea0daf", "sighting_of_ref": "indicator--7179eb13-5d18-49cb-ad91-c849b221a74a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf55adb-0024-4286-82aa-93281bffcb53", "sighting_of_ref": "indicator--c31bf11c-a82e-41e9-988f-1e08819db1c1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d3badb-3ff5-4575-867d-24c680b45d83", "sighting_of_ref": "indicator--0ad2c631-a8b6-4866-a798-8daaf8beff1b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad613d84-9135-467d-a328-81fbc5f42958", "sighting_of_ref": "indicator--0ad2c631-a8b6-4866-a798-8daaf8beff1b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c67e6d-9b29-433d-a596-f7e27b4588d4", "sighting_of_ref": "indicator--8712e4ff-1557-403d-9f15-ff180b530299", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2aed9c8-e198-45bd-a0b7-0c0d7f93b3a5", "sighting_of_ref": "indicator--6214a0e2-2683-42b2-a89b-d3d432b968e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3df895-6404-4f24-b7c4-721fab6aae96", "sighting_of_ref": "indicator--fdc068e5-9f87-48a1-863c-25de03bdb749", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76d33a8-8110-4340-aa3e-bb622d59151f", "sighting_of_ref": "indicator--fdc068e5-9f87-48a1-863c-25de03bdb749", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca53303-4d54-4468-91fa-bfc14bf7b05a", "sighting_of_ref": "indicator--8102442d-85f3-40f4-a1f5-c11b81426ce2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512d1960-10cb-4a51-9301-1664d370fdfe", "sighting_of_ref": "indicator--a27ae5a3-f163-4227-a15f-ee86717e37c5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a204b3c4-f6d9-4c7e-a75a-9e5c5af2f4eb", "sighting_of_ref": "indicator--add50a0a-9d35-4980-ae25-30661155bf34", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ac42b8-4dc3-4873-b337-fa07085cedc4", "sighting_of_ref": "indicator--add50a0a-9d35-4980-ae25-30661155bf34", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455baf2c-2851-43a8-a056-720fdf18321a", "sighting_of_ref": "indicator--05bb35a2-9877-49fc-bebb-417907b0934b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ed8ebf-ddad-4bd0-91b3-afba6f188011", "sighting_of_ref": "indicator--3ebe6aef-d595-42b9-a7af-c52a91c8aa80", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d98fe05-3d71-4a1d-8007-97e74db93834", "sighting_of_ref": "indicator--cef08a07-a00c-474d-a324-1030070e0ee5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de099078-6026-4169-a42e-518c5d826b19", "sighting_of_ref": "indicator--4341f9b1-efff-478e-843e-dffa0ca0f4f0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064498e7-4524-4359-a77c-a5a711ddbfe5", "sighting_of_ref": "indicator--4f58b704-24ff-4d45-8267-05df0311908e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf6ba87-9f95-4fef-96a4-4698ad1f31e0", "sighting_of_ref": "indicator--5888f36e-4614-487b-bce5-a5036b9b2011", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88ea86b-c259-4cb7-befd-9bcf5654c770", "sighting_of_ref": "indicator--138fdc90-ff20-4a49-8364-f80a2067e1fe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f62aa1-86a5-4507-a773-438fb2bea9f0", "sighting_of_ref": "indicator--5ccb979f-3e6b-496e-b170-44e61e49177a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a354d0-e6e0-4be9-ad3f-96093e2b81e5", "sighting_of_ref": "indicator--3a718454-9c73-437d-b989-9a4fccded27f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80db481b-f1d4-411e-ac03-cd250f91282f", "sighting_of_ref": "indicator--aea1f3f8-cdc7-49e2-a083-78f5f833cbc7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fc2a45-0030-4dfa-88c7-aa6d3f93b3b1", "sighting_of_ref": "indicator--a4b363ab-bf59-4aa8-b220-84e962230ab0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61372d0-6d9a-4328-8b8e-db52d99d4165", "sighting_of_ref": "indicator--a29f0c80-9dea-45e1-bae5-a0c53b5403de", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37958697-938b-4940-9595-2db55bfac49b", "sighting_of_ref": "indicator--a29f0c80-9dea-45e1-bae5-a0c53b5403de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96088977-2d61-41b8-944d-fac936b27cb6", "sighting_of_ref": "indicator--9f6b95f1-2b54-4e93-884c-0dbc0be3423f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5afb470-5d32-49df-a650-b7efb2bff7d5", "sighting_of_ref": "indicator--27baa731-3deb-496d-8a22-77f9f3de8823", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43db954e-7b75-422f-aa52-408b78050b48", "sighting_of_ref": "indicator--f93496ce-ca6a-434c-861a-08bc7111da33", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354fe8f1-ef90-45d3-8982-ac51762bf650", "sighting_of_ref": "indicator--18dd8572-6871-46dd-b8d3-7ffd3e57111d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4292f3b0-edbe-4bac-8313-dfbda0341e71", "sighting_of_ref": "indicator--b3195eb3-fd70-4ffe-9704-8965dbee2e82", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a9a580-b286-4a11-8314-d4e71a375a41", "sighting_of_ref": "indicator--c2a25a5c-f37d-4b12-a63b-422030898458", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae43020-4cfc-4326-a255-f53f839a3e7d", "sighting_of_ref": "indicator--a552dbdc-5e8c-4f17-bc29-bc7ae7de7d47", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e649ed6f-608c-4294-8dd0-7472571e7cda", "sighting_of_ref": "indicator--68fd0f30-ffb2-48f7-a569-7090de32607e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c955a8-535c-44fb-9999-0a279bbc5a32", "sighting_of_ref": "indicator--6983d987-3326-47ae-8462-34f4263766da", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3140692-b606-4c35-bc6f-ea1ee362594b", "sighting_of_ref": "indicator--6983d987-3326-47ae-8462-34f4263766da", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c4da72-ad79-4b23-ad43-5e5b8072ab06", "sighting_of_ref": "indicator--942a681c-e9ca-49a0-ae8b-f3d3bb037a3e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c752b5cd-2086-42ec-8d73-0acb55ff6ac5", "sighting_of_ref": "indicator--e29bf462-41fb-480d-b737-95ce6b080caf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f9a4c5-225d-421a-8813-abe2abf6520f", "sighting_of_ref": "indicator--f4c9a199-e7ed-49dd-91e7-e6c91f8d5841", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98366ddc-a238-4ebc-a918-ab50ef6d814f", "sighting_of_ref": "indicator--c26a96b2-b043-4121-b925-ef7efe83bac5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae517cec-efc9-4e24-b259-48aba8fa42e1", "sighting_of_ref": "indicator--912ac84d-c0fa-460b-ac4a-be883b62dcf8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75aa0c7c-70e0-4cad-a20d-543f00809b8a", "sighting_of_ref": "indicator--912ac84d-c0fa-460b-ac4a-be883b62dcf8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7054a85c-379f-48ba-be30-eedcdd61c9a1", "sighting_of_ref": "indicator--c2ad6d23-4a7c-453c-8fb9-6d5494bb11b0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7381058-eb56-40b3-a866-23d84828f4e6", "sighting_of_ref": "indicator--43daa117-7c92-4650-896a-25142c402c55", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54003a7a-ad6f-41a9-8d5a-db864fbc43e9", "sighting_of_ref": "indicator--85a763c8-2f2e-4778-baff-79782b3d4fb1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a09dce0-b61b-49b4-8d37-dc8daa548be2", "sighting_of_ref": "indicator--4102aa4b-6f1d-4bec-9532-5975fb405695", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad326db7-4fef-4e79-9f19-68bbdc1c9728", "sighting_of_ref": "indicator--8c88ca6e-3bce-45b5-8288-5ec2073ca74c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6552c78-d5b4-4ad5-a733-68a393ddf76f", "sighting_of_ref": "indicator--e1557283-4cd9-4e9d-b443-4d51d6a0de15", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdd355b-735a-417e-8fa1-bc41a9a26af4", "sighting_of_ref": "indicator--6cf76aa4-0645-4c26-bbc5-af23228ade9d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6619c5-c8b8-431e-a48e-b50cdaa3bc7f", "sighting_of_ref": "indicator--0d28b1b9-4948-48a2-9010-40b234085de4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a125163b-21c6-4801-826c-10d6f04fe10f", "sighting_of_ref": "indicator--d62e9707-b6dd-40f4-aca6-4b1d041afb33", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f6fac9-ff22-49bd-a7d8-23a5f9240e00", "sighting_of_ref": "indicator--1c9c6ead-ce6f-475e-80be-08b353644192", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b847033-c6ba-4ea2-b8cc-0d6d93cfe2c9", "sighting_of_ref": "indicator--1c9c6ead-ce6f-475e-80be-08b353644192", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52faaeaf-7d88-4cf6-bdb1-57a7708fac84", "sighting_of_ref": "indicator--aeeca2b0-4125-40d8-83fc-9904f0de69b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbeb402-daaa-48d2-be52-a60b5236f8e9", "sighting_of_ref": "indicator--abb60219-60f0-4754-820a-3651aa537bd3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c65ec69-8c7b-4430-b7e5-0a23784a3006", "sighting_of_ref": "indicator--110a2c18-4cdd-432e-83b5-7cb7e9e52a64", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39185930-e3fc-41de-8cc2-91842583620b", "sighting_of_ref": "indicator--850cd84f-aedd-418a-8d8a-2d52f2f5bcfa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd74e982-9203-4a53-9e92-186d136bfc64", "sighting_of_ref": "indicator--468a107e-b754-4b0d-b036-49107d0b5d2a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd04bcf5-5296-4058-bf3e-c473dbbb62fb", "sighting_of_ref": "indicator--468a107e-b754-4b0d-b036-49107d0b5d2a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f1b6bc-4374-44ac-9faf-f2358ffa53a7", "sighting_of_ref": "indicator--c8f1099e-ff19-4471-99eb-0d5fda6b08b8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133740cc-9878-42a8-b1a3-aa1d9118c855", "sighting_of_ref": "indicator--65b701cd-d187-441b-be3c-e1dee356329d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27247d71-9bb5-4019-9d8c-a798e4e50232", "sighting_of_ref": "indicator--71691d07-d537-49a8-8506-b69970a91b71", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508726c8-65c0-4aa7-8008-1927f6304680", "sighting_of_ref": "indicator--e3cdcd5b-fba2-4a78-9882-715788bd28ec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071850f8-7096-4957-b3bd-9d2e1507f512", "sighting_of_ref": "indicator--dc224b90-6310-4b53-b270-879f7f57d228", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f5c8c7-e270-45dc-adad-923757b2e0d0", "sighting_of_ref": "indicator--32a4a8c6-cbcc-4a66-ac1f-e4c945892710", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae9dc8a-b13d-4d37-9f67-b53b6723f383", "sighting_of_ref": "indicator--74de03e4-87ab-49a3-b020-47f26cce4f6e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18acbf3-2d37-4302-a6b8-21d6f327f941", "sighting_of_ref": "indicator--a21d4aae-f0eb-403a-8e91-e4e933167558", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c7dcf2-a53f-49fc-bdfa-46c43a289bb0", "sighting_of_ref": "indicator--a21d4aae-f0eb-403a-8e91-e4e933167558", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99862e1-e3b1-4605-9d27-3c2836520240", "sighting_of_ref": "indicator--351ea565-d9b1-4d68-a66b-ad9f7c5f5aaa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1c8740-c6cd-489a-a1c7-d29d4f62ed3e", "sighting_of_ref": "indicator--a669ccb6-7b9d-4c04-aaba-c013803e77c8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d48494a-886e-4514-8d9b-9a96575d36d2", "sighting_of_ref": "indicator--3b9e043d-af02-446e-b9f9-3f8a3f095f05", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e89a3ab-3313-40f9-a930-6ed80b216948", "sighting_of_ref": "indicator--44b79479-ce74-41e4-8006-2a2d5915de12", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b58b6ca-7da0-48ad-b404-d7f3d797bc84", "sighting_of_ref": "indicator--63981661-482b-40cd-9897-5c25238d354d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e45e15e-cbf7-4514-90ae-2248365010b0", "sighting_of_ref": "indicator--0c78a039-b35c-47e8-b86f-2a7b75e53edc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993bdb5f-38c0-42cd-84a0-a6958e2ab90d", "sighting_of_ref": "indicator--e3d42990-82bf-4ea0-aba1-8ce0be517648", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e24ff1-8a57-44db-ab52-8df30cfacbbe", "sighting_of_ref": "indicator--be9ba35a-7d21-4619-8b47-36754b511dc9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92c5e0a-26db-42cc-96ba-f030baa1d4a6", "sighting_of_ref": "indicator--953b7806-d874-4efa-a333-19166fa1da2e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1181dc75-1d81-49e3-bd17-91ea78c080ef", "sighting_of_ref": "indicator--a97eb313-edff-4bb4-a9d9-d08b63f268f3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde645a8-3ba2-4017-bbcd-3bc006712ae9", "sighting_of_ref": "indicator--bd23ebc2-01c0-4285-beab-a1ee11481249", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee61d1ae-dff4-49c0-a0ed-a3183925b309", "sighting_of_ref": "indicator--474c9a8f-3c27-44dc-9d75-aebe9b8e9bd3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2956cec0-a6cd-4dfc-8d87-ae0d9ff97d7d", "sighting_of_ref": "indicator--595e4920-9c23-4950-8879-bd015832d235", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a068c4-93ee-42d8-83d5-ffdf01b110f1", "sighting_of_ref": "indicator--f5419948-89d7-4497-89cc-1be918d018dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40935f25-bcf5-4511-ba53-159648ec4f89", "sighting_of_ref": "indicator--c6d2da39-b46c-4484-ad7b-9dcdb743a1a5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7533ec5f-0bdd-4e11-be70-f664318126c2", "sighting_of_ref": "indicator--817252fe-4d86-49c2-ab74-9b524ddd92ca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5dfddac-46a3-4f03-beb5-29b0f3f7531c", "sighting_of_ref": "indicator--db43ed05-d2cc-42b3-aaf5-7617841847f9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d5f56a-0f9f-4ad5-99cc-b64b3f1f0d1a", "sighting_of_ref": "indicator--4b56f064-9b7a-4a53-bdde-33cb4915d390", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5855d09b-68d2-4213-8ff9-bba00fa8e55f", "sighting_of_ref": "indicator--fb234559-72e6-44e4-a0db-f6933b16e0dd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15cd7b44-512c-4e4d-9bab-0e09504b8f63", "sighting_of_ref": "indicator--49cb12e2-a7d1-47db-961b-c866294f748e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79cd3a6-b412-4e17-b143-3d00865bb3fb", "sighting_of_ref": "indicator--8a1ef949-7f17-49a8-bb40-ddd2fceb79a9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82129cf0-4217-49fc-8838-e3426bb172aa", "sighting_of_ref": "indicator--dd0373f2-dccb-49e6-a503-09663414b0eb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270d81b9-ef36-432c-a267-e5fc6b191495", "sighting_of_ref": "indicator--dd0373f2-dccb-49e6-a503-09663414b0eb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3c18b3-090d-4ebc-9018-628f5b3d04ba", "sighting_of_ref": "indicator--30f17b91-4644-474b-aa1a-b0b90f443bca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84414c01-60d4-44dd-994d-a21bde6e151a", "sighting_of_ref": "indicator--10a76d58-4e09-4dd8-924c-e5b110ff2f71", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1ef90e-d3f1-40b6-aef2-710108b57f2b", "sighting_of_ref": "indicator--10a76d58-4e09-4dd8-924c-e5b110ff2f71", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc87c409-c9d7-42a9-9d76-f21c6003657d", "sighting_of_ref": "indicator--275aac3b-fbe8-4d18-9485-f94c5eb505d5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cced2e09-ef7e-416b-97fc-b81988f22755", "sighting_of_ref": "indicator--b952be94-bf88-4a7a-b331-54c5d8b22276", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa7663e-9bba-4d8b-b66b-c70b64a686b0", "sighting_of_ref": "indicator--7df69daf-7b37-4fae-a1ec-bc3c965b9461", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105749a7-c2f6-471d-a266-fa32d8c92016", "sighting_of_ref": "indicator--7df69daf-7b37-4fae-a1ec-bc3c965b9461", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d6dc86-ac91-46a6-9021-83e4ef6c705f", "sighting_of_ref": "indicator--19f3305c-b1f4-47e5-b6f9-e6c884ef34de", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b71fbe-e83f-4e04-af41-1b8da929ab97", "sighting_of_ref": "indicator--05e46336-9e90-4060-a846-a9c5a9a7297c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a500b81-b57a-4565-93b4-f1a1ce68e1d3", "sighting_of_ref": "indicator--481c2108-88f4-4dd4-aeda-6500773055eb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf3c006-fc4f-420f-942d-d9273d81cf32", "sighting_of_ref": "indicator--aa25331c-a2f3-4b9c-aa50-bc5fb5ea332a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a358cd-a093-44d8-9424-5322625fbb1e", "sighting_of_ref": "indicator--514fb2f8-1479-4f4f-92e2-ec987dc98e84", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179531b5-d30c-4f6f-8c7c-59491c9f2d97", "sighting_of_ref": "indicator--9549c9c5-ffab-4158-82cf-caa777c0a38a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829babfa-800c-46f2-b4bd-6a64300e0d03", "sighting_of_ref": "indicator--9549c9c5-ffab-4158-82cf-caa777c0a38a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d314cf-f21f-422c-b80c-76bdb7b3ea0e", "sighting_of_ref": "indicator--22a35dc3-5e1a-445f-9df1-55ed5eeb78f4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9de5f2-90ca-4c24-b8c7-efbb06ecad16", "sighting_of_ref": "indicator--22a35dc3-5e1a-445f-9df1-55ed5eeb78f4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef9a93b-2aee-4845-96bd-1718bb852a78", "sighting_of_ref": "indicator--9199dc1d-1dff-4826-aeed-793ea0f656bd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbcb944-0ecf-44fe-8e8e-00ed0fbf4dee", "sighting_of_ref": "indicator--71a788d9-842a-43df-bcf3-fed7dc4b7be9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe1c04a-9e4d-4ba3-b0a0-6d45a54b8c41", "sighting_of_ref": "indicator--99845198-4876-473b-81f3-2957dedf0533", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d762bede-34f1-46ff-a80f-1d31351a5b9a", "sighting_of_ref": "indicator--b80a119e-9123-4efe-b93a-4c8e3b38449d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2c9b05-a373-4784-ab85-75bfd6a1becc", "sighting_of_ref": "indicator--29c265c7-f1fc-4f34-be25-a2a3f29608ca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d324168-c31e-4baf-8783-22926071ad60", "sighting_of_ref": "indicator--63d77560-b41b-474f-a8a5-c85915f93e0a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014c2a4a-a97c-42cc-be1a-84096ad55571", "sighting_of_ref": "indicator--63d77560-b41b-474f-a8a5-c85915f93e0a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f18283b-2eba-418f-8951-8cf6e6f63dca", "sighting_of_ref": "indicator--cee8b424-0aef-4393-a273-871a39efeefa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715fc8e5-9ab1-46b3-b1e0-1e9fe5230783", "sighting_of_ref": "indicator--d22093ab-2d57-40fd-90e9-e0e5fbd9b8b5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a53351-b3c0-4a70-8168-8bbff0c11aa0", "sighting_of_ref": "indicator--3baca2a4-c26f-4d7e-b4ae-26f14753addf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8109efd-42ec-40cc-9af3-6215678b2a64", "sighting_of_ref": "indicator--662af4e5-d5be-4be0-8cf0-dc7238c080d7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9864467-43bc-46a6-b2f5-a71ab9998fdf", "sighting_of_ref": "indicator--f0c5f6ec-2967-40e6-9164-6bee41a037dc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc168d4-fe18-40b7-a97c-c10139e2915b", "sighting_of_ref": "indicator--87d8171b-ddf7-4dd9-acb4-8a329632cf28", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f902854-3905-4a50-805c-509a98411207", "sighting_of_ref": "indicator--079e62ed-e926-42f7-92ac-2ac51c22d183", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30aeaff-5946-41a8-b183-fcbf16356294", "sighting_of_ref": "indicator--ac0233dc-c412-414e-9341-e99425d9b943", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67e033e-282f-4dc4-a61f-4e575400cb61", "sighting_of_ref": "indicator--e3de4c92-93f2-432a-a843-6e83c398c1e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47bc807c-7774-4ae4-96e5-f4b73003f414", "sighting_of_ref": "indicator--5d1fab7b-7b40-4058-8c29-e8e41aa839ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6e8ab6-d1e7-4401-95e7-d74d3503d873", "sighting_of_ref": "indicator--aceed085-8a81-47ae-9443-6d2ecec2ed49", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41559a57-1191-46bb-818d-1fc4b638368e", "sighting_of_ref": "indicator--123d580d-a172-4e05-9d42-be72d2b32f6b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51227c2a-acd9-4afd-a171-22bc9960a4aa", "sighting_of_ref": "indicator--580aefc0-f4b8-4c3f-83cd-dfcd351557d1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ece5ba-be61-49c5-b488-c24a580e2649", "sighting_of_ref": "indicator--580aefc0-f4b8-4c3f-83cd-dfcd351557d1", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239ca781-499e-4fd9-be20-f86a3cea4749", "sighting_of_ref": "indicator--16181074-0fc7-45cc-997e-ed852e749201", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e7ec26-7f94-4579-a69e-78287df718ae", "sighting_of_ref": "indicator--70e98531-f810-4a4b-b69d-77a82d334689", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c352dc-4b96-4eac-9eea-2bc7c085a614", "sighting_of_ref": "indicator--b901638f-435b-4400-8684-d958b3346e1b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec75d15-613b-4948-802c-81cc9515c666", "sighting_of_ref": "indicator--8ec130c3-bbb0-445f-b9dc-de5c33532f6b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ac300c-916f-48db-81e7-ddb4c546d4e3", "sighting_of_ref": "indicator--8ec130c3-bbb0-445f-b9dc-de5c33532f6b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efd3ab5-4f2a-4712-a247-79cbb49fa1e8", "sighting_of_ref": "indicator--8ec130c3-bbb0-445f-b9dc-de5c33532f6b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc562ed2-e8f5-4cd2-bc68-4c806efc65ef", "sighting_of_ref": "indicator--9a33d218-bbd3-4531-8bba-766d6158dfb7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ca9a4c-28b5-4753-ac81-0cf04b8cee2a", "sighting_of_ref": "indicator--d7dd138b-dc6f-4a45-a444-9eb82898c420", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7194b0cc-bc11-441e-b920-602acceeb162", "sighting_of_ref": "indicator--94979dcd-dcf7-40b9-a552-692be77381da", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9958da-0b28-4196-93d2-4ac11e5e988c", "sighting_of_ref": "indicator--2d11cfdc-f38c-47c5-a920-d462aead4c8d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57927095-96e8-48f8-868b-af0008ec8e83", "sighting_of_ref": "indicator--0bc2bbef-4cda-4448-8afc-920e10b3a24f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e681ef5f-6429-4c9c-b118-23713ba38387", "sighting_of_ref": "indicator--296f4c02-efc6-4bd5-92a0-70d94141be08", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2802d1bf-0a1e-4689-9d2e-2f7373e0051c", "sighting_of_ref": "indicator--120c7604-1970-4c6c-a65f-4295c514a84b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8e1449-8d7d-4fc3-bdc4-806676427a04", "sighting_of_ref": "indicator--6f9933e4-0c61-49c5-b9d5-fe175c784608", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de6f1af-0cdd-43bc-bd32-b73a77d849b2", "sighting_of_ref": "indicator--c2d3c4d1-9a61-47e3-bd97-61a1ce6c9e8d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc04998-1da1-4e8d-bf07-36dfcb15b1b7", "sighting_of_ref": "indicator--1bce114a-1642-4961-a501-df5b49e6f669", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0c263f-6277-4224-a4ce-24504f2c0a3d", "sighting_of_ref": "indicator--cb85161d-8010-44f4-9926-f4194ff3db0e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5777ce-9cd3-4e41-b659-641d3cc98d7c", "sighting_of_ref": "indicator--670a82ac-976a-4ef9-8bf9-450d69fe1017", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c19ee2-8396-4fcc-bc0e-eda40499d036", "sighting_of_ref": "indicator--b6bc6a36-5c9e-4dc1-af37-0b52c0304188", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b951716-3ba4-4460-9707-29b5e2545bf5", "sighting_of_ref": "indicator--b6bc6a36-5c9e-4dc1-af37-0b52c0304188", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33cbb14-a835-4731-820c-7ebaa70d042a", "sighting_of_ref": "indicator--b6bc6a36-5c9e-4dc1-af37-0b52c0304188", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346c29fe-bc29-4cd6-a7b7-03f8a6588dd3", "sighting_of_ref": "indicator--d6f2d0de-eefc-4caf-92d0-848add281fa7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36474ff6-f067-46dd-9281-8eb5402f5f68", "sighting_of_ref": "indicator--4207a4f4-b860-41cb-a314-cfd2038b2ede", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59eec42-0f8c-4956-aa5f-329a3b39a63d", "sighting_of_ref": "indicator--4207a4f4-b860-41cb-a314-cfd2038b2ede", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4d58c6-0ab4-4f80-9dd3-d56c98024302", "sighting_of_ref": "indicator--4207a4f4-b860-41cb-a314-cfd2038b2ede", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2aa3b8f-680f-41d1-9e36-33e8a5a3dbaa", "sighting_of_ref": "indicator--8f718da9-4e97-44cc-be23-8c7b6a2af6ee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97e7cb3-3315-4c7d-a51a-363f9400f6d8", "sighting_of_ref": "indicator--fa9a0f94-3dac-41f8-b2b9-36caab5e3a0f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef37e51-e5a8-48f6-b3a3-209dcc4710fe", "sighting_of_ref": "indicator--fa9a0f94-3dac-41f8-b2b9-36caab5e3a0f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a82c232-db7c-4fcc-a7fa-3049517797f2", "sighting_of_ref": "indicator--fa9a0f94-3dac-41f8-b2b9-36caab5e3a0f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c1a49b-b7f3-4caa-8ff2-adbd7e567445", "sighting_of_ref": "indicator--79404d0f-7315-4475-8e67-16531c3a0917", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f345041-b8dc-4886-af70-b96b24a57b9c", "sighting_of_ref": "indicator--9bfe6cc9-0133-49c6-b8a8-4defdc14eeea", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea2af14-d9be-46fd-9c48-4a4d8af92a6b", "sighting_of_ref": "indicator--9bfe6cc9-0133-49c6-b8a8-4defdc14eeea", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3747dc5-d908-414b-995a-5ede5c019b6e", "sighting_of_ref": "indicator--9bfe6cc9-0133-49c6-b8a8-4defdc14eeea", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e74026-a6d7-4481-b0e1-12890e8f1282", "sighting_of_ref": "indicator--d9ac050a-b87f-4ef4-b672-f91b77481ca1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136f26e3-5de9-419f-9cf2-aa4bd6df3b27", "sighting_of_ref": "indicator--c686ad44-d391-4b79-a166-96435c5320c3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf3d60f-4233-4125-ac03-10798e89990b", "sighting_of_ref": "indicator--afc6f3a1-dd17-4a42-95f7-04e51ef4ccb8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ae268e-1778-4ae7-9995-d94611560bfe", "sighting_of_ref": "indicator--153922a3-a2b7-410a-8731-8e227f2a0d1a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b14759-5a55-4eab-b644-78b4677d78f0", "sighting_of_ref": "indicator--e42f734b-8986-4fe2-a9b0-9a8180b85636", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a226cb-4e18-4984-bdc2-24d999aed8b2", "sighting_of_ref": "indicator--baacd8c7-5fdf-40b9-87ae-30f1ea05b729", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608a7544-e4ea-4a28-9e91-8a46c094964b", "sighting_of_ref": "indicator--31df9e0c-6814-4db2-bb3b-166bc31adea7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb9ec95-01a0-467f-90c0-3f64e9773f59", "sighting_of_ref": "indicator--31df9e0c-6814-4db2-bb3b-166bc31adea7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a30a46a-0f73-4c55-9f46-12fe0414fb59", "sighting_of_ref": "indicator--31df9e0c-6814-4db2-bb3b-166bc31adea7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90506bc8-f538-40de-882d-0d4dc4ddc0cd", "sighting_of_ref": "indicator--482bc116-7d0f-4dae-b744-ef66fb558809", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbc7e31-d71c-45f8-a872-6fbae32f4233", "sighting_of_ref": "indicator--00a82113-e728-4364-8037-6af6d5a09cdb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aac7a7a-1d09-4d9c-a424-9835adc04978", "sighting_of_ref": "indicator--00a82113-e728-4364-8037-6af6d5a09cdb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59deee0c-dc73-4e96-a0c4-a5210707a3eb", "sighting_of_ref": "indicator--5fa59400-49c4-4323-be73-fa558ca13837", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d348c9-5eb5-42de-bf76-dee969629a5c", "sighting_of_ref": "indicator--1425bbec-ab7a-4fa0-a6ec-f2c8272abdbe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f287752b-93ef-4477-8c4a-fc953ce22daa", "sighting_of_ref": "indicator--a8c884f0-1dbd-48e5-be3b-582f4d5199e7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344b61e4-a7e5-40d3-ac40-942378f5054e", "sighting_of_ref": "indicator--a8c884f0-1dbd-48e5-be3b-582f4d5199e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e0f776-73b1-4803-a52b-85c022ef1b34", "sighting_of_ref": "indicator--a8c884f0-1dbd-48e5-be3b-582f4d5199e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3536d40-dea0-48c1-af69-486082e02951", "sighting_of_ref": "indicator--104850b6-282f-41fc-81ae-e323bfaaac3d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06007867-b1e1-4ab6-bea7-78a3e52c9be6", "sighting_of_ref": "indicator--e695e127-c828-48cd-a76d-37e7df231848", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0500b1cd-8a15-4e86-9da5-50660f17c223", "sighting_of_ref": "indicator--857dcbae-5edd-4f6a-b5bb-7ff20a652961", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0916c71b-ed65-486a-b89a-eee2863a505c", "sighting_of_ref": "indicator--61fd247c-62e5-4e51-ab55-acace9d89c5e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e285da-302f-4edf-99f9-6397beed6bb1", "sighting_of_ref": "indicator--271dcf6d-d95a-4053-96f1-a1293f69d07b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b450391-8fa2-4eb6-af7c-1efcf0a4c0aa", "sighting_of_ref": "indicator--271dcf6d-d95a-4053-96f1-a1293f69d07b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52fe855-10dd-4ad7-9c96-528b5d4bd84a", "sighting_of_ref": "indicator--271dcf6d-d95a-4053-96f1-a1293f69d07b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1cc6f4-0987-493b-a812-815374846cc9", "sighting_of_ref": "indicator--8e3e620d-c313-4c1e-8a6a-8a216041c14c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adc5f5f-3652-44e6-9776-312cac72540f", "sighting_of_ref": "indicator--f5173ba9-a58b-4838-ad7f-fe8f1dde8938", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6a7d4e-c715-4148-b4cd-a82c1bc32fb6", "sighting_of_ref": "indicator--f5173ba9-a58b-4838-ad7f-fe8f1dde8938", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf271da0-d0d1-425b-9685-d9bb3126228d", "sighting_of_ref": "indicator--f5173ba9-a58b-4838-ad7f-fe8f1dde8938", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c482ac09-c8ab-4af6-a5b8-1575c8996605", "sighting_of_ref": "indicator--ddb80aa4-50bd-4656-bbb5-e4e2e12144fe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c78b586-1b4f-4273-800d-2b14af2ee0d3", "sighting_of_ref": "indicator--8b353217-bd42-48e6-9aaf-3b7b8c48e60b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a82121a-5303-4335-9076-cf63b43ef9ec", "sighting_of_ref": "indicator--f3315fe4-aaef-4e8d-b94f-2a7ed348935a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e372cb-6a00-457f-886b-2bfceed04075", "sighting_of_ref": "indicator--5c2bece7-e278-409c-833c-05a2424389d1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66c29c9-4d8f-474d-9ebf-2225bff98e1b", "sighting_of_ref": "indicator--7832197e-1516-4d3e-86c7-672c1a6e59a8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19d70da-fc77-4089-b985-d483bbb82e9a", "sighting_of_ref": "indicator--29c08ddf-ace0-49f7-a0e5-425240715cd3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70141ea-7bc1-4e67-9bbf-533afe5f2308", "sighting_of_ref": "indicator--29c08ddf-ace0-49f7-a0e5-425240715cd3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce330483-42c6-44d7-8833-524f712b2a33", "sighting_of_ref": "indicator--29c08ddf-ace0-49f7-a0e5-425240715cd3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43dc610-9e3a-4415-9c50-a95b18f96d8d", "sighting_of_ref": "indicator--1f272e3c-7eba-496b-a640-b681e8dbb768", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07758188-28b7-46e1-b129-c3f05af5a493", "sighting_of_ref": "indicator--834f8b09-c99f-4798-8fdd-050e0595f331", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bd6c77-fee6-4ad8-a233-323d75e1a523", "sighting_of_ref": "indicator--e2d76be9-9992-4850-84f8-e47fa31803f1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82a8a92-f30c-4a2f-b8f6-7517c5e87f7c", "sighting_of_ref": "indicator--05524fd8-9a00-4e58-bb4c-62e9209b72de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263773eb-aa7f-4d5c-8ca7-2e35a6c5adad", "sighting_of_ref": "indicator--9ae48e5b-6fb8-47ee-b352-712759c564ff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb70830-8ac5-4e01-960f-d1ff55ad37c5", "sighting_of_ref": "indicator--9ae48e5b-6fb8-47ee-b352-712759c564ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6382485-629f-43af-bed8-f9610a5b1471", "sighting_of_ref": "indicator--853274c7-3a7a-4e75-91f2-2785baa3f8c3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46255986-0a0a-4960-b91b-caad220aaa2a", "sighting_of_ref": "indicator--853274c7-3a7a-4e75-91f2-2785baa3f8c3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffd67b3-b565-4e21-bd93-8796d7111178", "sighting_of_ref": "indicator--5478c813-918e-45ce-bdad-936c6749957c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0e4277-6a09-43ab-9de6-722aca1448d4", "sighting_of_ref": "indicator--2ad846fb-3d5f-4da1-aa77-dbab711bfb2e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce8ae39-564a-4fda-a842-ae430021bd42", "sighting_of_ref": "indicator--9cec61e7-72c5-4426-8571-fab99578e578", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85da0665-5b88-4f07-94ab-7f650be18da4", "sighting_of_ref": "indicator--32fd2494-a027-4e57-80cb-9dc82c1ff081", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61a16fe-f3ca-4490-a163-1564bdb52eb1", "sighting_of_ref": "indicator--32fd2494-a027-4e57-80cb-9dc82c1ff081", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ea419f-794e-4a60-a2f0-ed21fc2027e1", "sighting_of_ref": "indicator--c4ca43b4-9ae5-409c-816a-87937949c5d8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fd1db3-33ce-4ab9-9a6d-185ffda2dca1", "sighting_of_ref": "indicator--c4ca43b4-9ae5-409c-816a-87937949c5d8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ced3e0-8768-4b8c-aa3b-cf56f527f9a6", "sighting_of_ref": "indicator--c4ca43b4-9ae5-409c-816a-87937949c5d8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29de77f-575f-4477-9e44-765223f99fb0", "sighting_of_ref": "indicator--b7b537f6-ae1c-48c4-8bf6-b93e393706f7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f592c69-60a4-4813-aa51-a9f993d6eecb", "sighting_of_ref": "indicator--581f18ea-3a2c-4402-aae9-cda3d73b488a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f014184-5397-4cf1-84d0-2a4187e86576", "sighting_of_ref": "indicator--581f18ea-3a2c-4402-aae9-cda3d73b488a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df653fe-6a9a-43c2-be6c-3592f7e3470e", "sighting_of_ref": "indicator--871cfa9e-9679-4a82-ac7a-f480b0d506d7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5771483-c4cc-4088-b5b9-444cd7d4ff50", "sighting_of_ref": "indicator--871cfa9e-9679-4a82-ac7a-f480b0d506d7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1f6f74-236c-4b62-9080-7e4da533bdd2", "sighting_of_ref": "indicator--871cfa9e-9679-4a82-ac7a-f480b0d506d7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6af108-fdfe-4909-9ee9-ddc8b3bf05b7", "sighting_of_ref": "indicator--06cbd488-8890-40fc-8f32-50e678b8b176", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecb3a10-e82f-4a6b-be3f-e741f7ed7876", "sighting_of_ref": "indicator--a362b66a-5d31-4f50-95e9-b37ace69e41b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2165ab4f-ab37-4a66-981b-e51846c1bfd5", "sighting_of_ref": "indicator--a362b66a-5d31-4f50-95e9-b37ace69e41b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb76ba3-09e6-413c-9390-f3541b9de087", "sighting_of_ref": "indicator--7c38e934-fc5c-4b4d-a6c4-6d51fcaf072c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e07b450-866a-474e-aaa2-143041fe044a", "sighting_of_ref": "indicator--7c38e934-fc5c-4b4d-a6c4-6d51fcaf072c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866a1796-aaf8-4fe2-8d8f-d2e61a7eb00f", "sighting_of_ref": "indicator--7c38e934-fc5c-4b4d-a6c4-6d51fcaf072c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5650ef1-dfe9-4f7e-9577-29dcff0634f1", "sighting_of_ref": "indicator--73a35c48-00ee-4aba-9de2-f9877caf979e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9042adcb-73e2-4b03-bb02-d5e31ceacfea", "sighting_of_ref": "indicator--fe430aee-6fce-49c7-b3a6-15667b50778b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e039168-f2c3-4ef8-8e75-dc07cde1932d", "sighting_of_ref": "indicator--86cf6965-bd1a-4258-b1e6-d69c930ca5dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d8dab5-7cf9-4454-95f3-8ced07ca8293", "sighting_of_ref": "indicator--193ecd0a-de27-4566-a9e6-cdeca8877759", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea9f825-1822-4b2f-b98e-58cd29f2e8c3", "sighting_of_ref": "indicator--193ecd0a-de27-4566-a9e6-cdeca8877759", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec2e4d8-9200-4e04-b912-c5022f3c0c83", "sighting_of_ref": "indicator--f327b7fa-c8db-4bd6-9089-0df667713373", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab1f033-dcfb-47f6-87dc-8293701d37cd", "sighting_of_ref": "indicator--bb91bf91-4693-436f-8c91-169b65198e0f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254854ae-2eae-45d2-ae21-344249e61b1c", "sighting_of_ref": "indicator--8f825c13-889a-49c6-a8cf-3a6e3bfc9394", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9d4ec8-fdfe-4ee5-b602-30166329ff37", "sighting_of_ref": "indicator--b5a43f49-bbff-484b-b2c3-132d37ca8ca7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a23a0b-166d-46a9-a933-6d20879b8e8f", "sighting_of_ref": "indicator--fc85b02b-3ea1-48a5-86d4-90b6a43118f0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e910fb5b-134a-42a9-9210-14041a0b0e56", "sighting_of_ref": "indicator--0dda6f56-fe4a-4c6e-8131-738130f5299b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d36918-9a60-4bf8-945d-faccd0b51c5c", "sighting_of_ref": "indicator--56780140-35b6-4330-8e79-15825736256d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a80544-ecbd-4533-91b8-28f51e9c8e04", "sighting_of_ref": "indicator--042a1206-ed6f-427c-9c69-5d208cfeab7f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bb5590-7b32-4a03-b00f-e8c8a5ccb285", "sighting_of_ref": "indicator--61fbb546-b45a-4c0e-ad29-0abd39aa0def", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45735f55-a3a4-4ac4-8491-b96bb79e7d60", "sighting_of_ref": "indicator--636d0f2e-1c5a-4ca2-9dd1-92c8a45852c7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e917d7-4c88-4b9f-8d3c-873e4e58ad25", "sighting_of_ref": "indicator--2cf30699-6744-498d-b14b-850778505345", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69273b50-bf4d-4c73-8408-d899bb3ae345", "sighting_of_ref": "indicator--2cf30699-6744-498d-b14b-850778505345", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97de156-bfca-42e9-98ab-577b819306ca", "sighting_of_ref": "indicator--085f146d-912c-4113-8f37-071bb1346ebc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ea486d-8c50-44de-b703-9c4a8ae200b6", "sighting_of_ref": "indicator--df171548-c30e-4132-b8ba-fb9e48f2c99a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378ab455-491e-4883-9afe-1173db5c8f65", "sighting_of_ref": "indicator--c81eb776-59b6-40ec-b8e6-ccaab168f59b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d567cb-1038-49d0-b68f-b004c2d3ef0e", "sighting_of_ref": "indicator--8cb821ee-eff7-476f-82aa-2297d24e85a7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d936c1c-8cd8-44b0-899f-c8445df5ac74", "sighting_of_ref": "indicator--c21c4482-645e-439a-a6d6-3d8c04b682c9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003f5e3e-c364-4556-9b22-1c0b84cc2696", "sighting_of_ref": "indicator--31f5dd40-1ddb-45c9-8721-6caf9801d94f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38716a00-3f18-42e2-9202-0233e2b1fd16", "sighting_of_ref": "indicator--31f5dd40-1ddb-45c9-8721-6caf9801d94f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bb64dc-65bc-4a43-912b-dcc835f6b105", "sighting_of_ref": "indicator--97acd949-2f76-4c36-bee5-fda61bccba34", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426c2e40-7104-4483-b1dc-a3fdd829d52d", "sighting_of_ref": "indicator--97acd949-2f76-4c36-bee5-fda61bccba34", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c69f1d-e92f-4ac0-a494-02d2653144e8", "sighting_of_ref": "indicator--97acd949-2f76-4c36-bee5-fda61bccba34", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec53216-9ab1-45df-b360-7624088c1f1b", "sighting_of_ref": "indicator--528a208a-1ed3-4c1f-bc8a-9efe17f80d7b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5faad0a-948d-449c-967f-675c6c679908", "sighting_of_ref": "indicator--528a208a-1ed3-4c1f-bc8a-9efe17f80d7b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969f7ade-77f4-4e53-8ca2-97da58531ef8", "sighting_of_ref": "indicator--c64b10e4-18e1-4ec5-9d4c-c93fe4b8bb4d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92db0dee-477f-43c8-8acc-525f0588cebb", "sighting_of_ref": "indicator--c64b10e4-18e1-4ec5-9d4c-c93fe4b8bb4d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14911543-1587-4bc1-9c72-10b202a41e3e", "sighting_of_ref": "indicator--ce0abe7a-46c7-430d-92bc-0e3410b26729", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614d488f-4999-45f5-8a1a-03c138202639", "sighting_of_ref": "indicator--ce0abe7a-46c7-430d-92bc-0e3410b26729", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0328e8b-21d2-48a7-b1e0-cd334d175d43", "sighting_of_ref": "indicator--2d49e515-f018-47c8-9fe8-3433d03a2893", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee429342-8998-4594-8c84-867a4decafe9", "sighting_of_ref": "indicator--b6b8f52d-4d59-4488-bcac-4cfc91faa2e3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13aa2380-7822-48f7-bb10-c0f15cb19983", "sighting_of_ref": "indicator--799fcdfe-0e8a-469f-8541-b062884b84de", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51648a6a-358c-4019-8b79-7967b759af33", "sighting_of_ref": "indicator--799fcdfe-0e8a-469f-8541-b062884b84de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7812ed46-5f8b-400f-9841-5820521c0771", "sighting_of_ref": "indicator--799fcdfe-0e8a-469f-8541-b062884b84de", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe59550-2760-4c01-9c4a-009b1e6ad84e", "sighting_of_ref": "indicator--374f3967-478b-4f4f-b6de-63e4e5375a33", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd5a946-abb6-4fc7-9b50-b787fa42e14e", "sighting_of_ref": "indicator--374f3967-478b-4f4f-b6de-63e4e5375a33", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5ff04b-126b-41a1-bd78-30312ed19655", "sighting_of_ref": "indicator--4c6ba52e-5817-4463-ae22-522256081e5b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1179dddf-470f-4d77-a7ec-03b4849dde10", "sighting_of_ref": "indicator--403b9752-3b94-486d-ba66-cde2bebc13f7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36389529-83bd-40ca-a622-4fa54a24eba9", "sighting_of_ref": "indicator--733eaef9-f3aa-44e2-9ee2-d4e8cfc8ce85", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a17094-6077-48ad-afc5-72db9885e457", "sighting_of_ref": "indicator--733eaef9-f3aa-44e2-9ee2-d4e8cfc8ce85", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b9e91c-df19-45c5-a12b-77821ee7cc57", "sighting_of_ref": "indicator--733eaef9-f3aa-44e2-9ee2-d4e8cfc8ce85", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b8ff0f-0b6f-4e69-b739-ae90a3dcc5f8", "sighting_of_ref": "indicator--8658d6e3-c4ae-4aed-8a28-3791a9f06d3e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613c502a-a9ea-43f8-8024-4a820d8d507c", "sighting_of_ref": "indicator--cdad7590-4b14-447d-95ec-dcaadc4b1170", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36611d9f-6e5e-45a2-991a-20176c7bbd11", "sighting_of_ref": "indicator--cdad7590-4b14-447d-95ec-dcaadc4b1170", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c49525-6e3c-4a88-8788-c88abbfd21fa", "sighting_of_ref": "indicator--318ddd77-2925-4396-9ae1-6c8c23ac0ec4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddd5ffe-60e2-40e0-a6f6-268dc455e2c8", "sighting_of_ref": "indicator--318ddd77-2925-4396-9ae1-6c8c23ac0ec4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f020e9-81df-4c61-88b5-a6b7eaed0a05", "sighting_of_ref": "indicator--8d5392e3-ddd8-42e3-acfb-da7402691a5f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f77b22d-504d-4a39-bf57-15768ea3a27b", "sighting_of_ref": "indicator--8d5392e3-ddd8-42e3-acfb-da7402691a5f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567dfa0a-59d1-427e-a662-2e266e2763a3", "sighting_of_ref": "indicator--77cfb1e7-8323-410d-9424-66201eb41181", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90acf452-0bdb-4a24-a119-479e4cc5e00e", "sighting_of_ref": "indicator--e809cba2-4c98-498f-9ef4-01cdb4337e1f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ecd7035-92ed-4ee2-aceb-3a9e323f25ad", "sighting_of_ref": "indicator--e809cba2-4c98-498f-9ef4-01cdb4337e1f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6512f07e-fa1a-42ad-b3c2-e7a002c5c91c", "sighting_of_ref": "indicator--3c27bff4-5b6e-4495-bdae-a75721558ea3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03628aba-b313-4e56-9f09-69dd74506672", "sighting_of_ref": "indicator--3c27bff4-5b6e-4495-bdae-a75721558ea3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8264a0-8d7b-4c37-8e66-0091cf8f88f1", "sighting_of_ref": "indicator--fb862ec7-828d-4d07-9821-24ce3d07c1d4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b42fe46-d990-4c30-84fd-18d4808aae18", "sighting_of_ref": "indicator--3dd6db5b-2a2a-439c-a225-97e90916047e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44ac68c-0121-4ba4-bc01-23a21d4c7231", "sighting_of_ref": "indicator--3dd6db5b-2a2a-439c-a225-97e90916047e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070e7874-ec13-48e6-8644-d47ba54c141e", "sighting_of_ref": "indicator--5c8d53b3-efc4-4023-a85c-55be6761f710", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f98168-7b18-42af-825e-0d8f60b124c7", "sighting_of_ref": "indicator--5c8d53b3-efc4-4023-a85c-55be6761f710", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ff75c1-9b69-4bba-bf26-f4eb06eb8360", "sighting_of_ref": "indicator--6fe990bb-11e1-4894-bdea-b4ff0f255f9a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f40cb43-f793-4b34-b6cc-e5092255974f", "sighting_of_ref": "indicator--6fe990bb-11e1-4894-bdea-b4ff0f255f9a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c246da4f-50cd-4d4f-a722-f24e4b37d991", "sighting_of_ref": "indicator--d288c5ea-e668-4a73-b986-bce2ce8c7e00", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ce44d0-8ef7-44f9-9469-d72c188b9e0d", "sighting_of_ref": "indicator--d288c5ea-e668-4a73-b986-bce2ce8c7e00", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7db8a9-e4df-4725-84d7-2073f9d813f2", "sighting_of_ref": "indicator--d288c5ea-e668-4a73-b986-bce2ce8c7e00", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06ba86b-f0d0-49fa-b317-227698bbad99", "sighting_of_ref": "indicator--22e57fd6-2a79-41cc-a5ad-e81d848bb57f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78cae1a-b02d-401e-81d3-acd6b07eba7c", "sighting_of_ref": "indicator--22e57fd6-2a79-41cc-a5ad-e81d848bb57f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177b02d6-2c4f-434e-9da1-e2b36e00df13", "sighting_of_ref": "indicator--619e7438-9fab-4e70-858c-bd78da7e8ba9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d8b0e3-b717-4bde-baf9-b387600f5fe8", "sighting_of_ref": "indicator--619e7438-9fab-4e70-858c-bd78da7e8ba9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9b0d90-d0d3-47b9-8b10-ff0172394c8d", "sighting_of_ref": "indicator--619e7438-9fab-4e70-858c-bd78da7e8ba9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a00288e-ca64-4d6a-88b0-42f83c139d8b", "sighting_of_ref": "indicator--5bdabc37-ee68-4251-9bb6-0a41d58ee2ce", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a05f1fb-c0a5-452d-a034-736663fb6138", "sighting_of_ref": "indicator--8934719a-b1f6-4ba8-9171-fb71d63fe956", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a527fc6d-b185-4d51-893f-9d1f8f74b7a1", "sighting_of_ref": "indicator--8934719a-b1f6-4ba8-9171-fb71d63fe956", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540f2a01-d3f5-4be3-b738-c9f5e9d6e449", "sighting_of_ref": "indicator--9396e151-0943-4613-82cb-08c4a9cecf94", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6ad837-5a13-4d46-ac90-1f20b4d0a9e1", "sighting_of_ref": "indicator--ada95f60-df5e-4a98-8752-115f9940424a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c07308e-40c2-44e8-8362-dbb0a59b2e91", "sighting_of_ref": "indicator--8909af10-5d24-4995-98e3-8257364e4c3b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876fa265-abd8-44b8-a772-433b01a0d2e7", "sighting_of_ref": "indicator--8909af10-5d24-4995-98e3-8257364e4c3b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80c1d23-0e9d-49d1-8e71-11962e958c8b", "sighting_of_ref": "indicator--72cbb6fd-d426-4dfe-bad3-8c282ff39c96", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b968b45b-6d50-43fc-8105-fb51414aed93", "sighting_of_ref": "indicator--2f196c17-fe11-4519-b904-14f67c6b5b7a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6c191b-8543-4913-b838-b653fd21da4d", "sighting_of_ref": "indicator--2f196c17-fe11-4519-b904-14f67c6b5b7a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4417f1-2255-4f0c-92de-45b1bacccbcf", "sighting_of_ref": "indicator--2f196c17-fe11-4519-b904-14f67c6b5b7a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf700d72-7c97-46ed-9a22-42f739df9e45", "sighting_of_ref": "indicator--f3081d7e-43e3-43ea-9ac1-d878c75c5136", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19652dbc-e59b-4cf9-9bc8-a9cf01d24ffa", "sighting_of_ref": "indicator--5006e29f-3d0d-4cfa-950a-fca78c930874", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3634d36-df4a-48f8-b847-6a6c71cc4de0", "sighting_of_ref": "indicator--5006e29f-3d0d-4cfa-950a-fca78c930874", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b649b3af-0ef0-497c-9c06-7a49229a95b1", "sighting_of_ref": "indicator--5ffbe941-897a-42e4-944a-79ca3c6cdc61", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a774cf3-d056-44a8-b200-35226fcb49ec", "sighting_of_ref": "indicator--5ffbe941-897a-42e4-944a-79ca3c6cdc61", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7eec21a-c343-4b02-8af2-e0d3c8ff3b1b", "sighting_of_ref": "indicator--ae1d2e0d-f00c-49d8-b4ad-80e1191304e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25988c0f-708d-4496-b6a3-2424e8f29d8c", "sighting_of_ref": "indicator--ae1d2e0d-f00c-49d8-b4ad-80e1191304e6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df85f823-9fc7-480e-ae06-6d3b2411cd02", "sighting_of_ref": "indicator--5ba2cbcb-3d2b-4b51-ae09-8ed8b7b31fb6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82f32c3-5fc8-4c29-9057-5353d688fbd5", "sighting_of_ref": "indicator--5ba2cbcb-3d2b-4b51-ae09-8ed8b7b31fb6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7319f8f2-c2aa-450a-aaac-103f305cd7ac", "sighting_of_ref": "indicator--5ba2cbcb-3d2b-4b51-ae09-8ed8b7b31fb6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93eff8d-9e69-4212-a346-2e86f4db962d", "sighting_of_ref": "indicator--77717a2e-9ba0-44bd-a96e-0bea92e18196", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc859d40-62ef-48f3-87b3-c285c9a953ea", "sighting_of_ref": "indicator--c059bab2-06f8-4c69-85c4-dd4b6e7ad6c1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ddf1aa-9112-4c0a-ba21-bef1901f367a", "sighting_of_ref": "indicator--c059bab2-06f8-4c69-85c4-dd4b6e7ad6c1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f83b162-1294-4490-8f61-9402b22b7980", "sighting_of_ref": "indicator--90d02afe-e734-4286-bcde-9f7510545260", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307269e2-e152-457e-8670-c0ade6771339", "sighting_of_ref": "indicator--90d02afe-e734-4286-bcde-9f7510545260", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482929ef-62f0-4343-b0e4-a14ddfd84dd0", "sighting_of_ref": "indicator--90d02afe-e734-4286-bcde-9f7510545260", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cdb5f5-7cd8-425e-b7de-d3839cbf2efe", "sighting_of_ref": "indicator--8163062a-c278-4aa2-b5fb-d4c5e4f53004", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d446eb-37d9-4ac8-bc99-c7a92aed497c", "sighting_of_ref": "indicator--8163062a-c278-4aa2-b5fb-d4c5e4f53004", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ef09d1-c69f-40e7-886d-44eddffb6273", "sighting_of_ref": "indicator--c8ca3d42-66d7-45e8-8e1a-755b33fca256", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde89e33-5d73-4c9d-9ab7-0591f9ae8933", "sighting_of_ref": "indicator--667755e0-e29f-4fc6-afbb-bdfaaa39cc29", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0ab75e-2350-433c-8efc-c6eb008ed4a6", "sighting_of_ref": "indicator--667755e0-e29f-4fc6-afbb-bdfaaa39cc29", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a182c298-98bd-4a4c-8a26-f9e00b152619", "sighting_of_ref": "indicator--13334150-d53c-47f2-a1b9-5bb7718fef93", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91861251-fdbf-48f6-9acb-af9c75ab4e64", "sighting_of_ref": "indicator--13334150-d53c-47f2-a1b9-5bb7718fef93", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2a2e08-9d4f-4bea-b53b-f33139801756", "sighting_of_ref": "indicator--9d8af83e-67c0-4836-8843-fcc443b116fd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f624e53c-85e0-4f3f-a115-db29d2c88cea", "sighting_of_ref": "indicator--8cde7a85-c154-47df-a50c-4914068e06a4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa65d11f-5ca7-4ca9-a468-848b14e31d7f", "sighting_of_ref": "indicator--8cde7a85-c154-47df-a50c-4914068e06a4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2b8478-8e42-4004-8933-67dd825d986f", "sighting_of_ref": "indicator--dc71ad29-250a-45d5-bbe9-c2928f36729d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52602592-0334-4b44-8596-527363a17263", "sighting_of_ref": "indicator--aab79e79-bf40-4a59-aa11-cf88f59ba670", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5dda21-9e3f-463b-a2f5-79cb788d3431", "sighting_of_ref": "indicator--aab79e79-bf40-4a59-aa11-cf88f59ba670", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fa3d20-bf9b-4729-ba06-4d80afe8c6f2", "sighting_of_ref": "indicator--9fbff667-a5f0-42bc-aacd-ba05a5c8e626", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b4b75e-39ba-4e14-aa1d-9b018fdd2638", "sighting_of_ref": "indicator--d35b4209-f2dc-4b01-804d-85fc2d837f5f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b531f982-588c-4882-8055-955f35e16c12", "sighting_of_ref": "indicator--d35b4209-f2dc-4b01-804d-85fc2d837f5f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376d1ec9-be16-4702-894a-cbce56c80d89", "sighting_of_ref": "indicator--466e707d-7643-4cf6-9c8d-0e0aaf411326", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5172aa3d-d6d3-4831-b385-93eb7f5de27d", "sighting_of_ref": "indicator--466e707d-7643-4cf6-9c8d-0e0aaf411326", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1dbf97-a00e-4a94-acb5-2e6b526e8a74", "sighting_of_ref": "indicator--4579e056-2707-4d3f-b2fc-5eb337a36b70", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e06ffbd-c009-422d-9bed-ac0ca5cab7bb", "sighting_of_ref": "indicator--4579e056-2707-4d3f-b2fc-5eb337a36b70", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89cd993-4535-44fc-9fe2-225dddd0bc15", "sighting_of_ref": "indicator--a125e8f9-e19f-46a3-a832-a6650a05e6d3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3dff1a0-355a-4e1f-9b1b-192866cbfd85", "sighting_of_ref": "indicator--a125e8f9-e19f-46a3-a832-a6650a05e6d3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e41995e-6ed0-4389-9bd4-d2aeb8958d6c", "sighting_of_ref": "indicator--117a7025-9731-466c-b9d8-10f38ab6a6e7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e978fc-8de0-4bbc-978a-515c7a70b862", "sighting_of_ref": "indicator--117a7025-9731-466c-b9d8-10f38ab6a6e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d201a8e5-bf87-440b-813c-454c52b9c91a", "sighting_of_ref": "indicator--117a7025-9731-466c-b9d8-10f38ab6a6e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0639c7f-f4fb-4287-b170-aa5684f08342", "sighting_of_ref": "indicator--d6fb688d-3fb6-4269-b42a-9e558ee760ae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e537b279-4a8e-469e-be7e-d93c1903cc47", "sighting_of_ref": "indicator--d6fb688d-3fb6-4269-b42a-9e558ee760ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe041ce-3818-4c0d-abbe-6779d39c218e", "sighting_of_ref": "indicator--c8e671cf-34da-4fd3-b98d-d5acaee5a3e8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b916d7-b769-4d3b-a037-44d61f387609", "sighting_of_ref": "indicator--c8e671cf-34da-4fd3-b98d-d5acaee5a3e8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c067e60-e1da-41b5-b286-e7c3dfb7e760", "sighting_of_ref": "indicator--0020c2c4-e185-4c3c-abdb-c7640bb7d357", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f0ee8c-ce6a-4cc0-9d46-ef6d431c7338", "sighting_of_ref": "indicator--0020c2c4-e185-4c3c-abdb-c7640bb7d357", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2a1659-2e83-4f53-89ff-c9dfd7df5c46", "sighting_of_ref": "indicator--314717e1-0905-4fea-9d62-5f23d53e3452", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e393abe-d0f7-4ac1-adb4-1407e3a987ab", "sighting_of_ref": "indicator--3b497ee0-5522-4a56-aabe-9b731f020002", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1ccc17-6c0d-4726-9d94-c22c43faeeb4", "sighting_of_ref": "indicator--11ac7bb6-3bd2-41cd-9b1a-ae361c5d1a1c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87618b16-2cec-465c-bb2c-6b80982643c3", "sighting_of_ref": "indicator--1a0d3b95-63e6-48d7-9229-24ac7d550e3c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbb6929-295c-4e0f-8baf-4603e6fb1ef1", "sighting_of_ref": "indicator--469c90cf-9918-4929-8237-881af85fa06c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc7ff1f-e3c0-40f4-96c1-cc1ab9d0b3b2", "sighting_of_ref": "indicator--28dfde6b-282e-4f14-bba1-46b3ba4367d1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96242b7-8f23-4332-a8f8-af4cda495b35", "sighting_of_ref": "indicator--28dfde6b-282e-4f14-bba1-46b3ba4367d1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43df66e7-f405-48d6-8603-691db6943516", "sighting_of_ref": "indicator--b473d4d6-fc89-4fa1-ba61-e7f8f192a630", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719ba743-2e34-48c9-8425-d350ad81c0f1", "sighting_of_ref": "indicator--b473d4d6-fc89-4fa1-ba61-e7f8f192a630", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee2ac7d-b139-4869-9fd8-3d5766b36c6e", "sighting_of_ref": "indicator--377f6289-34ae-443e-8a4e-861cd8459ae8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c318b18-865e-4756-a3f8-5359034bfbce", "sighting_of_ref": "indicator--430c6b66-982c-43fe-b5c1-0cfdb44b8da7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4240b23-0355-47dd-bdcc-472ec42d7ae8", "sighting_of_ref": "indicator--430c6b66-982c-43fe-b5c1-0cfdb44b8da7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75eb0378-103f-407f-b951-fdec27ec43d3", "sighting_of_ref": "indicator--78d46038-ab6d-4d30-b2c9-8470faed9f8c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab338cf5-cbe3-471c-bd9f-802427c9a621", "sighting_of_ref": "indicator--78d46038-ab6d-4d30-b2c9-8470faed9f8c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3b9912-15bb-48bb-b0f9-d5a5283c8722", "sighting_of_ref": "indicator--a12018ff-29df-48f3-9b38-3f6e93067f6a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b442c7f6-91be-4973-be85-03b8cbf9e1c7", "sighting_of_ref": "indicator--14792cbe-eece-467a-87c6-8e196be31c28", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b28655-ac19-4fad-a586-3f2b75dbc670", "sighting_of_ref": "indicator--b7e7ede7-10ac-4f39-805b-66b615cb6b9c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d2680c-f1b1-4134-9195-bd5e2ab02743", "sighting_of_ref": "indicator--308acf48-ee75-4a64-bb6c-03339bf3cb55", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4f99ee-cd01-4966-ab99-92b57ef3b449", "sighting_of_ref": "indicator--dd23b512-5aef-4d74-8a6d-2789018e5958", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19100ef-f90b-4880-bee4-8bbb934aa324", "sighting_of_ref": "indicator--dd23b512-5aef-4d74-8a6d-2789018e5958", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023117ce-7716-40cd-883f-459c77bceac0", "sighting_of_ref": "indicator--23b0a5f9-7e94-40b1-96c2-93bfca95d1d6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f490818f-5c50-47a9-8fe0-5ffe51951b57", "sighting_of_ref": "indicator--d0d809d0-13a2-4368-932b-97ea8c9b8aa0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffceb9a7-ef4f-482f-ac7c-ac249c977925", "sighting_of_ref": "indicator--d0d809d0-13a2-4368-932b-97ea8c9b8aa0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00c2f45-9b14-4325-83b4-620a578878ea", "sighting_of_ref": "indicator--07734ab0-0036-4060-967d-b3fc2190685b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc1ce6f-72c5-4277-9640-049f203ec3b4", "sighting_of_ref": "indicator--07734ab0-0036-4060-967d-b3fc2190685b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aecdd0c-6518-4a6a-9c75-0dbd004f056e", "sighting_of_ref": "indicator--13e0d0f2-018d-4803-ba01-0acbe6ae17f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d080f5d6-1916-4f2e-8fe9-7cfe5eac350f", "sighting_of_ref": "indicator--13e0d0f2-018d-4803-ba01-0acbe6ae17f0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812a9023-01d6-4bfe-8180-1e2ca7a68b5b", "sighting_of_ref": "indicator--a5b5611d-f5ca-4c46-9088-9f72b7e0e49a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8de067-ff6e-4e2e-9f90-9e697bc3f752", "sighting_of_ref": "indicator--30518f48-8822-4453-b059-a07a6c41fd90", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b3c2d9-d7bc-4ad7-bd1b-eb3da2cecafb", "sighting_of_ref": "indicator--30518f48-8822-4453-b059-a07a6c41fd90", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690bc4a4-a856-47e1-90f7-670fe8361b11", "sighting_of_ref": "indicator--30518f48-8822-4453-b059-a07a6c41fd90", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1065fd47-5bfa-4edd-a8f1-2cec065c97c1", "sighting_of_ref": "indicator--03b4e8b3-02e4-4ced-9041-7579a03272a8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda56012-51d2-49a0-98a4-17c740e7c83b", "sighting_of_ref": "indicator--03b4e8b3-02e4-4ced-9041-7579a03272a8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa34931-22ec-439e-b8f8-c03a794ea908", "sighting_of_ref": "indicator--7c8323dd-9c12-4088-8f91-b0cc6e4faa84", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa54ee67-5feb-4445-934e-ac135f5460ac", "sighting_of_ref": "indicator--8186f4f0-611a-429e-81ae-1793657fc446", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb37659-1d50-4b88-bfc8-17f4b26cb49e", "sighting_of_ref": "indicator--ff848256-2cee-4467-b7a4-abff793a5a8a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635a5b04-d804-4e2e-a881-be35bbc097d7", "sighting_of_ref": "indicator--9b655502-1bd6-4eda-9c50-d982ece7f55e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2183e85-a6b6-423b-99ab-f50c21326cd5", "sighting_of_ref": "indicator--39629ce0-25ff-4a64-b8c9-1585c61570ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b04261e-0d79-4c6e-a17b-c360ae1ac43c", "sighting_of_ref": "indicator--c4ee9207-c7da-40fa-a61f-fb7ea17c96ce", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fe7ecb-d505-458d-993b-05fdc3a6e50a", "sighting_of_ref": "indicator--37d259b4-847f-42ac-9e1e-87eaeacb2ccf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbbf413-0e06-485c-af0a-06dd1b6cc564", "sighting_of_ref": "indicator--37d259b4-847f-42ac-9e1e-87eaeacb2ccf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af426906-da72-4870-b39c-f2894fa7bb64", "sighting_of_ref": "indicator--6c19f825-d696-406c-98f0-687b30c8dc8f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b2cf83-56e6-476e-9d4a-cd11710385ce", "sighting_of_ref": "indicator--6c19f825-d696-406c-98f0-687b30c8dc8f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bada94-6fb6-4d9a-aff0-5f8c85f0096b", "sighting_of_ref": "indicator--0c39a128-06ec-4395-8f91-374b3b023334", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a51983-7b43-4905-86a8-d8b2f5da5164", "sighting_of_ref": "indicator--0c39a128-06ec-4395-8f91-374b3b023334", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8e65a7-a624-499c-bfcc-aa6796be1adb", "sighting_of_ref": "indicator--305c26ee-1734-4ea8-a73f-a236637c7465", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078be5bb-ba53-4077-8ea6-758a4d85e193", "sighting_of_ref": "indicator--9987173f-7ec2-4f39-a81b-1fafaf20ac68", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7779cf1-8835-47dd-9f32-c94907fbf2c6", "sighting_of_ref": "indicator--9987173f-7ec2-4f39-a81b-1fafaf20ac68", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3aa963-5267-4a93-bb9f-9f3be1afacfd", "sighting_of_ref": "indicator--9987173f-7ec2-4f39-a81b-1fafaf20ac68", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a407645-6b9d-4867-8986-3966abc07cde", "sighting_of_ref": "indicator--82bdf208-0de0-4607-b13c-e5034b120ee7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490d7acf-cf69-4010-b64a-dfd691208463", "sighting_of_ref": "indicator--82bdf208-0de0-4607-b13c-e5034b120ee7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320f2fe0-985e-4699-8a12-90bd12f1c0a1", "sighting_of_ref": "indicator--82bdf208-0de0-4607-b13c-e5034b120ee7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569e371d-89db-4412-8377-ef85945edf64", "sighting_of_ref": "indicator--4c9ff1ae-4307-4999-95a6-bbd53ca9cd0e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2df2758-bbb2-432b-9e77-bb72cbe7bb85", "sighting_of_ref": "indicator--9a8fbadc-c9d1-403f-b48d-f07c26480b96", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08040e1a-219d-4829-a087-c9d76e551405", "sighting_of_ref": "indicator--9a8fbadc-c9d1-403f-b48d-f07c26480b96", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863dcf02-2582-42cd-ad39-5b289b2a2dbf", "sighting_of_ref": "indicator--fd0f2705-551c-43bc-a3de-78ea0a9bd027", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d160d5-d665-4467-a09a-fbe2c482b4b9", "sighting_of_ref": "indicator--fd0f2705-551c-43bc-a3de-78ea0a9bd027", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c043c8dd-a3b7-472f-b717-8727e49f530b", "sighting_of_ref": "indicator--fd0f2705-551c-43bc-a3de-78ea0a9bd027", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cd23c6-a581-49bb-8ad1-1814f382ca0a", "sighting_of_ref": "indicator--6ff24297-d3b4-4ce1-b94c-b908e4daa8cb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5e87ec-b01b-4b9c-885b-8c9a29dac792", "sighting_of_ref": "indicator--6162694e-af5f-4f24-afb8-24dc71383612", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2d71df-97b9-4646-876c-12fd6efd594f", "sighting_of_ref": "indicator--6162694e-af5f-4f24-afb8-24dc71383612", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfad0b64-524f-4024-9e5d-3c348a527aa7", "sighting_of_ref": "indicator--10a599b4-9d59-4861-8c37-41238ef6b111", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6862f9f5-b7cf-4c04-b2c9-2a13e9addf02", "sighting_of_ref": "indicator--e3384623-63af-4b93-abcf-82a8028bac06", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1c9997-b09e-4e28-9a8f-86662e3076e7", "sighting_of_ref": "indicator--1d0d4610-01a1-4562-8ac3-90edb37647db", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442d3d40-d505-4308-bea2-dee939dc85c7", "sighting_of_ref": "indicator--ca80db7b-62f7-4e40-9283-f5779864ae17", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acd3d77-aa92-4f65-8609-a906cfe636d3", "sighting_of_ref": "indicator--ca80db7b-62f7-4e40-9283-f5779864ae17", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb61987-201c-4893-9ced-8f4ec9ab4d6c", "sighting_of_ref": "indicator--ca80db7b-62f7-4e40-9283-f5779864ae17", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362ea07c-b42f-41ad-ab59-9994d6400bc5", "sighting_of_ref": "indicator--006d7d7c-4d64-4918-9434-ec7564738ccc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa8607b-77f2-4db3-99c2-a294bb305758", "sighting_of_ref": "indicator--006d7d7c-4d64-4918-9434-ec7564738ccc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6f524f-61c4-44a6-a32b-2efffc09818d", "sighting_of_ref": "indicator--2b1077c2-2cc5-444b-9dd4-2a678dfa1939", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5d8bc9-309c-4161-99ef-6350b632c4d7", "sighting_of_ref": "indicator--2b1077c2-2cc5-444b-9dd4-2a678dfa1939", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90a175b-5535-44ad-b166-c60f0086e2cc", "sighting_of_ref": "indicator--2b1077c2-2cc5-444b-9dd4-2a678dfa1939", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465fb2ac-35c3-400e-ae0a-65230b2da516", "sighting_of_ref": "indicator--64f7c6c7-a70a-4b98-ad6d-331c2d0ef70d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b0292a-09da-4be3-9bfc-6b4c9b6a9f83", "sighting_of_ref": "indicator--64f7c6c7-a70a-4b98-ad6d-331c2d0ef70d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0bf553-3e3a-41d3-b3c4-c5a4bed380dd", "sighting_of_ref": "indicator--15630838-1786-44be-ad26-b1e383714549", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366c0ea8-6068-485b-85cc-656491cc21be", "sighting_of_ref": "indicator--15630838-1786-44be-ad26-b1e383714549", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf0802b-c4d1-4121-84e2-aa89feb7dcc5", "sighting_of_ref": "indicator--14dd29ef-5d72-49e2-8312-8057ad7f2023", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e52d5e-1474-45e6-bfae-d650aa49e20c", "sighting_of_ref": "indicator--0163abc3-fdad-4745-8238-9ceb6755b8dc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc54d31-9407-4c8b-9192-c0837151d97a", "sighting_of_ref": "indicator--0163abc3-fdad-4745-8238-9ceb6755b8dc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e86137-4d40-4aca-a37f-d32e3d5efaa4", "sighting_of_ref": "indicator--4a5bed5f-1312-4c04-932c-4cb2a67225f1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c9c710-3127-4c99-a460-40eebca6f8e5", "sighting_of_ref": "indicator--d8138637-f41f-4ab1-906c-9fea1c64e461", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3daf9d7-74f4-4424-9bd6-d2fc2dd0b797", "sighting_of_ref": "indicator--5ab846b8-94e4-4494-92b0-8023f6d29176", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656f6805-c124-4afa-8233-0a1bf67a3995", "sighting_of_ref": "indicator--5ab846b8-94e4-4494-92b0-8023f6d29176", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f06878-f5fa-4e56-a6a2-9d5fb7abeff7", "sighting_of_ref": "indicator--5ab846b8-94e4-4494-92b0-8023f6d29176", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774e950a-8b7b-4361-91aa-d2c98215130d", "sighting_of_ref": "indicator--5bc1b14e-ddd0-4aa4-bb87-801873014d60", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdce48f0-6e23-4372-867c-9a2dfbfe3694", "sighting_of_ref": "indicator--5bc1b14e-ddd0-4aa4-bb87-801873014d60", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f154a9c1-b13c-4ec4-b968-fc9ac5251544", "sighting_of_ref": "indicator--2f4ed3f8-13cf-43f1-ab13-815680bee628", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36769652-b049-4f88-8ac2-04f68f5eb28b", "sighting_of_ref": "indicator--2f4ed3f8-13cf-43f1-ab13-815680bee628", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde0467e-9bc0-4422-85b2-dd7fbd70a3a6", "sighting_of_ref": "indicator--2f4ed3f8-13cf-43f1-ab13-815680bee628", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad37c6a6-a912-4ab6-9893-7932ecdb913a", "sighting_of_ref": "indicator--2f4ed3f8-13cf-43f1-ab13-815680bee628", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70b39f6-7f26-4d7a-9a93-7daa13d8cdb6", "sighting_of_ref": "indicator--b1dd28bf-1d70-417b-8d9a-eecc529eb276", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766216e9-d865-443f-9253-50dc368bcf11", "sighting_of_ref": "indicator--b1dd28bf-1d70-417b-8d9a-eecc529eb276", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a69eeb2-0776-40ec-90a9-7089b05ae48f", "sighting_of_ref": "indicator--b1dd28bf-1d70-417b-8d9a-eecc529eb276", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33f7cba-d1e7-4f08-8540-01c6869b3652", "sighting_of_ref": "indicator--75b49cbc-c7a0-4090-ada1-7b7bb2c607fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad7d654-d315-451c-bdf0-64fe9f69c312", "sighting_of_ref": "indicator--75b49cbc-c7a0-4090-ada1-7b7bb2c607fb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbdadfd-9311-4596-89e7-14362fe9784b", "sighting_of_ref": "indicator--75b49cbc-c7a0-4090-ada1-7b7bb2c607fb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eec3f2e-4650-412d-9f21-dd02a2ee4bd0", "sighting_of_ref": "indicator--75b49cbc-c7a0-4090-ada1-7b7bb2c607fb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b295699-322d-455e-b12d-043bf528f595", "sighting_of_ref": "indicator--28e9a6bd-f04d-49df-b0f7-3d8f80fd0afd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d631138-f8a6-405c-b297-da85ab05a438", "sighting_of_ref": "indicator--503515ce-b17b-49b5-9774-ad4814ebc5b8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d6a77e-4128-465c-8a12-caa3fb89149e", "sighting_of_ref": "indicator--503515ce-b17b-49b5-9774-ad4814ebc5b8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37af2251-e1e0-428f-ad13-99d97dbf13db", "sighting_of_ref": "indicator--503515ce-b17b-49b5-9774-ad4814ebc5b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d911cc0-a5c8-4772-8581-40d0d5381d0d", "sighting_of_ref": "indicator--32139d39-8478-4e29-b5da-c28a6eb70343", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e9f3b7-f7ff-4ca2-97a7-852fa5bc35bb", "sighting_of_ref": "indicator--32139d39-8478-4e29-b5da-c28a6eb70343", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a6086e-4255-4d89-aef8-885dc92c92e4", "sighting_of_ref": "indicator--32139d39-8478-4e29-b5da-c28a6eb70343", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe73fa6-0fa9-480c-83b3-fc2f262c4cf0", "sighting_of_ref": "indicator--ef6bf13f-a3a6-4b6f-b285-75087466f42a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f1b448-71d1-4160-8193-2f02a5fe8308", "sighting_of_ref": "indicator--ef6bf13f-a3a6-4b6f-b285-75087466f42a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5279110-ad2d-47ee-8026-43e9e375c828", "sighting_of_ref": "indicator--c796de1c-b6b1-49a0-9f62-28902112b7f5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0546c587-f613-48ec-a35e-f6a1214e6b3a", "sighting_of_ref": "indicator--2a164d25-694a-45e9-8e62-2efd21a4b4ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae4beef-514e-46c9-82e9-f67153893f1b", "sighting_of_ref": "indicator--2a164d25-694a-45e9-8e62-2efd21a4b4ab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a260c5-4551-4e96-9ee1-2daaf9b65eb5", "sighting_of_ref": "indicator--8fcf0db8-348a-4848-9e88-b4fe44669dda", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d81b44-9321-4eda-b1e6-22361e046543", "sighting_of_ref": "indicator--dae6b604-edaf-4e40-abd1-5a2a91929911", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda878dc-d171-48b5-8208-d7b529c379a3", "sighting_of_ref": "indicator--dae6b604-edaf-4e40-abd1-5a2a91929911", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d19aa5-22e8-4a08-9181-283051b7240d", "sighting_of_ref": "indicator--dae6b604-edaf-4e40-abd1-5a2a91929911", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6071dcd8-b84d-4560-9afb-f202ba5dc201", "sighting_of_ref": "indicator--6b688d9a-0018-4fea-891b-a0071c2952d6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c613115b-c054-43c8-bcca-2024230fed02", "sighting_of_ref": "indicator--86289787-363e-4154-a251-6c1883062de6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafffe14-4ee4-45f7-9d70-c4ac3db0a105", "sighting_of_ref": "indicator--86289787-363e-4154-a251-6c1883062de6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7515c212-34a2-4af8-bd32-34ac6e2778d3", "sighting_of_ref": "indicator--746e914e-dd91-4e25-82f4-d5292074c229", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9841055-afcb-4a47-ac0b-e74ac19d3c46", "sighting_of_ref": "indicator--c904332a-8f68-40a6-8662-0081aafdd9a5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ff16c3-860f-4d74-af11-bd7ca5b3a023", "sighting_of_ref": "indicator--c904332a-8f68-40a6-8662-0081aafdd9a5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268c3f09-78f3-44c9-87b3-9cb48f14f389", "sighting_of_ref": "indicator--c904332a-8f68-40a6-8662-0081aafdd9a5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2da0b68-ced3-4dde-bfe0-0897d8452d2c", "sighting_of_ref": "indicator--15573c08-a404-4784-b699-5cbd3d00ecef", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ac0afa-2aa7-4991-b08c-5b8323365e82", "sighting_of_ref": "indicator--15573c08-a404-4784-b699-5cbd3d00ecef", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8665da7-6f7f-4002-a62f-ab42b9882002", "sighting_of_ref": "indicator--7426d928-49af-452c-a829-40d812772b78", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851a77b2-e19e-4058-b841-9ce945eda510", "sighting_of_ref": "indicator--ae923093-6afc-457a-aac4-de242d5e2695", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a426bd20-9e07-4c5c-b779-87fc0c3edf44", "sighting_of_ref": "indicator--ae923093-6afc-457a-aac4-de242d5e2695", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e04cec6-e141-487d-a5de-dea26558bb1d", "sighting_of_ref": "indicator--5aa92809-2a1d-4ff4-a6b6-7bda0317bd08", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c462539-3812-4e90-a277-8c873cee58e7", "sighting_of_ref": "indicator--5aa92809-2a1d-4ff4-a6b6-7bda0317bd08", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96ba7a9-4faf-40fc-85fb-68d0ba294c9c", "sighting_of_ref": "indicator--3f6b0778-6fb2-4918-a955-81a4be596567", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca440a6e-012e-48dc-a2dd-c7770ee031c7", "sighting_of_ref": "indicator--a3acf143-d280-4ee5-b67e-b6c859c6aa4f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef40310-dfa3-4d38-9ac1-0fce46d6a358", "sighting_of_ref": "indicator--d2b4b094-fd35-4f56-8025-3d6b32147222", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860d76ec-f568-4f9e-8565-a33d660f0f7f", "sighting_of_ref": "indicator--c3841b04-aef7-4ce0-b8b7-c267674ae9dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df49475-de2c-4d97-9f2d-aef53adb1117", "sighting_of_ref": "indicator--082ecf2b-6c4e-46a4-a53f-f20532cda2fc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9097128-5ff4-4bf1-bdcf-f95a065743f7", "sighting_of_ref": "indicator--95ccc8e7-736c-4431-a5da-48265303756f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294bcc59-9e18-4c43-bb15-034ba7d9a130", "sighting_of_ref": "indicator--95ccc8e7-736c-4431-a5da-48265303756f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4bd811b-b080-42ec-8e2f-88efaee903e9", "sighting_of_ref": "indicator--9576740f-174b-4f18-81f2-f4985dd5b1d6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a910eb-fa38-4e98-a6ea-1c0b40259beb", "sighting_of_ref": "indicator--9576740f-174b-4f18-81f2-f4985dd5b1d6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3525e62-84b2-443b-b872-0a8df3c5790d", "sighting_of_ref": "indicator--48ebd3b5-6c0f-46c5-be07-c6af2a9c3172", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f514ada-a635-4757-8285-eafc5b7f20e6", "sighting_of_ref": "indicator--d0ba15a6-4bcf-4214-98c9-dd1c5ed9e130", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c029250c-029c-48f4-9e11-4605c4ced979", "sighting_of_ref": "indicator--d0ba15a6-4bcf-4214-98c9-dd1c5ed9e130", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0429707-6478-475b-98b3-a6cd3026c874", "sighting_of_ref": "indicator--989ec830-2539-470f-a651-ae966189a2dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc5340f-88e4-44af-ac39-f30d7f9eb3be", "sighting_of_ref": "indicator--989ec830-2539-470f-a651-ae966189a2dc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3e8308-e9aa-4bc2-bb84-f05da1dce9a0", "sighting_of_ref": "indicator--85102ad9-7ebc-4af5-8736-524a5274f1f3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d10171-6f5f-41f2-90f3-3d2180db2397", "sighting_of_ref": "indicator--de510a68-01e2-4ddd-8b35-e0f979be6674", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20a275b-def3-4d91-ac31-d832cc569cb6", "sighting_of_ref": "indicator--de510a68-01e2-4ddd-8b35-e0f979be6674", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e01040-23bc-45f2-a86d-dc6218391060", "sighting_of_ref": "indicator--78cf19ee-1834-4cb2-847a-7ea6fc2e54ba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddb25b5-397c-4718-97d0-d49feb6d253f", "sighting_of_ref": "indicator--78cf19ee-1834-4cb2-847a-7ea6fc2e54ba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbc4be7-6ce8-4dc5-9aac-ab714de4090f", "sighting_of_ref": "indicator--36423658-4eba-41d2-8073-f1a834965eb6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069e995f-c6b4-49b7-b4b4-1e0ad921b506", "sighting_of_ref": "indicator--360ecc9b-e4e6-44a6-b777-cac2331c673f", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d088c08f-b542-4ad1-89e5-e3830f4ff4e9", "sighting_of_ref": "indicator--07b64474-c518-4833-88ca-41e81f60ba41", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c9f776-5314-4fd0-8a61-f86c4ef128c8", "sighting_of_ref": "indicator--2cf07b7f-a2ef-46fc-bb63-996a2905aa3c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34732e7-99b9-484f-8ce6-b8c00afbfe02", "sighting_of_ref": "indicator--c9dbbbbc-0cfa-4685-a13c-872e3a8a4da3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a35a5af-dd21-4e0f-994c-1c99d01d1dd1", "sighting_of_ref": "indicator--4733bb6c-51d8-4bfb-a9a5-c18517592f22", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcc38fe-1afc-43ec-8ae2-9f24f4ca9213", "sighting_of_ref": "indicator--1f885335-a2bd-4d43-b8c6-97eba64e063f", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135a378b-8088-4a3d-9f27-87237af79b98", "sighting_of_ref": "indicator--c3181851-ed34-4d2d-bfd1-73c3f1430d01", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2349208e-c66a-42f7-9fea-cd89c63731a2", "sighting_of_ref": "indicator--c4159399-07a4-4399-8ea7-27aad6574568", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561fa3b0-9315-4a95-819e-4e350efb972f", "sighting_of_ref": "indicator--43041712-6833-4612-8f32-b39177b36496", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c493cc0-2258-4336-9289-6d11a932e59f", "sighting_of_ref": "indicator--6a62095c-77a2-42c5-81e7-04a38de1206b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90ad127-f687-4f9c-9e85-ba1178567c04", "sighting_of_ref": "indicator--6a62095c-77a2-42c5-81e7-04a38de1206b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2bcf5d-82be-4b66-ae1c-e290fdfd2fb5", "sighting_of_ref": "indicator--2febd0f6-ff71-4aad-9943-35a40fbae00f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a89ed26-b60f-4bf0-a069-bb976ea9e600", "sighting_of_ref": "indicator--2febd0f6-ff71-4aad-9943-35a40fbae00f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d26553-7db2-467d-8cf5-4a8ca1fd0ca4", "sighting_of_ref": "indicator--2febd0f6-ff71-4aad-9943-35a40fbae00f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb20234-6d64-4f58-b2a2-0bd6e21722db", "sighting_of_ref": "indicator--db6ba19d-4cd0-424f-877c-5cd180b21218", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7079a9c9-3910-445a-b66d-034ee75d33e5", "sighting_of_ref": "indicator--db6ba19d-4cd0-424f-877c-5cd180b21218", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c61c6a9-fd39-4da0-a288-a2f14e0419cd", "sighting_of_ref": "indicator--db6ba19d-4cd0-424f-877c-5cd180b21218", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67e29c5-c9c9-49f1-ac50-0fa07980d6fe", "sighting_of_ref": "indicator--4e95a5ca-fe8c-437f-b204-cbd6ad474970", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e5fc63-f40c-4127-b7bc-179cd9fa19d8", "sighting_of_ref": "indicator--69dd5177-3bde-4d9d-970e-159d2c0894ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a06d49a-7bec-49ea-948b-c8c6b93924de", "sighting_of_ref": "indicator--9c7151e3-5cb3-427c-b229-23355b2b7ba5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe57db3-bb80-4a6e-b1d4-ed88031ea213", "sighting_of_ref": "indicator--f79a7911-97cd-4643-9dd4-84da5d472585", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53dafb7-5453-4455-99e5-aadf3b168174", "sighting_of_ref": "indicator--a6b4e6ac-3152-4606-a818-ee2ce8f264e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a2b521-8121-4314-993f-82e6632b9ccc", "sighting_of_ref": "indicator--687ae011-4bd3-41d7-afab-b70f9ba67389", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9681f40a-f56f-460d-a723-4c3953267de9", "sighting_of_ref": "indicator--b2fc6281-eaf7-47a1-aae0-7958f6b8f274", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29ef231-755b-4b30-bb96-3f8970082e3d", "sighting_of_ref": "indicator--ae5a5778-197b-43a3-bdbb-caa51ec77f07", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898085fa-cea6-4949-b6ea-4c1f2b9cb3e6", "sighting_of_ref": "indicator--ae5a5778-197b-43a3-bdbb-caa51ec77f07", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758a62f6-38d2-4956-b846-43650a9eedfa", "sighting_of_ref": "indicator--1d0d92ec-400a-4d71-a76b-b66e94c1da95", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42da42d5-7a8b-4acc-8a34-d408a9b64682", "sighting_of_ref": "indicator--5cdead70-73f0-45fd-8b3a-4bcbafd37a04", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bf4ee6-3b64-461e-98d2-a0c7cd0f8d02", "sighting_of_ref": "indicator--bda9ea94-a449-4d13-8ad3-79e886aacee9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668f6983-59f7-4851-9129-5cd77cd137d8", "sighting_of_ref": "indicator--357bb7d5-940c-4eb8-9e36-59c4463653d5", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d24a389-94eb-4044-b7aa-db2c47465360", "sighting_of_ref": "indicator--010df7ef-f472-4df8-b884-de212d483abb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b847bf-f550-4436-a9cc-7f6ac86ec415", "sighting_of_ref": "indicator--cbda18b1-3539-4d61-8c8f-a445ff0379c0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb29497a-46fa-4710-903a-fdd67de2259e", "sighting_of_ref": "indicator--fe4e876b-f50a-40cc-b451-4b14d65684aa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e805c3-aafc-48db-9c71-b79934a1a14e", "sighting_of_ref": "indicator--55e576b9-04bd-4391-82e2-9b27a87895db", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49704c03-db54-4e53-a241-ea4169c12ac0", "sighting_of_ref": "indicator--55e576b9-04bd-4391-82e2-9b27a87895db", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf51f20-97ca-4bd6-8b63-254317347e48", "sighting_of_ref": "indicator--55e576b9-04bd-4391-82e2-9b27a87895db", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485713f5-7755-463b-a541-f90a55847927", "sighting_of_ref": "indicator--224b030d-429f-425b-8d5d-fa7ed090232f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90445f8e-1e52-44b2-a83e-c54ce357e077", "sighting_of_ref": "indicator--224b030d-429f-425b-8d5d-fa7ed090232f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b5eeea-fa2b-4e8c-82f0-eac49a1340ee", "sighting_of_ref": "indicator--224b030d-429f-425b-8d5d-fa7ed090232f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78dff000-84c9-4239-bc05-d9c06c0909a2", "sighting_of_ref": "indicator--e5796185-c7c3-4bcf-9c95-23217e16bad5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34aedb87-e494-4f49-b43f-c57f524e58f3", "sighting_of_ref": "indicator--e5796185-c7c3-4bcf-9c95-23217e16bad5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511d9fe7-9413-4940-8c83-a7913a866f4f", "sighting_of_ref": "indicator--e5796185-c7c3-4bcf-9c95-23217e16bad5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f563981-bead-4eaf-8473-da1ccd593082", "sighting_of_ref": "indicator--1ce1d87d-ceca-43ad-81da-911dc4bd3f96", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ff579c-69ca-4c6b-a375-8df3c1d90157", "sighting_of_ref": "indicator--1ce1d87d-ceca-43ad-81da-911dc4bd3f96", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212b01eb-9e95-43e4-a49c-98c3115d94e2", "sighting_of_ref": "indicator--1ce1d87d-ceca-43ad-81da-911dc4bd3f96", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c9b871-a691-4724-90da-d541b3a3d8d7", "sighting_of_ref": "indicator--fba38993-ea3f-4b76-91f8-3f77b1e2319f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e8692b-a68f-4cef-8f8a-f44324b2d228", "sighting_of_ref": "indicator--1fe70396-37b4-45d0-acb5-7d1d65de2caf", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ac62b5-3a3e-4875-8720-80181a0f6925", "sighting_of_ref": "indicator--6101176b-a1a4-4540-b0b5-0a80c2b7922d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca60b91-b408-4c3c-b16f-738cf19427aa", "sighting_of_ref": "indicator--eeb4653f-1623-4dff-97c1-094526531042", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e2e653-fa76-43cb-a92b-fdfa22d990b9", "sighting_of_ref": "indicator--eeb4653f-1623-4dff-97c1-094526531042", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d81f38-1e6c-4e8a-9765-67b8da7719cd", "sighting_of_ref": "indicator--eeb4653f-1623-4dff-97c1-094526531042", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7208f6-844e-4563-925a-b2d80ab53ac0", "sighting_of_ref": "indicator--f4b80652-7411-4688-a440-74a758d734f8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cd46a5-4a44-46c6-b1a7-7375a60b9e92", "sighting_of_ref": "indicator--f4b80652-7411-4688-a440-74a758d734f8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--decd9b4f-68d5-4e64-bae0-2084a5936bdc", "sighting_of_ref": "indicator--67bc62a6-7eba-429b-b94f-ca40c24892c0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4c86c3-7cf8-4d8c-9641-0baafe24eb24", "sighting_of_ref": "indicator--67bc62a6-7eba-429b-b94f-ca40c24892c0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bd1814-ffca-4da1-a620-b92de9b0e531", "sighting_of_ref": "indicator--67bc62a6-7eba-429b-b94f-ca40c24892c0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3733f7e9-2935-4478-93ba-86f9853dcb29", "sighting_of_ref": "indicator--0e482be6-f89c-4867-8bf8-d11bacce03fc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521134c3-8fef-47c1-8769-f2878c2a6c81", "sighting_of_ref": "indicator--75301ca8-5a6c-46d1-af08-0065f8c5d7e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b2c694-564c-4174-b934-1643398bf0d2", "sighting_of_ref": "indicator--75301ca8-5a6c-46d1-af08-0065f8c5d7e6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdbc68b-5b09-4b25-afb8-de558bfe4f5d", "sighting_of_ref": "indicator--c3ffffcc-0d3d-4e78-8195-7fe8e7dc4732", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5220f8a3-e604-4b69-9f4e-7a878f16be97", "sighting_of_ref": "indicator--5c5e3498-7146-4066-8612-81ae9cae7594", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d4173a-fea3-42dc-a904-796ec4115bc0", "sighting_of_ref": "indicator--5c5e3498-7146-4066-8612-81ae9cae7594", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1256ec24-25e0-4f68-8958-d7aa11c5b1a8", "sighting_of_ref": "indicator--5c5e3498-7146-4066-8612-81ae9cae7594", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7dce75b-acab-4f41-8f67-65e7aba003d5", "sighting_of_ref": "indicator--adae7714-0666-434a-b4a9-d555270bcef7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c52dfe-0129-47eb-b419-a349fdb0714c", "sighting_of_ref": "indicator--adae7714-0666-434a-b4a9-d555270bcef7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4c2524-5e77-4989-a8a8-87423a4bbec8", "sighting_of_ref": "indicator--adae7714-0666-434a-b4a9-d555270bcef7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae636f8e-ae40-449b-9b6e-87ef62bab77d", "sighting_of_ref": "indicator--0cad641a-616f-45ab-93d7-c97babbcbe4b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13c9c96-0d56-4481-9a52-6a0bd0af4a2e", "sighting_of_ref": "indicator--25f81963-c245-4cfc-96fa-8c327c497ea4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39a5ecd-f885-4ac3-8df5-1b4e5b87c23c", "sighting_of_ref": "indicator--25f81963-c245-4cfc-96fa-8c327c497ea4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6439416-9261-4390-8570-49ab2d3045a9", "sighting_of_ref": "indicator--9e1a6c54-fe4d-4a9c-bbee-0365c6839cfd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da759f5a-d9ef-4804-a072-24155d4600c5", "sighting_of_ref": "indicator--9e1a6c54-fe4d-4a9c-bbee-0365c6839cfd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30e7b50-296b-48ee-976d-d58024f76198", "sighting_of_ref": "indicator--9e1a6c54-fe4d-4a9c-bbee-0365c6839cfd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa91627-f8aa-4d83-9cb3-b8bc352b1e8b", "sighting_of_ref": "indicator--a0607c63-4f35-4e10-9ac8-36b38668e875", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6b671b-720a-4701-918e-6ef87edc9ab5", "sighting_of_ref": "indicator--d3521017-5e68-45da-845d-aac1f17af542", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92de442e-6c83-4237-b809-108a1ecfc845", "sighting_of_ref": "indicator--e98473d8-8198-4216-9dc7-14eed560bdc3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456b217d-7016-480b-aed0-f1938bfc1624", "sighting_of_ref": "indicator--f537eea6-e744-45c5-b297-b6d8b05a5869", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdcec04-6c5f-4bee-9c43-1e5960a9779c", "sighting_of_ref": "indicator--49f21cc6-09d4-48f8-8f4f-ffbe928c5ab8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881c2ea0-8a1c-472d-9561-d552ab148dce", "sighting_of_ref": "indicator--bbff357a-402b-41c2-98e6-4230647cc160", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171123cb-9d47-43db-8b32-074a7a4d19f0", "sighting_of_ref": "indicator--bbff357a-402b-41c2-98e6-4230647cc160", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b4a56a-e299-4667-96a7-c5ff474a15e1", "sighting_of_ref": "indicator--bbff357a-402b-41c2-98e6-4230647cc160", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3989b7d-b8a3-4cdb-85dd-420c82f45e5c", "sighting_of_ref": "indicator--3b9c0195-1995-4edb-b55d-1bd5e8192c87", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be53531b-7c3f-4473-88bb-6cf3069929ad", "sighting_of_ref": "indicator--3b9c0195-1995-4edb-b55d-1bd5e8192c87", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba6df13-ca15-4618-9fbb-4b251b449c48", "sighting_of_ref": "indicator--929f411a-0149-43e9-8739-7587c1763266", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5978d5e-ef91-4caa-95d3-0069e9686f7a", "sighting_of_ref": "indicator--929f411a-0149-43e9-8739-7587c1763266", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62964260-d890-48f9-8469-8f16b91f83b3", "sighting_of_ref": "indicator--929f411a-0149-43e9-8739-7587c1763266", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299dce83-5aee-4709-bd1e-e2c8e0e47aa2", "sighting_of_ref": "indicator--3ffe0506-1a38-4ae9-aa89-889bf6dedc74", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a98111-7786-44c1-b8b1-ee79c5175055", "sighting_of_ref": "indicator--3ffe0506-1a38-4ae9-aa89-889bf6dedc74", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d32f5dd-af2b-4aad-abbc-40da89ada0ea", "sighting_of_ref": "indicator--7c0c7805-9d3d-4678-a2e7-868b03b2cb83", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5aa79c-c503-4de0-a90f-eba8c554f78b", "sighting_of_ref": "indicator--7c0c7805-9d3d-4678-a2e7-868b03b2cb83", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4dc60f-e87d-47a4-9e4d-5f183239816f", "sighting_of_ref": "indicator--7c0c7805-9d3d-4678-a2e7-868b03b2cb83", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880044f6-527d-439f-bf8c-6190f986b5f3", "sighting_of_ref": "indicator--2acb14b0-6362-4116-ab7d-09621999b261", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efe0883-d97e-415a-82a0-9cb24b784f83", "sighting_of_ref": "indicator--142ca4ba-17ce-4a4b-889b-d50214cf53ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8790cd81-a6f7-4f9d-9161-6b7970945730", "sighting_of_ref": "indicator--f340ace6-1e17-4373-9672-a3536790cca5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c2d8d9-797c-43b4-a4f4-74f98f1e457e", "sighting_of_ref": "indicator--f340ace6-1e17-4373-9672-a3536790cca5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65de5351-1bc3-44ed-8c55-87988975f635", "sighting_of_ref": "indicator--493a856a-8d39-475f-9d76-1156c2dc7e3e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bfca96-0ab5-4dcf-873c-e99434fa5c4e", "sighting_of_ref": "indicator--493a856a-8d39-475f-9d76-1156c2dc7e3e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd63a29-8b1b-4e5b-85d5-505268064fa4", "sighting_of_ref": "indicator--829440c5-1b37-452c-ae31-746bcc3e3ad3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820263bb-fdc2-4415-93fe-0895860134cf", "sighting_of_ref": "indicator--563c971d-0aab-418c-93d5-fd77d3c7e187", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f89c39-f473-4065-abde-fbca91c87ea8", "sighting_of_ref": "indicator--f2b2b7d4-75b0-4c10-9a09-eb612bbf902c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a2e7b7-cda2-4668-aff6-77cfcff78eba", "sighting_of_ref": "indicator--f2b2b7d4-75b0-4c10-9a09-eb612bbf902c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d7ec08-da38-43e0-8f1f-5e6bd3488e2f", "sighting_of_ref": "indicator--5b4096dd-f70e-477b-84de-b8b8dc6664e3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fa72e9-a20d-4768-8d6c-5484c33bb7e1", "sighting_of_ref": "indicator--5b4096dd-f70e-477b-84de-b8b8dc6664e3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ca2954-18fa-4170-b49b-5c9d8690aa42", "sighting_of_ref": "indicator--5b4096dd-f70e-477b-84de-b8b8dc6664e3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f7f7a6-5e77-482b-ac21-4e2f22e81961", "sighting_of_ref": "indicator--2f03f055-8b72-412e-991d-eb694b1818ca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfdac66-1d0a-4ccb-b79c-53dc4aaf9ae0", "sighting_of_ref": "indicator--eb7768e2-9834-47ab-8e6c-a7a345529d65", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8125b65f-6dd7-4aba-a420-52b6ffba13a7", "sighting_of_ref": "indicator--cc7a43e3-ff40-439d-a6d0-4d2821e1527a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69003a4-74f2-4ce8-8e7f-b520e2b6df1b", "sighting_of_ref": "indicator--00c663a1-0f17-4aa0-903d-5597072fc6de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c516a3a-95a6-449f-8111-6350d9924c6f", "sighting_of_ref": "indicator--6573351e-2fa9-4337-868a-2cc62799595b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5559d08c-6e24-4476-b61e-ba44754c10fc", "sighting_of_ref": "indicator--4cc9c498-e117-4ff4-9f78-e85f6294cf8f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa029975-07e5-4021-b3c1-bbc415d48943", "sighting_of_ref": "indicator--7a0b09d3-1f70-45f5-8a86-3d2cbb3b276a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474a5c34-18a9-4e31-8c0d-90d2cdd17302", "sighting_of_ref": "indicator--d93bddba-8880-4815-847a-1fb0aa5da18a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4660c5f-38a5-4e4d-86d1-7a0a411a8abf", "sighting_of_ref": "indicator--dde180b7-fef8-4af1-81e8-651a47d5797c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbcd313-7dee-4584-a134-025ff13bd702", "sighting_of_ref": "indicator--e809e8f1-d19f-4748-9bec-1688d17eb8da", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0198f0-0999-470e-a271-49ac1af42cdc", "sighting_of_ref": "indicator--e9086695-d57b-488f-a098-9db39fd16ccf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204f9887-652d-48c7-81af-1a5bef6c2871", "sighting_of_ref": "indicator--d3f8f517-8277-4e9a-adc4-1626918cb6fd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a493ea-b3be-435f-94fd-0ee0407cdf5d", "sighting_of_ref": "indicator--1f340933-3b2d-463f-8c37-0d58135acc70", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af88d31c-b3b9-4d12-adb4-0d2a6eaa9476", "sighting_of_ref": "indicator--9e0bc0e8-ab4b-40d1-bf23-9f7884584ddc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22709f6b-efe5-44bb-b4f0-dcbe5caf19ab", "sighting_of_ref": "indicator--bd1dfdb1-5b06-433f-ba25-696ad9800f0d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4751da2-a655-4107-860b-c73f116bc35a", "sighting_of_ref": "indicator--50167674-c707-412d-be77-c8f12a6fea24", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989a6be3-df87-4bca-9c69-cb1e32585e92", "sighting_of_ref": "indicator--8c24d06f-d06c-4fb3-89f1-bcf688045eaf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7d6662-7c70-499f-b2fc-7886cf2a712a", "sighting_of_ref": "indicator--35b6e2d7-0d3c-4722-8ced-366882d265ae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25801a05-ce4e-4630-98ce-f824596333d6", "sighting_of_ref": "indicator--08414f66-ae87-4c12-8f23-c058c122e67d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50b804c-1ea4-4e1c-a27a-fbd8167b7ae2", "sighting_of_ref": "indicator--4aec01d9-750f-42e2-9e5a-edbc793afe21", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4aa62a-ee1d-4dd3-b953-739707deff65", "sighting_of_ref": "indicator--5c14352d-90cb-4e6d-bc63-89b00d874038", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391a4d67-15ca-4161-a882-4a0e017d991c", "sighting_of_ref": "indicator--c58dd175-1c14-4329-8ccb-4f1074cfdb13", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c2a378-a462-49ff-ad5d-1b3319834c3f", "sighting_of_ref": "indicator--bcc6a983-7569-431d-9c1d-7c509814bdcc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c3e6a7-15de-47df-bf75-0a7c9e90b56d", "sighting_of_ref": "indicator--8bf9c427-8307-4ea0-b78c-72e0c52d9863", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bd8f63-aabb-412d-9f08-7241208404a6", "sighting_of_ref": "indicator--4c1ce51b-7f4a-469d-80be-4286e8a96b92", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1fcc6d-277d-4d01-aad8-0051b4a0ba41", "sighting_of_ref": "indicator--3703f2a2-7fc6-4b2e-83c5-de3478330300", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb03fefa-6704-4077-a221-bff3162b96f6", "sighting_of_ref": "indicator--a9086fba-2faf-4eac-bb6b-8f0d8b8d04cb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7042c9-975b-4098-a2c1-6f13ed530253", "sighting_of_ref": "indicator--361f2aa4-6e24-4c47-b810-2b08442ad862", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6680d84d-ad4e-4641-9d69-fd3216f4805b", "sighting_of_ref": "indicator--98303871-0851-46dd-9a0e-0f8548456631", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c30817-9726-42ab-9d0f-9da95acff4ff", "sighting_of_ref": "indicator--85f36ad0-f207-4872-b53e-57226be228cd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6947145f-673a-4b58-a638-061802cfd465", "sighting_of_ref": "indicator--e69d5b55-fef2-4ba8-b408-7994e5468509", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d2d9c7-c8e0-4c0f-a8d3-e0e69f9700e6", "sighting_of_ref": "indicator--914fbd1a-dd8b-4d2e-9c22-7b79a7021b5e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cde631-4a5e-4779-ae61-4d2e2d015a52", "sighting_of_ref": "indicator--ab91649e-03d6-494b-93a6-1e0a2368e141", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c515214-01e7-4d62-a430-25d709c57fdf", "sighting_of_ref": "indicator--e852b042-8ab0-411e-aca3-e35a2e433055", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a1e486-a51c-441a-89c9-fb84c1c98d15", "sighting_of_ref": "indicator--dda2e3f9-4d3a-4706-aa83-c45ed0ae654a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b395c9f5-a282-4a9a-9ba8-fb7ed166c07b", "sighting_of_ref": "indicator--2aef706c-7e5a-48de-a118-1980e4ea8456", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c886e9-d189-4970-baf5-771d98b21c99", "sighting_of_ref": "indicator--2aef706c-7e5a-48de-a118-1980e4ea8456", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59f2e68-2923-4729-babd-8570f8bece53", "sighting_of_ref": "indicator--2aef706c-7e5a-48de-a118-1980e4ea8456", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16bb55e-d2c7-4894-bf3a-7edc670f17e4", "sighting_of_ref": "indicator--c9c01231-8ca8-4748-8ab0-9cba2a987939", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d11cce3-da32-46d7-a5d7-17167cd15e3e", "sighting_of_ref": "indicator--59201008-0c6a-4228-8c97-07a8318b9153", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6116f491-6663-4d66-8d86-b1ff2cda75dd", "sighting_of_ref": "indicator--59201008-0c6a-4228-8c97-07a8318b9153", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4693e0ff-8eac-420b-b862-d59f576aff27", "sighting_of_ref": "indicator--2cc4bf6a-94b0-4683-a796-26660996e57c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2241dd9-6649-4496-b1d5-d6170a75602e", "sighting_of_ref": "indicator--ceed4408-9b58-46b0-9d44-f4600a0487bf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689b98ae-6280-4331-92e5-a12f3b0b48f2", "sighting_of_ref": "indicator--04e58fd7-d1f1-4b52-9a61-0b848077e442", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d9717a-2bfd-4b4c-b0f8-6571549e72a9", "sighting_of_ref": "indicator--04e58fd7-d1f1-4b52-9a61-0b848077e442", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17118ab1-70e0-4373-8b28-669dcbf71a40", "sighting_of_ref": "indicator--e872dbf9-dca0-4d04-ad09-10d98034023e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0586205-2182-4666-ad14-a6c3b8b400f8", "sighting_of_ref": "indicator--82775a96-7c60-483a-8fd3-6af8fffa2393", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7c3d84-80fd-4d90-a608-0ed10de6ba4f", "sighting_of_ref": "indicator--82775a96-7c60-483a-8fd3-6af8fffa2393", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e615903f-b519-455b-9127-f021ce4067d1", "sighting_of_ref": "indicator--f43641fc-339b-444b-a290-a06b16a6edb6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1898080-c84f-4410-9e35-e44d9e6844ea", "sighting_of_ref": "indicator--f43641fc-339b-444b-a290-a06b16a6edb6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf9ca12-0d92-4678-b405-0479a6be792b", "sighting_of_ref": "indicator--f43641fc-339b-444b-a290-a06b16a6edb6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946e45f9-0b92-46cc-afa7-ed89a15490dd", "sighting_of_ref": "indicator--9527150d-c253-4519-b95d-70a7ec75e2b6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ed00db-61c7-46ab-9f80-63b4ee95dad6", "sighting_of_ref": "indicator--9527150d-c253-4519-b95d-70a7ec75e2b6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d18a18-14bf-45be-8ec9-76fecd8f0e2b", "sighting_of_ref": "indicator--9527150d-c253-4519-b95d-70a7ec75e2b6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09038f34-c56f-4ee6-af18-1ccb71d991f8", "sighting_of_ref": "indicator--17438f8e-471f-4318-b0cf-0467412e7b16", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ef2f02-1ec7-4d80-afdf-2fba22e0179f", "sighting_of_ref": "indicator--17438f8e-471f-4318-b0cf-0467412e7b16", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0037b7a-cc70-4021-9ccd-ae59e67adac8", "sighting_of_ref": "indicator--bbadd146-0d2e-4950-a165-3b7b0b4d0c4c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7edc1a-c6bd-4ac5-9b74-77f029c88f7d", "sighting_of_ref": "indicator--bbadd146-0d2e-4950-a165-3b7b0b4d0c4c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ec1c6a-4912-46b4-9c1a-434d41092ae7", "sighting_of_ref": "indicator--55c28d56-32c4-462c-be1f-f8bb8f68ee9e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb82e59a-ed87-40fb-87ed-2c083d6bea54", "sighting_of_ref": "indicator--15f96811-cff7-488e-8a6a-b98badee3eab", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776741e3-0f61-4f40-909c-e1934ed3569b", "sighting_of_ref": "indicator--ae4751c3-53cd-499b-bb4b-7bc8f5adbf7e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fe122d-c42f-4980-a919-e2cd8ba9b80c", "sighting_of_ref": "indicator--37ed05c6-e7af-4498-bf1b-bf4fbb9c8731", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e72f7fb-b7ef-4ace-8fba-d3bf2c6e7c9f", "sighting_of_ref": "indicator--9c730532-6b7f-4b44-abf6-ab40fddfb5df", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932bebd6-b110-4cb2-bfca-f8b6d92dffe8", "sighting_of_ref": "indicator--7a0bbf4b-ee35-413c-af39-635d187d6fce", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c0a246-977e-42c4-a845-6f631431bd88", "sighting_of_ref": "indicator--bd71015e-6fa3-4ff8-80f2-4b3c8a056279", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d94fe97-6426-4a39-8c2a-99a476ccfa95", "sighting_of_ref": "indicator--2e4b002b-04fa-4365-9e5d-c973cc25c3d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b009de-cbac-476d-88b2-b6fd8a5e9f33", "sighting_of_ref": "indicator--8c682f2b-f4d0-47ee-a79f-dd3cdf292d50", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d15cfe-5624-4a88-ba09-34ef54a3fb5a", "sighting_of_ref": "indicator--44ba3feb-da89-4acb-885e-cf039a8ad9fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db55f1f-2f06-4879-b73b-2bd00cab9ec6", "sighting_of_ref": "indicator--289f1334-bd70-4711-81dc-c9f327a085ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb0343a-e4aa-4a9b-9f9f-222e9d47c8a3", "sighting_of_ref": "indicator--c6c8141d-da4f-4c70-af92-ed0c2b53bc69", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b8ba52-314d-485e-ab14-08c68b5a751b", "sighting_of_ref": "indicator--9dae29ed-0e82-4b21-a6fb-7a3d91f73f43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51fdedd-a350-44d3-9430-0c8d008846da", "sighting_of_ref": "indicator--b97563be-cd6a-4af4-a625-0d14db106458", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b224111-7cfd-4e17-b035-c60b6d1f5818", "sighting_of_ref": "indicator--e58d21e4-b25c-449c-89dc-96fe2c8f7f1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d7e79d-f056-4037-9dc8-d106357a8333", "sighting_of_ref": "indicator--97e0591a-0fd7-43bf-b1c0-9019ae1678eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68027278-ee2c-4829-b03d-9fe07ace473f", "sighting_of_ref": "indicator--19cd98ab-eeeb-499b-a9cb-478d524ad04c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a732c74-a63d-4323-b418-18b4d71e1bce", "sighting_of_ref": "indicator--c7e0ccee-8415-4c0e-b1f2-88218a4113f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2460d0aa-ab57-485b-8f75-a98accd064a6", "sighting_of_ref": "indicator--3624b349-676a-4a15-8ad5-4ebb76e7f0a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7b2745-be63-424b-a7e1-86abddca53d3", "sighting_of_ref": "indicator--77fbb19a-7419-4d6f-b452-240a63408d38", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33f1e32-faff-45ca-a3a7-c672c6e3a956", "sighting_of_ref": "indicator--7b155147-a6dc-4171-a8ac-92c1eff2982f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b158b1-48b1-4469-b3d6-c85ccf44b3fe", "sighting_of_ref": "indicator--36b3c0ab-fd36-42f3-b027-366ca3ce2ae2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f350dde-e194-419f-b1ce-fa7ee112a942", "sighting_of_ref": "indicator--d3b9d77a-416c-48d0-8c7c-c506575fdef3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d363a7-b841-4c80-a135-953c4d056b8f", "sighting_of_ref": "indicator--0f6918d8-0b61-4a46-977f-7523a977b7a0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8d30a6-9b82-4d2e-b6e3-67812330ac04", "sighting_of_ref": "indicator--6307622d-6684-4da0-8e51-41270cbc9f0d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5a9160-cec1-48ad-b86c-057178d5fbab", "sighting_of_ref": "indicator--e8734692-96d8-40f7-83be-63124c715582", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1b69ab-6c42-40df-8efa-8c91fc9fef07", "sighting_of_ref": "indicator--1efb82b8-6852-4b6c-bf9f-13d9b2e8cb09", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e350299f-87a3-43be-bc22-ec093986aaca", "sighting_of_ref": "indicator--1efb82b8-6852-4b6c-bf9f-13d9b2e8cb09", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f1b031-d761-4eb0-96c8-4fe94e91f8c5", "sighting_of_ref": "indicator--1efb82b8-6852-4b6c-bf9f-13d9b2e8cb09", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4849aa3-bf3e-4338-8d9f-d6a20c65d767", "sighting_of_ref": "indicator--1efb82b8-6852-4b6c-bf9f-13d9b2e8cb09", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448c11c7-910c-4b11-bc6f-0a23b08bad28", "sighting_of_ref": "indicator--6aced94d-ba7a-4138-9818-154e55e787ec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c221faa-da6a-45ab-b106-f23409c0e2b9", "sighting_of_ref": "indicator--5405b2dc-ece3-4ed7-897e-4b806126f8e7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb34df3-aa2a-41dc-b356-14d66d3ce45b", "sighting_of_ref": "indicator--5405b2dc-ece3-4ed7-897e-4b806126f8e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7723bc9a-df16-4379-977f-ccf415ddadf2", "sighting_of_ref": "indicator--5405b2dc-ece3-4ed7-897e-4b806126f8e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f08fc1-7a73-47e5-8c9d-35d31ab29f1c", "sighting_of_ref": "indicator--5405b2dc-ece3-4ed7-897e-4b806126f8e7", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fd3d8f-afc9-4a9a-a120-1f4d7ad50832", "sighting_of_ref": "indicator--3badbee8-a7a7-482b-9755-ef98d7f79ab8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cc9a97-f24a-4b02-ade3-f224d2d0ba4f", "sighting_of_ref": "indicator--3badbee8-a7a7-482b-9755-ef98d7f79ab8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126e111b-7c11-42c6-b531-542a41126631", "sighting_of_ref": "indicator--d5d22a90-b6ee-456a-807b-1d59f5b69045", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005026ef-68f5-41b5-a3f5-24cedc9a37f9", "sighting_of_ref": "indicator--2f042ca6-7491-41e3-bcbf-4394dd21e58b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2abc5d-5834-4cd2-ab9a-1b6587ed1e5b", "sighting_of_ref": "indicator--240fc54d-4e4c-4e1c-a9fb-31d963322721", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2221141-5d89-44c9-a8ad-a6b78813fa97", "sighting_of_ref": "indicator--0f17c491-daba-4c0f-85ed-040ec7faa954", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f098aaa-5ba9-4d2e-8581-6a9f33e8efad", "sighting_of_ref": "indicator--1e18e764-359a-421b-bb58-9d93f88b2fe0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf5e5fd-36db-49a0-bb07-a419a2760843", "sighting_of_ref": "indicator--510aadd7-d6a9-4373-bacc-af73aa591026", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5d2565-d0c8-4de9-b215-5a369aed7df4", "sighting_of_ref": "indicator--510aadd7-d6a9-4373-bacc-af73aa591026", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f001e565-7a68-4a89-ba59-73f27733ba17", "sighting_of_ref": "indicator--789a0385-bc71-4eaf-9279-b8b0249979e2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3addb70-b541-4783-a10a-e86ec2ae5ba2", "sighting_of_ref": "indicator--52e9e680-7ed7-481f-a218-87d9c0d5cce3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1883eb-695a-4886-9a1e-a7a383f5bac1", "sighting_of_ref": "indicator--7e3b6b77-e4bf-4df6-b329-6ceaba122107", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43188a99-fa07-4eb4-90b3-bfeeab07e5a4", "sighting_of_ref": "indicator--394ed078-d11e-4678-9935-8fa161fe2c4e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830ecfc0-0160-4c92-93f7-cfd78409a012", "sighting_of_ref": "indicator--465add24-8494-4868-be68-92e7334b282f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb88053d-cb56-438f-b133-2cf6f90c0cce", "sighting_of_ref": "indicator--fdfdfc4b-fb61-4e95-8459-0aaf766a8b08", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc40223-cfd8-406e-ac73-800800b8a380", "sighting_of_ref": "indicator--bb5f5de1-6f01-419d-bafd-4b4dc34233b1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f04e29b-6dd3-428a-8f82-73699c4aac4a", "sighting_of_ref": "indicator--bb5f5de1-6f01-419d-bafd-4b4dc34233b1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83454244-79fb-4be7-bc66-c7e68031e2d0", "sighting_of_ref": "indicator--3cc48fa1-2878-4cb2-a337-33b5af1fb382", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a37db5c-97a3-418a-bfbd-9f68f52f0033", "sighting_of_ref": "indicator--3cc48fa1-2878-4cb2-a337-33b5af1fb382", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cbda11-6b70-44df-846f-667f2ec01a20", "sighting_of_ref": "indicator--7d3e7640-36da-4fa4-9b2f-7c521f4fff0f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fcb15b-0152-4add-86a1-729675e56ab8", "sighting_of_ref": "indicator--0a466b06-3451-41d7-abd7-c6fe1514fe32", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882a09da-caa5-49e1-812b-bb7cc0c2b86a", "sighting_of_ref": "indicator--0a466b06-3451-41d7-abd7-c6fe1514fe32", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2ed986-ebc2-456d-a4fd-ee8aa7fd4008", "sighting_of_ref": "indicator--0a466b06-3451-41d7-abd7-c6fe1514fe32", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0146ea51-d8e9-46f4-9147-497977c7fdb7", "sighting_of_ref": "indicator--b280f776-0b64-4c43-80de-9cb36ba775eb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63e7e76-4af2-4d64-8e01-18e7eb69164b", "sighting_of_ref": "indicator--3d617f6c-079a-4c27-a1f7-f18866a1e380", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e226e8bb-007e-4028-8741-3336e2b114b0", "sighting_of_ref": "indicator--719f204b-99a4-4971-91c1-fa64b0973fdd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8815c820-7cfb-4102-b64e-2a2c390a22df", "sighting_of_ref": "indicator--be6d4460-8d33-4c5f-9a2e-6649eb14e9fe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f893b1f2-4568-492f-a69a-6c0a2d876871", "sighting_of_ref": "indicator--f51a9e28-3e9f-4e74-a098-7bf717479e9c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7895c813-da9e-425e-a2cf-d8e168a218fa", "sighting_of_ref": "indicator--f51a9e28-3e9f-4e74-a098-7bf717479e9c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855acfec-6027-4af7-9f66-11653875ef59", "sighting_of_ref": "indicator--70ca1bc0-c100-462f-b2ff-ed1f45ab2dd2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d25d777-7a45-4fb4-a1cc-e682eaee987c", "sighting_of_ref": "indicator--00aa728d-a5ae-402d-b39c-80fa7c71bdc7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c83e33-3a3a-4312-828e-4513b0085718", "sighting_of_ref": "indicator--5742774c-d98d-4cca-895d-07dfa78e988a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5e90f2-3538-4d69-b769-4b3c5f9107a1", "sighting_of_ref": "indicator--905a8078-c567-4ec7-8950-c952fbbfcb04", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0232c1c5-0805-4f83-9ba4-5b3437557c70", "sighting_of_ref": "indicator--aee1d68b-d2bf-44d6-a702-a08d053f8927", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b6d870-5389-46c5-921e-acce05270bae", "sighting_of_ref": "indicator--b1521516-55c5-4460-8ba7-4d289d23934b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198a1306-3c92-4884-8415-6f39c5eaf6da", "sighting_of_ref": "indicator--b11a3e2f-1be3-438a-be3b-18f575387ab9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f8bf77-bb90-4672-8332-f3b4354aed8c", "sighting_of_ref": "indicator--efe7d50c-9c97-4df5-af1d-6bb018c1cd46", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3f6f6e-0918-4817-9ae1-e88df62e14df", "sighting_of_ref": "indicator--d8612900-82cb-44f3-8359-ca361b27cfed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f59a58c-a6e8-4e40-b36b-7f974711b42e", "sighting_of_ref": "indicator--f541b821-08aa-4294-b11b-e9ad36576312", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98a2e01-4e58-483d-8dcc-ac1f2a1057f0", "sighting_of_ref": "indicator--f541b821-08aa-4294-b11b-e9ad36576312", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2802a0-147e-468f-9e26-153c80931cb4", "sighting_of_ref": "indicator--632bc50b-5171-4dd1-8eef-14345835ad0c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d514d93a-2e20-427a-b7c0-501177106e7b", "sighting_of_ref": "indicator--3c244080-bc04-4384-8134-0e26efd01e8a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802ca087-2a1f-447d-aa83-7e170af5efab", "sighting_of_ref": "indicator--8c8f25e6-35da-4399-b7e9-d9bc88acbbcb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44af5c8f-e8df-4686-9d1f-1d6242fee07d", "sighting_of_ref": "indicator--e4217be4-3838-42d7-9a10-4c1695d44389", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7228b4c-c85f-4ba1-b3e5-cf37c2a67882", "sighting_of_ref": "indicator--588cc1dd-0483-4775-856b-2252d96b0d16", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70940402-5b73-4f70-88a0-c6a208070638", "sighting_of_ref": "indicator--588cc1dd-0483-4775-856b-2252d96b0d16", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545c7fd2-951b-413e-93a3-4fb675540b5b", "sighting_of_ref": "indicator--d248c267-e24a-4ed5-838f-7a4f20c189c4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3e4c8e-44aa-4352-87f3-90834309055f", "sighting_of_ref": "indicator--d35f1f69-8c6f-45c4-a64f-88b6fac7a2c3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d284f9-add6-476d-add2-f044ac708213", "sighting_of_ref": "indicator--d35f1f69-8c6f-45c4-a64f-88b6fac7a2c3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1519760-12de-4ac2-ad5c-2ca10bfa37bc", "sighting_of_ref": "indicator--e993eced-257b-4108-9795-2e8f900f73fe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd8263f-fb3b-4428-aa1a-4dffc42d8230", "sighting_of_ref": "indicator--72ce0a3b-200b-4f71-ab0b-020110b762b2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1eff71-96fd-4e83-805a-e984b6713200", "sighting_of_ref": "indicator--72ce0a3b-200b-4f71-ab0b-020110b762b2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd53588-99a2-47f8-b118-592c028bde32", "sighting_of_ref": "indicator--ac38a8d1-b638-4511-8162-03e83130ac61", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919c1a63-a2fc-4549-8d1b-581037a32db6", "sighting_of_ref": "indicator--e33c278e-2391-4e50-a60a-db5519eccde1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6180e22e-e914-4aa5-bdb7-b1c28e4250f4", "sighting_of_ref": "indicator--f83596df-4618-47ba-a31f-4e3d9aea198b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd7070a-de3a-4604-9f7e-0b3c92551478", "sighting_of_ref": "indicator--47482ce0-021b-46eb-b992-214cb35d8048", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71f3460-d870-4daf-bd75-57b10d523874", "sighting_of_ref": "indicator--15fbaaec-2b29-4a01-a834-166a7ba7919d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9a2d7f-cdff-4dc5-915c-f50ed5d29acc", "sighting_of_ref": "indicator--15fbaaec-2b29-4a01-a834-166a7ba7919d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff0c622-a75f-4d9a-8a52-500afee3edc1", "sighting_of_ref": "indicator--7a907b83-ae65-412d-adc6-c181ae592e96", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70b776b-c631-4ecb-bb5b-3a1a1e1c1e0d", "sighting_of_ref": "indicator--f9daf914-5bb0-4f85-9851-54fec4a52ff5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b51a4e0-2e70-4db7-8cb1-f6cd86e4319b", "sighting_of_ref": "indicator--f9daf914-5bb0-4f85-9851-54fec4a52ff5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32689d95-3d4d-4dcf-9e2e-5f7a008ba76b", "sighting_of_ref": "indicator--f9daf914-5bb0-4f85-9851-54fec4a52ff5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74512ec-dfcf-46d9-9224-8f1fe6328272", "sighting_of_ref": "indicator--83807259-cc77-48e8-a171-1fc07cbc8807", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1ba0d5-b610-4dd0-b0ad-1c7373f255a2", "sighting_of_ref": "indicator--83807259-cc77-48e8-a171-1fc07cbc8807", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fb2d61-f479-4c30-ba09-62a5e8b10acd", "sighting_of_ref": "indicator--83807259-cc77-48e8-a171-1fc07cbc8807", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab686c01-69d9-4396-9e34-f145304a89ba", "sighting_of_ref": "indicator--4d0fe6a5-bdc3-42de-88f3-e7f0171fbee4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0062f4d9-17c7-41de-8806-1be0ad8e8c0c", "sighting_of_ref": "indicator--4d0fe6a5-bdc3-42de-88f3-e7f0171fbee4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb351f90-8ce0-43fb-a491-af2707a03c83", "sighting_of_ref": "indicator--4d0fe6a5-bdc3-42de-88f3-e7f0171fbee4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28933ec-c12b-4b2e-89c8-04e815cd0402", "sighting_of_ref": "indicator--6e0746d9-a166-4ba0-891b-adab912075b7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8aa71a2-302d-49b4-a818-15ad202c7620", "sighting_of_ref": "indicator--6e0746d9-a166-4ba0-891b-adab912075b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ac88f5-d139-463f-937c-a4a4394aa44c", "sighting_of_ref": "indicator--8ff63c27-84f2-4599-b851-e6b7df026f16", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bca6dd6-d667-4b45-8eff-c00dd40b1b38", "sighting_of_ref": "indicator--8ff63c27-84f2-4599-b851-e6b7df026f16", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1416374-9557-4f68-b446-66caea8dac84", "sighting_of_ref": "indicator--8ff63c27-84f2-4599-b851-e6b7df026f16", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccca3e6-ba0d-40fb-9147-8cfadbf4e414", "sighting_of_ref": "indicator--48eff00f-1124-429c-b3e8-5541f2a85646", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2fbf26-a32e-413d-9c1e-ff91b683c2b8", "sighting_of_ref": "indicator--f5634cda-246d-4cfb-898f-1bb02f135555", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0179b3-c38f-43be-9b8f-3b4050980905", "sighting_of_ref": "indicator--f5634cda-246d-4cfb-898f-1bb02f135555", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c854f813-bfa5-4a8e-ac7f-962d0d4a8590", "sighting_of_ref": "indicator--f5634cda-246d-4cfb-898f-1bb02f135555", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5d53a7-c4a1-40fa-86ac-141d06bc0838", "sighting_of_ref": "indicator--8c9377d2-8d63-4f30-be9b-786526d924b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbad30c8-ca68-4905-9b8a-a036debbf13f", "sighting_of_ref": "indicator--a9f7ec1b-0127-4011-9261-ff48fe478c52", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e67d281-538c-45dc-9b1a-f935e9828365", "sighting_of_ref": "indicator--a9f7ec1b-0127-4011-9261-ff48fe478c52", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b81c05e-f340-4b73-9713-8e532c414cb9", "sighting_of_ref": "indicator--384e3605-e148-4f38-9ee8-c724d64365ff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e349916f-73c7-46c8-8b0c-b529647b3a38", "sighting_of_ref": "indicator--384e3605-e148-4f38-9ee8-c724d64365ff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6221432-4dff-4a43-b921-7b5099d6f73f", "sighting_of_ref": "indicator--384e3605-e148-4f38-9ee8-c724d64365ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcafc76f-6980-4595-8d87-93254cd48f0c", "sighting_of_ref": "indicator--7fea7a04-c7c6-4a0e-b63a-c7ddd7bfd2a0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d244f777-9a61-4705-9765-40351ff1dddc", "sighting_of_ref": "indicator--7fea7a04-c7c6-4a0e-b63a-c7ddd7bfd2a0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb32741-171f-42be-b741-d299f26d5fc6", "sighting_of_ref": "indicator--29ea2270-4300-4bcb-a8f3-9d5f58d9cfc6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f7f92e-4a7e-45cd-b6d6-2ad71f7cb128", "sighting_of_ref": "indicator--29ea2270-4300-4bcb-a8f3-9d5f58d9cfc6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c034f6-b974-420b-bef3-1c5e852e054c", "sighting_of_ref": "indicator--6bf08d20-2011-4563-a8f2-2379de168355", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3ad5d0-480e-4900-b052-8ffe339190f6", "sighting_of_ref": "indicator--6bf08d20-2011-4563-a8f2-2379de168355", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0fefad-9fb2-4095-85db-1d6ad0ad2eb1", "sighting_of_ref": "indicator--6d92d576-a4dd-4077-aabf-260d30f55502", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed73633-1904-4aae-bab5-34868fb21da6", "sighting_of_ref": "indicator--6d92d576-a4dd-4077-aabf-260d30f55502", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5940866f-522b-47f6-b639-59ba1a3f306d", "sighting_of_ref": "indicator--c28d2bf0-9577-4802-af93-30a0df5b455e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525c7f81-6afa-449c-ad60-4362fc3bb807", "sighting_of_ref": "indicator--0d5ebbfb-db16-4d06-a5f4-f52bf8ceccc5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d770b16-af68-4979-beb7-45e19d6c711d", "sighting_of_ref": "indicator--0d5ebbfb-db16-4d06-a5f4-f52bf8ceccc5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031237fa-6648-4c7e-9198-eb45ac645f19", "sighting_of_ref": "indicator--0d5ebbfb-db16-4d06-a5f4-f52bf8ceccc5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bb4962-d723-48d8-b037-795f504cc95f", "sighting_of_ref": "indicator--c0bdf2b4-43d1-4232-aea0-3644589f9aad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e5ff36-de93-43b0-9554-b92dac8bef38", "sighting_of_ref": "indicator--c0bdf2b4-43d1-4232-aea0-3644589f9aad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33aa972a-f496-4194-bde1-0d545c1059b8", "sighting_of_ref": "indicator--9eed6fa3-44ad-4eae-9ebd-ebd04fa93e49", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181519ce-b2b0-45f3-bc9f-c6eb38878710", "sighting_of_ref": "indicator--b19bcc74-91a0-4482-a3fb-63fdf7eb67a6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed707e18-1b1f-4b85-a637-d0f45ba7896c", "sighting_of_ref": "indicator--b19bcc74-91a0-4482-a3fb-63fdf7eb67a6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bda5ba1-82c7-4ab3-bc8e-f50a9dfd6743", "sighting_of_ref": "indicator--9f7a6079-a66f-4539-bdd2-85a6614a0ea4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603c0928-345c-42bc-b47f-44a979bd02ca", "sighting_of_ref": "indicator--9f7a6079-a66f-4539-bdd2-85a6614a0ea4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b292ca-a68b-4a5b-b1d3-a0e55d4a1fdf", "sighting_of_ref": "indicator--d0e74375-ae8c-4db0-bcce-f38425abefe2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd5d89d-d733-43aa-8730-a7114cf03fd8", "sighting_of_ref": "indicator--d0e74375-ae8c-4db0-bcce-f38425abefe2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ffc125f-38d6-4e51-8be8-d12ac3349f30", "sighting_of_ref": "indicator--74c4f361-8057-4bde-964a-76cfa6112ab2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd427757-6fc7-4707-a4f5-61dc5b9fc1f9", "sighting_of_ref": "indicator--b1e5566e-c4df-4b66-b98c-38c1c75925aa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e281a02-bca9-47a7-9846-baeb49b1b827", "sighting_of_ref": "indicator--b1e5566e-c4df-4b66-b98c-38c1c75925aa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1073a3-ded7-4ff7-bd13-ddc53d1d0fb5", "sighting_of_ref": "indicator--b1e5566e-c4df-4b66-b98c-38c1c75925aa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4337510f-1282-430a-88dd-ff6347644edf", "sighting_of_ref": "indicator--588bf02a-dd36-41a2-b0a5-bf9078bd0cc4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d1de1d-70bc-4af6-b298-f7468bfa4c9c", "sighting_of_ref": "indicator--588bf02a-dd36-41a2-b0a5-bf9078bd0cc4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b453b26-517f-4d3f-b39f-915ca32cae21", "sighting_of_ref": "indicator--57c5b731-c515-4ed3-8993-182258617b6e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ecbb87-ed4b-4733-a6be-30aed761da0a", "sighting_of_ref": "indicator--72a96b6d-932a-45dc-a648-d5f294cdb690", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d0135d-957a-46cf-865d-c3168186be42", "sighting_of_ref": "indicator--72a96b6d-932a-45dc-a648-d5f294cdb690", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863d1902-492a-45d4-a434-203383d4b984", "sighting_of_ref": "indicator--46d6e9ab-aea1-4084-8ed3-02b6ae01200a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f41dbe7-ea0c-486a-8211-34e70380a541", "sighting_of_ref": "indicator--46d6e9ab-aea1-4084-8ed3-02b6ae01200a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcef9949-f913-498d-abc7-d829f04d1373", "sighting_of_ref": "indicator--46d6e9ab-aea1-4084-8ed3-02b6ae01200a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50566a65-f50a-4186-b4ef-3acf3b4b1d57", "sighting_of_ref": "indicator--6398dc82-c8e0-4a01-94c3-a794d8b1b064", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886e5398-b438-427a-8990-6d22f059de9f", "sighting_of_ref": "indicator--4f26d295-2484-469e-afcc-263b234e780e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa363f8-2839-495c-9c26-de99ae4f7a27", "sighting_of_ref": "indicator--4f26d295-2484-469e-afcc-263b234e780e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fa408f-a5ee-485a-b214-00ba6fca1fe8", "sighting_of_ref": "indicator--4f26d295-2484-469e-afcc-263b234e780e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c144cb-a562-40e1-a0bb-23048d79e038", "sighting_of_ref": "indicator--3b0b9260-226c-4475-84e5-b6fc4b761dd6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f82624d-e364-4df7-9ae6-ec517f19fdf6", "sighting_of_ref": "indicator--3b0b9260-226c-4475-84e5-b6fc4b761dd6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e74b695-3ee5-4289-8632-a92891599c0c", "sighting_of_ref": "indicator--22fa1d91-b03b-4472-baf9-91a5e341c17a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a367b789-f471-487a-8061-46db3dfae8d5", "sighting_of_ref": "indicator--22fa1d91-b03b-4472-baf9-91a5e341c17a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941b6742-17eb-4078-b168-840aeb5b269e", "sighting_of_ref": "indicator--6ea12b00-8789-49b5-a25f-924522365553", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94baa9c7-e977-4730-bdb9-38ddbf086657", "sighting_of_ref": "indicator--6ea12b00-8789-49b5-a25f-924522365553", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95b2049-f935-44da-9232-f9607671d438", "sighting_of_ref": "indicator--965ff165-d88a-4c69-a120-83c62c57b32c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d876e167-0f14-4f96-aa31-32c02d2f7aea", "sighting_of_ref": "indicator--965ff165-d88a-4c69-a120-83c62c57b32c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b130d04-42a2-4247-9783-d48a4177c287", "sighting_of_ref": "indicator--4b22161e-22f0-414d-9cd5-1326687cf885", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9122bf7-dd87-4091-9424-a4839b371dcf", "sighting_of_ref": "indicator--c0f8f808-750c-42ec-bf5d-3bffce8e5b26", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919b3168-0418-455c-b65e-063cff077e5a", "sighting_of_ref": "indicator--c0f8f808-750c-42ec-bf5d-3bffce8e5b26", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78b88a2-3635-40e1-8339-1f334fa2444d", "sighting_of_ref": "indicator--c0f8f808-750c-42ec-bf5d-3bffce8e5b26", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37b3c64-f272-4fef-9504-543ffb3ecf44", "sighting_of_ref": "indicator--93d1825e-0523-4750-a7b5-83236e802112", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf715eae-c56b-40ba-bb9e-1bfd38273332", "sighting_of_ref": "indicator--93d1825e-0523-4750-a7b5-83236e802112", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93910280-0e77-46e3-b87b-dfc4266f311a", "sighting_of_ref": "indicator--52f627c8-fa2b-4c4c-be2c-0a4a66282b0a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27be966-da3d-4006-9789-dfa54d534a09", "sighting_of_ref": "indicator--52f627c8-fa2b-4c4c-be2c-0a4a66282b0a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca392e61-c275-4c07-b3e9-dd5c27bc1f81", "sighting_of_ref": "indicator--622d41a8-e2c2-4ef3-b84c-592a31a36077", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0bc648-fec3-40b7-828a-363e84c8a3a5", "sighting_of_ref": "indicator--622d41a8-e2c2-4ef3-b84c-592a31a36077", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74875111-0d6b-4170-beeb-0a48ffa1b58b", "sighting_of_ref": "indicator--622d41a8-e2c2-4ef3-b84c-592a31a36077", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3968fae-a5ef-46b1-88e3-47e3ca9bf8c0", "sighting_of_ref": "indicator--6e56b8c4-1bde-41f7-975d-e8c4040dc1d8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d61e78-6784-4a73-904b-507acf84c562", "sighting_of_ref": "indicator--6e56b8c4-1bde-41f7-975d-e8c4040dc1d8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386ac36c-5e70-4ea3-9b78-37d9d1892617", "sighting_of_ref": "indicator--8437cded-2c3d-4e8c-9665-895eba844b40", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b835eb-5d2f-4bce-9082-2b08f2ee98a5", "sighting_of_ref": "indicator--8437cded-2c3d-4e8c-9665-895eba844b40", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51620e5b-391f-4af3-b998-c3d01de408c9", "sighting_of_ref": "indicator--64dce2f5-a131-4204-bed8-dc31ce6d5409", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b5e669-fad3-4e4f-93c9-6a3bc6752eb8", "sighting_of_ref": "indicator--64dce2f5-a131-4204-bed8-dc31ce6d5409", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4bc955-3767-48ea-b3cd-1f0802a3c576", "sighting_of_ref": "indicator--64dce2f5-a131-4204-bed8-dc31ce6d5409", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5d9104-3f9d-4226-868a-4b994588c6dc", "sighting_of_ref": "indicator--4e2227a0-2340-4f8e-9941-39ec085d7607", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3009f7b1-86d2-4e0f-b99a-3224bb4e17c3", "sighting_of_ref": "indicator--4e2227a0-2340-4f8e-9941-39ec085d7607", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c5d6e4-1bb5-465b-bd36-36cbe93c09e6", "sighting_of_ref": "indicator--4e2227a0-2340-4f8e-9941-39ec085d7607", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39b9e71-716b-4130-8908-1fd3a74e490e", "sighting_of_ref": "indicator--0db1f2f2-996c-440f-853b-19ce1e904161", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79766a2a-523d-4451-8e45-0c5feb545585", "sighting_of_ref": "indicator--0db1f2f2-996c-440f-853b-19ce1e904161", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19bdfc62-cdc9-4541-9135-87333722ccbf", "sighting_of_ref": "indicator--85ace150-fa14-46a7-8c1a-948a0fe9f588", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d084d686-b4bd-493c-93ba-da9e4170dfee", "sighting_of_ref": "indicator--85ace150-fa14-46a7-8c1a-948a0fe9f588", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a16d12-a5a3-4c84-accf-942974508d73", "sighting_of_ref": "indicator--3c2ed68d-7f1d-41e5-a924-7e9b17c96d35", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095e805b-a830-4a8e-a0df-9305913939ca", "sighting_of_ref": "indicator--3c2ed68d-7f1d-41e5-a924-7e9b17c96d35", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cc40f6-40f9-4777-b1b7-e24c5e591dc8", "sighting_of_ref": "indicator--da9bfe80-5314-4692-a2f0-d3e7a4f325aa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9b6c52-d0f5-459e-a185-2ddc29409536", "sighting_of_ref": "indicator--da9bfe80-5314-4692-a2f0-d3e7a4f325aa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2602dfd9-e817-4455-bb71-d1f6eec9b589", "sighting_of_ref": "indicator--30d7190e-9058-48c6-b20e-de57dd8eab58", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7eed2d2-fe7f-4011-a264-a997cd31f7b7", "sighting_of_ref": "indicator--94e3e497-aebd-4c64-b3b3-bde5b2ff33af", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e04ae3-e5ce-4e5c-9749-8dc88100949a", "sighting_of_ref": "indicator--94e3e497-aebd-4c64-b3b3-bde5b2ff33af", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365586b1-5cf8-416b-a293-4e5480d6425e", "sighting_of_ref": "indicator--a6ecfd68-dec0-4dc2-aa7e-c00d65085f44", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d86b11-e89e-45ce-abba-7fad872e2850", "sighting_of_ref": "indicator--a6ecfd68-dec0-4dc2-aa7e-c00d65085f44", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beedf20f-f67e-4cbc-bc92-57c6fe881acd", "sighting_of_ref": "indicator--a6ecfd68-dec0-4dc2-aa7e-c00d65085f44", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0590f98-0a71-41a2-9a59-74cc83bd2ebc", "sighting_of_ref": "indicator--e56a9f16-1ae4-40d7-99d6-a1cf413e92b5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d997e064-ea0f-4feb-a422-0107300111b9", "sighting_of_ref": "indicator--b4577418-3357-4504-bb39-ee1c5cf78187", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52092a77-9118-4c6f-8f06-68264e309d14", "sighting_of_ref": "indicator--b4577418-3357-4504-bb39-ee1c5cf78187", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684ae671-aa04-4574-86c1-220c0cd77f09", "sighting_of_ref": "indicator--b4577418-3357-4504-bb39-ee1c5cf78187", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843ba2e9-4ee7-4a45-80b4-239309616464", "sighting_of_ref": "indicator--b4a0f9ba-7d62-476b-9834-1e22c7b5533b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d03aad5-b9ba-4cbb-b50a-f43009707b34", "sighting_of_ref": "indicator--c595bfa8-b473-41de-b83f-c1d863716b32", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f083e6f-4ff0-4b36-bad2-108345dc8d6e", "sighting_of_ref": "indicator--9ec70170-0c72-429c-b111-75ff089b39eb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5f243c-913f-44f9-99d1-4031f6c2d363", "sighting_of_ref": "indicator--9ec70170-0c72-429c-b111-75ff089b39eb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09537339-e85b-44c2-a93a-447671034d37", "sighting_of_ref": "indicator--d3619cf8-5e61-46d0-a0fd-49bda0907608", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf074a8-ce16-470f-bea0-9f0dc2ba28ef", "sighting_of_ref": "indicator--5ba8166c-6930-4af3-9c77-f09c71e105a4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b245453f-b79a-45cc-b452-83ecf6b7e801", "sighting_of_ref": "indicator--145525f0-03b8-4fc0-865a-2b33b61200a1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf83e78-58a4-406d-9466-e46ff76efa9f", "sighting_of_ref": "indicator--4f2de6c4-1568-4ac0-b293-e3e6af5739c4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a084cc0d-8ee1-4b2b-938d-5dd64b61d11a", "sighting_of_ref": "indicator--4f2de6c4-1568-4ac0-b293-e3e6af5739c4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18455550-9d72-4ca0-8bf6-93ebb465823b", "sighting_of_ref": "indicator--ffd82b86-47db-49d3-8dee-b78e5efc9a9c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce142b2-529b-4e67-916c-7295587755f1", "sighting_of_ref": "indicator--ffd82b86-47db-49d3-8dee-b78e5efc9a9c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1ba34b-ad89-45af-97af-0d474b8aa88d", "sighting_of_ref": "indicator--e061c705-9418-4573-ad58-471dc0e27e3e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6337d047-502d-466d-8029-ce77e61ace75", "sighting_of_ref": "indicator--d9e65d5b-d813-43f6-a8d9-c61f25e8a8ed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e8a8da-68f8-4294-acba-85b98bf7f68d", "sighting_of_ref": "indicator--d9e65d5b-d813-43f6-a8d9-c61f25e8a8ed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799ec074-c80d-4419-b932-ff9247a17c82", "sighting_of_ref": "indicator--d9e65d5b-d813-43f6-a8d9-c61f25e8a8ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b346b3f-d1b0-4e0e-afa8-6cce6efbdc13", "sighting_of_ref": "indicator--34ea3dd5-406b-45c8-9a6a-27c988acbd52", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63669d9-2d9a-4a83-9170-97bd56b841c4", "sighting_of_ref": "indicator--34ea3dd5-406b-45c8-9a6a-27c988acbd52", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13656c21-c9c1-4978-b3ce-57008bae52b8", "sighting_of_ref": "indicator--1603babe-eeac-44c5-843a-2210df9a512c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab46c23-1d8e-4655-8a9b-e2cbfe54e79e", "sighting_of_ref": "indicator--1603babe-eeac-44c5-843a-2210df9a512c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf38cd20-aa21-49d7-a6f3-56b5baaf20db", "sighting_of_ref": "indicator--1603babe-eeac-44c5-843a-2210df9a512c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afae1f7a-a37c-4dd2-93f4-6845cfcea674", "sighting_of_ref": "indicator--40669684-f0cd-4565-b7bc-ceec29665a3c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2326c6f6-2fda-41f3-b371-265982732248", "sighting_of_ref": "indicator--40669684-f0cd-4565-b7bc-ceec29665a3c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a836acb-db0c-485b-a776-ebf5faed77e9", "sighting_of_ref": "indicator--0de74b3a-d3db-425d-b9fc-ce7379754c5e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf04f1fe-190b-4c96-800a-035714cfbca1", "sighting_of_ref": "indicator--0de74b3a-d3db-425d-b9fc-ce7379754c5e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73816cc7-20c7-4cdd-a8ec-03ede22c038a", "sighting_of_ref": "indicator--6757c641-ce1d-485a-b2ef-f527fb03f263", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77245e99-7db5-46b7-b25e-a85d5c647526", "sighting_of_ref": "indicator--30547a31-1d0d-42cc-9e12-12ab4ea9ff9b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd977cc-6815-4c04-8da6-7efd7c542f4a", "sighting_of_ref": "indicator--30547a31-1d0d-42cc-9e12-12ab4ea9ff9b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c2402d-23b7-4a76-8eb1-c7d86cb2dcb9", "sighting_of_ref": "indicator--30547a31-1d0d-42cc-9e12-12ab4ea9ff9b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30972df9-87e9-45ee-bc52-4b0f5bd4c139", "sighting_of_ref": "indicator--b3428063-43f1-4c9a-af88-9fb97884e9d4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2399341d-afed-489f-ab90-23cf8d9c93f3", "sighting_of_ref": "indicator--9fc7a395-f7c4-4e41-be38-66fab7d82a19", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3811e6bd-d3a8-46f1-beeb-0498b92c7ad9", "sighting_of_ref": "indicator--cf4362f7-5fc5-4244-a1be-73649aa7b98d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bc7bc1-b0e5-4562-99e2-91eb8aac3fc7", "sighting_of_ref": "indicator--cf4362f7-5fc5-4244-a1be-73649aa7b98d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d028e8-8a6e-4d07-98c1-2c26b4f33129", "sighting_of_ref": "indicator--176f0279-00ba-4019-a18e-f9686eb4d138", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e82d7f-816c-4b00-9506-474ba178660e", "sighting_of_ref": "indicator--176f0279-00ba-4019-a18e-f9686eb4d138", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b089d4b8-c596-457d-b531-18a52b3f641e", "sighting_of_ref": "indicator--fcc35458-8218-4339-a1ef-529651f65f4c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113c60c3-1a46-47ce-b2d6-9a30cb02f445", "sighting_of_ref": "indicator--fcc35458-8218-4339-a1ef-529651f65f4c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa398ae-a93f-4943-859a-61e00e5762a7", "sighting_of_ref": "indicator--cb067a02-9d39-4add-95e9-0b35f53bf02c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f170dd-8d63-499a-9c55-9d8747669126", "sighting_of_ref": "indicator--cb067a02-9d39-4add-95e9-0b35f53bf02c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70ed635-4ac7-4439-97e5-c912d34e8593", "sighting_of_ref": "indicator--24eb7d17-b071-4876-8168-a9b2b023130c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fc24b2-bf9b-4955-993c-a8e1a0e7e14e", "sighting_of_ref": "indicator--24eb7d17-b071-4876-8168-a9b2b023130c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9239a168-599c-45c3-b09c-3b6c67f5ecb0", "sighting_of_ref": "indicator--24eb7d17-b071-4876-8168-a9b2b023130c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72807b61-0869-491b-9641-d15f0bea7663", "sighting_of_ref": "indicator--77bad9aa-6c40-4206-9c99-c7c17e0c94de", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa332b83-4f02-4789-8820-cdd180d1885a", "sighting_of_ref": "indicator--77bad9aa-6c40-4206-9c99-c7c17e0c94de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84713a2e-30a5-4a67-bd21-875819d945f0", "sighting_of_ref": "indicator--77bad9aa-6c40-4206-9c99-c7c17e0c94de", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6a6f8c-7a6c-48e3-b783-1f9c2d307ebd", "sighting_of_ref": "indicator--df567e9f-3352-4770-8e64-ebf7c47abf36", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258ea21d-f7a9-48cc-93cc-4297e0ea724d", "sighting_of_ref": "indicator--df567e9f-3352-4770-8e64-ebf7c47abf36", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66dab6b5-3310-475d-ace9-d66740afc25a", "sighting_of_ref": "indicator--17f8a88c-17ef-4944-bf37-0ba5a21cb06f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6d42fd-75d9-4541-8faa-a45706e467fa", "sighting_of_ref": "indicator--17f8a88c-17ef-4944-bf37-0ba5a21cb06f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9052472-c32c-4c42-b5ad-ef35e537240e", "sighting_of_ref": "indicator--c9a5da72-9328-4d95-8f40-886ba88ca150", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f514e4-6ea2-4e83-a1f3-c5abc00e15e8", "sighting_of_ref": "indicator--c9a5da72-9328-4d95-8f40-886ba88ca150", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc81d150-4447-4638-bf48-dac895ce56f5", "sighting_of_ref": "indicator--c3b11993-241f-4a6b-8a18-0cf6576e7a42", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5269501-2be3-47b2-9002-6cffee25d545", "sighting_of_ref": "indicator--c3b11993-241f-4a6b-8a18-0cf6576e7a42", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9192280-1e30-4ef0-ac52-37eb32129380", "sighting_of_ref": "indicator--cfdcaf46-fbba-446d-8cd7-7e29bd30150b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5ff233-dee6-4625-86ec-e71f512a2a15", "sighting_of_ref": "indicator--cfdcaf46-fbba-446d-8cd7-7e29bd30150b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53b574d-a79d-45ac-8fdc-11c28bd8cd9b", "sighting_of_ref": "indicator--afa38091-46c5-440a-8b8d-4068de30d185", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af73cd37-f886-44ac-b8c0-d5869686953d", "sighting_of_ref": "indicator--83e144d0-081d-43dd-9c16-813da22896e9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46671650-7059-450b-9193-1cd3071531c4", "sighting_of_ref": "indicator--c1ca3e5e-8d0a-44f2-a3d3-8ddfd221d5f8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d06fa01-5243-4863-a9d5-5bd6927131ff", "sighting_of_ref": "indicator--c1ca3e5e-8d0a-44f2-a3d3-8ddfd221d5f8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8679e2-59f5-458c-acd9-eee7dbc012ee", "sighting_of_ref": "indicator--4e20928d-1574-4d27-bda7-caa71a9f33d4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b302d0-44df-41e1-848f-ac4b9de33a2e", "sighting_of_ref": "indicator--ee1e49c0-2424-4904-95f1-00f036c621d0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906d1ac0-18b5-4712-8388-8c9caf6624f5", "sighting_of_ref": "indicator--99633ee8-cd14-40f7-bf9a-8dee4560b8fd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621b2cf3-7754-4a1c-ae29-6ba03a763e87", "sighting_of_ref": "indicator--99633ee8-cd14-40f7-bf9a-8dee4560b8fd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83496c0e-82e2-4821-a88a-65f1ba025006", "sighting_of_ref": "indicator--99633ee8-cd14-40f7-bf9a-8dee4560b8fd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903a0d89-037f-4d26-ad2c-49b354b4b789", "sighting_of_ref": "indicator--c292778f-57bd-41be-9e67-cc3455195951", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f84d84-ca55-4918-8f71-91bfac39d708", "sighting_of_ref": "indicator--c292778f-57bd-41be-9e67-cc3455195951", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0d8277-c39b-4a92-ba74-1a0eb185e26b", "sighting_of_ref": "indicator--c292778f-57bd-41be-9e67-cc3455195951", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6740193c-a3ef-4bc8-a447-d79ab9521cfc", "sighting_of_ref": "indicator--0da3325e-0624-4881-9353-3668e4446aaa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8fb666-0531-4867-a9d9-024e1aae5f06", "sighting_of_ref": "indicator--0da3325e-0624-4881-9353-3668e4446aaa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba06532-ff2f-4996-83cc-d04529bdd2d4", "sighting_of_ref": "indicator--0da3325e-0624-4881-9353-3668e4446aaa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e935ec-c341-4f97-bd31-d267573de48a", "sighting_of_ref": "indicator--aaaf2af7-56d0-488e-b836-f67400d566ca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3ec370-94ba-40c8-a0a1-4ddd3f3bba48", "sighting_of_ref": "indicator--aaaf2af7-56d0-488e-b836-f67400d566ca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f028b2-1447-460c-aa5c-b7c56ec11a11", "sighting_of_ref": "indicator--aaaf2af7-56d0-488e-b836-f67400d566ca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629c47df-0e5b-4d87-8abf-aa39bd7fa922", "sighting_of_ref": "indicator--10c3c62b-788a-4681-bd35-690603f5e0d1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f7df53-434c-4919-bb75-97d33d4167c1", "sighting_of_ref": "indicator--10c3c62b-788a-4681-bd35-690603f5e0d1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d883c577-e129-4537-9a82-7324f0da4c5a", "sighting_of_ref": "indicator--e54a84b5-000e-4b73-9c70-9d071391bc25", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e43488-de3e-40b7-a24f-c6e4432f8ff9", "sighting_of_ref": "indicator--e54a84b5-000e-4b73-9c70-9d071391bc25", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c09b91-76de-4c87-88b1-6cbe624cfa56", "sighting_of_ref": "indicator--e54a84b5-000e-4b73-9c70-9d071391bc25", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1549baa-7cb5-42af-a54b-853fff85f8da", "sighting_of_ref": "indicator--aebc66fb-6e97-464f-ba48-e430d1c31d2b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ea14dd-48d4-4055-ba93-667bf8574dfe", "sighting_of_ref": "indicator--ce62f954-a03e-488c-936a-d8e52e816962", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79d50ae-5b20-4bb5-8f39-2fe5d36186c5", "sighting_of_ref": "indicator--b98a061a-d555-46e0-96ed-03c89127316e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35e3911-cdda-4fd6-8cd3-57c6634f6e4e", "sighting_of_ref": "indicator--5272b022-62b6-49f4-92b0-b6c6aa80468e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b975e80c-f733-4785-ba56-20ff0f0df8f4", "sighting_of_ref": "indicator--b15265dd-a79b-48e2-a0eb-8461e226a4ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806f131c-0098-4383-b078-b19fc3e2d07a", "sighting_of_ref": "indicator--5de5bbd6-7596-48ba-ae01-43e86ed9ba9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866c45af-d275-4aa1-ba14-9ca8dd017f19", "sighting_of_ref": "indicator--bd34d9ce-f1a8-4fd3-9cf9-db9b98e6b135", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872a9377-9bc6-410c-86a9-9eac177abed9", "sighting_of_ref": "indicator--3657776f-6236-45a1-95f9-b863957b10e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2754b5-696c-45db-908e-d2e28b44b6d8", "sighting_of_ref": "indicator--6c4c3bc4-2895-4f94-aa2c-78c34bf3e4c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60694ac6-378c-457f-bb05-6f7b710d6a58", "sighting_of_ref": "indicator--9bdb39d4-314e-4628-88ec-de379724dcbb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313b8b2e-8c9b-404e-a01b-d97bb8f87505", "sighting_of_ref": "indicator--9bdb39d4-314e-4628-88ec-de379724dcbb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be7ee76-e4c1-45ed-8f37-1174f9703ca0", "sighting_of_ref": "indicator--9bdb39d4-314e-4628-88ec-de379724dcbb", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a939b1d5-3286-4851-b3f5-4df018393744", "sighting_of_ref": "indicator--3cc60f61-eb0d-4a7e-ac91-20692c4d0900", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b17db48-fff9-4384-b983-7d2c8b9f43f7", "sighting_of_ref": "indicator--75d98347-e7c2-4081-8861-b3c976f61329", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4e9293-538f-475c-bd1b-aced6f3b96fe", "sighting_of_ref": "indicator--75d98347-e7c2-4081-8861-b3c976f61329", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91084160-2653-4245-a496-58b13cf60d2b", "sighting_of_ref": "indicator--5b924917-6a60-42dc-afa4-4ff561936438", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3afe1bc-41e2-408f-83fa-03da6c0c39b4", "sighting_of_ref": "indicator--5b924917-6a60-42dc-afa4-4ff561936438", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2734a66-c0d1-4b1e-a1d7-78d2a62c5236", "sighting_of_ref": "indicator--dc384600-f2a7-4699-a298-f511f0d61326", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f1e0ac-d736-42b2-adcf-3de905c26560", "sighting_of_ref": "indicator--dc384600-f2a7-4699-a298-f511f0d61326", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3628a5b8-8cd8-4bfb-b5ec-5a65b3a3b778", "sighting_of_ref": "indicator--49462070-3626-490b-ad04-3f2764215e2d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9de8f4-550a-4177-9721-fb71b8bad926", "sighting_of_ref": "indicator--49462070-3626-490b-ad04-3f2764215e2d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95799ff3-fbc9-45c4-8c8d-db649a2799a5", "sighting_of_ref": "indicator--49462070-3626-490b-ad04-3f2764215e2d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4454e8a5-2f0e-4f5b-a766-7a7406d3b762", "sighting_of_ref": "indicator--7857a141-b36f-44f2-8232-cd32d250f0c1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c0a5c1-d386-4567-9d5f-c927c4579b43", "sighting_of_ref": "indicator--8c891b4f-50bc-424f-a62a-6dc704a1fff2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec84dd1-6ff8-42bc-9fa4-1369e9dc7b70", "sighting_of_ref": "indicator--8c891b4f-50bc-424f-a62a-6dc704a1fff2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6850bdfc-b2da-4d99-8317-b5897059f6d7", "sighting_of_ref": "indicator--328fdafc-64ca-488c-96e6-ad1184c2eb39", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c847878e-666e-4483-b87e-e19d6a60427e", "sighting_of_ref": "indicator--88f9124a-0a53-4548-91b7-29dd11cdd810", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fee696-2789-427f-9181-f4430e81d00a", "sighting_of_ref": "indicator--88f9124a-0a53-4548-91b7-29dd11cdd810", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78347191-a97f-4b22-8815-504a8f9032ba", "sighting_of_ref": "indicator--f6ea06bf-dfc3-409d-bbf6-3510852557bc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b9128e-8eca-4fee-b37d-3f665ed5404f", "sighting_of_ref": "indicator--e6a4436a-3d1d-43f3-a568-e888e6e98031", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94d893f-d08e-4232-bda6-e0c2fff1913f", "sighting_of_ref": "indicator--9fd51e71-d99b-4712-a65f-cc7c455970e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617a2b16-5457-4c9d-b4b1-c9dc89d54307", "sighting_of_ref": "indicator--7ffbce04-75ea-434d-b5e7-ea4ff11c1d18", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe89edd-64d1-43af-8187-28572d03dbe6", "sighting_of_ref": "indicator--a8d187ac-beaa-42a2-982c-8e6ec18b4d0e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c931e056-9f97-4f0a-95e7-2eabb2674621", "sighting_of_ref": "indicator--b3708dff-7505-4616-b903-1c08cc854531", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7de7845-8192-4484-982a-febe76a892da", "sighting_of_ref": "indicator--1c5edad4-7744-4c23-8383-2f4a76975a12", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf68a22-c872-46ac-9b51-76d354a6bcc1", "sighting_of_ref": "indicator--3e3ebe76-4351-48be-b30e-ed2d92ae3a75", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea967a92-64ad-440f-9950-55fa1de118f7", "sighting_of_ref": "indicator--c07cff2b-b7eb-4bf2-a241-792bf4cf69d5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7405b127-8896-4b69-8b6d-f43f41bab3d1", "sighting_of_ref": "indicator--59dfc06a-b159-43c3-a4ff-1455f56d9f80", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7623603-5b7b-4aef-bf63-dc0a053b6630", "sighting_of_ref": "indicator--78681625-1c91-4bfb-bae8-83c993574066", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d179a9-5992-4120-b0bd-d3ef4d0b8d01", "sighting_of_ref": "indicator--e06dc769-6af8-409f-9a8a-5d0f00c393d2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3944e2-f084-4328-9348-135876a5a71e", "sighting_of_ref": "indicator--cfff5a38-3004-4110-8d43-c69d1da9ab6d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b738879-5859-4835-b66e-f1e2af9f88a0", "sighting_of_ref": "indicator--c5b5f469-1a73-4082-bfb4-e9ba3cc46157", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b18bf5d-6a03-40e9-bed3-da7f30005d7e", "sighting_of_ref": "indicator--4b608d7e-25fe-4e6a-89b5-bce11af62b1d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516bb5ae-b302-44be-bdb9-58762c3a9dd0", "sighting_of_ref": "indicator--a152992e-1d38-4ae6-82bc-6bf30e3e1b66", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ce726e-556a-4c38-9833-e581af510dc4", "sighting_of_ref": "indicator--304c7d1d-ff10-4a00-96e5-1c032a6ddb62", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd681e4-4b39-4291-afdb-28587e943749", "sighting_of_ref": "indicator--99f37c05-284f-46dc-9eb4-5dd17acb753e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71450fd2-1af2-4882-aa47-6f96b193cf0c", "sighting_of_ref": "indicator--c4df93f9-2da0-4965-a51d-e52c74b46980", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93520f19-6e04-41cd-885e-5bdc12b39bb0", "sighting_of_ref": "indicator--be21d337-d22b-42ce-8f35-3317e043a842", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3a8de2-63c3-4cbe-8bc5-fa847c1aecfc", "sighting_of_ref": "indicator--3f853744-9908-4167-a250-d90ad0e3e362", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437f60ea-2a46-4a9b-8063-0d42aab8131e", "sighting_of_ref": "indicator--dae2c167-5798-4cf5-a459-9fe3300c65e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f49c95b-5e21-4817-a20c-9e30c2379df7", "sighting_of_ref": "indicator--1850cbdb-1b50-4337-b51f-e347b2eb6447", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91766e1b-de4e-4b68-a54a-0b0045b8e887", "sighting_of_ref": "indicator--67ec01f5-02d1-486c-a5c8-9ae3a54f781f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a5b648-700e-432f-9a6a-057f5d76f07a", "sighting_of_ref": "indicator--8d6dbe21-4c3d-4d25-9da2-d48f25772dbc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a78112e-82e2-48e7-b08a-2173650d0036", "sighting_of_ref": "indicator--16e96050-1c98-4917-9685-29b976ba4566", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8679665-6929-4040-8733-068d0fda131e", "sighting_of_ref": "indicator--22d70535-4f37-44df-8835-265d455278dc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadb328b-a538-4b0f-bc30-8f1dc42d8dcb", "sighting_of_ref": "indicator--4a67d718-3f42-4fc7-ba15-4caaec28b561", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffe3b1b-623a-4ff7-89e6-1d001653348b", "sighting_of_ref": "indicator--d8c8a6ab-1dfd-447f-bd7e-57e13c34eb58", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772b5521-d361-4dd8-b92b-5f377364786c", "sighting_of_ref": "indicator--5794783f-6b56-479b-97e5-07fdf2cc1da2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00fa9f3-6161-4587-b3c2-5a7f963a6050", "sighting_of_ref": "indicator--5794783f-6b56-479b-97e5-07fdf2cc1da2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1661fd05-c0c5-4368-b8ed-a932144dd2c9", "sighting_of_ref": "indicator--56e373a1-2d01-4d24-8fab-b1f23b8d3c12", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269ecca6-40fc-4e44-84e2-339ea2955d64", "sighting_of_ref": "indicator--1f3eea7e-d987-4adb-b51b-92a659186a44", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bf9012-c16b-435d-89b3-acfdab7f6b38", "sighting_of_ref": "indicator--654a8faa-27c2-4213-9b68-0a8d6fdf281e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4d5006-c577-4a8a-ba4b-a07476386144", "sighting_of_ref": "indicator--c72bbb10-1d49-428c-bbc9-88419f15d6a5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1fb092-9777-4f7f-89b3-38f4db040219", "sighting_of_ref": "indicator--a56390f8-a7e9-41d2-b774-083370861b7b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618623f3-8542-4101-93bc-644ebf9aa4f5", "sighting_of_ref": "indicator--77c391a1-f7f7-49ad-a271-300118517d08", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724523de-defc-46b8-9689-7dbe8188e7e6", "sighting_of_ref": "indicator--77c391a1-f7f7-49ad-a271-300118517d08", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cccf63e-f70b-471a-9756-040ac84a010a", "sighting_of_ref": "indicator--01201e9d-7250-4608-a7af-388788f8adc0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863866d7-c882-456a-980d-94de5c81d926", "sighting_of_ref": "indicator--d27a73c0-af79-4f12-a350-88f501a3cdb0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bc33ff-b55c-418b-83a9-5a8e7ebdc035", "sighting_of_ref": "indicator--eb6a0ec3-7869-49c5-9d3f-6385304e95e8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bec186f-7715-4071-891a-ae790a57c6cb", "sighting_of_ref": "indicator--0d04df5e-9edb-4bc9-bf7c-2ae0a536afe0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d607ad-9737-4631-a570-1842c8bfe3be", "sighting_of_ref": "indicator--5f078289-af9c-4463-a5b7-2fc9b06aea1a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af37611a-a1c8-48b7-b48d-e85c0b81530e", "sighting_of_ref": "indicator--164cceb5-bca2-4a96-b5bf-7f883e28aaa3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2597a481-ba86-452d-8c7a-f9105ed414e8", "sighting_of_ref": "indicator--c7319e2c-3e1b-4d5a-bfdf-fb4982e1b5d8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6384104-b42a-40e2-941b-b268f883fafb", "sighting_of_ref": "indicator--c7319e2c-3e1b-4d5a-bfdf-fb4982e1b5d8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fccedd0-7b7f-4c36-a2ee-36b6f746a240", "sighting_of_ref": "indicator--62ec6924-2a7a-4db0-a9fd-2f43e93d5a2a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6136af45-c801-4e88-a86a-f907fb2a44c5", "sighting_of_ref": "indicator--bca93d44-a6dd-4419-9456-aad9c7c20ae9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08cd654-c97e-4b70-b232-d2c7836e1aea", "sighting_of_ref": "indicator--3447e6a7-e772-4722-a664-18cc70a29f59", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca830128-f27d-4133-b298-4237a02048ca", "sighting_of_ref": "indicator--e4336db5-16bb-470d-a075-7a067c87b2f8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e1f504-c431-446b-bfc7-8bfe957c9c68", "sighting_of_ref": "indicator--17f06813-4513-4555-add2-5adc8f2ee22f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881360fd-ecaf-45a7-b2eb-478393aad7e9", "sighting_of_ref": "indicator--f39ca354-4ed3-4d22-a6ed-9191d374b29c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f74053-d724-4238-b3b4-9fa4a9be7ee6", "sighting_of_ref": "indicator--f39ca354-4ed3-4d22-a6ed-9191d374b29c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d449ab4-8fbb-46f0-a2cb-0780e9d3780a", "sighting_of_ref": "indicator--f39ca354-4ed3-4d22-a6ed-9191d374b29c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279f5a24-7abb-41a9-8490-844308400c44", "sighting_of_ref": "indicator--3608af9c-d18a-4377-9d85-1ede06daa7a8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7b9798-0603-4de7-a148-89ff1fa3ffdb", "sighting_of_ref": "indicator--01f1f21e-112e-4a66-8f05-315100fe1492", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4852bddd-7f81-43a7-8ff9-ae2cc12183ce", "sighting_of_ref": "indicator--0f4ccf2e-7606-4313-a6d4-695d3aa0a85a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc6dce7-9530-4e8e-b904-8daaded58601", "sighting_of_ref": "indicator--d7111afd-7f3c-459a-a9ac-869a0835259f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9268610-6d07-4342-9eae-a479bf1e6329", "sighting_of_ref": "indicator--d7111afd-7f3c-459a-a9ac-869a0835259f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289e89bc-4adf-4dc1-a226-167b57c796cd", "sighting_of_ref": "indicator--d7111afd-7f3c-459a-a9ac-869a0835259f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b059eb-eb10-40bd-8c05-fc2ad41db5e7", "sighting_of_ref": "indicator--541fcc50-c98f-4e4d-9863-48fdc0552438", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f198e031-47db-4ec6-a5f5-64b882de46a3", "sighting_of_ref": "indicator--dde70a07-afd1-40c4-b0e9-19ee22e2f3f6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ea6daa-f8fb-4ec1-affd-5820391cdc8d", "sighting_of_ref": "indicator--09362d4f-7679-4454-a8df-6982b395212f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063e782c-be6a-4b2a-bb09-e47b0cb2cbc1", "sighting_of_ref": "indicator--5a608c19-640e-4181-9256-8b1db91b22ba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c396244-40a4-48bb-9e42-c421fbdff921", "sighting_of_ref": "indicator--5a608c19-640e-4181-9256-8b1db91b22ba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bd4ed1-e55b-48ad-8fb5-8e74d645d530", "sighting_of_ref": "indicator--5a608c19-640e-4181-9256-8b1db91b22ba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3a9abf-924c-407d-9551-94e2d00387c1", "sighting_of_ref": "indicator--bee0fdd0-6164-4505-9c92-a5fa76481334", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24c3484-acdd-4439-bece-2d32f151a7bb", "sighting_of_ref": "indicator--109f4124-ba8f-412e-876a-e375ade995f5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9d3523-8774-49e1-bf3b-1a0141a05ed4", "sighting_of_ref": "indicator--fb90b07b-edb5-41e5-a9c8-3a69b5531ef7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f11ec6f-d5de-42df-a599-8b101cac9edf", "sighting_of_ref": "indicator--fb90b07b-edb5-41e5-a9c8-3a69b5531ef7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0717084-a7d0-4f92-9f61-25a473dbda6c", "sighting_of_ref": "indicator--98fca973-74a4-4446-9875-5d82d5ce5146", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996eec88-276c-4de6-9b85-cf8345e432ff", "sighting_of_ref": "indicator--51cd4a0c-8799-42b5-bd12-d63c06f7cf1d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfb85c7-b356-4444-b5b6-0bbbf5a641c1", "sighting_of_ref": "indicator--7e1d3ad5-3c48-4673-99d7-da73026f9d7c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d10e01-8d94-4e9a-8538-489798a60bb4", "sighting_of_ref": "indicator--89439f9d-3812-4406-9e81-710647c5b5ae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1838f9e1-1e42-4e64-bfb7-ca2c1602ef5c", "sighting_of_ref": "indicator--ea853917-4f61-4d95-83df-be344030f3f3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cfc649-6f04-44f8-8105-72f5ca8ad6fe", "sighting_of_ref": "indicator--ce1e94fc-7986-41f7-bb67-28a9539dbbae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c65277b-dd19-44f8-a706-2b7350c44d7b", "sighting_of_ref": "indicator--f9675b68-64de-4fc0-a269-18b58222d1fd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3e1a0f-a202-4e12-8e07-a01b74ee5f30", "sighting_of_ref": "indicator--1c54f2f9-b387-4b9b-ac64-296ba9d724c5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b026c49-c38c-474e-ab72-2e900d0e18ae", "sighting_of_ref": "indicator--1c54f2f9-b387-4b9b-ac64-296ba9d724c5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55ab910-7c1b-4115-929d-796cb0ba513b", "sighting_of_ref": "indicator--bb01a049-80d7-411f-aba7-5301014c25b1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b961b6cd-f2a2-44f4-b3a4-de1fb8329256", "sighting_of_ref": "indicator--5e247d17-e1b1-48eb-bfd6-09c60394742d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4cf138-411e-4324-963b-3f18fe35c7d8", "sighting_of_ref": "indicator--3c908bff-0fea-4051-9d39-b7c2efa47b49", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5c27b3-f9ac-4951-9df4-dd6a2ab460d3", "sighting_of_ref": "indicator--0e957e29-1c1e-4569-b018-b11b3317572d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebf14db-c82b-4570-85bc-3d217df3ba0e", "sighting_of_ref": "indicator--1572096c-d2f7-450e-9d86-10b30c1f4231", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48f7338-ac79-4640-8157-87d100262a54", "sighting_of_ref": "indicator--1572096c-d2f7-450e-9d86-10b30c1f4231", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cd7dec-8c18-4f90-bc8a-85563778d0f7", "sighting_of_ref": "indicator--1572096c-d2f7-450e-9d86-10b30c1f4231", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67757cbc-a590-45e6-87ba-8c69529ec229", "sighting_of_ref": "indicator--b72711d7-06b6-4335-95f5-1944abc32b04", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21b11d4-1f86-4e89-8a4b-715fbf057f3e", "sighting_of_ref": "indicator--b72711d7-06b6-4335-95f5-1944abc32b04", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdc1b56-6b1a-40c0-a675-f4b1aaa93c7f", "sighting_of_ref": "indicator--ead676a5-dc15-4389-a8bb-ac8444cac92b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f03bf9-e625-43b5-a23f-3736a7965f90", "sighting_of_ref": "indicator--c99236eb-bfcb-4ea7-8b14-ab21e0b176a0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27376af-ba86-426a-8adb-05a8caea1294", "sighting_of_ref": "indicator--c99236eb-bfcb-4ea7-8b14-ab21e0b176a0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194e9cbe-94ff-4bfa-9073-090f9b4cd0e9", "sighting_of_ref": "indicator--c99236eb-bfcb-4ea7-8b14-ab21e0b176a0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2000fe-b388-4e16-82b0-26973dfe546d", "sighting_of_ref": "indicator--5697d623-45fa-4c69-8932-e7379f337f52", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ad6bf9-3447-4138-9558-23cbfb636028", "sighting_of_ref": "indicator--6ef73436-f9a9-4cf2-b4cc-215aa4c2fa68", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9de0f82-9db4-4174-81f3-f22ab12729b1", "sighting_of_ref": "indicator--f50e3968-0d85-40d0-9f3b-3cb4f280e341", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69754319-4b0c-4cf1-ba3d-a72ea42c19e7", "sighting_of_ref": "indicator--2fc6a9f7-be45-4f2b-a403-c6117a4ccb73", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad105c8-7294-453a-86fe-1e0b80024353", "sighting_of_ref": "indicator--3d3fb423-7bea-4493-a347-9f66610fd91e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8a92d6-febd-45c6-8eee-062bb9dd84f8", "sighting_of_ref": "indicator--c183f1a8-5a1e-41bd-93a7-c713c1368848", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0833cd3d-462b-4305-b1a5-88c688f5df1c", "sighting_of_ref": "indicator--b369c98f-6ea2-4401-9ff2-f1ed83bee5cb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7959cfda-389c-4ea4-8234-5b35a1e4efd1", "sighting_of_ref": "indicator--6e3bbe78-072e-4492-af25-02d8636b44f1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945ace92-32e5-4baf-8727-7fec4a4817f3", "sighting_of_ref": "indicator--a78660c8-0913-493e-a5cb-475d02733fbc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b34e9d-0938-46e0-8ed5-6d710fb1edd0", "sighting_of_ref": "indicator--a78660c8-0913-493e-a5cb-475d02733fbc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ff23ad-4bd0-468f-9135-738791b02027", "sighting_of_ref": "indicator--a78660c8-0913-493e-a5cb-475d02733fbc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ee4783-e622-43ab-a487-ef8f9580005e", "sighting_of_ref": "indicator--9deb8150-964e-4056-a3c4-0db6123914e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d08a87-145e-4496-a293-0d90ef9668e4", "sighting_of_ref": "indicator--9cc68b2d-b4de-46a0-824b-c61daed9baeb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79bf390-73f6-49bf-8367-fb1fc47c68f8", "sighting_of_ref": "indicator--c0412b4d-c53e-4d64-bf0e-2ce11258fb71", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf39495-a3d8-4632-9eb4-3172ad077bc9", "sighting_of_ref": "indicator--4e1d1cf2-f3aa-4f80-8efc-e2da02e687c4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2baf605-c77a-4d43-85ad-398e9b34b135", "sighting_of_ref": "indicator--b448fca7-7c9b-4660-beaa-81c1d1d9eff4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3b105f-8037-4f7a-a4bd-b59e34cc4a96", "sighting_of_ref": "indicator--8c4fcf7f-47d0-4bd0-a77f-b537924a4774", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772cdf90-7d88-4c38-a265-c25d601b2536", "sighting_of_ref": "indicator--8c4fcf7f-47d0-4bd0-a77f-b537924a4774", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4674899d-c540-43b2-ba63-8362541977d6", "sighting_of_ref": "indicator--136be829-5398-4b2c-98ea-0c630e79753b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c078f97-7d3d-4b43-9cb1-f37356e4e569", "sighting_of_ref": "indicator--6c68c6ed-e6f4-40fe-8404-c0cb008b8e91", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b84c7d-f8cc-42f8-86bc-ae97ae4273a3", "sighting_of_ref": "indicator--f296a298-6955-46d7-9974-6024303061d9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08219354-1f34-4fa7-a022-22aed6fcf5ea", "sighting_of_ref": "indicator--b15b5fea-929b-42b2-af70-655682787d3f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0773f49-677b-4851-bf03-65d06f7b6029", "sighting_of_ref": "indicator--a463b2c8-d1eb-4fe1-847d-86f5b77333a5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b8c4af-225f-4fa4-8750-3418b674ae6b", "sighting_of_ref": "indicator--0c30cf0b-a477-4f96-8ace-945d83256466", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b15a85-afff-4b9e-a5f5-ae8fe6dc771a", "sighting_of_ref": "indicator--b063920f-051d-4ea0-a027-82d7a4ef996f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908eda43-9988-401d-a2a0-81d395c4bc7f", "sighting_of_ref": "indicator--27c97afd-5e61-4ef7-a44c-767eb36e8878", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9add2a9-68af-44c3-9b1f-4524d70fd7e8", "sighting_of_ref": "indicator--27c97afd-5e61-4ef7-a44c-767eb36e8878", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592e1afd-6291-4d65-a3dd-0e7fe4d8d61b", "sighting_of_ref": "indicator--bd618f26-d9a5-471d-9bca-d92f4aa9a7fc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b156e13-2e12-456a-930d-d404aef7f6fa", "sighting_of_ref": "indicator--eef6f363-1b10-4ef7-a6f6-d3681dc71399", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42735e2-a821-49c9-af34-748fb67baa94", "sighting_of_ref": "indicator--9811042d-2a20-4e91-a196-f4c174c6ac11", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b9d762-00bc-4b0f-ac7c-9933aafae2cc", "sighting_of_ref": "indicator--2e572075-bf5a-4a87-b8a8-4e34cfacd148", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1668116-9f61-4dfc-b1a8-41fee1ecbaf6", "sighting_of_ref": "indicator--9a2a69f7-181c-4183-9113-208bad1c04bd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdb652c-ddf5-431c-b8b0-1dfed776aa43", "sighting_of_ref": "indicator--f0c20893-9512-4428-8fda-ec6b4f9e42a7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b25270d-4102-4767-b67b-5c30728bf424", "sighting_of_ref": "indicator--2518b88b-7fed-400b-adbc-7ce3c029a64d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8e32f6-0b7a-4f1d-9812-450d42275fa4", "sighting_of_ref": "indicator--81868c41-0f32-46b4-aafa-2b2cfb60ffad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a7b62d-545d-433f-ac9d-e6377b43e936", "sighting_of_ref": "indicator--81868c41-0f32-46b4-aafa-2b2cfb60ffad", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378e8576-da7c-4821-a6ac-198f531b16c7", "sighting_of_ref": "indicator--469b8466-3e2d-4335-951a-374adc5e2596", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a41282-8dc9-46cf-9c07-23ca2a08a7bc", "sighting_of_ref": "indicator--d8e592ae-239f-4a5e-9195-84dcd111148e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f316213-e784-4749-9a0e-c8af0b458198", "sighting_of_ref": "indicator--d8e592ae-239f-4a5e-9195-84dcd111148e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b0743f-7c0d-44cf-98a4-e18cfbeae375", "sighting_of_ref": "indicator--73665397-da27-4e32-81d0-6d0038c0286b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba47063-dc82-41e9-8b6b-d24c7ba168ac", "sighting_of_ref": "indicator--759e3fa1-7c09-4e6e-add4-71d1423672d8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fbbe2c-11d0-4727-880d-f707c4773c70", "sighting_of_ref": "indicator--b7b1cb79-b9f6-4531-895c-a36c555bd8e2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e901d64f-5859-4945-a53e-b4e35e4ddec8", "sighting_of_ref": "indicator--8d144c9e-6cb6-4018-823f-3e6fe99295cb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e1f389-8f79-462c-aafc-30ec6b24c7e6", "sighting_of_ref": "indicator--8d144c9e-6cb6-4018-823f-3e6fe99295cb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7431aa5b-702e-4fef-9658-ea0f21b2dd94", "sighting_of_ref": "indicator--8d144c9e-6cb6-4018-823f-3e6fe99295cb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bc6ccf-9633-4565-ad56-a7711dcbde6b", "sighting_of_ref": "indicator--7b29c3fe-510c-4115-8f27-cd3f763f0a1c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ea0dfe-e4aa-49ea-b3db-8aab9b722f72", "sighting_of_ref": "indicator--7b29c3fe-510c-4115-8f27-cd3f763f0a1c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fede9576-6b07-4621-81f2-105e79d5ce0b", "sighting_of_ref": "indicator--7b29c3fe-510c-4115-8f27-cd3f763f0a1c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4c8be6-efea-4ef1-a049-bacdae2538ae", "sighting_of_ref": "indicator--1b94b992-7de5-45af-a800-2d6990072436", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8460fc9b-4c4d-4a10-b1e2-74e5a08d5c09", "sighting_of_ref": "indicator--1b94b992-7de5-45af-a800-2d6990072436", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6231b69-6866-4055-be7c-c68458a41b44", "sighting_of_ref": "indicator--f25fc978-30ce-4532-89b0-db900aaee9a7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda8a41e-8f43-439d-a795-4e0782ce70e7", "sighting_of_ref": "indicator--f25fc978-30ce-4532-89b0-db900aaee9a7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d312614-d110-4e4a-ac2a-d57fa1fba743", "sighting_of_ref": "indicator--97db0190-127b-4cd8-b74a-b2cae98f536d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5294911-c7de-43d8-b139-bb2269f42040", "sighting_of_ref": "indicator--97db0190-127b-4cd8-b74a-b2cae98f536d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f184ea4-7fce-4f08-9d61-5b2fe68b94b6", "sighting_of_ref": "indicator--97db0190-127b-4cd8-b74a-b2cae98f536d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8f8f57-54b8-4fde-849d-b6c5887745ed", "sighting_of_ref": "indicator--540e794d-053a-464f-afaf-e63a0d9dc1c9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1fa47f-8cb0-48bd-b86b-8d1fa9b7e365", "sighting_of_ref": "indicator--540e794d-053a-464f-afaf-e63a0d9dc1c9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a376094a-5cd1-4847-be16-115bbe34fcbb", "sighting_of_ref": "indicator--540e794d-053a-464f-afaf-e63a0d9dc1c9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c689a88-6f01-4361-9b7d-7699367a66ce", "sighting_of_ref": "indicator--ac7fec39-5475-49f6-bb9a-687e5029638e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a7a963-5723-4b41-a85d-e5129409af09", "sighting_of_ref": "indicator--ac7fec39-5475-49f6-bb9a-687e5029638e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e86385-4a8a-4e8d-b639-198a646eb1c1", "sighting_of_ref": "indicator--bc576c71-d409-4e73-9d01-01f15f9bba1b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7495c8eb-9dcc-49b3-a8c2-175a0a3c5fe0", "sighting_of_ref": "indicator--bc576c71-d409-4e73-9d01-01f15f9bba1b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9008007-26c2-4b72-bc9d-ec945d6797da", "sighting_of_ref": "indicator--e59ce2b5-477c-47c9-a882-20fbf8cb7ded", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29593127-1d15-4127-8349-7dbc62c0ab99", "sighting_of_ref": "indicator--dc08d198-87f1-4893-a582-b34f4536b94e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfffbd80-49d6-445b-8e52-4f728e5a283c", "sighting_of_ref": "indicator--d4dfb33a-d571-4101-adde-58f350616225", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82c4b62-78e3-4fb6-b9e0-ac6b6e6bcdad", "sighting_of_ref": "indicator--c759a430-b1e8-47bf-b272-234d2f1f5a47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7311fb9d-e0b7-4605-9276-9b4fabe0379b", "sighting_of_ref": "indicator--fa66e451-bbb2-42a1-9ca9-ff5d61dfc8ab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5aafa76-7a10-459b-902d-da50d90dc025", "sighting_of_ref": "indicator--0286ddc6-eea6-4518-9bd8-3772d365321b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fe1c72-1a29-4c02-9ebe-8588c4d1c47c", "sighting_of_ref": "indicator--2aed24bf-37b8-4a9b-8f63-5648b8a72fad", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222c9a9b-a23d-4043-907a-0cbcd046768f", "sighting_of_ref": "indicator--08a003ed-f384-4084-aaa5-7d963a560a61", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d36b8b-de11-4da6-b513-8334ed8aeacc", "sighting_of_ref": "indicator--9e60a85d-9dde-422d-b153-b9f5a1fd55ca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa8b35e-bd4e-43d2-a8c6-52a5e2cab716", "sighting_of_ref": "indicator--14bd20eb-a0c5-4ceb-a09c-25d4fbe648ef", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199b82fe-9a2a-4791-9455-a6ea5cae0089", "sighting_of_ref": "indicator--1bef46ac-3fd8-4bc5-99ca-bbcac2068a35", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16bfb14-3d5f-4ca6-bb7b-d7d774400dc5", "sighting_of_ref": "indicator--1d96ee6c-2bf7-4a6b-a1f5-8242218da5bc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f613fb0e-9fbf-4041-83ba-bbfb573bb616", "sighting_of_ref": "indicator--6564f274-e1be-4ec8-a9db-c5cc2118d37c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdf38b6-df52-41e4-a00a-e3d30151097d", "sighting_of_ref": "indicator--350cdb8c-dff2-448f-85aa-bea2ca8cb24a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf31259-b337-4486-a9d8-f9d69aabfebe", "sighting_of_ref": "indicator--f1367b89-9cff-4659-a7c9-e45763b2af5f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9066df39-93e4-4a41-a111-dd56172179ee", "sighting_of_ref": "indicator--f1367b89-9cff-4659-a7c9-e45763b2af5f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04173cfc-a342-4e88-a87f-35cd860ae4f6", "sighting_of_ref": "indicator--a91f3d59-1a6b-4282-9994-cc3553be51d3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac59689-8da0-41d4-9ea1-01f72c03619f", "sighting_of_ref": "indicator--e2ea3c0d-3ffa-4da5-a235-810a3f06b3e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2a59f6-0058-4e7f-b001-74ff32f03dd3", "sighting_of_ref": "indicator--9931bcf6-1cdf-4210-91fb-c2cf281672aa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03583c8d-d638-4a92-bd67-8dd9737dda3a", "sighting_of_ref": "indicator--9931bcf6-1cdf-4210-91fb-c2cf281672aa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac73bf7-634e-4aef-a42d-02d0fc114871", "sighting_of_ref": "indicator--9931bcf6-1cdf-4210-91fb-c2cf281672aa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2409412-f4d7-4d24-9a1d-03795086377a", "sighting_of_ref": "indicator--68917e42-c4f1-44c2-a5c9-5d91f992763b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725d112c-df24-4778-a875-8039a2081d80", "sighting_of_ref": "indicator--5eb646a4-2406-4af3-8a96-b013a7fa9a32", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eef791f-10f3-4689-9211-bd67d18cd99d", "sighting_of_ref": "indicator--5eb646a4-2406-4af3-8a96-b013a7fa9a32", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9469f13-f7db-4482-9551-422d7e8a54b4", "sighting_of_ref": "indicator--23b872be-1b7a-4992-a58e-0851e51080b8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc35cf60-12a0-47b8-9465-39233487cf9a", "sighting_of_ref": "indicator--23b872be-1b7a-4992-a58e-0851e51080b8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da020cf-6d2b-4eda-9a3e-8c512565decb", "sighting_of_ref": "indicator--23b872be-1b7a-4992-a58e-0851e51080b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bd4c99-d26e-4553-89ff-6588b3bbb397", "sighting_of_ref": "indicator--6c563db1-81f8-4088-a8cf-84b282e5dac3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ea2eeb-8a7e-4859-92e6-b5480b14ea6d", "sighting_of_ref": "indicator--a1a4224a-6a38-4fce-87ce-c7b1e0b216bf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93314999-6e4a-454e-b189-85e271e7f372", "sighting_of_ref": "indicator--2c9180a4-239b-41ac-802d-1bc0c48aaeba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efd2b77-8522-4021-9f9e-55b229a7ed81", "sighting_of_ref": "indicator--2757e942-513e-46bd-9dc8-b5d9f728dc16", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28fb512-f973-4fee-83dc-e1b13369cb0e", "sighting_of_ref": "indicator--db00d9c7-b654-4cc2-bccb-0803a03b3df3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e423463f-04c8-449e-b584-81c01a6ed323", "sighting_of_ref": "indicator--b6bfcc24-254c-45a9-b597-b52c82830bb8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530cf7ce-e16b-4e48-9075-1244476ef7dc", "sighting_of_ref": "indicator--8d743ec8-bc75-430d-8c84-4f1720a01e62", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d59253-9e0c-47de-9af7-b0bcb929fc75", "sighting_of_ref": "indicator--d198dcd6-e167-4670-8d51-ace5897487fc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149b8801-404f-4b0d-b252-7708de6e0c1c", "sighting_of_ref": "indicator--4e852972-e986-4f93-ba6e-be6e537f4cfd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d6bec7-414e-49d2-88b9-3cdeca79d736", "sighting_of_ref": "indicator--9a63b5cb-0eaf-45d7-b074-7b58cd2cea28", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f067c132-a25a-422d-8448-168cd2c0b7f9", "sighting_of_ref": "indicator--b6f36fe0-7b0e-471d-b794-218769ea4298", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ae533b-06ed-4329-9998-62246c009d67", "sighting_of_ref": "indicator--ce536d66-d385-42c6-8451-2aa10ceb064b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a91f7f-81de-4f94-b4ef-a809eb7aa389", "sighting_of_ref": "indicator--c644ec52-3363-4d67-b0a3-5ced5ddce28b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3cb7e74-cc97-4676-9fbf-6dcee29f8a69", "sighting_of_ref": "indicator--e498ecca-14ed-44b4-944a-ac6a286beef4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61ffb77-0a7e-4153-b282-e4a89b632460", "sighting_of_ref": "indicator--cdeda458-2e30-4bf5-ba23-e998df20bb0c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c7a1df-93cf-4a6d-a6f0-edce391ab6bb", "sighting_of_ref": "indicator--a30e9a4a-ee55-4f3f-a426-ec61e20a9530", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68aaf78-abfe-40fa-bf57-6060185fb42c", "sighting_of_ref": "indicator--a30e9a4a-ee55-4f3f-a426-ec61e20a9530", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863a0c0e-310e-4c10-987a-c2c055a4838e", "sighting_of_ref": "indicator--a30e9a4a-ee55-4f3f-a426-ec61e20a9530", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9db228-9c83-403a-b19c-d80f525bfaae", "sighting_of_ref": "indicator--5aa66d38-9f8a-44bf-a0fe-e0a53326f46f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1b142c-93b7-40ca-a279-5055ee2cd2a3", "sighting_of_ref": "indicator--696989f6-2b12-4727-a015-aa4d15e67853", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be96f860-ea6f-496f-91b1-3a2d4c27d599", "sighting_of_ref": "indicator--2d86291f-b7ef-47a0-8ac2-205dde696df8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9621ed95-6c8c-429b-b46c-0f315acad396", "sighting_of_ref": "indicator--f1ad8dad-d9db-444a-bdd3-ba2e0313fd2c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64558d36-4f39-4eb6-aa82-fd1430dfba33", "sighting_of_ref": "indicator--438af053-ec15-4445-99ac-0f1472aeab4a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6ee430-53aa-4138-b235-d98b662b1b21", "sighting_of_ref": "indicator--ff30003f-6805-41aa-a276-b274605fbfe8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b1c080-8cbf-4e87-bc97-ed05130749de", "sighting_of_ref": "indicator--ff30003f-6805-41aa-a276-b274605fbfe8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdb9222-899f-42eb-9ecf-3a88c3f5bdf2", "sighting_of_ref": "indicator--f381ec9e-fc7e-45c4-8543-233dfe898d99", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf99085a-840a-4f43-9d69-81c2e1a3e9d5", "sighting_of_ref": "indicator--ddf6ea30-9ef8-4094-ad9f-d7c4fa021369", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f28ba11-8f90-4e9b-aafe-5d65b8291d39", "sighting_of_ref": "indicator--820e4d75-551c-4d34-9113-24a9f098f5a0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60dca16f-6e20-48a7-b525-b28aa6b7100b", "sighting_of_ref": "indicator--820e4d75-551c-4d34-9113-24a9f098f5a0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c37929-b7db-45d2-ba54-6c265c0485c6", "sighting_of_ref": "indicator--75694d9a-ec6c-4fad-ba34-d62dd008e15c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd09bedb-90ca-4800-8de7-68e4269c6df4", "sighting_of_ref": "indicator--75694d9a-ec6c-4fad-ba34-d62dd008e15c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab8b0f1-c982-467e-80d4-9f131f4fdd0f", "sighting_of_ref": "indicator--d8a20bb9-e258-4132-9438-ddf46306af66", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f43ae64-b510-48cd-928c-d91517a05649", "sighting_of_ref": "indicator--d8a20bb9-e258-4132-9438-ddf46306af66", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c7249a-453a-4141-9c38-3d4739adea45", "sighting_of_ref": "indicator--13ef20a1-b240-41f7-9fe1-a6697a0cf588", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7219e22-8501-4a16-8b07-0c657dcd0ea5", "sighting_of_ref": "indicator--13ef20a1-b240-41f7-9fe1-a6697a0cf588", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93da27be-2619-4dae-a2ee-e0a4817bbd95", "sighting_of_ref": "indicator--c89bbaf1-f592-4866-bed8-af300ed481e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1319914a-8b01-44fd-9a68-2d07b395b7ab", "sighting_of_ref": "indicator--c89bbaf1-f592-4866-bed8-af300ed481e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52381daf-4ef4-4507-98f2-fd5cbbf57729", "sighting_of_ref": "indicator--fff70c7e-91ab-496c-b4ad-b63c1c6b74a7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475622b3-412e-416d-a395-cf49f54bef0f", "sighting_of_ref": "indicator--fff70c7e-91ab-496c-b4ad-b63c1c6b74a7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a79945-1378-400c-9309-7a64a2c2d376", "sighting_of_ref": "indicator--bd980adb-5fe8-44f9-afbd-8a4c907ded05", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d09617-257f-4dc2-b008-b1544e5f512c", "sighting_of_ref": "indicator--7ab4e871-ffbb-463e-ab71-6e59f95470d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0faf9c-3686-4417-9818-d4b6923346ce", "sighting_of_ref": "indicator--7ab4e871-ffbb-463e-ab71-6e59f95470d0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762d4d7f-f613-4b8d-b931-22ab4e87626a", "sighting_of_ref": "indicator--7ab4e871-ffbb-463e-ab71-6e59f95470d0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7965ecca-488c-45eb-97f4-420169281eaf", "sighting_of_ref": "indicator--bd7323b3-a8dc-486c-a2b6-273fd463ae60", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a95de5a-baae-4115-be6d-c4ddd4a7aff5", "sighting_of_ref": "indicator--bd7323b3-a8dc-486c-a2b6-273fd463ae60", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c616cc-09b0-4f5e-aeda-8753e24e2b01", "sighting_of_ref": "indicator--bd7323b3-a8dc-486c-a2b6-273fd463ae60", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad9e27f-fc4a-401e-9b41-892974e68013", "sighting_of_ref": "indicator--e0d23834-eb04-480d-b60b-edb155b3280d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2134ab7-1abd-4457-96d3-23baff75390d", "sighting_of_ref": "indicator--8a1b3978-56a0-4ef9-bb9b-2642874432e9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7065e50-1394-4052-ae05-b8a6fac8b4c5", "sighting_of_ref": "indicator--8a1b3978-56a0-4ef9-bb9b-2642874432e9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae5b102-884a-40d7-bb6f-a9acf6ce7d84", "sighting_of_ref": "indicator--066e9324-87fa-49e6-a562-724d563aa574", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40ab4aa-8b6a-411c-9c4a-07c9c21a5a5a", "sighting_of_ref": "indicator--445a19b9-f333-48e3-bd3e-97a5a7fa1bc4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1270ae60-73f6-4b0f-b48a-362cef90b63a", "sighting_of_ref": "indicator--f9687925-7131-4e03-9bda-9426112b7759", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbc9026-7afb-40e9-acc1-4601255934d9", "sighting_of_ref": "indicator--f9687925-7131-4e03-9bda-9426112b7759", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5e7640-1ffc-4a9e-9762-ee27fa94de4f", "sighting_of_ref": "indicator--5587881a-de66-4ef0-94d5-1c596a9ee08f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbb83c1-6c90-4b92-b7a5-c7973e70dfc4", "sighting_of_ref": "indicator--092605b1-95b1-4c8f-be12-2d119410d1dc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80b3ee6-aa16-453b-90d7-456879f20948", "sighting_of_ref": "indicator--ad13cc17-ec0c-4a0d-b2a5-1fd6f3569ff1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a25c243-9ed2-40b3-b585-2ad0918bf864", "sighting_of_ref": "indicator--bf4e82d9-e66a-4a7f-b024-0d1537158307", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1c7a2f-39a2-4b8d-a7c8-3ad08d40fc60", "sighting_of_ref": "indicator--bf4e82d9-e66a-4a7f-b024-0d1537158307", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6536c682-8c2c-42d8-a012-19b1f1355c22", "sighting_of_ref": "indicator--ad9b16e3-3ab0-44e3-9686-1038d3fbf863", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442152bd-aed0-4527-89e5-43fdd111dd29", "sighting_of_ref": "indicator--ad9b16e3-3ab0-44e3-9686-1038d3fbf863", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbffee7-44d3-4102-9b75-3651134755e3", "sighting_of_ref": "indicator--ad9b16e3-3ab0-44e3-9686-1038d3fbf863", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd69189-dda3-40f1-ac75-c593ec0e1a2d", "sighting_of_ref": "indicator--5d3020b6-97c1-4322-8ff2-0f2ce3022b22", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fa3cb1-bb44-4af1-a54f-d52a4f870665", "sighting_of_ref": "indicator--5d3020b6-97c1-4322-8ff2-0f2ce3022b22", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda21ab4-ef72-4566-8425-3bca75443c01", "sighting_of_ref": "indicator--3ce269fa-5da3-4e06-89ee-6159af53397b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba8e19a-8c1b-4c66-92a2-e121c8cd3bed", "sighting_of_ref": "indicator--8f96a941-ec05-4318-b5dc-d2bdcb376e83", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f174d58f-be80-4c96-88cf-dd8d4129be89", "sighting_of_ref": "indicator--318e40d7-a90a-4c21-8cb1-1135c78dda56", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69adcc4-9f51-4b11-9666-d11d04315303", "sighting_of_ref": "indicator--318e40d7-a90a-4c21-8cb1-1135c78dda56", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab7e85d-10a1-45dc-acc6-a7c4b34d6b89", "sighting_of_ref": "indicator--720a6b6e-5cca-4f5d-bd03-f659e64acddf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd5220c-80fa-4044-bfdf-def34b28a202", "sighting_of_ref": "indicator--720a6b6e-5cca-4f5d-bd03-f659e64acddf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc25e93-9f8a-45c6-811d-3f89e3b535fa", "sighting_of_ref": "indicator--5219016b-b7c3-428b-b90c-2702d1874edf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6190eeac-cde4-48ae-a3a8-4125f844afca", "sighting_of_ref": "indicator--ff800941-a3fc-4fb6-a403-6e14be612324", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4ced04-62d7-466a-92f4-e7894b2856d2", "sighting_of_ref": "indicator--0effcf27-8e82-4a03-a7bc-d58cb001bb54", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cb5249-5af3-4de0-8b9b-675443fa3601", "sighting_of_ref": "indicator--5ebae34c-a713-412b-88b4-905a96b70db2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a00474c-9c03-460c-89c7-4bd977c8d8de", "sighting_of_ref": "indicator--c0562a1d-0605-48c7-8ace-9d57718678fc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f704a671-38de-4708-8b3f-54ee173eac3f", "sighting_of_ref": "indicator--f88275ba-0d8c-43af-b658-ceeb89091c5d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7114f95-2702-40db-85f9-7dd92195c2c9", "sighting_of_ref": "indicator--591e4125-6ca4-46a6-bf3c-b81f1d0b8312", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe63dee-eb2f-4199-b221-7be207ca301b", "sighting_of_ref": "indicator--3bfcc25e-5c51-45d4-90a5-bcc44a6f9278", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66216829-1a4d-45d5-8f3c-2b3307f570e5", "sighting_of_ref": "indicator--3bfcc25e-5c51-45d4-90a5-bcc44a6f9278", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c271c3-7d5d-47f9-a74f-34f29b991c24", "sighting_of_ref": "indicator--a069ea87-c160-456f-aabc-225529dafb0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d2db9e-7414-4514-a577-08874b49301c", "sighting_of_ref": "indicator--c0d15ee1-3f96-4d12-a513-9ba55e0ff31f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a40163-66d5-4554-a185-2de22aa5b1c9", "sighting_of_ref": "indicator--c0d15ee1-3f96-4d12-a513-9ba55e0ff31f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d843ba7a-318f-439b-a692-e638e1fe0f6d", "sighting_of_ref": "indicator--177347a6-1751-4151-b752-d4b119dc13a5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fff43d-c694-47fc-b807-55f5a1bab1a6", "sighting_of_ref": "indicator--8ac948ca-9f70-4c11-ae8b-507ef4c15396", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd82403b-7dea-425d-ada7-eb47fc62a256", "sighting_of_ref": "indicator--8ac948ca-9f70-4c11-ae8b-507ef4c15396", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91668d5d-9d47-4e03-aeb9-f6a793f2a8dc", "sighting_of_ref": "indicator--7d6bfa7e-7fe7-49eb-9778-546d7f830e42", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44382d5c-43b1-45fd-917d-d6815d636641", "sighting_of_ref": "indicator--e02c2fb3-a8d0-48b9-94cf-d5690cb6d66f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee1201f-6a0d-4043-afb6-e309d7870502", "sighting_of_ref": "indicator--e702b9e6-7c09-4b85-8f8b-3660e5b4dc9b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdaf5743-3297-46e8-a081-51d6cb7083eb", "sighting_of_ref": "indicator--df98ce8b-45e2-4c93-89ef-03c5ffd8ac17", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d5cf08-f3d9-409a-b3ad-2cca145f7727", "sighting_of_ref": "indicator--df98ce8b-45e2-4c93-89ef-03c5ffd8ac17", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0c5c01-2512-455e-afcd-da7dd9c7c04c", "sighting_of_ref": "indicator--8386c464-47c9-47ca-bb34-27ae026e2e6b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e38cab-f7d2-4bec-8657-c09f6af02813", "sighting_of_ref": "indicator--b9080602-1502-40dc-b0e5-b97a22885a7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffc9f54-eb71-4693-971c-b48a52acc04c", "sighting_of_ref": "indicator--14dc187d-827a-4a2c-92bd-8f15c7f52d59", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d16bcc1-fb7f-44bf-8dbd-2f71713aa01a", "sighting_of_ref": "indicator--f051a99e-ce63-40f8-a9c7-5cf7af8c70a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db08b57-53d1-43e9-b946-7123ab055fe4", "sighting_of_ref": "indicator--f34deb40-55cf-4ae0-a715-24b46f398ed4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08608fa-cf93-41af-9d39-26eab0e5b5c7", "sighting_of_ref": "indicator--2a154591-7ffe-4ed1-b08c-a230278abcfd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96a7e5c-914c-4fbf-8f78-e031e96880c3", "sighting_of_ref": "indicator--ebd81158-06c8-483b-bc1f-9dc7f21ab6a1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c5e17d-f4b8-4bfc-8603-07052057623c", "sighting_of_ref": "indicator--ebd81158-06c8-483b-bc1f-9dc7f21ab6a1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80b5c11-35c9-44db-911f-aa64b890fa29", "sighting_of_ref": "indicator--ebd81158-06c8-483b-bc1f-9dc7f21ab6a1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0ad359-9b1a-4235-8f88-2ca32c2caad1", "sighting_of_ref": "indicator--35c4620c-c516-4499-867b-89393882416b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18296cd9-32d7-413e-9815-08b676e2540e", "sighting_of_ref": "indicator--35c4620c-c516-4499-867b-89393882416b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69830d7-a6f8-4381-8126-ad966a16da6b", "sighting_of_ref": "indicator--611511ef-12f5-44a5-9ba2-1a7629f7564f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554a145d-7e90-4959-8a4c-ad154fd6015b", "sighting_of_ref": "indicator--611511ef-12f5-44a5-9ba2-1a7629f7564f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a090f0-7e65-4e79-9e70-1b3d7788ecc7", "sighting_of_ref": "indicator--611511ef-12f5-44a5-9ba2-1a7629f7564f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b08ad7d-0d85-41a6-a61d-7f1c8e0de2dd", "sighting_of_ref": "indicator--66723c0f-d3c9-410a-9c6a-6f677d3db009", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ececfc7-07f5-46d3-b569-811fefd9d931", "sighting_of_ref": "indicator--66723c0f-d3c9-410a-9c6a-6f677d3db009", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f3d9bb-76fc-4ea1-95b4-eed81ca365c3", "sighting_of_ref": "indicator--66723c0f-d3c9-410a-9c6a-6f677d3db009", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691fd8f7-382c-4cee-8bb3-38ef1b8a60d7", "sighting_of_ref": "indicator--ec158bef-e5e5-4cda-aeb2-2e927ffee80a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0de4586-463e-494a-b719-4b8889001fea", "sighting_of_ref": "indicator--5511ad27-4dd9-44d2-bfcb-123a15fbb2f1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d00e80-8223-4631-92e8-a5a32ae212ab", "sighting_of_ref": "indicator--5511ad27-4dd9-44d2-bfcb-123a15fbb2f1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed3e3d4-6e1c-4446-ba37-d93251460f1b", "sighting_of_ref": "indicator--92025fbb-a6f3-4cdf-b9da-2ab30e280ab7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7cea68-f601-428f-add9-b7b8736a4c7f", "sighting_of_ref": "indicator--70790f5c-9415-4aec-a41c-4902d9a7f2d1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe694ce-3af2-4057-94cb-a582a58fa8fb", "sighting_of_ref": "indicator--70790f5c-9415-4aec-a41c-4902d9a7f2d1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b405941a-9ec0-4a22-821e-e2e62b9254cf", "sighting_of_ref": "indicator--70790f5c-9415-4aec-a41c-4902d9a7f2d1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb10f3d-b564-466c-bd10-a1c33c2ac0df", "sighting_of_ref": "indicator--2475bac5-2205-4de9-ac7e-1d472d02f34f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5baeab-c083-44bd-9782-fa7cb262662d", "sighting_of_ref": "indicator--7f6752af-0bcd-47d0-8f87-6b6c0f5d58bd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657e39d4-3d07-4741-b643-70c980411b69", "sighting_of_ref": "indicator--7f6752af-0bcd-47d0-8f87-6b6c0f5d58bd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8738b968-a50d-4a7f-a233-cca504184fc3", "sighting_of_ref": "indicator--542e5ecf-200c-49cd-bfec-e70373e4ac8f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9789ece3-715a-4c82-ace4-4d89dd0d995c", "sighting_of_ref": "indicator--c7415fbb-47ac-462f-972f-6eb10f4f4d03", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5afe2cc7-e030-4478-b00a-b25bd1f5a2f3", "sighting_of_ref": "indicator--c7415fbb-47ac-462f-972f-6eb10f4f4d03", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9635eb94-6a51-4b9e-8d9a-1299bd6a81a1", "sighting_of_ref": "indicator--58f61253-7ff7-4af0-ba82-a2af816a8861", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235b876a-d577-4b22-8517-4691152dc10e", "sighting_of_ref": "indicator--4d07c747-3f50-4d0f-8647-1fbcbade4f67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccea259-9fe3-43a1-83ba-00056606b742", "sighting_of_ref": "indicator--9d1c1bd6-8985-461c-8444-52a5e07c4ca2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ac0abe-c23c-4386-b00f-657618d52e52", "sighting_of_ref": "indicator--9d1c1bd6-8985-461c-8444-52a5e07c4ca2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0399fb2-f2bb-480a-8396-1c09a05f31a7", "sighting_of_ref": "indicator--38dcd7ae-45bc-442a-8943-5b3889e509d4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe47f9dc-63b5-4787-93a3-50ac34c0e39e", "sighting_of_ref": "indicator--5aa00198-8228-4ce3-be35-bd110e950113", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0584559f-18e1-4dc1-972c-f543b686e672", "sighting_of_ref": "indicator--e8aad02c-d296-4740-b6d5-5845419151a4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f7c4e1-ef95-4b82-9f93-596231e25efa", "sighting_of_ref": "indicator--e8aad02c-d296-4740-b6d5-5845419151a4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cdf89f-78f9-421f-b647-561eaf82da57", "sighting_of_ref": "indicator--e8aad02c-d296-4740-b6d5-5845419151a4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0b39ce-83b2-4201-b94c-633a5fb546f5", "sighting_of_ref": "indicator--36c0a305-77f6-46ce-a794-868fa70f58fe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878438b1-72ae-49f4-be3f-f1aba4f3c4d7", "sighting_of_ref": "indicator--36c0a305-77f6-46ce-a794-868fa70f58fe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346e4bca-3121-429b-aa41-d65dabd9bee0", "sighting_of_ref": "indicator--36c0a305-77f6-46ce-a794-868fa70f58fe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32123178-b8aa-4b2b-b749-94e4225e8e15", "sighting_of_ref": "indicator--15098b9c-b6f8-4f9d-ac4c-f818c18de266", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e884a89-6ce8-4f3e-a644-cfb066cb6219", "sighting_of_ref": "indicator--b7c8dac4-d5fc-4c3b-b1ac-5f9142c4f001", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c13e51b-f261-460a-bfb8-f6656798cbe9", "sighting_of_ref": "indicator--724343b5-a700-42c9-aa14-7dfa41d3a2f4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc28dfa4-040f-4976-bdd0-0d83581d6c82", "sighting_of_ref": "indicator--513af323-f2d9-4f83-8ee8-5a9056ec4880", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9b9096-297d-493c-ba18-b1f4cadaa6b0", "sighting_of_ref": "indicator--1aab433c-720f-4172-a747-e89e8fe6873e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2bf35b4-4e67-420d-8b4d-ccf0f5356465", "sighting_of_ref": "indicator--5b97ba36-3a83-471d-ab9d-58c6e8e8aacd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ded4b9-2d9a-43f6-9118-eea78f6ac357", "sighting_of_ref": "indicator--5b97ba36-3a83-471d-ab9d-58c6e8e8aacd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43914dc2-bc5d-4b55-8817-3e46c565dc33", "sighting_of_ref": "indicator--5b97ba36-3a83-471d-ab9d-58c6e8e8aacd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c8898d-0b0d-4049-a47d-490bf760208a", "sighting_of_ref": "indicator--962aa79c-d132-4374-9cf8-a3388d9013dd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ec3a36-a51c-4c3f-b3b1-ceb05e16cccb", "sighting_of_ref": "indicator--cf712527-85f6-46a4-872a-790270f22cb7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d591ad5-008b-4ce7-91c5-108c6664f4fb", "sighting_of_ref": "indicator--a945b234-dfcf-44c6-8f1d-dcfc748b0d78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8775091f-57d9-4b3b-9a64-cc2e1108f500", "sighting_of_ref": "indicator--90225b05-d00f-42d5-b6dc-cb0f07dacf39", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fd5420-fc67-41e3-aede-93218f960805", "sighting_of_ref": "indicator--90225b05-d00f-42d5-b6dc-cb0f07dacf39", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeac2eb1-8440-470f-864d-4905ce963f69", "sighting_of_ref": "indicator--a3c444fb-00a4-4238-82e9-f97c6d82e015", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614433eb-8d2c-4f3e-b0b4-dabc7172dcdf", "sighting_of_ref": "indicator--a3c444fb-00a4-4238-82e9-f97c6d82e015", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6705a820-dfba-4e5b-99fe-0eae7c21810b", "sighting_of_ref": "indicator--61c478bb-3783-4591-a3aa-c3be450d90a4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b07d799-2fcd-4b65-b628-1c76e1eb100b", "sighting_of_ref": "indicator--61c478bb-3783-4591-a3aa-c3be450d90a4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f78701b-95b2-4744-94b9-0c49f611498a", "sighting_of_ref": "indicator--1c73097b-8afd-49ff-b23d-5f1f73927698", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf37caa-5cd0-4d27-84d0-033ab081d90f", "sighting_of_ref": "indicator--70083927-cfe9-4eda-9e19-1f0af8c4f78c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c1b2f2-0342-4864-942f-65ebd6dfa553", "sighting_of_ref": "indicator--70083927-cfe9-4eda-9e19-1f0af8c4f78c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd39e02-973f-4c12-ac70-e42f738b98bc", "sighting_of_ref": "indicator--83b67f05-d662-4cc9-a70a-626c96cd4af5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf95323-4567-4e64-aa2a-439eff2032b6", "sighting_of_ref": "indicator--83b67f05-d662-4cc9-a70a-626c96cd4af5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7a21b3-b1b0-4a3e-9ffa-7ce1b66a8dfb", "sighting_of_ref": "indicator--efd217c5-2336-4c50-b606-679077dcbd73", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b901e3b4-d874-42cb-822c-b4ceb806d62e", "sighting_of_ref": "indicator--20d56efb-30f2-466c-9013-30beebae3211", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a2bd38-531a-4ce0-9ca4-7fd320b95139", "sighting_of_ref": "indicator--20d56efb-30f2-466c-9013-30beebae3211", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b57cf1-df96-4c25-80ba-8d7ac4610c74", "sighting_of_ref": "indicator--20d56efb-30f2-466c-9013-30beebae3211", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a772692-b44f-44b3-a706-996e0a246c52", "sighting_of_ref": "indicator--2583480d-7ef1-4afb-a53a-2dc5d38a4499", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6d01cb-4517-468c-813e-daf8f22a0f23", "sighting_of_ref": "indicator--f0bfdc67-f0d7-4649-8f8f-b71d5630c2c6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de5dad8-0deb-4d62-b342-f4e3e9663bad", "sighting_of_ref": "indicator--f0bfdc67-f0d7-4649-8f8f-b71d5630c2c6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72be537a-9d53-428d-85e3-930bc1bbd325", "sighting_of_ref": "indicator--f0bfdc67-f0d7-4649-8f8f-b71d5630c2c6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d35b7d4-2720-4a74-ad02-fab0e28b20cc", "sighting_of_ref": "indicator--532c957e-91b7-4158-b3bd-18634505036e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ebd9cb-5091-4148-877e-d8380fa19c6b", "sighting_of_ref": "indicator--bf165e44-9cf2-4ed3-9a2f-11123cbb622d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22743e22-33ca-4dd2-b2e0-dcf98c181a38", "sighting_of_ref": "indicator--df2779b0-d7ba-402e-b78e-75e06d865cb0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b471cfa-2b02-45d7-b5a0-2f0b636ff2db", "sighting_of_ref": "indicator--df2779b0-d7ba-402e-b78e-75e06d865cb0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a333605-7276-42a0-9e9f-414598e49cd4", "sighting_of_ref": "indicator--b423616b-379a-4d13-b3f5-978af5236e46", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f7a593-7f45-4a44-8eaa-fcd41fde08aa", "sighting_of_ref": "indicator--67e0d173-77fc-4e92-ab83-612752ef7b78", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78186906-c1e4-494b-a68b-2e8c45e3a3f6", "sighting_of_ref": "indicator--6d329d89-363a-4635-900c-aca40abb06e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332e162c-66da-4f54-8c43-096ea79f188f", "sighting_of_ref": "indicator--6d329d89-363a-4635-900c-aca40abb06e5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6583e4-c9ec-4b5d-ba61-59e8a1fef927", "sighting_of_ref": "indicator--c6af013b-bbe8-4691-89a0-55b5dd0b465a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163877fa-0086-4db2-ba17-86230a2a45f1", "sighting_of_ref": "indicator--c6af013b-bbe8-4691-89a0-55b5dd0b465a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e02c4bc-4ea7-4d34-963a-d6b71fecae5b", "sighting_of_ref": "indicator--a061e2f0-02f7-4c38-b30d-95f1d4c4a8b9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203414ff-6c06-4d6d-a001-9fac4976b585", "sighting_of_ref": "indicator--ea4c51cf-28af-459e-bf40-33a80e7354f7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4636228-305d-4b03-b85f-c1970a74a733", "sighting_of_ref": "indicator--ea4c51cf-28af-459e-bf40-33a80e7354f7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b62b4e8-7fa8-44e0-9d85-f23092297dd9", "sighting_of_ref": "indicator--ea4c51cf-28af-459e-bf40-33a80e7354f7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa479fc-3c8f-4a88-9c4c-0549e55e63ef", "sighting_of_ref": "indicator--9f47edb9-75b2-44b6-81ab-a93af3ba7faa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5bd950-4e73-4270-af4e-b823b0bf39e7", "sighting_of_ref": "indicator--38ade7a7-8e6e-4679-8815-507a7397f82d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c4782a-0298-4a74-915f-880379e677c3", "sighting_of_ref": "indicator--2b222ab9-d64c-4f73-ad59-13bd27e9fca0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e4d6f6-9757-4008-8b9b-229d2efdd374", "sighting_of_ref": "indicator--2b222ab9-d64c-4f73-ad59-13bd27e9fca0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f152764-9472-4cf2-bbc0-ba2cb6b19753", "sighting_of_ref": "indicator--2b222ab9-d64c-4f73-ad59-13bd27e9fca0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1e67f2-4a80-422d-a0ad-87d91f4bec59", "sighting_of_ref": "indicator--b59cd587-9e94-49a1-9a64-ce5bcff82d7d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa78bcbe-a0a8-40e2-9f44-5df8713a65cb", "sighting_of_ref": "indicator--f9d324fc-a7ce-4c3d-9799-7ec26344c9da", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233cbdb1-f93b-4127-b897-208b9a9a3ba0", "sighting_of_ref": "indicator--ddb0fb80-dd60-4052-b870-9bf39ee2ce24", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f423a3d1-fa23-45de-94cb-14bb8ef0866f", "sighting_of_ref": "indicator--ddb0fb80-dd60-4052-b870-9bf39ee2ce24", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418b5a74-aa6c-4795-9069-131d8982fec5", "sighting_of_ref": "indicator--02a9d19a-0b58-4fe4-a3e6-037b8f04910d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a50967c-356a-4c7d-bc9c-2c6e5506e4f4", "sighting_of_ref": "indicator--02a9d19a-0b58-4fe4-a3e6-037b8f04910d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cef4cd-eede-4941-888c-7f2c7864339c", "sighting_of_ref": "indicator--30b977de-2df3-4dc5-a5d7-c77f61858fb2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941f7fea-d7f3-4a60-be1c-94d6c9efd73b", "sighting_of_ref": "indicator--30b977de-2df3-4dc5-a5d7-c77f61858fb2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b3ae6b-a49b-495c-b4d7-35d850b13091", "sighting_of_ref": "indicator--fe1f7f20-5638-4b00-ab59-4a73c2abe9d4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87923b25-b18b-4f4a-a42c-a0faabd81c6a", "sighting_of_ref": "indicator--755fbf74-7795-4a08-bf17-2c1ec20dcdd5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a452805b-c222-4088-b950-e177d92cf4d5", "sighting_of_ref": "indicator--e0d9b857-3843-41e3-b7f6-96fb873f9b56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b053b4-9432-40c4-8d93-455bb5bbc0be", "sighting_of_ref": "indicator--2176f7fd-fd82-4af1-a718-af109ae9cb5b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db291db2-b5f8-4627-8835-fb61f5622d03", "sighting_of_ref": "indicator--a02c0d6a-4abd-4d20-a3e9-0619f97d1ca2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d49c826-64ff-442d-9252-653949cb0190", "sighting_of_ref": "indicator--a02c0d6a-4abd-4d20-a3e9-0619f97d1ca2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8396547f-ccf0-4db0-b647-4a23191c3913", "sighting_of_ref": "indicator--4a21158f-9cbc-4f31-9d65-4c263578d3c3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1135763-61c5-4fbe-b01c-2d4a0a274a53", "sighting_of_ref": "indicator--4a21158f-9cbc-4f31-9d65-4c263578d3c3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcce105b-36d2-4c20-b4df-998c083baabb", "sighting_of_ref": "indicator--5b02ef29-67d2-4684-b699-55906b10b089", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a651cc12-5efe-4045-887a-c47cbb096d92", "sighting_of_ref": "indicator--5b02ef29-67d2-4684-b699-55906b10b089", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8c5f06-32c5-48f0-8ac2-9ae1b97ed368", "sighting_of_ref": "indicator--5b02ef29-67d2-4684-b699-55906b10b089", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef8e8eb-493d-48e4-9bf6-e7d066052cc4", "sighting_of_ref": "indicator--96a4ec16-3fd7-45ea-b001-74d9d02fe39c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15555908-0657-451f-bb10-8e9a6d5fc18e", "sighting_of_ref": "indicator--dd9c4ca6-3799-4e1a-8a91-fa0f117a088f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee67898-0b00-4f37-9d1c-df21eb14c551", "sighting_of_ref": "indicator--dd9c4ca6-3799-4e1a-8a91-fa0f117a088f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bf62d8-7a2d-48eb-93e3-49873d2349df", "sighting_of_ref": "indicator--dd9c4ca6-3799-4e1a-8a91-fa0f117a088f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545b211b-50a4-4be2-8b85-51fb9d27bc9b", "sighting_of_ref": "indicator--a3e24601-2838-4243-8650-22d8f9ddd72c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d0fc1a-3a52-4291-b47a-0fb78a069134", "sighting_of_ref": "indicator--59e29d92-954c-40c0-849f-4950f3a57c7c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f158f5-712d-40d3-88ba-eea70ed33fa5", "sighting_of_ref": "indicator--59e29d92-954c-40c0-849f-4950f3a57c7c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0939302a-b6df-4e6a-9177-810e8f452895", "sighting_of_ref": "indicator--38ebb75f-a410-4a01-a02e-6a7ae7e4f6c4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ece6d0-d9b5-4628-a1f3-7736934733ab", "sighting_of_ref": "indicator--38ebb75f-a410-4a01-a02e-6a7ae7e4f6c4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058b6b0b-1ef5-461f-9dba-f8712796aa3d", "sighting_of_ref": "indicator--38ebb75f-a410-4a01-a02e-6a7ae7e4f6c4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689d8394-7ba2-4722-ac65-b7a7255a5dc5", "sighting_of_ref": "indicator--3b02884d-3856-4452-830f-b86bc81cfbe3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2025bd-8b2a-444d-8ff3-63de800868e1", "sighting_of_ref": "indicator--db62d341-8a7c-4678-ac6c-4711055519ba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e417b9b9-fefe-4ef8-933e-b56c7148d7fd", "sighting_of_ref": "indicator--59dc352e-6cb5-4006-816e-6f899d06cff0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc224fbe-9365-4877-a6fe-244ddcbb9b60", "sighting_of_ref": "indicator--244caf1a-0a54-4b0f-a87d-15ce7d1ef0b8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e895805-4e37-4562-aee9-97e4fb06db65", "sighting_of_ref": "indicator--244caf1a-0a54-4b0f-a87d-15ce7d1ef0b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936092d9-cd57-47f8-b6ed-535367ce4c5e", "sighting_of_ref": "indicator--0bb9c723-fec7-47d2-a788-16290dacc0e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8135e35-dae5-4c2c-8e9e-b5b23032272e", "sighting_of_ref": "indicator--0bb9c723-fec7-47d2-a788-16290dacc0e5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30c2f88-0fc0-4a24-aaed-371fe0bf9a95", "sighting_of_ref": "indicator--0bb9c723-fec7-47d2-a788-16290dacc0e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca630ff-8df9-4815-83aa-5d7e73a0caf5", "sighting_of_ref": "indicator--480b63b7-eb20-4634-9005-b4c95d10d4ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97f0a24-48a4-4ecf-afee-3a97f8706814", "sighting_of_ref": "indicator--f2bee72b-1bf0-44e3-8ee6-58312862b4db", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c9a029-83c6-4668-a087-1d61717eb659", "sighting_of_ref": "indicator--f2bee72b-1bf0-44e3-8ee6-58312862b4db", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922b24f2-80bf-4296-b1cb-ad61b758987f", "sighting_of_ref": "indicator--6eee9a49-5e45-4edd-ba96-529816b4462b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133b448e-c302-4d22-8ba5-bdd381806851", "sighting_of_ref": "indicator--d2e3e0e8-da37-4636-81fb-11cef4542cf9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9619dc2a-4c93-4d4d-bf84-03d3e27d0c5b", "sighting_of_ref": "indicator--d2e3e0e8-da37-4636-81fb-11cef4542cf9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec19c65a-4507-4f05-9118-be2a879e4112", "sighting_of_ref": "indicator--c6668334-3a9d-4d9f-bd13-2597b3bd6c6a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cbad9a-6910-4cef-9348-2bb98b14cdb9", "sighting_of_ref": "indicator--c6668334-3a9d-4d9f-bd13-2597b3bd6c6a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ddd656-260b-4cad-812b-cf30defbc664", "sighting_of_ref": "indicator--c6668334-3a9d-4d9f-bd13-2597b3bd6c6a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61ab83c-e466-4df4-aa73-8d6a3eea9f62", "sighting_of_ref": "indicator--8b599cf7-e24d-422d-b4a3-e33b672023c7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe96f9e2-37da-43ed-add4-5685f07b136a", "sighting_of_ref": "indicator--8b599cf7-e24d-422d-b4a3-e33b672023c7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc65319-fb10-4af1-be50-7fd5fdc8d059", "sighting_of_ref": "indicator--8b599cf7-e24d-422d-b4a3-e33b672023c7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d215e2d-d0c0-4e65-971e-32838f4b92e3", "sighting_of_ref": "indicator--67e5f278-08d8-4d7b-b632-ff4b9dd95932", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac485785-d235-4d4c-bc22-e9fc01d73bf5", "sighting_of_ref": "indicator--67e5f278-08d8-4d7b-b632-ff4b9dd95932", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02eb7725-57c9-4a05-99b1-6e917757f74a", "sighting_of_ref": "indicator--9446207d-1901-4814-b1f3-04d567cc46be", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6729345f-f4fe-49dc-930b-425ad79a3ca9", "sighting_of_ref": "indicator--9446207d-1901-4814-b1f3-04d567cc46be", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccaf4453-d613-41bd-9798-391d61b8e55c", "sighting_of_ref": "indicator--be08467f-95fe-4266-8369-be3e1ed41a18", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee17b21-65d1-4c78-9e15-21d31528f355", "sighting_of_ref": "indicator--be08467f-95fe-4266-8369-be3e1ed41a18", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665bc622-550c-44ff-b891-690d9a1f0acd", "sighting_of_ref": "indicator--be08467f-95fe-4266-8369-be3e1ed41a18", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a001e4-0edc-44e7-9e14-4e371a446f0d", "sighting_of_ref": "indicator--a00f8174-01ec-42d4-9428-7a496b5a56cd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3b00fb-6a80-4815-844e-64c8a28fb406", "sighting_of_ref": "indicator--da552a29-70ed-479e-8cb0-f0f31e7b2817", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fef887-93c9-4ef3-b720-9acd55c57899", "sighting_of_ref": "indicator--da552a29-70ed-479e-8cb0-f0f31e7b2817", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e192a6b4-e32b-42a7-afad-969c621b39f7", "sighting_of_ref": "indicator--da552a29-70ed-479e-8cb0-f0f31e7b2817", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77e10a2-bf33-469d-a265-c412d3927c62", "sighting_of_ref": "indicator--5091b14e-4c26-4f3d-b5ed-a75bd26fa2e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1c30e9-e961-4847-a86e-c0728c189b5f", "sighting_of_ref": "indicator--27d92b08-54b6-4381-a428-9a3fe8295608", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef063441-1bd8-40bd-a772-d93236e9aab7", "sighting_of_ref": "indicator--27d92b08-54b6-4381-a428-9a3fe8295608", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26677851-ce8d-475b-a3eb-6fa378cb0062", "sighting_of_ref": "indicator--f3ea51d3-ed1c-4dec-8175-4feff8de2c38", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f246a5-d811-42bd-867e-3f98eb15a83d", "sighting_of_ref": "indicator--44e10c4e-ebb7-42f3-b7af-d9b46311ce1f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319ab58b-f7ba-46b5-8562-b05f49bf90ee", "sighting_of_ref": "indicator--b3dc445a-8c53-46fe-baf0-90ab40ca8028", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bebf77a-13c1-4319-b43b-b903cbdc8d1f", "sighting_of_ref": "indicator--b3dc445a-8c53-46fe-baf0-90ab40ca8028", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa320abc-cb57-4280-ac3c-d374ef7fb89c", "sighting_of_ref": "indicator--d309dd8b-0963-4ed1-b4b3-d8359d1aa062", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86610777-3b84-4fa3-8910-03bc1684519d", "sighting_of_ref": "indicator--d309dd8b-0963-4ed1-b4b3-d8359d1aa062", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a418e100-fca3-4eba-95c1-dd562ed29203", "sighting_of_ref": "indicator--d309dd8b-0963-4ed1-b4b3-d8359d1aa062", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94828c12-e832-42ae-8d46-94db10ba4902", "sighting_of_ref": "indicator--13a34c22-6d0e-41cc-9a09-03f65ed65a8d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315f1b43-b53e-47b5-8f48-161526e92930", "sighting_of_ref": "indicator--92792bd7-1cb7-45bf-aa48-6f8de86f0bc1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0270cae-5719-4965-87e5-584c5b136774", "sighting_of_ref": "indicator--92792bd7-1cb7-45bf-aa48-6f8de86f0bc1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910897a7-b914-4609-bb7e-a92540b5fa9d", "sighting_of_ref": "indicator--83eda269-60c0-46d0-a1fd-e3e2d83306ce", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe2b5f7-3bb1-4ec5-9b18-9fb4a9f0f0a9", "sighting_of_ref": "indicator--83eda269-60c0-46d0-a1fd-e3e2d83306ce", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b320d3-c5fb-4f0b-8d8c-37a39d286012", "sighting_of_ref": "indicator--58e12c44-5b5d-4879-96c4-d829175dc28f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878c6300-0fbc-4083-b059-80a0363854bb", "sighting_of_ref": "indicator--f0aa5805-ad4e-4fce-a512-a468fe724a53", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceae66f1-7224-4518-93cb-92d5e7f3c8d2", "sighting_of_ref": "indicator--f0aa5805-ad4e-4fce-a512-a468fe724a53", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005b0af1-7824-492c-852f-a43f541d7bc0", "sighting_of_ref": "indicator--2a6eb6af-1264-4991-979f-0e0791722186", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d82c07-6fd7-4426-ac06-0eb3d45965db", "sighting_of_ref": "indicator--2a6eb6af-1264-4991-979f-0e0791722186", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1670514d-1540-4d67-af3d-979affaf51d5", "sighting_of_ref": "indicator--3f21aab0-b85e-4de8-9f21-f3691d89a43f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b3752e-9c69-4685-ab81-c12ed461888d", "sighting_of_ref": "indicator--e96be5ee-27e6-4441-ae75-82232fa2599f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13bfd50-c7d0-45c3-9eb3-37029c2c5418", "sighting_of_ref": "indicator--9e3dc488-cdc7-4573-82ad-d4d8ea8fa2a1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f3a40d-25b9-42f7-affa-071be29b491a", "sighting_of_ref": "indicator--cf357f57-cee7-4e94-9e4f-3846dc0e8a72", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2ad1c4-df82-46e8-978c-2df5ff1554d8", "sighting_of_ref": "indicator--057f200f-e80d-4f25-ac76-9ba3d43cd779", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92149223-e510-485d-a92e-09bca9d468c2", "sighting_of_ref": "indicator--c36ef06f-c271-469d-87d3-a78bb90193a1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8234b0ab-7fb0-40f8-b556-f5477dc99575", "sighting_of_ref": "indicator--c36ef06f-c271-469d-87d3-a78bb90193a1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55079642-c0b3-44b2-bb95-c8d1be596da4", "sighting_of_ref": "indicator--f2b8eb4b-e5ea-4c41-819e-766ba3dc124b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6adf454-befe-4315-aedc-2c5f1bb832bd", "sighting_of_ref": "indicator--f2b8eb4b-e5ea-4c41-819e-766ba3dc124b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01cd4bf-545d-4ef5-a85f-72e59a31bf7b", "sighting_of_ref": "indicator--8b3c8232-e9df-45fa-b6c9-f32873476034", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16cf00e-946b-4b71-a0b1-7cad41a579b6", "sighting_of_ref": "indicator--8b3c8232-e9df-45fa-b6c9-f32873476034", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240fddbd-087b-4615-a51c-a5da0be30d2e", "sighting_of_ref": "indicator--436bcad5-ead5-471b-ad48-48f34aa09750", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db29f7af-e76d-4cd1-b8d2-9e02f4bcc7d4", "sighting_of_ref": "indicator--436bcad5-ead5-471b-ad48-48f34aa09750", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec7ba55-f9a4-46f5-b104-c1fc300587c1", "sighting_of_ref": "indicator--bff2cb6f-7d4a-43cd-913f-6f6cc49a2482", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca91204-b28b-4e4d-b439-a5dcbacb261f", "sighting_of_ref": "indicator--d593cc37-2bea-4fb5-aef9-daf7606ee07a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232041fe-2871-471d-9f9f-f1a225fad3f7", "sighting_of_ref": "indicator--d593cc37-2bea-4fb5-aef9-daf7606ee07a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e6600c-ebc3-4f10-8a55-89192dcd08ff", "sighting_of_ref": "indicator--03b97213-6048-4aaf-987f-5ad9c21d5c06", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b36e92-0195-465c-b757-c43d1a35fa0b", "sighting_of_ref": "indicator--03b97213-6048-4aaf-987f-5ad9c21d5c06", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e27182-62aa-4d7d-869d-481045eb89db", "sighting_of_ref": "indicator--e9a0a7b9-53ed-4806-8ca6-9329203d9875", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008c812b-3139-4438-8f3d-8e5eb6d2b0db", "sighting_of_ref": "indicator--3ea3d661-ba7b-4af6-9cdf-4250e8568222", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f85cffd-116e-4067-8184-f9d7a61cd3a7", "sighting_of_ref": "indicator--d5bc242b-4be7-46f2-9869-e93a8bbb086b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bec945-6e5a-4e26-8041-646cf9e70ba0", "sighting_of_ref": "indicator--f95ae08b-3579-4e6d-b843-70466a49c17f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9fa9feb-d7cb-4d30-bc1b-6aa3f54753a9", "sighting_of_ref": "indicator--f95ae08b-3579-4e6d-b843-70466a49c17f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0da1a1d-8bdd-4e32-ab5b-3d75073ab427", "sighting_of_ref": "indicator--257f587e-056f-4148-a148-56eefc560a03", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5566deb1-6c68-4a51-afc5-314c5531c51d", "sighting_of_ref": "indicator--29389025-f97a-4786-9bb4-82ca5f88f87b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7bad015-1628-4993-b31e-7bcb36def309", "sighting_of_ref": "indicator--80a08419-f790-4f4d-bc89-bdda9bb97e1c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9ffdeb-1bb5-4bd5-a5cf-118fc5190107", "sighting_of_ref": "indicator--80a08419-f790-4f4d-bc89-bdda9bb97e1c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a60c82-c8de-4a4b-b0b3-d0b294faa99b", "sighting_of_ref": "indicator--80a08419-f790-4f4d-bc89-bdda9bb97e1c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee937cfe-1c08-49d2-b10a-6d2e05d60f62", "sighting_of_ref": "indicator--d434c95c-e380-40bc-a350-58e35d3f25c2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4642da-e956-4bb5-80cf-c6ce6d105bf3", "sighting_of_ref": "indicator--6cae4873-fa81-4aa4-b42b-e9596aa35f2d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd977d24-6934-467a-a02b-ac5655bc1276", "sighting_of_ref": "indicator--85a58ae6-aff2-441c-ba3a-b993f8e04dea", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb3ccb3-57c6-4a2b-9ae6-50d501f5310a", "sighting_of_ref": "indicator--85a58ae6-aff2-441c-ba3a-b993f8e04dea", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafdd6fe-c0d4-4238-8a78-fc74762f37ca", "sighting_of_ref": "indicator--53b0e73b-2263-417f-8881-e016a75b26ee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5ae7fd-7dd3-4d98-baa6-cd1461175512", "sighting_of_ref": "indicator--53b0e73b-2263-417f-8881-e016a75b26ee", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61e4793-c9bd-463e-9add-63ba24552d01", "sighting_of_ref": "indicator--66ff861f-e3bb-479b-9728-655bbb22f053", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f224677-c19a-4393-8445-386e126925f6", "sighting_of_ref": "indicator--31505e58-d7b8-4b58-9805-a866775bd156", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ce0788-6ba2-4f96-b3e0-6df97ba148f4", "sighting_of_ref": "indicator--31505e58-d7b8-4b58-9805-a866775bd156", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9a6a62-f53a-4ade-9956-e68aa220cea5", "sighting_of_ref": "indicator--12f44996-0980-4fab-92ff-211382b1c496", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9b2b68-f1fe-4c78-a5e2-1cda621ff9f0", "sighting_of_ref": "indicator--12f44996-0980-4fab-92ff-211382b1c496", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f78735-0edc-4e82-9fb9-b62466f2be64", "sighting_of_ref": "indicator--ed9c3c8b-7dd0-407f-a619-efcc721e5bf2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d35c12-bd94-46a1-a50c-aa3154565962", "sighting_of_ref": "indicator--ed9c3c8b-7dd0-407f-a619-efcc721e5bf2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1ae416-97e6-427d-b123-7bc3879d6203", "sighting_of_ref": "indicator--8d650641-1ffd-4a85-9a69-d3d5e8cbb772", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8c538a-405e-4a3d-aef7-4d5edc3a16a1", "sighting_of_ref": "indicator--8d650641-1ffd-4a85-9a69-d3d5e8cbb772", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858e87e1-bbfd-4796-96dd-105797aed7ae", "sighting_of_ref": "indicator--6d4bd06e-6d28-4ca8-87b5-bbf4a1528e1f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a214d8c8-5895-4d7f-8a3f-29d0d1e2f5ad", "sighting_of_ref": "indicator--ad0a182a-b4ff-486a-874e-e7feea58887f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcecd3f-4fcd-479b-8a38-24c2cf223781", "sighting_of_ref": "indicator--57255ea6-1c23-423f-8033-1f29424f361e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99af0fd5-d7e8-4168-8896-ec6bd1507a80", "sighting_of_ref": "indicator--75044ce3-9c60-4dc9-8638-171835685710", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8a1bc6-1edc-427f-85a9-03a912f10ec4", "sighting_of_ref": "indicator--75044ce3-9c60-4dc9-8638-171835685710", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3e7934-d398-47b8-8385-1332b3555e5b", "sighting_of_ref": "indicator--7e392167-460b-43ac-b50b-20d865eed635", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065eab5d-3832-4fb5-81f0-1bce2f62fdde", "sighting_of_ref": "indicator--51d4b899-ae0b-44ed-be16-a31c1e3fef9d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800dafb4-d3eb-4995-950a-5312184deebc", "sighting_of_ref": "indicator--51d4b899-ae0b-44ed-be16-a31c1e3fef9d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a6d261-5971-4dda-a4ef-9f2822477882", "sighting_of_ref": "indicator--acc96bc8-c484-4b5b-9ce7-4e46d8688e15", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11852e51-ea5f-44cf-bd8f-7180d88eaa58", "sighting_of_ref": "indicator--da093a5d-f5ff-4420-8261-066fc6c766e7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d628d5d-8c41-440c-97ec-bd6a7082d4bc", "sighting_of_ref": "indicator--e1b503c4-e0cc-48c1-9ecc-24196c94cfee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdb4f99-0a55-4641-919f-3ef8db7b7518", "sighting_of_ref": "indicator--abaf0b2b-7f51-4175-a11d-0d0bcceccae8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d4d908-e448-425d-a433-18a1f51dce20", "sighting_of_ref": "indicator--8d1c4b86-caaf-44c0-8ac7-a4a068bef511", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04254dbb-023e-4c76-b415-7f51707479f7", "sighting_of_ref": "indicator--8d1c4b86-caaf-44c0-8ac7-a4a068bef511", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6698c1-2346-4ce7-8720-7dbe884a27de", "sighting_of_ref": "indicator--cd82bd46-8c97-478c-b9a6-fd489fddaf29", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddee1fbc-5ea6-46d7-a2bd-b50602c84672", "sighting_of_ref": "indicator--1e7e29ed-f72d-4ff6-a810-03cb59e69f98", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7773cf05-fe82-484c-b851-d4b84a552fc3", "sighting_of_ref": "indicator--7fcc6b62-fca6-42ba-996a-82a6cc32f6ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757b2ff4-4f6a-41df-86a7-24e833654b8a", "sighting_of_ref": "indicator--7fcc6b62-fca6-42ba-996a-82a6cc32f6ab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7962fdc0-3d53-4027-b094-cfa8d29ec0eb", "sighting_of_ref": "indicator--96835919-1335-4cfe-80cd-ca3d47600678", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e340b44-986b-4012-aed6-65a0fbe9dac0", "sighting_of_ref": "indicator--35e1fa16-8b3c-484c-bd0b-1065e34b868a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a60c357-5c78-48d2-beba-5714cec0e464", "sighting_of_ref": "indicator--35e1fa16-8b3c-484c-bd0b-1065e34b868a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458f9081-9d49-40f7-9576-c8ce89598abb", "sighting_of_ref": "indicator--25889d8c-f0e6-408f-8b01-607fcf466695", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219e2922-10bd-4a6a-9446-c48b204f2f98", "sighting_of_ref": "indicator--3bdf9927-41d1-42cf-80c9-8d663cbf1ff2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b10fade-4242-4821-a978-f2ba44437ef8", "sighting_of_ref": "indicator--3bdf9927-41d1-42cf-80c9-8d663cbf1ff2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6832a54-b44b-4e58-a214-859e259ba566", "sighting_of_ref": "indicator--d030f913-d0d4-4efd-85e5-8f1ae377ff2c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae30910-d0a0-4c29-8a88-bf5f0cff6806", "sighting_of_ref": "indicator--d030f913-d0d4-4efd-85e5-8f1ae377ff2c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5284f1c-92c4-4ddd-90e1-53b60188e71e", "sighting_of_ref": "indicator--f772669c-188f-493e-96c8-bf7dba7698fb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd60924c-5449-4836-9b9f-027b9c21fd90", "sighting_of_ref": "indicator--f772669c-188f-493e-96c8-bf7dba7698fb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0932f88d-eb36-4119-b410-63c0cb827ae3", "sighting_of_ref": "indicator--52b9d7ac-0465-4b54-9f01-c9d97d04abfe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7ebab4-369f-488c-938d-a99b90e95fc6", "sighting_of_ref": "indicator--52b9d7ac-0465-4b54-9f01-c9d97d04abfe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b296d9d7-2b33-4ae9-aa55-c0a592029548", "sighting_of_ref": "indicator--52b9d7ac-0465-4b54-9f01-c9d97d04abfe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60029a4-c2c5-4850-bec1-694b45879821", "sighting_of_ref": "indicator--372f1980-b357-45fa-b846-8087d5fd51c9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d0d1d8-de12-44d9-bcb4-87344335526a", "sighting_of_ref": "indicator--dd2a7033-02be-4e24-b862-9758c40efbd2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113db2e3-739c-489c-b163-76ccb4ea84bf", "sighting_of_ref": "indicator--70c4513b-230c-4a4f-9806-253f9ca713ef", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeafea7e-51f8-486f-9714-2a5946326395", "sighting_of_ref": "indicator--70c4513b-230c-4a4f-9806-253f9ca713ef", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4b5e51-5b33-4ba0-b799-ccc4f6ee4fe0", "sighting_of_ref": "indicator--dcc2187d-73ea-4ef2-b984-b21a3a4ced78", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f253de2b-090d-4558-a78e-1419dbec9c3b", "sighting_of_ref": "indicator--dcc2187d-73ea-4ef2-b984-b21a3a4ced78", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33cf0217-d8b6-449f-9f55-1df9deb3f2de", "sighting_of_ref": "indicator--1d65277b-bee3-4bef-97ca-58af6ca22130", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21242bb9-4c06-46fd-94ff-8db30872ae45", "sighting_of_ref": "indicator--b56d3d08-aaa9-438d-bd26-7c4ab060fc8f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef830c64-79ea-483a-aa5c-1d8a46a3ce9c", "sighting_of_ref": "indicator--1c43489b-4698-4f3f-a04a-3c971894e79c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b788781-1a75-4ede-bb3b-38dbe16b7304", "sighting_of_ref": "indicator--1c43489b-4698-4f3f-a04a-3c971894e79c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c3e740-af76-486e-b476-7b7ca999642c", "sighting_of_ref": "indicator--68d8b1b3-8cf1-475a-aeb5-fb7a79eef499", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e827bbe6-a4ac-4527-aa38-1753f0628860", "sighting_of_ref": "indicator--a2da2ded-695d-4d71-86a6-fcd665dd1e2f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4186edd5-1b5e-4cc8-98d7-b455ef560096", "sighting_of_ref": "indicator--a2da2ded-695d-4d71-86a6-fcd665dd1e2f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0245bc-26be-4b0f-92cf-8dc28319b576", "sighting_of_ref": "indicator--a7378ca7-d933-454b-a2f2-ec65cd90da95", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7643cf-2f55-4f16-bd49-0b2aeeed374a", "sighting_of_ref": "indicator--a7378ca7-d933-454b-a2f2-ec65cd90da95", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2402bd-864f-4867-a730-f7a90251ac3c", "sighting_of_ref": "indicator--1d1cae7f-2625-494c-887a-7809f7478d47", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb37b435-6649-4311-af49-f3a2cabaece4", "sighting_of_ref": "indicator--78c1b59a-2878-4f10-a5dd-bc8032cd40d0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363b11a9-2d87-4295-bd4a-ae90bb95b79f", "sighting_of_ref": "indicator--b43ac4c6-f2ed-4016-aa4f-53f30a2246fd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca94f93-b521-48d0-a9e3-3f63ae8881dc", "sighting_of_ref": "indicator--b43ac4c6-f2ed-4016-aa4f-53f30a2246fd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6741cd-cbb4-47d4-89d6-e7291058cd80", "sighting_of_ref": "indicator--b43ac4c6-f2ed-4016-aa4f-53f30a2246fd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096a87e6-89ce-4175-9799-498618b954c1", "sighting_of_ref": "indicator--0cb495da-3687-48c4-a2ed-15468e2ebe3f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a8c976-23a8-4554-aeb4-74b70365ae74", "sighting_of_ref": "indicator--0cb495da-3687-48c4-a2ed-15468e2ebe3f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97497ee5-9141-4fbb-ba50-ab7ca04537d8", "sighting_of_ref": "indicator--54d86a4d-f6ca-40c6-9d46-15cd4cc6a35b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee9d374-841e-4690-9968-0405ef4f5416", "sighting_of_ref": "indicator--54d86a4d-f6ca-40c6-9d46-15cd4cc6a35b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142da04c-7904-435e-9359-4e0c0b0fb25b", "sighting_of_ref": "indicator--f3424401-bf36-4f32-ab1a-0f6d32be1c80", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8d0f3b-418d-41e5-ba0e-515671ce0233", "sighting_of_ref": "indicator--2a0042df-14df-4d0f-97f3-1b2507c745b4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cfd98d-1662-4c47-8e00-9299bae9ad47", "sighting_of_ref": "indicator--10d15923-7f70-4a29-a189-13e81eec1ce1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbb84cd-e6fb-439b-bb13-e98c0be6e784", "sighting_of_ref": "indicator--b70c6faf-62b3-4716-874a-5c1e8d6be4da", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7cb7a00-f5aa-4918-a84a-b7745ccf044d", "sighting_of_ref": "indicator--b70c6faf-62b3-4716-874a-5c1e8d6be4da", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d19091-fec0-4478-a519-8fb21edcaf38", "sighting_of_ref": "indicator--57e9d834-ca66-42e5-8040-2b69d4d039ff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe706629-d0f3-4cac-b401-0a54683cc0a6", "sighting_of_ref": "indicator--676acdf3-3896-4bdc-80d1-6755d82b46ef", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86449d73-fce6-43c7-94e3-eceb18cf9596", "sighting_of_ref": "indicator--676acdf3-3896-4bdc-80d1-6755d82b46ef", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348bbcb1-564e-4420-b05f-202dbfcc1c7e", "sighting_of_ref": "indicator--513d2e75-5246-4b4c-92bf-6531107f1ff7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e29edfb-c39b-435a-93c4-469eb3a3be18", "sighting_of_ref": "indicator--513d2e75-5246-4b4c-92bf-6531107f1ff7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1d9848-8f68-4570-b991-92d5dbf98700", "sighting_of_ref": "indicator--513d2e75-5246-4b4c-92bf-6531107f1ff7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f5b608-c081-45c6-86c5-5536516c1ed8", "sighting_of_ref": "indicator--27c9de20-290e-48bd-8889-140761e3dda2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b5fb79-4b01-4a06-95e5-69fb94eda766", "sighting_of_ref": "indicator--355655dd-566b-44d5-8793-a8cbabac9ec6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a60fa1-64ab-417d-b1ee-d11166dd24b0", "sighting_of_ref": "indicator--8489c4f3-7aaf-4413-b138-463083397f77", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4156197f-756d-45db-941b-88e9c91684b2", "sighting_of_ref": "indicator--8489c4f3-7aaf-4413-b138-463083397f77", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3199c4f0-ff3d-462e-9060-d525e693801e", "sighting_of_ref": "indicator--f517132f-6837-4d2e-99f1-aed2cbc87b8f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3688237-8bf0-4ec8-a650-b592c08d8111", "sighting_of_ref": "indicator--f517132f-6837-4d2e-99f1-aed2cbc87b8f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7552afba-63f9-494a-90ad-6a75e9985f04", "sighting_of_ref": "indicator--f517132f-6837-4d2e-99f1-aed2cbc87b8f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7524f6ca-0387-4292-8062-c615a8115a37", "sighting_of_ref": "indicator--6f334a7d-826c-4bb7-8192-7ee1aea4e500", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9441f1ce-363a-409a-b711-9fd660dcfb11", "sighting_of_ref": "indicator--6f334a7d-826c-4bb7-8192-7ee1aea4e500", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80916d3-a16b-41b7-b1b1-1bb78061a4f7", "sighting_of_ref": "indicator--dd6a94e8-9d4b-4d56-969a-398f354a7302", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2206c9-42ad-4bda-839d-e2f9d63b16eb", "sighting_of_ref": "indicator--dd6a94e8-9d4b-4d56-969a-398f354a7302", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6c75fa-77e9-4108-a683-df61db032dd1", "sighting_of_ref": "indicator--dd6a94e8-9d4b-4d56-969a-398f354a7302", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dbb238-6e85-4543-a14e-5253423ac727", "sighting_of_ref": "indicator--dab6e1eb-0abd-4fbf-b5c7-bd0aa03b5693", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff9d313-5e9e-48be-b917-91ef768384f7", "sighting_of_ref": "indicator--dab6e1eb-0abd-4fbf-b5c7-bd0aa03b5693", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff78281-1027-45eb-a369-07daf9d4158f", "sighting_of_ref": "indicator--dab6e1eb-0abd-4fbf-b5c7-bd0aa03b5693", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb69f03-d8ad-4f4e-9180-b3a2b4163e35", "sighting_of_ref": "indicator--62312548-aeaf-4662-b15e-512019d377fe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9160f4-8fa8-4ca7-8310-a08bb53feb86", "sighting_of_ref": "indicator--90376865-aa80-48c8-ab7b-bccbc94142d3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25acf5ea-af97-494d-911e-86b75e1de6a7", "sighting_of_ref": "indicator--90376865-aa80-48c8-ab7b-bccbc94142d3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bf41ab-535e-4668-bbb1-35fdadf773b1", "sighting_of_ref": "indicator--a3a63bd7-4b99-433a-9a56-8967c7bc8665", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83274f44-c92b-4c37-b540-755982612f00", "sighting_of_ref": "indicator--e99fef13-a313-450e-9417-10be38fe6c71", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f6d42d-610c-4b16-b852-4d518b70485a", "sighting_of_ref": "indicator--e99fef13-a313-450e-9417-10be38fe6c71", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e845691d-21c2-4940-8857-015d5caf36eb", "sighting_of_ref": "indicator--0e210c9c-36ca-4b7d-b79a-431c65b04394", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c076fa0a-f6da-42ce-913d-b52d27af4510", "sighting_of_ref": "indicator--8f6db2b4-f941-430b-ace8-169f0e39a47f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708506f6-66df-40dc-aff7-f7defeeaa46c", "sighting_of_ref": "indicator--8f6db2b4-f941-430b-ace8-169f0e39a47f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e773b083-2b41-4b60-b6f7-ab026bff951c", "sighting_of_ref": "indicator--8e6e2048-91cd-42be-a610-f7c1d240c31a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b65d83-57f0-4267-a773-193470a22ddc", "sighting_of_ref": "indicator--8e6e2048-91cd-42be-a610-f7c1d240c31a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e32dc5-30a9-4b49-97e2-8978ba252233", "sighting_of_ref": "indicator--8e6e2048-91cd-42be-a610-f7c1d240c31a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d548ff-b04d-4b0a-8085-ab4448bcb100", "sighting_of_ref": "indicator--204618d8-fd01-494b-a0d8-977e9d094bc4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ae6c66-1efb-4582-a029-03ac739d3889", "sighting_of_ref": "indicator--204618d8-fd01-494b-a0d8-977e9d094bc4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d804e63-fbd6-4359-92c2-44fe07418e53", "sighting_of_ref": "indicator--ee17ca64-4fd6-4727-bf95-a42cffc745ae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852812ff-5c68-43f6-bdba-9a84c1bf9b0c", "sighting_of_ref": "indicator--ee17ca64-4fd6-4727-bf95-a42cffc745ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aff793b-88d8-426f-8a95-4f34534e5a26", "sighting_of_ref": "indicator--f44b3f5b-a286-47d9-b5c6-4e7043b7a56b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4970e2-c66a-49c9-9c6e-85795afdef07", "sighting_of_ref": "indicator--fcb8ee0b-520e-43c7-a014-87b7ea842949", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4269df80-4ddb-407a-8ced-6bbd71da78ab", "sighting_of_ref": "indicator--7ca6eed5-474f-4db9-8af6-69887b56eb06", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c17d2b-7d93-469c-b56f-b90b190cccc6", "sighting_of_ref": "indicator--7ca6eed5-474f-4db9-8af6-69887b56eb06", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c1b8db-f934-4212-a437-d22c84272ce5", "sighting_of_ref": "indicator--7ca6eed5-474f-4db9-8af6-69887b56eb06", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031df2f6-4834-40b0-a39b-2b898fa88579", "sighting_of_ref": "indicator--6bcc8ba9-3588-48eb-ac53-a19e92b7db5d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5aa3eec-8141-4bd3-9e3f-74397aa41fca", "sighting_of_ref": "indicator--c4ab2a00-4d9b-409d-8938-3ff4bf2f2b8a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4dd26f-289a-4801-bb47-bef7d2761a79", "sighting_of_ref": "indicator--c4ab2a00-4d9b-409d-8938-3ff4bf2f2b8a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b617a82c-f985-4e96-af9f-1ae8c0dd2a72", "sighting_of_ref": "indicator--8e2dd099-915f-45e2-a92c-b6705dc5900c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a670035-cc1e-4e65-a41c-572d36bfedfc", "sighting_of_ref": "indicator--6bc6fdf1-e52a-4a44-9911-cd0f9f17cb0f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ea8fa5-f9ea-42a1-a97a-b760ea86e53d", "sighting_of_ref": "indicator--6bc6fdf1-e52a-4a44-9911-cd0f9f17cb0f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97df67a-3473-4aee-856e-76ba524827f9", "sighting_of_ref": "indicator--fe1f1b56-2cce-40f8-aecc-8ff809830dcb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ef473a-6064-4d4b-bcfb-275013a3388f", "sighting_of_ref": "indicator--fe1f1b56-2cce-40f8-aecc-8ff809830dcb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88dc907-f61e-4a97-a8f8-8e5b20764f25", "sighting_of_ref": "indicator--f6981d63-844e-43eb-b552-810ae3d5d8b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0819ab-b849-4e37-a584-50921319f55f", "sighting_of_ref": "indicator--f6981d63-844e-43eb-b552-810ae3d5d8b3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1f8f77-be0d-44d9-a182-ec75db649696", "sighting_of_ref": "indicator--67b37f3e-46cc-4bf2-8ec3-c9573b5a47a2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f3c36f-da9e-49ba-ae48-9a12c9d69ec2", "sighting_of_ref": "indicator--3bc2d7b8-a4fd-4a9f-8eef-907b6e311a08", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d7a718-1f67-45a9-9e41-39b7a30a790c", "sighting_of_ref": "indicator--ab0898a6-ba63-4f30-9b98-d844930907a4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd976ff-2d2d-4575-8bfb-77fa12709360", "sighting_of_ref": "indicator--ab0898a6-ba63-4f30-9b98-d844930907a4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1716ce4a-6f2c-42b1-89c7-2c18cc09a4aa", "sighting_of_ref": "indicator--fc6d098e-7168-4159-885c-fd6195844454", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4078df45-e5ce-4316-af53-fe280dc9d6cc", "sighting_of_ref": "indicator--fc6d098e-7168-4159-885c-fd6195844454", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451a3953-a67e-4318-9b9c-fc78d2f596b2", "sighting_of_ref": "indicator--fc6d098e-7168-4159-885c-fd6195844454", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bd3dab-7a79-4d5f-b09b-6cab3e2012ef", "sighting_of_ref": "indicator--9d56e09e-035a-4261-9b82-ca438037e04e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfd0e0c-3553-45f5-ac9f-d3a2f10538b0", "sighting_of_ref": "indicator--4ff6a078-ff8a-4039-beaa-1a3d1b56ca85", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11e7cea-b2cb-49c4-bff2-3e969cac2999", "sighting_of_ref": "indicator--4ff6a078-ff8a-4039-beaa-1a3d1b56ca85", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beee0687-a38f-4726-bb99-3b1e9715bc46", "sighting_of_ref": "indicator--bd882e8b-6cba-4ec6-82e9-1217aee5d98d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b419278b-339c-49e5-b4de-10a276e539d9", "sighting_of_ref": "indicator--83bb3c73-4dbe-4269-b8f2-d93f59907385", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4a6fa2-2fe0-43fc-9b3c-2169029a6582", "sighting_of_ref": "indicator--dadf8c58-3d03-4eba-99b8-5bc9bbb10bfb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7040a05e-606f-48d4-b93e-0f93d45c5305", "sighting_of_ref": "indicator--dadf8c58-3d03-4eba-99b8-5bc9bbb10bfb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9aeac7-6382-4f20-9eea-57a6b572143a", "sighting_of_ref": "indicator--c0865dfa-7bd0-4827-ba5c-e1e2912bd733", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe5ed2b-8289-4051-a874-67aa24248725", "sighting_of_ref": "indicator--c0865dfa-7bd0-4827-ba5c-e1e2912bd733", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903db127-d307-48cd-b436-b6ca8936e4b7", "sighting_of_ref": "indicator--f017b415-3c8c-4671-abe2-3fc9bb7b9645", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600f0743-1f60-4386-a8be-cc5fc6d273c5", "sighting_of_ref": "indicator--f017b415-3c8c-4671-abe2-3fc9bb7b9645", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d0f084-111d-4bd9-a436-884af3d508eb", "sighting_of_ref": "indicator--5290e3e0-0ec9-422a-ac40-b597288a3c07", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d79ffdf-3cbe-430d-92d8-21cf599468db", "sighting_of_ref": "indicator--4ed663c8-2405-4cda-8292-9b73eea676b6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8195f0-2c0e-47d1-81af-be687d236bbd", "sighting_of_ref": "indicator--0e5990e9-0a1d-438b-85d9-94e0c25deb70", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c0412e-a096-4e30-a6a9-6a2b55d5a875", "sighting_of_ref": "indicator--0e5990e9-0a1d-438b-85d9-94e0c25deb70", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c37377-4c57-4a35-9d24-7d18a1848c72", "sighting_of_ref": "indicator--7be8d287-ebbb-4a61-8bfa-7944d327bea0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b59204-bd39-44cf-b846-23003e6e39f8", "sighting_of_ref": "indicator--7be8d287-ebbb-4a61-8bfa-7944d327bea0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56444b9b-ff77-4e84-8113-2c099bc58acf", "sighting_of_ref": "indicator--e8a9d768-edf1-4ac1-816c-02acb7c738c9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35bdf7b9-c928-414b-8e81-9f349d9a1d11", "sighting_of_ref": "indicator--a27f61b4-3657-40e0-bb07-7996a8c24f0b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a81b2fc-3309-469d-8e23-db50d10117e9", "sighting_of_ref": "indicator--a27f61b4-3657-40e0-bb07-7996a8c24f0b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f18e06-13b1-4720-a48d-ec637f722c4a", "sighting_of_ref": "indicator--ef2b63d0-396d-45ce-9a59-91c6a11788d9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739057de-10b1-4598-9756-5bbe32bca8a1", "sighting_of_ref": "indicator--ef2b63d0-396d-45ce-9a59-91c6a11788d9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9471dd5d-f5d9-4474-99c8-a184035d00bc", "sighting_of_ref": "indicator--834300cd-f774-42c6-81eb-cd89425a10b8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e39502-a42e-4c2f-bbf4-18c9233d1d18", "sighting_of_ref": "indicator--834300cd-f774-42c6-81eb-cd89425a10b8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cee870a-36ed-4efb-920a-714959f8e469", "sighting_of_ref": "indicator--834300cd-f774-42c6-81eb-cd89425a10b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc7f624-82f4-4c89-9fca-2d4942b9c652", "sighting_of_ref": "indicator--eb3668bf-7ffc-4c24-afaa-175123349c40", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4b8626-7836-4fb8-9f34-0fb6a1abc5ef", "sighting_of_ref": "indicator--35fb3a92-3ef1-48d9-b0b7-70df1081c244", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e356b774-8e87-464d-b6dd-b7728a166e50", "sighting_of_ref": "indicator--7142b572-af2e-4ea5-acc3-bb2cef9987e2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b200f2b4-8f62-4482-9dc8-d7dbb4880ea6", "sighting_of_ref": "indicator--e0de0ff3-d54a-4d82-9b0f-a70a9e469d69", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b6a4e9-a19f-4e41-bddf-5187110fa40b", "sighting_of_ref": "indicator--ccc5764d-90da-423b-b838-f54bc7d90ae9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b889fc8-be7b-4bdc-8072-4571c27887a5", "sighting_of_ref": "indicator--ccc5764d-90da-423b-b838-f54bc7d90ae9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb10a5ce-ffcc-49fe-93e7-e684e94d2fd6", "sighting_of_ref": "indicator--a69588d2-6d94-455c-b171-14acc3e714d2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877be5d8-4f90-41e7-9112-21816596d9ca", "sighting_of_ref": "indicator--d475010f-a619-4c75-ab6a-d54595bdde21", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804e4609-d1d5-4b0a-897a-aca4f4a2cc5f", "sighting_of_ref": "indicator--1113dfd0-5b55-4b64-accb-153c2c552259", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4be84b-2f77-4683-b065-b77d340ec04f", "sighting_of_ref": "indicator--4e176aef-2bad-4593-a879-d3f11c35431e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d589c688-c005-4108-91e2-db8abd67636a", "sighting_of_ref": "indicator--2b3ed18c-7181-439c-b6a9-444b71196be9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc56f00a-c5ed-44d5-ad17-2da23551c373", "sighting_of_ref": "indicator--2b3ed18c-7181-439c-b6a9-444b71196be9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c330d9a5-0275-46d2-90cb-d991bb963035", "sighting_of_ref": "indicator--2b3ed18c-7181-439c-b6a9-444b71196be9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d07e66-366a-4fcd-bf2a-be0481eb9031", "sighting_of_ref": "indicator--c932dc1d-2bd8-494c-ac4b-5c62ee3797a0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784ed525-b0ac-4d4b-8a3c-cf5da5fca7f8", "sighting_of_ref": "indicator--45bcf59f-242e-473e-ab67-5b4ac412913f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c97d546-b52f-4922-8cfa-36ad244dd033", "sighting_of_ref": "indicator--45bcf59f-242e-473e-ab67-5b4ac412913f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43307ec1-3c70-4378-a8e9-faa3d43247af", "sighting_of_ref": "indicator--89d9bea4-cb75-408a-ac22-71a717f0be09", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23df1338-d0d7-4355-b7a8-3930cd15f5f6", "sighting_of_ref": "indicator--89d9bea4-cb75-408a-ac22-71a717f0be09", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821c9ff0-7c1a-443c-a7d7-c561c44b3c34", "sighting_of_ref": "indicator--f9dcb5e3-7b08-4fc6-8d57-f88f430ed809", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d968810-bb94-4e1f-8826-7149da5184bf", "sighting_of_ref": "indicator--873b00ab-3b4f-4273-8ebd-d23e7a02f0b7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16af8dbf-f350-4b4d-b1e9-789c29ab22e5", "sighting_of_ref": "indicator--873b00ab-3b4f-4273-8ebd-d23e7a02f0b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f94c5e6-526d-40f9-b647-f57076664ba7", "sighting_of_ref": "indicator--3f299f50-3a58-4c25-94b3-e6c026af696a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cd56da-aa9b-4d9a-8379-c419adc5c060", "sighting_of_ref": "indicator--3f299f50-3a58-4c25-94b3-e6c026af696a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9996e7bf-0fdf-45ae-969f-cef050febb6a", "sighting_of_ref": "indicator--12f27075-4ab3-4325-829f-218879aae4b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f2d12d-df63-450f-8725-9a062fd037f1", "sighting_of_ref": "indicator--ab583868-19f3-4be6-b8f7-2a727cc800a6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c987e3-569d-40af-a04d-b57d4da5ff74", "sighting_of_ref": "indicator--43b6a299-9f59-4c67-af93-ce928a2a023d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ce86f6-c386-42a9-a514-1a4a4e4e6451", "sighting_of_ref": "indicator--43b6a299-9f59-4c67-af93-ce928a2a023d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c70e39b-811f-4987-8cf8-b2fa7712dbc5", "sighting_of_ref": "indicator--c453d64a-ddf9-44b2-a8a3-55f3f54d16c5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213b7323-772f-45ba-85f6-8d5cbb5de48d", "sighting_of_ref": "indicator--c453d64a-ddf9-44b2-a8a3-55f3f54d16c5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640df06b-3752-4c22-aab9-2c25bc5d106c", "sighting_of_ref": "indicator--241c6d09-b914-410f-b42f-c8b1b84358f4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d97919-3efb-45cf-ad88-dd5942f1e092", "sighting_of_ref": "indicator--241c6d09-b914-410f-b42f-c8b1b84358f4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103ea149-2afc-4592-baba-cac450276137", "sighting_of_ref": "indicator--9281c546-62ae-4dee-9f50-01193203420c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c18679-fc39-4cf4-b255-c99908f5a38f", "sighting_of_ref": "indicator--9281c546-62ae-4dee-9f50-01193203420c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f2ff4f-32bb-42fa-b9a7-2be2485ccdbd", "sighting_of_ref": "indicator--4e13c359-8683-4aa5-b6d6-0da2972a81ba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f02c8e-e585-4ca0-beec-0e1000e42df3", "sighting_of_ref": "indicator--4db18759-a28b-445b-8150-34d5545372d0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a369032-f28c-410c-b861-660b07466287", "sighting_of_ref": "indicator--4db18759-a28b-445b-8150-34d5545372d0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2dc5863-32ae-49ff-9a77-8d4db1ceac24", "sighting_of_ref": "indicator--5bd30f35-010d-455c-91e7-703635503c57", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03dbfe2-0fcb-4f42-84eb-8d27b10b8df5", "sighting_of_ref": "indicator--5bd30f35-010d-455c-91e7-703635503c57", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db747257-930e-445c-8069-721884e62423", "sighting_of_ref": "indicator--d1c8fc77-34be-4399-820b-f57917d8433e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97d78f5-8d87-4b16-bab2-4445b1656e81", "sighting_of_ref": "indicator--d1c8fc77-34be-4399-820b-f57917d8433e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6dd74d9-4101-4ccf-a4d9-9a3e878af167", "sighting_of_ref": "indicator--6f4fa9fd-3dfb-47c4-8fd4-04c8b12f0a3f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a3dd9b-d80b-40a4-a1a9-999249575615", "sighting_of_ref": "indicator--0e84187b-81b0-4f3f-b1a5-431f39bf08da", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b920bbce-5e8c-4a53-bd36-8c117675578f", "sighting_of_ref": "indicator--0e84187b-81b0-4f3f-b1a5-431f39bf08da", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d290f6fd-f82f-41fa-91fa-503eeab20dd9", "sighting_of_ref": "indicator--8ed1cba6-1eb5-4fe4-83bc-84ed78ee7aeb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6b1e56-05a8-47ee-a761-a5bbc471672d", "sighting_of_ref": "indicator--8ed1cba6-1eb5-4fe4-83bc-84ed78ee7aeb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0a9d48-c33b-445f-acf2-27c5a6d879e5", "sighting_of_ref": "indicator--88363399-8587-4a85-ab70-1f25ec446d67", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9acae050-f519-4729-9b25-ca182f4a62be", "sighting_of_ref": "indicator--88363399-8587-4a85-ab70-1f25ec446d67", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9a19ad-fec6-4ab5-971a-3cfbfd58d9e9", "sighting_of_ref": "indicator--fb961f60-732f-440b-8dfa-6a3de5630f86", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49f0276-2226-473d-ba28-d418f180be8a", "sighting_of_ref": "indicator--3be0ea7e-3618-4eb6-9034-9dc8dd6b7ce6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44258e00-bae8-4d2e-97ab-e6e8d9c933c4", "sighting_of_ref": "indicator--3be0ea7e-3618-4eb6-9034-9dc8dd6b7ce6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b826f1d-305b-410b-986d-3cea3192eb06", "sighting_of_ref": "indicator--9d83a1de-29f8-4249-84c2-c2a0eef14d32", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478bc6e8-7df2-4cc7-bbce-9d27b8208493", "sighting_of_ref": "indicator--d7bd50af-05d8-466f-a1fc-62b56a3880a3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4ff49e-df59-450b-881d-14e9ab69722c", "sighting_of_ref": "indicator--d7bd50af-05d8-466f-a1fc-62b56a3880a3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ea165c-f187-48fc-889c-9a2463074a2e", "sighting_of_ref": "indicator--d7bd50af-05d8-466f-a1fc-62b56a3880a3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac57dcb-e7b4-4b75-bd97-e9a0f0112e1a", "sighting_of_ref": "indicator--80b18c84-b046-44d5-97cd-5ac12288012f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdeadd2e-ee3f-45c8-9312-1e04ff876f91", "sighting_of_ref": "indicator--80b18c84-b046-44d5-97cd-5ac12288012f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327f0137-4b8c-4344-a3bd-a67956e2782b", "sighting_of_ref": "indicator--77e9c2d7-3c7d-4c90-98d5-48afa0cec545", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e1c252-2dd1-48fe-b133-0f8df18121f0", "sighting_of_ref": "indicator--77e9c2d7-3c7d-4c90-98d5-48afa0cec545", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70f8fd6-0bad-499f-9ae0-bfb79c543f21", "sighting_of_ref": "indicator--3e4abb24-0919-4641-b28d-6238705bd0c5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c38b64-bd39-4605-bf1c-39c5298a31ed", "sighting_of_ref": "indicator--3e4abb24-0919-4641-b28d-6238705bd0c5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122596c6-f946-42c3-82ff-9802b6d67638", "sighting_of_ref": "indicator--3e4abb24-0919-4641-b28d-6238705bd0c5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186f7e98-d695-4e13-9ab6-42263d00f6d6", "sighting_of_ref": "indicator--80b6bf02-082e-4a89-b6fd-eb3e01080c03", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9d944f-9109-4a1f-a9ab-af8518e302a6", "sighting_of_ref": "indicator--80b6bf02-082e-4a89-b6fd-eb3e01080c03", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47202675-ba44-413a-8e91-9fb3a96ea064", "sighting_of_ref": "indicator--ed8a78c7-e8b1-434f-8a8d-82479fb5aeff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9176281d-bb9e-485d-954b-e21fe2fe04d5", "sighting_of_ref": "indicator--1af58615-be31-418f-bfeb-c4487eee0ad8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dcc5c00-276c-4d3d-9e9a-de47d1f1325e", "sighting_of_ref": "indicator--1af58615-be31-418f-bfeb-c4487eee0ad8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647f4a1f-8dc2-4eb4-826e-b036458b28fa", "sighting_of_ref": "indicator--1af58615-be31-418f-bfeb-c4487eee0ad8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dc7ca9-3e97-4b50-8603-d33b8a8822b6", "sighting_of_ref": "indicator--54ecacc2-3c5b-44b8-9407-2918d358a84e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984105b5-0cf2-4c5c-b793-42356dbec890", "sighting_of_ref": "indicator--66b36576-abaa-4e8f-87b0-1bfa4de02f24", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9aa2f7-65dc-4fab-8f41-a4fbce058382", "sighting_of_ref": "indicator--d6c3bb96-31ed-4ffb-8dde-6f95a51bfd04", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5c56b8-0cf6-4ff7-ac1b-76e96ab41a84", "sighting_of_ref": "indicator--9853c9f8-059b-4ac3-91ca-3610f388a434", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10a9b77-f9e0-4199-b161-7c7211017841", "sighting_of_ref": "indicator--9853c9f8-059b-4ac3-91ca-3610f388a434", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bb1428-1d16-467d-95a2-93ba484612a5", "sighting_of_ref": "indicator--c0f28cb0-3611-43a2-bb39-6a17095eac65", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be155644-6778-402a-96eb-2fd7891e9ea8", "sighting_of_ref": "indicator--12173943-80e5-4598-86a6-09b5bcdc85ee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbf0f8a-2743-490c-901c-38e601eb62a6", "sighting_of_ref": "indicator--12173943-80e5-4598-86a6-09b5bcdc85ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8163376-a789-47a8-a0d2-572ede816c28", "sighting_of_ref": "indicator--5baabe65-1522-4f60-ae59-4fcb7f54fe8c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08052aa9-efa2-4d7f-be97-546e75c6a820", "sighting_of_ref": "indicator--5baabe65-1522-4f60-ae59-4fcb7f54fe8c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cacd29-0c43-41e1-a6db-7cb793792928", "sighting_of_ref": "indicator--dca30d05-4938-47d5-a371-0360ea9ba672", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730fe796-0eef-4502-a3ac-da936f256458", "sighting_of_ref": "indicator--dca30d05-4938-47d5-a371-0360ea9ba672", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c18d0cf-119c-401b-a6ce-0daf54e0e14b", "sighting_of_ref": "indicator--dca30d05-4938-47d5-a371-0360ea9ba672", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58a7e1b-8c3f-47dc-94fa-92a59cd92a7c", "sighting_of_ref": "indicator--072a56af-208c-45d6-aacf-15c4790f0643", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0efc2b-e2c9-47f8-a03c-51e036c96521", "sighting_of_ref": "indicator--26f98b56-3d94-4e3e-ac52-269b20777baf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01aa196f-0f42-4954-bec2-1e8f2d34ea02", "sighting_of_ref": "indicator--26f98b56-3d94-4e3e-ac52-269b20777baf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e81c72-2550-47dd-a500-c9c40053380c", "sighting_of_ref": "indicator--5a5d0a0b-56a3-4dbe-9ee2-b7dff88258c2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d25aad0-b776-46a2-baad-281d167ab88f", "sighting_of_ref": "indicator--5a5d0a0b-56a3-4dbe-9ee2-b7dff88258c2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e242caa4-8336-4de4-a690-50f92441f862", "sighting_of_ref": "indicator--d2bd93ee-759b-4864-a16e-a3e3a8bd2f04", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587af1c9-57e3-4459-b0ca-6f198ceee2a2", "sighting_of_ref": "indicator--d2bd93ee-759b-4864-a16e-a3e3a8bd2f04", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc9c11c-3d37-4008-bfa8-f99f02993a0f", "sighting_of_ref": "indicator--f8429d2c-2d19-476e-8aa3-abc49413724d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc77621-bfc5-43be-b3d6-fde02684d6af", "sighting_of_ref": "indicator--f8429d2c-2d19-476e-8aa3-abc49413724d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbbc357-35a2-47cb-9ea7-f9dcbe2de504", "sighting_of_ref": "indicator--5fff0042-fb6f-48e8-a8b2-1e31a029626b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ffbe5b-9cf6-4792-b5bb-780569997060", "sighting_of_ref": "indicator--5fff0042-fb6f-48e8-a8b2-1e31a029626b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2a6bc0-c76b-4759-b727-369bb3b17736", "sighting_of_ref": "indicator--8afde51c-ed07-476a-b317-ce871b3d1c81", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d3dc28-9919-477d-b920-f5e7491fd64e", "sighting_of_ref": "indicator--8abbd0d3-f162-4949-85ac-a437a6d08268", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6629a18-ad78-4b53-af10-f73043eefb19", "sighting_of_ref": "indicator--5aa990ec-2b56-494c-b436-43a56986ad3d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c530c2-051f-47d6-bc87-ec994bef6bbf", "sighting_of_ref": "indicator--5aa990ec-2b56-494c-b436-43a56986ad3d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f439e84e-f2f2-403c-83b3-b5d478b00af5", "sighting_of_ref": "indicator--944add49-f243-4a03-a6a4-0dd0e82b498a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ca6a9a-ceb9-4307-bbc2-14f538eb57e0", "sighting_of_ref": "indicator--f71b0205-53ee-4b6b-8db3-5f958fe8733a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194e1aec-67d6-4cab-a538-693ec45e60db", "sighting_of_ref": "indicator--eeb14917-108d-439f-b183-6636a406b338", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c94f80-4bfc-4f66-bfa3-5327fab9eacf", "sighting_of_ref": "indicator--221009bb-0c52-410f-bc60-d1dc510088f9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d509ac34-1608-4bc6-948d-b0ebb4f33955", "sighting_of_ref": "indicator--221009bb-0c52-410f-bc60-d1dc510088f9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029c129f-78b1-44a8-bb13-35159dc8fc75", "sighting_of_ref": "indicator--221009bb-0c52-410f-bc60-d1dc510088f9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714df80c-caa9-46d0-9232-cc6eebaaba15", "sighting_of_ref": "indicator--b08840cd-1868-4e24-af85-0140d5a6c050", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae6466c-73c6-47df-b2e7-fb44b95f25b5", "sighting_of_ref": "indicator--b08840cd-1868-4e24-af85-0140d5a6c050", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b88ceb7-67a7-4aa9-947f-64a666cd836a", "sighting_of_ref": "indicator--f3c21e77-638d-45f3-b6ef-b7f265fa18e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bca23e-b29c-4787-bb3f-09057a604c42", "sighting_of_ref": "indicator--896172af-7203-460d-b68b-2658e2471b8f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2843a543-1a1f-4efc-8ca9-838bbaa30c9d", "sighting_of_ref": "indicator--896172af-7203-460d-b68b-2658e2471b8f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f063e692-fae8-41d9-a28b-97dbf2863441", "sighting_of_ref": "indicator--5e1a5a9e-b3a6-4718-a7bf-b0b9315c26c6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6169ac4-3561-4ef9-9dc0-2656e7688cb2", "sighting_of_ref": "indicator--5e1a5a9e-b3a6-4718-a7bf-b0b9315c26c6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bc7f4d-09c0-49a4-901a-4f3e05a10c33", "sighting_of_ref": "indicator--235533e0-aa8e-405e-9610-05e7db397ca4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699da3b9-a6af-48cb-af91-89095dad83bf", "sighting_of_ref": "indicator--235533e0-aa8e-405e-9610-05e7db397ca4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce0e447-1578-4d27-86e1-09a33402a39a", "sighting_of_ref": "indicator--235533e0-aa8e-405e-9610-05e7db397ca4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9c9635-4f2e-48a5-8785-26998ff60bf1", "sighting_of_ref": "indicator--99335ec0-9b4c-46d4-b909-ca86ced0fe7b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee27435-2209-4c2c-b30f-693f5f05c67f", "sighting_of_ref": "indicator--99335ec0-9b4c-46d4-b909-ca86ced0fe7b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb59c134-e7c7-4010-b171-d6dd5c39be27", "sighting_of_ref": "indicator--bc241373-c027-465d-9992-e51500eb7134", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf8202a-c615-4ea9-b8fa-b1098a80dfc3", "sighting_of_ref": "indicator--c75a1385-f170-49e8-948d-7c864ed5c2a6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0693a29b-a75d-4fc3-8ac5-424df89d60cd", "sighting_of_ref": "indicator--c75a1385-f170-49e8-948d-7c864ed5c2a6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b161e392-13a7-4279-bf65-43f3b7073a95", "sighting_of_ref": "indicator--2eef0f4c-464a-4a0b-b906-e9816e7d7eeb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014c4643-b946-4eea-85df-9275ab7935de", "sighting_of_ref": "indicator--2eef0f4c-464a-4a0b-b906-e9816e7d7eeb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b242790-2246-45b0-b895-d3a6ab20efc4", "sighting_of_ref": "indicator--f8cfb84d-b1a9-4337-a3cc-36b9b2ce4cb8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26844a4b-33ca-42b2-8803-a8b1fc54576a", "sighting_of_ref": "indicator--4c05584d-f7f6-47f3-bcfd-afe88e44fbae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7843dbe7-24e7-4a56-a96a-56363dd4ed6b", "sighting_of_ref": "indicator--4c05584d-f7f6-47f3-bcfd-afe88e44fbae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b26dee-bfbc-42e2-babf-cdd6f3c91756", "sighting_of_ref": "indicator--4c05584d-f7f6-47f3-bcfd-afe88e44fbae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfe8dea-bb56-4fa3-925e-cabf44858dee", "sighting_of_ref": "indicator--98d47289-d00f-43c2-80ff-3b07025aeb75", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775ffb64-e186-4b15-b4fa-be16a41ddb06", "sighting_of_ref": "indicator--91c86ed5-5b62-46e0-ba57-74e5a0b40d8f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cb4503-9547-42f0-9317-ccbcfdf86e29", "sighting_of_ref": "indicator--91c86ed5-5b62-46e0-ba57-74e5a0b40d8f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5119047-e848-4c42-9395-7aee16a72de1", "sighting_of_ref": "indicator--91c86ed5-5b62-46e0-ba57-74e5a0b40d8f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7264d92-9d8d-47bf-aeee-5d43eae086f0", "sighting_of_ref": "indicator--50300135-dc9a-4d5e-80fa-4bcb13594009", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dea8675-6462-4496-b758-441da2a75726", "sighting_of_ref": "indicator--03234b21-adf0-4156-9fb6-6c5e39a6b5db", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f265031a-e55f-47f6-b6fe-0cd9923388d3", "sighting_of_ref": "indicator--790e1c93-f2dd-49ce-847f-78f4a52d923c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a977db-8f0e-4aac-9ea8-f351866dba09", "sighting_of_ref": "indicator--4e89edc6-0174-4bab-b07b-37ab87e28e74", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae25928-835b-4f9c-b9a6-e0f0d491d3d1", "sighting_of_ref": "indicator--a807c4e9-bfdf-4656-93a7-c46a00bac627", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0465271f-ee0a-4301-9532-dcaf35893ab9", "sighting_of_ref": "indicator--95d0a269-da57-45d8-9c9a-80d4935673c5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2934fd6b-eb64-4cb3-b9f2-4992206796a2", "sighting_of_ref": "indicator--f3d9d94f-6231-4775-a1a0-cb94d08fd066", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9cd9e2-1870-4151-9319-609c2b4c1244", "sighting_of_ref": "indicator--25a3ff80-a3e4-4b8f-adcd-4d54f92cb7e7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab5c807-d64b-4a79-8033-41f0405ec690", "sighting_of_ref": "indicator--c3d476f7-6f18-4630-9e04-4352150f794f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91092eab-ca6f-4496-b217-f8fa7894bbdc", "sighting_of_ref": "indicator--54bcf0e0-3213-47ad-a75a-5d96e0920891", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbeefe7-a542-412c-91ed-6484ef7652c2", "sighting_of_ref": "indicator--106ece03-5dc6-4850-8556-c6e9d5306555", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d0346f-2736-403a-93da-ce3edf082585", "sighting_of_ref": "indicator--106ece03-5dc6-4850-8556-c6e9d5306555", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a10dcf5-9e12-4402-a62a-00add5c27e36", "sighting_of_ref": "indicator--106ece03-5dc6-4850-8556-c6e9d5306555", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e610c9-fc64-473a-992e-e2b3bf68bfaa", "sighting_of_ref": "indicator--d9f421b0-2648-477b-8c8e-78a0105e9473", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574cdc04-6baf-42fe-bbb7-f21b2861d7b6", "sighting_of_ref": "indicator--70c08b56-b580-48dc-8c94-3c702bfc3cd3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b88b7e-75d5-45c8-9218-10f82a79933b", "sighting_of_ref": "indicator--70c08b56-b580-48dc-8c94-3c702bfc3cd3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6989dfe3-90ec-4e9c-9f98-58b00d1366c5", "sighting_of_ref": "indicator--c91d72f8-9fe0-4a31-ac23-7f969ea4ca82", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c1fc17-648b-4d4f-ab5c-e49e2a30828f", "sighting_of_ref": "indicator--2658ddcf-5545-4744-8e28-350ec80a409e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e73578-0440-400e-80f2-0709d34beede", "sighting_of_ref": "indicator--3f089542-944a-46d2-abc6-cf0a255e38cf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78eac44d-8e05-4832-a1da-3653be5dada5", "sighting_of_ref": "indicator--cc2fbef1-f852-4cd3-bdb1-594af31d8f0b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c53365-15a7-4836-a271-7040140a25e4", "sighting_of_ref": "indicator--d3ef8a6a-7247-4b2e-b832-6d71213378f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a0718c-7d6d-4ed5-9054-32368a4ed07d", "sighting_of_ref": "indicator--d3ef8a6a-7247-4b2e-b832-6d71213378f2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8f1d4a-e682-4a40-8e45-d45c7ef96c92", "sighting_of_ref": "indicator--9ab4a4a1-f87e-4a0a-92c9-db525f8a673c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e63b2a-565a-4e95-b3f6-e0d9e0c3f47a", "sighting_of_ref": "indicator--9ab4a4a1-f87e-4a0a-92c9-db525f8a673c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb20f8df-41c1-45c9-a969-e1dd6ea0759e", "sighting_of_ref": "indicator--dab72727-0762-4128-b4bc-c164a7d8ad42", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1aeff7-3a91-4139-890a-a5d78b938537", "sighting_of_ref": "indicator--dab72727-0762-4128-b4bc-c164a7d8ad42", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3c8983-6b1d-4d72-92f3-2df047c7e9f6", "sighting_of_ref": "indicator--dab72727-0762-4128-b4bc-c164a7d8ad42", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d76a87-5170-4671-8707-9337d3825dab", "sighting_of_ref": "indicator--c229ccf3-872c-4cfd-823b-5c2571781d57", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe87dc81-6dd6-4018-8a7a-0672e473665b", "sighting_of_ref": "indicator--760af61e-0d9f-4d32-ad12-18f6e5947030", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae606e9-27b0-467e-8c11-5c00bf985cf7", "sighting_of_ref": "indicator--760af61e-0d9f-4d32-ad12-18f6e5947030", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facaba8f-4e92-4e4f-aedd-63ce2590cb33", "sighting_of_ref": "indicator--1c0c3129-ad8d-498c-8125-590279062852", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab5863c-a824-4e3c-b780-6417313a2503", "sighting_of_ref": "indicator--1c0c3129-ad8d-498c-8125-590279062852", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5decb4c9-60f3-4859-9052-d22262b54c47", "sighting_of_ref": "indicator--d0cbe7d3-f97a-4633-8a90-a2a889abca84", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c404dae-d6cf-4c6b-9f93-f68dc2df1348", "sighting_of_ref": "indicator--6cc3576c-1c27-4576-b612-05778968dd40", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc65d427-4274-471d-b2cb-564841f84a2d", "sighting_of_ref": "indicator--5381d5e1-f957-4972-a866-78763ecbf096", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58662683-a472-4a00-bb6c-684b0cfb0cdf", "sighting_of_ref": "indicator--7f968136-c517-4119-ba7f-602cabe79ee3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b779f47-51ad-4188-b5b1-de211e100ed3", "sighting_of_ref": "indicator--7f968136-c517-4119-ba7f-602cabe79ee3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d536d361-4d1c-4231-9d5d-905ac4dc8dbb", "sighting_of_ref": "indicator--0ca86353-3bf8-4e24-940a-d7b8714ba8ef", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e405b70-dff2-4bf2-9919-3518f8657d8e", "sighting_of_ref": "indicator--2ccce016-36df-48e7-8be9-feb5a2b6dd10", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e568732-f25e-459b-ac4d-de7aecffe607", "sighting_of_ref": "indicator--e0035684-b816-4dcb-878a-d7833406f8fb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192853ca-b49b-48b5-94d9-95b0d8ff7788", "sighting_of_ref": "indicator--e0035684-b816-4dcb-878a-d7833406f8fb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7b02dc-e38c-484e-b96d-11d6f676ba1a", "sighting_of_ref": "indicator--158e8f26-9d1e-474c-9fc7-220590b71cad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1b7113-fbc8-4742-9ded-f0130ce161a1", "sighting_of_ref": "indicator--158e8f26-9d1e-474c-9fc7-220590b71cad", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1dc5a7-7184-4b85-8760-dadfc9479f55", "sighting_of_ref": "indicator--aac3fb9d-50ff-49ff-906d-196e0435a07d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a893727-cdc0-4de0-932d-c396d195120a", "sighting_of_ref": "indicator--aac3fb9d-50ff-49ff-906d-196e0435a07d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd18697d-6b43-4215-90f0-3bfd021797b5", "sighting_of_ref": "indicator--fd02f12b-5ff0-47cc-8b05-5355107dac81", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d34a4c2-c203-4683-97a4-55e55163715f", "sighting_of_ref": "indicator--fd02f12b-5ff0-47cc-8b05-5355107dac81", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01dee91-b1c3-43fc-b78e-a434f6323e55", "sighting_of_ref": "indicator--464723ee-0a8d-414c-966d-55b9801d84c2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299b0301-e714-4e07-8fcc-35c19d905180", "sighting_of_ref": "indicator--464723ee-0a8d-414c-966d-55b9801d84c2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743baa3b-6abc-45e9-8773-f92c5ff49b28", "sighting_of_ref": "indicator--33e116a8-a402-4b45-8f18-06d8ea4fda45", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c6bfa9-96c9-40c9-aced-7c06356dca7f", "sighting_of_ref": "indicator--33e116a8-a402-4b45-8f18-06d8ea4fda45", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828f2eb0-0051-42a2-80e6-af00d84735fc", "sighting_of_ref": "indicator--ff7acadc-b183-4d5c-9bd8-fd942a13c5a9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811f123a-81e5-46c9-a7ef-75f1c975e564", "sighting_of_ref": "indicator--ff7acadc-b183-4d5c-9bd8-fd942a13c5a9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bc9fe2-9c7b-4d1d-b8b8-ea05655ac27c", "sighting_of_ref": "indicator--ff7acadc-b183-4d5c-9bd8-fd942a13c5a9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b92132c-2167-456d-b76b-2c2b5c81d729", "sighting_of_ref": "indicator--42a8bce5-eec5-43b4-883c-627d213a57b0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024432b6-4bcb-4f4c-a5bb-1998c28c4bc3", "sighting_of_ref": "indicator--42a8bce5-eec5-43b4-883c-627d213a57b0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7f350b-fe05-4d3b-9d4e-81e3c1559a67", "sighting_of_ref": "indicator--821255ef-b9e7-42ab-b2e6-1bc507e7351d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ae5e48-cac7-44a4-b445-412f7a870ab3", "sighting_of_ref": "indicator--663d160c-fdce-46d3-bb7b-4545c8c09cdd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c6a54c-66e1-4502-a2ef-a3a0f257fe7f", "sighting_of_ref": "indicator--d4a2c88d-8a05-4a88-b77e-a9ac498f0b46", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d902983-a4f5-4db6-a38a-9a4ab9ccc946", "sighting_of_ref": "indicator--d4a2c88d-8a05-4a88-b77e-a9ac498f0b46", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424c1633-b477-4c74-8993-56bf324f2c1c", "sighting_of_ref": "indicator--db9fdf21-280a-4e31-8d92-020312e17c5b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407624ee-727a-42bb-bc2a-45e1aaa0bec5", "sighting_of_ref": "indicator--db9fdf21-280a-4e31-8d92-020312e17c5b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d412900-a12a-431d-a583-8f084e472f3f", "sighting_of_ref": "indicator--2aa0f198-6374-47f8-9ec3-0484859d252e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6babac41-6387-4481-8e84-60d533e168da", "sighting_of_ref": "indicator--2aa0f198-6374-47f8-9ec3-0484859d252e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3537bacc-749f-4802-9c1d-c557c573dc02", "sighting_of_ref": "indicator--d1f8f02b-bd9b-4b74-ae56-d3985a12f723", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f42dd1d-4123-4a02-bc52-9a873522259d", "sighting_of_ref": "indicator--d1f8f02b-bd9b-4b74-ae56-d3985a12f723", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54277236-2851-467d-aa84-09964cccebfc", "sighting_of_ref": "indicator--4a2d85a4-1f8e-4180-8ab0-cda03155df9b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d00b6d-18b7-4a3e-92e3-f1b01a65ec0e", "sighting_of_ref": "indicator--176a0cab-6486-4403-a40b-12ec80d33742", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36e36fe-e551-4d51-a871-449ec0d8d9f1", "sighting_of_ref": "indicator--65434ce3-41f0-4242-8559-9f5a3fc65158", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6bacda-aac7-475a-a93f-dde696ef1149", "sighting_of_ref": "indicator--ad9c487b-5d5e-4c44-a88e-cbe57767cdca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01009ed-0789-43d5-ab52-3543ea6bd0a0", "sighting_of_ref": "indicator--64d2a79c-e963-4eae-94a4-1606bb943ae3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9a2dc1-a5e8-45db-9e11-170858743c4c", "sighting_of_ref": "indicator--67b84099-086c-484f-8c8c-28fff1f8d2c7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6552a5-01b5-4ee7-a8ae-39d9b42f5831", "sighting_of_ref": "indicator--511e0062-25d3-45f2-a53b-9f98fcde8a59", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9207450d-f044-4d22-87e6-a16a36e38e15", "sighting_of_ref": "indicator--511e0062-25d3-45f2-a53b-9f98fcde8a59", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd1a5f0-22d2-4ae8-a435-5147c51f68f0", "sighting_of_ref": "indicator--b9225c84-a697-4729-b454-2f0ff3796717", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c69c9c4-9d41-4492-85e9-140390bb11bd", "sighting_of_ref": "indicator--13db6c39-8c11-4a78-9729-03f9f305c1f7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83059b7-6c80-45d8-a586-2c4e7bad1545", "sighting_of_ref": "indicator--13db6c39-8c11-4a78-9729-03f9f305c1f7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf55e5c-ccc5-417b-a9a8-f6bdeaa6ce99", "sighting_of_ref": "indicator--ffe49b4a-58a9-4ef1-9a09-9f148a3b6643", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6421e1d3-76bb-4a10-a99f-529caeadaf30", "sighting_of_ref": "indicator--349c047f-f4e2-4437-8c9b-3baace8d698f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b6cea0-0eb8-4b1b-af2b-5b852508cfdc", "sighting_of_ref": "indicator--349c047f-f4e2-4437-8c9b-3baace8d698f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581d3953-f20f-42e2-aeac-738ed7b3e07e", "sighting_of_ref": "indicator--e606688b-7ccb-49c5-a9eb-f41582b40e10", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c0b32b-ad61-41c1-b557-7a9995982b4e", "sighting_of_ref": "indicator--778b12a6-571a-4506-8634-30bfbec7f032", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe090170-3bbc-4deb-8052-c4bb01e08052", "sighting_of_ref": "indicator--778b12a6-571a-4506-8634-30bfbec7f032", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6d9ab5-e22b-4e1a-b759-68e72042d36b", "sighting_of_ref": "indicator--778b12a6-571a-4506-8634-30bfbec7f032", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04410eef-5357-4199-9b26-97d8c32b0205", "sighting_of_ref": "indicator--5f3c9c04-1b3d-49e1-932a-be19ea8f8028", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3258290-4b4e-4e87-8c4e-849bf065c398", "sighting_of_ref": "indicator--5f3c9c04-1b3d-49e1-932a-be19ea8f8028", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96393759-5a7e-4275-95c9-05a31cf788ca", "sighting_of_ref": "indicator--96bb5cb8-03ed-4b79-b2cc-550d49ba129e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08819be0-5b90-4223-9055-464a08c2cb84", "sighting_of_ref": "indicator--96bb5cb8-03ed-4b79-b2cc-550d49ba129e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cdaca9-8271-4229-8308-ea5afa8da95e", "sighting_of_ref": "indicator--5f84755f-a352-43e8-bd4e-aeedca180353", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffb1790-c4bd-4268-a052-d76da6745a7e", "sighting_of_ref": "indicator--97760fda-6ebf-45f7-91dd-7f3b7d9f7ff7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ef7b24-efde-4790-823e-f6336b414d16", "sighting_of_ref": "indicator--97760fda-6ebf-45f7-91dd-7f3b7d9f7ff7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a63f160-239c-4cfd-8bdf-6628ee71ecfb", "sighting_of_ref": "indicator--97760fda-6ebf-45f7-91dd-7f3b7d9f7ff7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7803904-cb7c-486e-b1df-8cdaa9c1c9e3", "sighting_of_ref": "indicator--8c136b55-d550-4c03-9eed-1df8f9f16ac0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcb20ab-a812-4d8b-855c-4dc5c0e4753b", "sighting_of_ref": "indicator--8c136b55-d550-4c03-9eed-1df8f9f16ac0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b526a4-8434-428f-bb29-2883e49b754b", "sighting_of_ref": "indicator--f28d51c9-218c-4229-911c-c205df051a80", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe49006-f2ea-4f30-970a-4df9a2a28691", "sighting_of_ref": "indicator--f28d51c9-218c-4229-911c-c205df051a80", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39bfdfd0-755f-40df-bf56-d91b067aa286", "sighting_of_ref": "indicator--73b8d980-d265-4ad5-90d9-8eeae7bc7c59", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47679db9-4805-4b6e-9a6d-a8b7e8f771f7", "sighting_of_ref": "indicator--019d69a4-990a-4202-b43c-f3f60fa09e76", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0d1ede-90e5-40f8-a480-7894e51f6cc0", "sighting_of_ref": "indicator--26d67373-b19d-4f09-b220-9c8fef675bd2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7fbd5b-e626-467b-a8e6-6fcd10047caa", "sighting_of_ref": "indicator--7f613613-507c-4aee-8966-c2ffc6b91b8e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d60e7ef-bbde-428f-87d4-45f0cfd97e41", "sighting_of_ref": "indicator--da2666cb-2cee-420e-9943-de87bcfeb81e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80aa2ea-8ba2-49f2-bb59-ce486fc8c1b2", "sighting_of_ref": "indicator--da2666cb-2cee-420e-9943-de87bcfeb81e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f61d8f-e50f-4a20-8ea1-7187a86e459c", "sighting_of_ref": "indicator--0b8d9676-7fd2-47d6-87f0-bef573762404", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82dbf647-61b9-41e0-9cf4-9e4763d96968", "sighting_of_ref": "indicator--0b8d9676-7fd2-47d6-87f0-bef573762404", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2451ed79-e387-4123-8f33-ee3b8d86cd11", "sighting_of_ref": "indicator--ba0b6bb5-f1a5-4c20-9e0a-b30d9ebefae6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5b040f-6676-4405-8cdc-dcb0768545bf", "sighting_of_ref": "indicator--ba0b6bb5-f1a5-4c20-9e0a-b30d9ebefae6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b4fcce-688a-4275-bd4f-17e76b9cd8be", "sighting_of_ref": "indicator--2c7bf56b-7b93-4594-ac82-63a8f7415126", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa7fd23-3506-47dd-99e9-bcaa99e03110", "sighting_of_ref": "indicator--1f5c5a1f-f977-4d00-ac2f-1069b85f6b7c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fe857d-084b-410b-8691-7b4d44239807", "sighting_of_ref": "indicator--1f5c5a1f-f977-4d00-ac2f-1069b85f6b7c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd32f3ea-8a16-4d33-b344-fdd2ecad3a1f", "sighting_of_ref": "indicator--42f3bec8-3a57-41d2-85ae-68b27ca707b9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16cda340-3e9b-424e-90d8-a1bb572f8c73", "sighting_of_ref": "indicator--42f3bec8-3a57-41d2-85ae-68b27ca707b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4f8817-669d-490b-a290-42fbc487b3e0", "sighting_of_ref": "indicator--496779b2-3d40-4668-ba00-ffcbb9d71877", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392d1700-c986-43bf-9f34-65a30ecc4ea3", "sighting_of_ref": "indicator--5c500fa2-cdf7-4409-b496-14efff3ed8fd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508d15ba-8524-4e67-8312-8bf5d27f7e13", "sighting_of_ref": "indicator--3ed27800-fc07-4793-9c17-2615f962e4ca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26900f5c-4203-4bc4-8412-c4b007c133ff", "sighting_of_ref": "indicator--957b5f8e-6692-420b-a781-6a0770309b94", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3ca7c2-ccad-459b-b264-589336767c81", "sighting_of_ref": "indicator--a0c2c4f9-3a5c-40c0-ac22-b2ec4ce8b62b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b266acc-c94c-4b3a-82c8-fbd0ef154716", "sighting_of_ref": "indicator--a0c2c4f9-3a5c-40c0-ac22-b2ec4ce8b62b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2619279-25a0-4e49-b370-2a7a41dcf067", "sighting_of_ref": "indicator--b589a91e-da63-4450-b6be-b70960a0f7a7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6392a355-6d95-45bd-a7d7-834dc68cb3ef", "sighting_of_ref": "indicator--b589a91e-da63-4450-b6be-b70960a0f7a7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1bc17b-e31d-496b-80c1-3d9f2f8f89c5", "sighting_of_ref": "indicator--5d978793-86b2-4128-a2eb-42658459542f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf79c3d-9354-4b5d-b2f8-7b0a84d27b7f", "sighting_of_ref": "indicator--5d978793-86b2-4128-a2eb-42658459542f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec93f817-c6a3-47a6-9167-f6297af065b0", "sighting_of_ref": "indicator--5d978793-86b2-4128-a2eb-42658459542f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146cbbb8-0423-4b50-beeb-e37e78a4a2aa", "sighting_of_ref": "indicator--187b5e8d-9b60-477a-8a27-030cd4e19137", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17428718-9c10-4a4d-97b8-474f504dfcba", "sighting_of_ref": "indicator--56396518-c9c8-451a-8f15-3f2322c26bab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5920be5d-e7c1-4355-af7b-643ebc7176d7", "sighting_of_ref": "indicator--56396518-c9c8-451a-8f15-3f2322c26bab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd34f6c-ad1f-4772-8037-457d216de9f0", "sighting_of_ref": "indicator--7594a29b-f1d0-4edc-9cea-cf018d0c4656", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9513f0-93f2-46c2-803d-0e605047b132", "sighting_of_ref": "indicator--7594a29b-f1d0-4edc-9cea-cf018d0c4656", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08681ba3-c8df-4312-b23c-96784b85431a", "sighting_of_ref": "indicator--cc25b467-1633-4e52-a69c-f4a109760e35", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928be4f9-da8a-457e-9f30-c780d478d6c9", "sighting_of_ref": "indicator--cc25b467-1633-4e52-a69c-f4a109760e35", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--402808da-d3cc-4aa6-80b7-9b1de42d97a2", "sighting_of_ref": "indicator--707f954d-b692-4665-9ef7-0cdfc4479363", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf57ad7f-0bdc-417a-b132-24b6392093a2", "sighting_of_ref": "indicator--707f954d-b692-4665-9ef7-0cdfc4479363", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea83ecd-127d-4828-b52b-0e8ab04216c0", "sighting_of_ref": "indicator--707f954d-b692-4665-9ef7-0cdfc4479363", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbbc601-482a-4c73-bf64-c1bd3f82118c", "sighting_of_ref": "indicator--7c0e4bc7-f2a3-4812-88df-4e5cbd08410f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0425a41-5512-4664-a24e-49cb0d821aa5", "sighting_of_ref": "indicator--7c0e4bc7-f2a3-4812-88df-4e5cbd08410f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb582d3-b8a7-4078-80c8-f127744b10d7", "sighting_of_ref": "indicator--cb1ea6c5-1fd4-4f66-9702-92c089e534e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244e9412-9e89-42fd-af0a-817235cb5e69", "sighting_of_ref": "indicator--5876147a-c1ad-4d2c-95aa-c1666b56675f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4c7fa7-072e-42ff-b361-c814a28472dc", "sighting_of_ref": "indicator--a3fc9aac-fca5-4274-9980-618caeb18dda", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939243a0-ef2e-4ee4-82be-5805b63c15d3", "sighting_of_ref": "indicator--a3fc9aac-fca5-4274-9980-618caeb18dda", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5dc4d87-f4c3-475d-b5eb-d97b3fa63ea0", "sighting_of_ref": "indicator--5babde22-7936-4f53-b44b-f811c3fd7ce2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8688bbc7-f9bb-4f43-b1c8-455571bf1527", "sighting_of_ref": "indicator--2e0c0186-7a61-4530-844e-75b28c31ed67", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd9b018-86f9-41bc-a0a5-a4e2af10dfb6", "sighting_of_ref": "indicator--2e0c0186-7a61-4530-844e-75b28c31ed67", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c4bfa2-da81-4c0b-99e2-b14453cdc3c9", "sighting_of_ref": "indicator--2e0c0186-7a61-4530-844e-75b28c31ed67", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f65054-7780-465b-b487-95f4ec133792", "sighting_of_ref": "indicator--7f103536-057c-4229-9b74-a2a9490e5153", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018c668e-c0e5-44f0-b2a4-7560cd499c99", "sighting_of_ref": "indicator--b9473431-3f64-4b5d-b777-c0a3923d5d4c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee1ce66-771e-40ed-8e36-1829abb39cfc", "sighting_of_ref": "indicator--b9473431-3f64-4b5d-b777-c0a3923d5d4c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b05defa-b9ac-4a1d-9573-5a1074634fff", "sighting_of_ref": "indicator--fb6c13f0-1a90-4337-b2c8-fc7539710cb3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5616d8b-be3b-4dae-803e-8c7eb7eb9454", "sighting_of_ref": "indicator--13a2e37d-667f-44ec-bc14-cfe725a590fc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dad7040-87b4-4fcd-b5ce-6c560a07f1af", "sighting_of_ref": "indicator--13a2e37d-667f-44ec-bc14-cfe725a590fc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ac8cd0-c661-4a3f-ae91-2df2e40f3257", "sighting_of_ref": "indicator--f0caf68e-41c7-442e-b8f7-5c0737d2c7e0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ab1f83-a3f8-47ba-afca-3a158b00887d", "sighting_of_ref": "indicator--f0caf68e-41c7-442e-b8f7-5c0737d2c7e0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d790b48-b993-4e35-86fc-7688b940ed45", "sighting_of_ref": "indicator--f0caf68e-41c7-442e-b8f7-5c0737d2c7e0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27a7ea7-7507-4d6a-aea9-d3c6fbea0e42", "sighting_of_ref": "indicator--f0cb0647-9086-4fe3-b4ec-6ae0e108ae26", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ffea2c-1cd4-43a4-9eb2-73f85de17f62", "sighting_of_ref": "indicator--f0cb0647-9086-4fe3-b4ec-6ae0e108ae26", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbef36cd-ecb3-452c-bfec-7696e65004f5", "sighting_of_ref": "indicator--a1109058-04dd-4259-9fa8-7f294acc7edb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557216c4-2a85-44f6-b428-7639afd21530", "sighting_of_ref": "indicator--404982d7-553a-4f3f-8321-46ef83c754ca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd4b230-9ad9-4631-914d-e407b9e99f1d", "sighting_of_ref": "indicator--404982d7-553a-4f3f-8321-46ef83c754ca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b1ef0f-1ee9-4f07-80d3-381d08287576", "sighting_of_ref": "indicator--404982d7-553a-4f3f-8321-46ef83c754ca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b801993-033f-46b0-ade1-43cb48583081", "sighting_of_ref": "indicator--186263d7-f221-4d7e-a74f-0826be11ed79", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d303543-98a9-4862-bb49-dafe81af490f", "sighting_of_ref": "indicator--4f6b2ea3-3847-4bdc-8cce-d3fba06fb89f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c274bc1e-56e2-4d6d-8781-e4c740180f01", "sighting_of_ref": "indicator--4f6b2ea3-3847-4bdc-8cce-d3fba06fb89f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc016b37-2a3a-4c9f-baa4-63ac0d63a200", "sighting_of_ref": "indicator--e28d733b-1e7f-415e-bbe0-8d631df12bb4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bfcbaa-4165-49c4-b8a5-a7f9766c7b46", "sighting_of_ref": "indicator--e28d733b-1e7f-415e-bbe0-8d631df12bb4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9ea11c-6f3f-474f-9dc6-0f221682c469", "sighting_of_ref": "indicator--ec4e74b3-dad2-4460-af55-d6a62a8da93f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6ee400-9ba1-425b-8e79-0071ed6c8f31", "sighting_of_ref": "indicator--ec4e74b3-dad2-4460-af55-d6a62a8da93f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffb4314-e52a-4a39-9163-00200afea939", "sighting_of_ref": "indicator--4969fc3a-b1aa-49e0-adf9-df3ca03320d8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d883ca05-a59c-413a-b943-4a063e2a1f27", "sighting_of_ref": "indicator--4969fc3a-b1aa-49e0-adf9-df3ca03320d8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304f96d5-8642-4ff3-bfd2-42442d67d50d", "sighting_of_ref": "indicator--727100c6-69b1-4130-8333-d701767acac6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4cab67-c7c9-499c-aad4-ed4e0eaa739b", "sighting_of_ref": "indicator--eff41d28-e41b-4fbf-98f7-3eb7a71816bb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1348a960-782b-4ffd-ab0d-74370af60180", "sighting_of_ref": "indicator--5bdecdca-f233-4a0b-b3bf-745b698779c9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33a16ce-b65a-42b2-84b1-d116463df6c2", "sighting_of_ref": "indicator--424dd3ae-ba90-4711-9c20-214fd599b5bd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd6aad3-6e45-47cc-ada7-c5a7fd7ea63e", "sighting_of_ref": "indicator--1910b080-ba50-4755-92e7-f3a9b7b2bc30", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e383411-3fcb-4bb3-b51c-25ce83e43bd2", "sighting_of_ref": "indicator--208b7da2-7f17-4ef6-b475-766a7aa7d821", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65121388-dd80-4eb5-9132-571451cde8e7", "sighting_of_ref": "indicator--71a5b5c1-5973-4a3d-bcb4-fc60a7164b2e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6583fa37-39f2-4b28-a059-2d84f2907601", "sighting_of_ref": "indicator--28b8601f-c8f2-4e19-b65f-830ab5560f82", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845ca2ad-8118-438c-bfac-cdc57ff6a918", "sighting_of_ref": "indicator--28b8601f-c8f2-4e19-b65f-830ab5560f82", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae6d88d-415e-4256-a4dc-6d7c06d34b7a", "sighting_of_ref": "indicator--0b5ef2b2-3ba0-4dcd-8815-ed72a2474005", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817e7d67-8578-400e-ac9d-b902f24a8f73", "sighting_of_ref": "indicator--0b5ef2b2-3ba0-4dcd-8815-ed72a2474005", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126de4e9-8ac8-4a1d-aac1-2aab387d9ac3", "sighting_of_ref": "indicator--c78e7858-91e0-47ab-a3e5-9582555b13c5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1aa493b-b615-4123-bb1c-1c96e028ab18", "sighting_of_ref": "indicator--c5cfb581-3853-4740-ab33-087aacd1e62e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93337fa8-58ae-458c-af25-ef64c070df7c", "sighting_of_ref": "indicator--ac2c6ea1-866a-4f9d-996e-9d8a8715377a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99792ae-1298-44ef-b925-6231f49e4711", "sighting_of_ref": "indicator--ac2c6ea1-866a-4f9d-996e-9d8a8715377a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a345ae-c0b6-49c1-b103-870797d457a9", "sighting_of_ref": "indicator--e2ec001d-1746-46fe-92b9-654174ba6480", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a3cc08-f798-4326-9b71-0bc08909fb64", "sighting_of_ref": "indicator--e2ec001d-1746-46fe-92b9-654174ba6480", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996df537-0b5a-4d6d-bd95-c68cda83a33f", "sighting_of_ref": "indicator--332eff58-ed96-400c-b5ab-afba55deba9f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb0cff4-54d4-4439-9d05-9beb475f3d21", "sighting_of_ref": "indicator--332eff58-ed96-400c-b5ab-afba55deba9f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b2ecfa-9751-43a3-8d31-b5f9b5eb92e3", "sighting_of_ref": "indicator--6865f4b7-f885-4ed3-81c3-3e6e98ed7cae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318bbee8-7410-45e0-bbd9-adecf43890f9", "sighting_of_ref": "indicator--6865f4b7-f885-4ed3-81c3-3e6e98ed7cae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc9ff5d-40fe-4bb5-b0ff-aab6b7b19596", "sighting_of_ref": "indicator--b7245a37-bea4-4af1-8581-fa95b612aab2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0825ce-900f-419f-b146-dbbb49a9af45", "sighting_of_ref": "indicator--b7245a37-bea4-4af1-8581-fa95b612aab2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33d6371-a59e-4dbc-a95b-9effaa06db6a", "sighting_of_ref": "indicator--b7245a37-bea4-4af1-8581-fa95b612aab2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c856eb8-3075-4796-9872-f32431b8c73b", "sighting_of_ref": "indicator--1cc1064e-9686-4283-8ed2-38bdb53d9e74", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa215c4-faad-4c81-acf4-b4e2f0f04733", "sighting_of_ref": "indicator--13d1d2bb-e90a-4f41-98d7-60510433a23a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78bb2fd-ada8-401a-9008-32c8024c08b4", "sighting_of_ref": "indicator--13d1d2bb-e90a-4f41-98d7-60510433a23a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab877cf7-f4bc-4410-8a55-913f4dfa6fae", "sighting_of_ref": "indicator--bd5d5d27-9bcc-493a-b76d-ad36df655290", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610fd105-2c39-4cc8-8067-a5ee981cf727", "sighting_of_ref": "indicator--fbc40149-7b0c-4752-a15f-c860f0164f4a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65839b0f-c8a8-4601-8c6e-f17890c3e27b", "sighting_of_ref": "indicator--fbc40149-7b0c-4752-a15f-c860f0164f4a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f37f8c3-ddaa-497d-9eff-3fa14467f158", "sighting_of_ref": "indicator--14d92325-8d9e-4e8b-9cef-714ad454a87c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90ca56b-f237-4b35-b79a-26ee66b481eb", "sighting_of_ref": "indicator--0c999930-2282-44b9-9bff-6e91ad3ad9fa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb842fc-a978-46f7-aa11-f15cdbefa2a4", "sighting_of_ref": "indicator--1d0a4970-e1fa-4966-b7e4-208223962527", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b371014c-fb1c-4262-a95e-5a9abe4a0955", "sighting_of_ref": "indicator--dd25d7ed-6f8b-4841-b0d6-c74be9a7cf2b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868c2b48-c50d-41ed-901f-0c7997f585b7", "sighting_of_ref": "indicator--384fd48a-602b-48a8-a4c9-6dd4e2c2b8aa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec746593-3592-41b6-a9e2-18bb6992d51d", "sighting_of_ref": "indicator--384fd48a-602b-48a8-a4c9-6dd4e2c2b8aa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b22e14d-991a-4b01-92d0-65424714d8de", "sighting_of_ref": "indicator--384fd48a-602b-48a8-a4c9-6dd4e2c2b8aa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8432c240-1ce8-42e5-b032-dc7a0226dd98", "sighting_of_ref": "indicator--30b19c61-32ab-4d7a-9f3e-de08ee0b3818", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9daf501c-f629-4312-bed6-238f4312c225", "sighting_of_ref": "indicator--30b19c61-32ab-4d7a-9f3e-de08ee0b3818", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5b6d54-50ce-4b18-98f4-b44b8f256412", "sighting_of_ref": "indicator--30b19c61-32ab-4d7a-9f3e-de08ee0b3818", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95447dcc-d6f1-4052-9b24-a3430cdc9b2d", "sighting_of_ref": "indicator--9798bd97-5f48-4ed3-9830-c852c6de328b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306667e5-05bc-4e75-bfe3-16f906e27a2f", "sighting_of_ref": "indicator--0c0057c8-158e-4272-9036-c88425a8d380", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285d310b-84ea-47b4-904e-c53c0c4a0d40", "sighting_of_ref": "indicator--0c0057c8-158e-4272-9036-c88425a8d380", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a71c481-a13a-4edd-9f0a-cbde90980db4", "sighting_of_ref": "indicator--bdf777ef-aad0-46b7-9f3b-305d37fe18b6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9844782e-1b23-4d08-a34d-ce2ba64ffd14", "sighting_of_ref": "indicator--f828b48d-1137-46b4-a596-9240cce542a2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea66a1d-5b44-449a-82a5-a05df3c6082a", "sighting_of_ref": "indicator--e661e196-5a9a-4de9-9ecb-fc59ef65c4f3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5813797-ac4e-4d89-a613-c418aa0dbe81", "sighting_of_ref": "indicator--3482015b-f9c7-4872-b058-aca78bddf65f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c6b2ae-6e15-4175-aae7-e8db9289b5c7", "sighting_of_ref": "indicator--3482015b-f9c7-4872-b058-aca78bddf65f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759bc0a3-05e8-4adc-af27-1e8232d9289e", "sighting_of_ref": "indicator--d225a4e4-9111-49ef-b815-c3e2fdc9f64c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b07773-28c3-4f8f-8d81-455ac9cfe174", "sighting_of_ref": "indicator--d225a4e4-9111-49ef-b815-c3e2fdc9f64c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8eab7a-b267-48f9-99dd-1dfdb3d984ec", "sighting_of_ref": "indicator--d225a4e4-9111-49ef-b815-c3e2fdc9f64c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18aed55-9ad8-42c9-a63d-ff051d87330b", "sighting_of_ref": "indicator--282bff33-9711-48c0-8462-c241a9833a21", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb1476f-f3db-4e0e-ba6a-d3ed27b0ea4e", "sighting_of_ref": "indicator--3cea9b4a-0255-471f-8366-c6e942cc0d5e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b8022d-a68b-4a02-8d04-27250dc37c00", "sighting_of_ref": "indicator--7a502e69-3c0c-45ab-b1ba-b1444e844520", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059f2cf0-799b-42e0-b7d3-732bd91c1428", "sighting_of_ref": "indicator--7a502e69-3c0c-45ab-b1ba-b1444e844520", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71f066f-389f-4ea5-8f5d-daf5d068c78a", "sighting_of_ref": "indicator--7a502e69-3c0c-45ab-b1ba-b1444e844520", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73da3bdc-1d0a-4a4b-9b0b-b743f484bdbc", "sighting_of_ref": "indicator--8dc3ab24-f1f6-4bef-800f-88bb0dc677a5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e03c63-3a79-49e0-af3b-c1e722c8bec5", "sighting_of_ref": "indicator--e405e7e1-2c22-4466-902d-9f5fcb12975b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85beef3-c242-4b8f-b79e-8e77147ed92b", "sighting_of_ref": "indicator--e405e7e1-2c22-4466-902d-9f5fcb12975b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e4eb9e-d326-4582-9ee2-c86f22480fdf", "sighting_of_ref": "indicator--a65256fe-970b-4aaa-bb7b-cac15b2e063a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2adbfe-6500-4a96-bbee-7a00c2499097", "sighting_of_ref": "indicator--e5e110b0-6a3e-4915-a239-a950ceb4f75e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34133c04-0064-4af0-bc9a-e4177a3cb362", "sighting_of_ref": "indicator--e5e110b0-6a3e-4915-a239-a950ceb4f75e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67d0388-26b5-4a64-b2ce-3cdd8e7213a8", "sighting_of_ref": "indicator--e454014b-dd3c-4d72-b9f2-e09455c6ca4c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea49c3c-de9d-4f33-aa10-75ca7dd0a92f", "sighting_of_ref": "indicator--333aa5c2-b9f9-4e3f-9a3e-59a370feaaef", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67b13f5-8508-4f9b-a026-10fe810bca8e", "sighting_of_ref": "indicator--9cf26e27-2215-4232-b18d-6e2affda94ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4c3a69-1cd2-4340-a87d-1e60eaa9fc07", "sighting_of_ref": "indicator--2ccc4459-2f70-4a03-9d75-039e18dc30ec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee67fd64-2467-4ae9-934a-21286049f6db", "sighting_of_ref": "indicator--db3df185-d9c3-44c0-af4e-60258ae6ff08", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac897c4-4242-4901-bf2e-001d9e37f689", "sighting_of_ref": "indicator--724ac6ea-f11d-484a-a490-a37ddbd1de47", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327293ad-2844-4446-9f08-357a33e3010f", "sighting_of_ref": "indicator--724ac6ea-f11d-484a-a490-a37ddbd1de47", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b957f760-9c7f-4d2d-a0ae-c83f0f36b37e", "sighting_of_ref": "indicator--724ac6ea-f11d-484a-a490-a37ddbd1de47", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52e824c-d1e4-4c37-a8b4-2f30a7dce78c", "sighting_of_ref": "indicator--d671d816-2aef-47c4-96b7-3a1ef0b7cb2c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3636599-560d-4042-b848-4f18488c18d9", "sighting_of_ref": "indicator--d671d816-2aef-47c4-96b7-3a1ef0b7cb2c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34a4e2e-a097-4dcf-af35-63d2e67b95ac", "sighting_of_ref": "indicator--d671d816-2aef-47c4-96b7-3a1ef0b7cb2c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985871e5-7733-495f-8b5f-a0df5fdbf184", "sighting_of_ref": "indicator--1407eef5-156c-40c4-9b3d-271ee30811e0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb1bc4f-0505-4b00-9daf-612a5143eaa0", "sighting_of_ref": "indicator--e489587c-81f0-45b9-8c8d-a4775371220b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4233948c-35c7-4025-9afc-65152cb1a3e0", "sighting_of_ref": "indicator--562c82cd-1ce9-40b2-a53e-25ef0c578b79", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7337826-ef79-43bf-9eef-0356bafea416", "sighting_of_ref": "indicator--cb809ea3-82b7-402d-9dc5-ad5dfbad8093", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc58142-dc73-4876-ba4f-5e4e7c9638c5", "sighting_of_ref": "indicator--4d6681ee-22cb-45c5-a5a0-034788874c69", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00acfbb4-ecfa-4923-b17e-2f2b16652ff9", "sighting_of_ref": "indicator--4d6681ee-22cb-45c5-a5a0-034788874c69", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d43db3c-f3ff-4069-80c2-d1dac91c6122", "sighting_of_ref": "indicator--4d6681ee-22cb-45c5-a5a0-034788874c69", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313b22d9-ac40-4fde-98d8-15213033f3d5", "sighting_of_ref": "indicator--716d2486-59f3-4cf2-beec-182bf76245d6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af25c9d-0d08-4de5-9b12-5da39e3c5d87", "sighting_of_ref": "indicator--e8694d48-5639-4876-8835-557bf038fbb7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca1db70-797e-4f85-bf53-bf760b891b75", "sighting_of_ref": "indicator--88eb1f54-8708-48b1-a9cb-43d4e434cb4e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f99bcc-037e-426f-9c0b-8169d652055b", "sighting_of_ref": "indicator--88eb1f54-8708-48b1-a9cb-43d4e434cb4e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db19b352-5e73-47a4-a2b1-e1b5a09d58c5", "sighting_of_ref": "indicator--52fe5282-1ff5-4aaf-b0c3-bdcb20473b31", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1948e4be-d1e0-4ec0-bd5c-3792faff4028", "sighting_of_ref": "indicator--52fe5282-1ff5-4aaf-b0c3-bdcb20473b31", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14c18b8-7ea9-406e-b251-26be84ca4e5a", "sighting_of_ref": "indicator--445fb3e6-7a43-4406-8114-ba7fee221df7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c403c2-f501-4746-8910-0a144ed3d0ba", "sighting_of_ref": "indicator--445fb3e6-7a43-4406-8114-ba7fee221df7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d23ec44-9cf5-4503-aad7-32ce54b0f36b", "sighting_of_ref": "indicator--c359318c-599b-4a86-ba78-98811d9e8536", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996a221b-7e94-4940-ac18-983d19809cd6", "sighting_of_ref": "indicator--c359318c-599b-4a86-ba78-98811d9e8536", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc97b67-3c74-47d7-93fb-daa8db7a3e1e", "sighting_of_ref": "indicator--b23ba3c4-6926-4d0b-ab5d-3836330c5398", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a199fa-1960-494d-aa07-889da16c50f1", "sighting_of_ref": "indicator--b23ba3c4-6926-4d0b-ab5d-3836330c5398", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a789af3b-87cd-4d37-863b-350b214cce11", "sighting_of_ref": "indicator--dc666d44-6120-45a4-8597-00769ff6b351", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676de376-ceba-44d8-809b-12ba1a22fe0d", "sighting_of_ref": "indicator--dc666d44-6120-45a4-8597-00769ff6b351", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ce729b-1465-4d5c-bc4b-9fc8a65b4528", "sighting_of_ref": "indicator--81a68d01-e2dd-4a0e-b0b0-c7b26f94100c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8872a5-f426-4e49-bcdf-87f71d3b45a0", "sighting_of_ref": "indicator--9c3b1002-068d-47f2-a009-5cc7806a9587", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4091e0f7-aaee-4713-9ad1-93cfb43b7f3f", "sighting_of_ref": "indicator--9c3b1002-068d-47f2-a009-5cc7806a9587", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5d4061-bb17-49ef-b941-4e7e8ed0a2b8", "sighting_of_ref": "indicator--9c3b1002-068d-47f2-a009-5cc7806a9587", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a7ab60-f2ab-498b-a3c8-94438c1ce6a0", "sighting_of_ref": "indicator--44032310-ce4a-4565-8912-7d8aea7db340", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f4cc76-8ff0-455e-83f4-f8843e2fb66e", "sighting_of_ref": "indicator--bdaf335e-ca5a-4f9a-a5d0-0eee063c6223", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d378fd69-46c7-486f-a50c-5dc31d671ea5", "sighting_of_ref": "indicator--bdaf335e-ca5a-4f9a-a5d0-0eee063c6223", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca111f47-d662-466a-a4b9-a725ae42876a", "sighting_of_ref": "indicator--4da9bc5a-e266-4a36-b064-03e71ae27d72", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053b9c95-6efb-44d5-a7f4-26c5ffbad6fc", "sighting_of_ref": "indicator--4da9bc5a-e266-4a36-b064-03e71ae27d72", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97e4317-338c-48aa-bd6b-75e4918f895f", "sighting_of_ref": "indicator--6203cf3f-f823-4ea4-a30c-f3ae9bfa882a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767bfcc3-68fd-419b-be74-ed3450dd0b6c", "sighting_of_ref": "indicator--e266ac96-f3aa-4de1-8acd-bef158eae2c1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9871f2d5-f0b0-4934-9866-7ad5d057554d", "sighting_of_ref": "indicator--e266ac96-f3aa-4de1-8acd-bef158eae2c1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7776f75c-82a6-484b-ac40-7f36f6b09931", "sighting_of_ref": "indicator--a4d3b4bf-a56c-4550-9a74-0a8399adf3de", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c64dedb-d599-4d2b-af78-f574ccd4803d", "sighting_of_ref": "indicator--bd7a74a1-ebbe-4c47-8b96-d1bb043116c2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f922b6-bd16-465e-9a73-6820c914f093", "sighting_of_ref": "indicator--bd7a74a1-ebbe-4c47-8b96-d1bb043116c2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44549525-6edc-45fa-add2-39c2c0c97e0d", "sighting_of_ref": "indicator--7bbbe954-cedc-41db-a0f4-23ecd3818540", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a65622a-1818-4341-a3b3-1d91fa3ac247", "sighting_of_ref": "indicator--7bbbe954-cedc-41db-a0f4-23ecd3818540", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd30f093-eb75-4797-8f1d-8d8effb2f937", "sighting_of_ref": "indicator--d0c3827a-0f2d-47e3-843f-734ffb64bd11", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae8958e-8dfe-48a9-b9b1-5186f0346f76", "sighting_of_ref": "indicator--d0c3827a-0f2d-47e3-843f-734ffb64bd11", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8df5a28-16ac-44d2-8194-bc5ff7e15438", "sighting_of_ref": "indicator--d0c3827a-0f2d-47e3-843f-734ffb64bd11", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695ff3cb-7a51-4f54-a586-fbb7595a64b3", "sighting_of_ref": "indicator--874b6494-616c-44e7-9953-bd374c5575ba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa78461-43f4-408a-b403-1ccd776c1b76", "sighting_of_ref": "indicator--24dc82bb-9f7c-4a39-8fe5-6cc7779afe03", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad2d4e5-4949-40cb-a6fb-215363a2a81d", "sighting_of_ref": "indicator--bbe71135-5d27-4887-b344-d147ba8ac2c9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56ab499-ab0c-40fd-96be-c7f538511213", "sighting_of_ref": "indicator--bbe71135-5d27-4887-b344-d147ba8ac2c9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5037264-9c68-4353-8da7-c3b20c42f08b", "sighting_of_ref": "indicator--bbe71135-5d27-4887-b344-d147ba8ac2c9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a96fa6-eb09-4071-b38e-9add4907ccc5", "sighting_of_ref": "indicator--a235a965-a60c-4e3a-846a-795402aed948", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba8a47c-3316-48de-9539-cd4ebad20c3f", "sighting_of_ref": "indicator--88774897-7249-4346-9610-89d8c0e7aa7d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acb95f5-e7e2-4061-b5c9-59e94c315308", "sighting_of_ref": "indicator--88774897-7249-4346-9610-89d8c0e7aa7d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246b63b7-7909-4f48-aa8b-3c6bdf177aba", "sighting_of_ref": "indicator--b9867e9a-504d-42d6-a466-f9549ff5856d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb676d15-4cf9-4d02-994e-e3da16b39d3e", "sighting_of_ref": "indicator--bc892807-8f35-4a6d-b3e5-e53d2b50eea2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1a7177-9453-4ada-b7ce-be8e03e70244", "sighting_of_ref": "indicator--2d9019bb-deb1-4b47-89df-8fa0e4fa2e95", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0fe0d3-6569-4111-8755-87b1deb7618a", "sighting_of_ref": "indicator--2d9019bb-deb1-4b47-89df-8fa0e4fa2e95", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3bd15bb-d1d6-4fb3-a139-780ac03e4881", "sighting_of_ref": "indicator--a43d3e0c-157e-42e8-9058-5e91e7d604dd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afeaf10-e2b9-4e53-9cbe-f1271ba6595b", "sighting_of_ref": "indicator--a43d3e0c-157e-42e8-9058-5e91e7d604dd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d858f4-53a6-4890-9b6e-b95f0ba48f9d", "sighting_of_ref": "indicator--1c2c4404-b724-4fab-a41d-af75ec0e7cd1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07598df6-cf7d-4b61-8be5-b8ad23c4088b", "sighting_of_ref": "indicator--3e6b4896-4cbd-4a17-bafc-70b3a7bff41e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09884a03-a2c5-4a3e-a959-1b62229e9102", "sighting_of_ref": "indicator--a2d841ef-7a17-4b8a-8e41-dd3dae6b872f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467c5a91-ce8b-47c0-85b3-7febdec217eb", "sighting_of_ref": "indicator--a2d841ef-7a17-4b8a-8e41-dd3dae6b872f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0fc730-1b31-419b-9e9c-b6cb17221fe6", "sighting_of_ref": "indicator--bb8f2b1f-d66b-47fd-9654-63293593f139", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a33c10-4600-4e5d-8240-fff496df3bd7", "sighting_of_ref": "indicator--bb8f2b1f-d66b-47fd-9654-63293593f139", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a22b52-d708-40a8-8220-91446376ec41", "sighting_of_ref": "indicator--96fbce76-449a-4167-89fd-cfbd0228f545", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5659cf19-4d8d-49d4-a8b8-dba3a282cc64", "sighting_of_ref": "indicator--e2cc78c8-b6eb-4568-bb29-b33f073a1ea9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfb33e1-c129-4d76-a2c3-228ab7674b98", "sighting_of_ref": "indicator--e2cc78c8-b6eb-4568-bb29-b33f073a1ea9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034f7afd-ecee-4885-a796-2a4bf614f854", "sighting_of_ref": "indicator--91044dc7-4371-436b-b284-b1ed1fccede3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59927a4-74a1-47ee-87e7-36eb4c7f6218", "sighting_of_ref": "indicator--40d66161-7dd6-442c-b5d0-e5d3f559d119", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6fcadd-1f7d-4434-93bd-b032f14d2d38", "sighting_of_ref": "indicator--40d66161-7dd6-442c-b5d0-e5d3f559d119", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dca023a-cf2d-41d7-a171-11f215c0a5a7", "sighting_of_ref": "indicator--40d66161-7dd6-442c-b5d0-e5d3f559d119", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85dc9294-14c3-4ca4-a45e-2f810d38470e", "sighting_of_ref": "indicator--05c46b97-b90d-4929-9a8f-e11f7a5ba111", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8799fe-9817-4c49-9367-b4a674ad25f2", "sighting_of_ref": "indicator--e6b48b53-348c-4910-a478-e38b3986ce93", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d9af30-593d-4e0d-82f5-7f334adb6f4e", "sighting_of_ref": "indicator--5e0c19c5-f94f-4e25-b122-d0ceec88ef34", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbdab83-d11c-4c4a-ab4f-a551f7b17ed9", "sighting_of_ref": "indicator--5e0c19c5-f94f-4e25-b122-d0ceec88ef34", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a89282f-2339-4685-a5f4-2b49ac80838a", "sighting_of_ref": "indicator--83096432-a59d-4372-9008-c3cf59782936", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1694b3e1-b3de-4643-a396-bf6faf5229b7", "sighting_of_ref": "indicator--83096432-a59d-4372-9008-c3cf59782936", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ce8c43-0f89-469f-a2e2-8b0536530abd", "sighting_of_ref": "indicator--0fc01e9b-b255-45c3-ab1f-9c7dcb71471c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb433e1-bbbe-4a69-b91d-8df70eef61cb", "sighting_of_ref": "indicator--8f393bdc-3102-40cb-9aec-7cec9ca054fa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9de7eda-dac4-49f6-93df-b0a6b3f24e2a", "sighting_of_ref": "indicator--7587488b-f9cd-42e3-a8fc-e2440a8ca994", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1c1dd3-8b36-4bef-8257-c94b8643c2b4", "sighting_of_ref": "indicator--a76c095d-241e-4dc9-b669-62eb4a4e197e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc4494e-17c6-4cd4-95fc-a31b82a0b813", "sighting_of_ref": "indicator--a76c095d-241e-4dc9-b669-62eb4a4e197e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643e6826-c7fc-402a-96c9-4db46b00f7d6", "sighting_of_ref": "indicator--1b1eac05-54b1-4623-be03-533582f592e8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ce9e40-9d35-4251-a0d8-4131e9967b24", "sighting_of_ref": "indicator--1b1eac05-54b1-4623-be03-533582f592e8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c689b202-22c4-42a3-b8b3-79b920cc0bd4", "sighting_of_ref": "indicator--ca582617-aabf-4162-9acd-f811e9f1a4fd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b618a3-d521-4968-8f22-30bdc9f2ec1a", "sighting_of_ref": "indicator--ca582617-aabf-4162-9acd-f811e9f1a4fd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c66f19-4d8d-4d67-b70a-992165bc8d90", "sighting_of_ref": "indicator--84f1e509-3a24-4b78-8b7d-cd76aa5d6b12", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11745cb-fad7-418a-9436-c2035308f02e", "sighting_of_ref": "indicator--84f1e509-3a24-4b78-8b7d-cd76aa5d6b12", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1721bcec-2ec9-4b15-b753-a900d5c19d8e", "sighting_of_ref": "indicator--2d963139-78cf-4a21-b0a7-3be953339561", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b0fc7d-60b6-46e5-8dbd-214f7cc94133", "sighting_of_ref": "indicator--2d963139-78cf-4a21-b0a7-3be953339561", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5522cad0-dcf2-404a-9df2-34e07ef61401", "sighting_of_ref": "indicator--653d7088-ad03-4456-b06d-c1ee42b98928", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5837d7-6866-45cf-8848-551bdb25be84", "sighting_of_ref": "indicator--dcebf8ee-be5a-4fa4-a6a2-ff73591df4c5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de18ebf-8005-4c08-9b17-3682eb45a9f5", "sighting_of_ref": "indicator--dcebf8ee-be5a-4fa4-a6a2-ff73591df4c5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e3aef1-1e37-4f50-a635-d13ab4ea655d", "sighting_of_ref": "indicator--dcebf8ee-be5a-4fa4-a6a2-ff73591df4c5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e932f63-e0e0-4ea0-9ed8-09bdf737d473", "sighting_of_ref": "indicator--77116c93-004a-4e67-99ed-67b5e20dae0f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9be3e8-16b0-4f23-a46f-4009e56d4287", "sighting_of_ref": "indicator--f6d2040a-7033-403c-a229-b94241332891", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c59a7f-ecd1-4182-b66e-96f4e9ab708c", "sighting_of_ref": "indicator--f6d2040a-7033-403c-a229-b94241332891", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7563a1e7-3ef0-478a-b929-f09a35e59ba9", "sighting_of_ref": "indicator--2d2ed9a5-6359-4492-97e4-5aae93720384", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdcdfbff-1646-40b8-bd4a-8978dc877d51", "sighting_of_ref": "indicator--2d2ed9a5-6359-4492-97e4-5aae93720384", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb18b1c2-bfab-44e4-b5cc-b66772893475", "sighting_of_ref": "indicator--ab7ba3f5-771e-48e6-b032-a90f53a1b985", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff15ab5-a6fb-443e-986e-95c564ecc819", "sighting_of_ref": "indicator--ab7ba3f5-771e-48e6-b032-a90f53a1b985", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f001d31-0d4c-49da-a143-192925aace0d", "sighting_of_ref": "indicator--5952c5ad-0d8f-48f3-9f8c-af2f36930d96", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3a6902-e772-4979-b3c0-b7885e8d3814", "sighting_of_ref": "indicator--d036ae2f-aed3-4c4b-9df5-5a1778973ab2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddd9a3b-8df2-4c31-b32e-a246588e7b5d", "sighting_of_ref": "indicator--0f423c52-1dfa-4cff-a10b-df8a388be76b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7544c74a-910a-4d2e-b104-5b87fd30b7b1", "sighting_of_ref": "indicator--31f58d16-b32a-4908-aa7d-eda5cfbe7ee0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d0afab-9079-42cc-90b1-71f8d3610171", "sighting_of_ref": "indicator--31f58d16-b32a-4908-aa7d-eda5cfbe7ee0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447391cb-2a67-4783-8390-177fd8fc19dd", "sighting_of_ref": "indicator--53e75486-d00f-40a2-a9c1-0b36841ed642", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a70eb7-69d5-4889-ba92-a44f60dd8f6e", "sighting_of_ref": "indicator--53e75486-d00f-40a2-a9c1-0b36841ed642", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5c661a-16ef-4d37-96eb-e15ed2f99e36", "sighting_of_ref": "indicator--4c7a524f-6292-46d4-89a0-471d4364d642", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa68332e-3548-4d03-ae4c-2eef5162d1f4", "sighting_of_ref": "indicator--2dae40ac-7a24-4e00-af47-9fa9dc1fa7ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0899d7cf-3a57-40f6-af10-0e84d66000a4", "sighting_of_ref": "indicator--88661a13-3702-42ea-b750-2d11fe86b033", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2278b73-9149-4b1b-b23a-5968153ded0f", "sighting_of_ref": "indicator--88661a13-3702-42ea-b750-2d11fe86b033", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739b8c49-a83b-4d82-824e-593139f129ff", "sighting_of_ref": "indicator--88661a13-3702-42ea-b750-2d11fe86b033", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8066754a-6846-4835-b236-6fdde88fb534", "sighting_of_ref": "indicator--6f8c5f71-fa5e-4773-aac8-e5acca9395c3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2bb2fb-3acc-4b7f-bdf8-2c1c94fb4c91", "sighting_of_ref": "indicator--76822a0e-c442-4425-abab-0457044b0e69", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9acd6a-23ea-4416-ad80-75fc6ed4b0e1", "sighting_of_ref": "indicator--4c7f9ef1-94ae-42ac-946f-5d7fafdf1a2a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77984f5-5e7a-40c6-b06d-344036695eae", "sighting_of_ref": "indicator--84df626f-b813-44c3-8016-07a589d586ec", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c17cfb5-21c8-4be9-aca0-91993678114e", "sighting_of_ref": "indicator--32066375-9e7e-4102-941c-e11cd04c67a6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6bead57-5a7f-41bd-9662-fb29186a0be3", "sighting_of_ref": "indicator--d51a477a-72aa-4275-a6c3-a7b4397c204e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021bb8a3-8d7c-403c-8e72-fb5794c7a549", "sighting_of_ref": "indicator--d51a477a-72aa-4275-a6c3-a7b4397c204e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ba2813-5d9b-4b3a-b60e-8700ae7a301b", "sighting_of_ref": "indicator--d51a477a-72aa-4275-a6c3-a7b4397c204e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4949edc3-490f-4be4-8380-22e3f66a8ed8", "sighting_of_ref": "indicator--cf7b02f4-d6dd-43a0-86fb-347c0d71563e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a790a344-50a3-4481-9eaa-ea2aaa217a70", "sighting_of_ref": "indicator--cf7b02f4-d6dd-43a0-86fb-347c0d71563e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37979302-8306-4431-8d58-cd4cf6150313", "sighting_of_ref": "indicator--cf7b02f4-d6dd-43a0-86fb-347c0d71563e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55980f08-c28a-4728-8ba9-5a529115ae32", "sighting_of_ref": "indicator--86ed6af2-a415-4cfc-a091-6329519dfc94", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4240454a-c642-4221-8a2d-fed3af1818ba", "sighting_of_ref": "indicator--d4604c30-8b68-4cfd-9c7c-ff51bbf8dda1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2e5b12-996e-4ab2-b3d9-3ab5f73ae5ae", "sighting_of_ref": "indicator--17ddddca-393c-465a-9aa4-bf40fc50527b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c26fb6-2e6e-422a-a43a-243e43f95a33", "sighting_of_ref": "indicator--17ddddca-393c-465a-9aa4-bf40fc50527b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c56637-8b06-46cc-b47e-123c04eafea1", "sighting_of_ref": "indicator--1c17bc1c-95c2-415b-94ad-0f84a0c12edf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596e38d0-3111-4f48-bd93-b6e5c6ae1c24", "sighting_of_ref": "indicator--1c17bc1c-95c2-415b-94ad-0f84a0c12edf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef5faef-9e5c-4619-90c1-5147264b8658", "sighting_of_ref": "indicator--1c17bc1c-95c2-415b-94ad-0f84a0c12edf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71253e9d-42da-48e1-bbd5-5fbaec562234", "sighting_of_ref": "indicator--33c6cb7f-2a6c-4bf5-a2ef-ff4180953eb7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1049cf6-f5c8-49a4-bf20-40991ae945a9", "sighting_of_ref": "indicator--4bdce4c9-808a-41f6-8068-feef623f21ef", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed4a74f-0501-4174-8511-1c835738c3b3", "sighting_of_ref": "indicator--98aa9712-8992-429e-8e1c-8fa957659370", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e87bbd-7bd5-4770-8cd6-8a0661623849", "sighting_of_ref": "indicator--98aa9712-8992-429e-8e1c-8fa957659370", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3664bca3-7a4c-476f-8335-0623bdd00a30", "sighting_of_ref": "indicator--98aa9712-8992-429e-8e1c-8fa957659370", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765846ce-4654-4ae0-9f9e-fa663b4240b6", "sighting_of_ref": "indicator--44b58086-a6ae-44c3-8194-baa7ca4f42e1", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47abe92e-cd83-4c35-a753-c31318079f18", "sighting_of_ref": "indicator--0a7b8e72-22df-4323-9c39-d63d054c461b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be692b3-4266-449f-8810-884298cc04c4", "sighting_of_ref": "indicator--0a7b8e72-22df-4323-9c39-d63d054c461b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3548b1-6d2f-423b-9fac-bf022b5da57c", "sighting_of_ref": "indicator--192932ab-93ea-430d-ad50-6115b85fd052", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16c5eeb-aa92-4d43-926b-050131e30c31", "sighting_of_ref": "indicator--0d8ef690-02be-4cf1-b923-51bec914367a", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c97fc38-8837-4e4a-abba-6b94630acc0d", "sighting_of_ref": "indicator--84fe3454-655f-42c5-a50a-afd04665853b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbad91f7-2544-48d9-9257-69c7426fb0f5", "sighting_of_ref": "indicator--870c1292-6295-4039-a63c-c7e839d83586", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbec885b-0e7d-4c19-970e-0a70621bfcba", "sighting_of_ref": "indicator--e94695be-a779-454b-beb5-f78417f19f16", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41586f9b-70fb-43be-b187-462ffe6eed78", "sighting_of_ref": "indicator--4be0d8cc-7f16-4ae7-a0cc-bb89b4a29806", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0291a196-144d-4ff7-b557-9523b825e746", "sighting_of_ref": "indicator--49bcf41b-979d-44c3-a7f8-a0e64d197332", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b454dd-a2f8-470d-8660-c327e95dc191", "sighting_of_ref": "indicator--f4f6ccc2-79e5-402e-8a23-67cedd83b9d4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf5a38b-63a6-4eb8-8cdc-015875126f6d", "sighting_of_ref": "indicator--f4f6ccc2-79e5-402e-8a23-67cedd83b9d4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfcc0eb-e5f0-4172-ae7a-6966c1f49e7a", "sighting_of_ref": "indicator--f4f6ccc2-79e5-402e-8a23-67cedd83b9d4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f565a40e-139c-459b-9330-3473719841c6", "sighting_of_ref": "indicator--54e7db72-f4a7-480d-abd7-d3da770524c1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f853eb3e-b8d5-4aad-9bd0-6f920333558a", "sighting_of_ref": "indicator--6321b4af-41f9-4d42-9ee2-69cb2ad086c3", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e284a2-9ca7-47e5-bb9e-088ac1ea42c5", "sighting_of_ref": "indicator--7966ae01-fae1-4eaf-9390-b1ab625d2938", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb7f9a0-57bb-4dcc-b9a6-5886b66ef2a4", "sighting_of_ref": "indicator--7966ae01-fae1-4eaf-9390-b1ab625d2938", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c028038-6b56-4672-a429-050177961c2a", "sighting_of_ref": "indicator--7966ae01-fae1-4eaf-9390-b1ab625d2938", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fca0c19-2028-453e-b52a-80bb7b1c58fc", "sighting_of_ref": "indicator--a6701aff-9b02-4313-93de-0cdf9c4c84e7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b08643-c1f3-4a48-9853-21d58105afca", "sighting_of_ref": "indicator--a6701aff-9b02-4313-93de-0cdf9c4c84e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e209c0-3fe3-4909-9c4a-fbea433d0b33", "sighting_of_ref": "indicator--a6701aff-9b02-4313-93de-0cdf9c4c84e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d943dc-68f0-4c34-9fdb-de2e4cd65646", "sighting_of_ref": "indicator--69a9376e-ae63-4867-a867-b7a987221994", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93b026e-ad9b-4d4a-8869-5dbc3db2ca56", "sighting_of_ref": "indicator--6dfc8c5b-8c11-41ac-ba35-27e3364bfa40", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa49118-47a4-496c-bd0a-6587603e5bbb", "sighting_of_ref": "indicator--fff71f80-ec69-45a4-acc9-2ebb0c14289b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a78cfba-d7d1-440d-bb44-648d07163197", "sighting_of_ref": "indicator--fff71f80-ec69-45a4-acc9-2ebb0c14289b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462f43c8-31c1-43ca-ab40-81b702b383a6", "sighting_of_ref": "indicator--fff71f80-ec69-45a4-acc9-2ebb0c14289b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120b0cc9-9716-4784-8a78-dd9a6aa35e1f", "sighting_of_ref": "indicator--898e4a74-50d0-4055-9311-7dedb8a7ee7a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c71c077-9b8d-4fc9-95a6-c554146868cf", "sighting_of_ref": "indicator--629c8a76-0861-4c9d-adcc-2bad0779c065", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed4f37a-0143-462e-a52f-b981e69071da", "sighting_of_ref": "indicator--f2cb2e2c-779a-4b6e-984b-252941554f37", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9377bf9-955e-44ba-8ca3-dd8f70e7da22", "sighting_of_ref": "indicator--00fa0173-bcc6-4c6e-a012-10fa9c61398e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5b9d19-3d04-46d4-bee5-a8eaad464f0a", "sighting_of_ref": "indicator--98e29382-05f1-46b4-b1dc-7366985c7e79", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446ceada-239d-4f9b-9876-1078ca474819", "sighting_of_ref": "indicator--782871f4-656f-46e7-957c-7a828462fbfe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9a4514-67ad-40d7-898c-fcd7aae66980", "sighting_of_ref": "indicator--c27f8e43-2cf0-44de-8cd2-f1e24c439d91", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0904ff95-b241-44f7-b626-b3e678b3fe25", "sighting_of_ref": "indicator--c27f8e43-2cf0-44de-8cd2-f1e24c439d91", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56502023-655d-4125-b974-d21ef8c9ff3c", "sighting_of_ref": "indicator--de7b2c5a-d2db-4fed-8ae1-872bb2be1f8e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b92c01f-bebd-4223-86a6-4bce992463d4", "sighting_of_ref": "indicator--08985c57-b492-4414-b6d4-34ce7ae53bc8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2495581-4b5e-4e91-b5a6-dbfddc7903cf", "sighting_of_ref": "indicator--08985c57-b492-4414-b6d4-34ce7ae53bc8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612cd072-9779-47d8-a0f6-2b53ebaacde4", "sighting_of_ref": "indicator--08985c57-b492-4414-b6d4-34ce7ae53bc8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956efa98-533a-4957-a6f9-5ee24a50da43", "sighting_of_ref": "indicator--eef07141-0157-4e46-8d18-cf3dde4367e3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01dfc286-03f7-44fb-9cfe-3ae6e23cddf2", "sighting_of_ref": "indicator--357df79a-8d49-4800-98af-a5b2fd0ae0d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e250b8-8d68-41e6-b574-7893877ec294", "sighting_of_ref": "indicator--357df79a-8d49-4800-98af-a5b2fd0ae0d0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255dae38-fbfa-459f-9fb9-25954b41a2c3", "sighting_of_ref": "indicator--c6c4605b-e05a-4b36-9f2f-389200a80106", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63be3398-7683-4bea-89b8-6f85239b9a2d", "sighting_of_ref": "indicator--c6c4605b-e05a-4b36-9f2f-389200a80106", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78677f75-92cd-4847-805f-0755b9bb9965", "sighting_of_ref": "indicator--7d4b3cd7-b36c-4fe9-91bb-c9f5476f777a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5d0bf7-5b16-4c6e-9251-0d7b34b626a0", "sighting_of_ref": "indicator--88b72e32-01b1-4ea9-a4c9-f6ce8ecee3d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5452703-148b-4ff7-b0a5-5d41a9a89a6d", "sighting_of_ref": "indicator--948cb3ed-152d-4186-9deb-642475e6bdac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc844263-b9c8-44e5-ba44-03da8276ae17", "sighting_of_ref": "indicator--948cb3ed-152d-4186-9deb-642475e6bdac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d04573-a8aa-46b9-a826-90aea5f291e4", "sighting_of_ref": "indicator--948cb3ed-152d-4186-9deb-642475e6bdac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8837984e-f305-4268-a42a-f8f03a052ab3", "sighting_of_ref": "indicator--790f93e1-37b5-4e2b-9a58-98d527619563", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a581c0-02c9-421b-b57f-c7fbab9a318d", "sighting_of_ref": "indicator--0afea125-235f-432d-b7d1-b7442b345251", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44da5fe-fa7f-403f-a4d9-395be1839265", "sighting_of_ref": "indicator--4764ea56-1548-4a2d-ba87-97af153b3969", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef03cbe0-3832-4793-8aab-ce09f348e3ce", "sighting_of_ref": "indicator--43aac4ee-fc69-4ca4-bef8-8d952458fd9c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f3be06-0529-4f87-93df-a3a04cef0862", "sighting_of_ref": "indicator--162780b2-4d2d-42e9-8004-cb7572be87b2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b871a85d-76e5-4b4e-8efc-e1b2bb4b46d8", "sighting_of_ref": "indicator--feeefc04-2c60-423a-9f3f-28417c7027aa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf55286b-435a-467c-ae75-59f026e7b581", "sighting_of_ref": "indicator--feeefc04-2c60-423a-9f3f-28417c7027aa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2d64f2-ba10-42b7-86bd-879271206f02", "sighting_of_ref": "indicator--feeefc04-2c60-423a-9f3f-28417c7027aa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f6a940-66a3-484b-bb6c-8dd74abc3d37", "sighting_of_ref": "indicator--eff0a139-4eb9-4373-a28f-76f6fe8ffe8f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4db795e-197c-43f6-8556-28aa8dc08ae5", "sighting_of_ref": "indicator--eff0a139-4eb9-4373-a28f-76f6fe8ffe8f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e893b21-5caa-479c-865b-3b91996cd229", "sighting_of_ref": "indicator--a709366a-9481-47e2-841a-22a9099cfbde", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34557a86-8f4f-4cb2-94bf-024259b16bf7", "sighting_of_ref": "indicator--8918fa41-336f-4bfd-9ea1-0e3d7f5ec7ad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1e444d-0a35-4caf-88c3-fcc7e243b16b", "sighting_of_ref": "indicator--9af7a5f9-5988-4814-a140-b34a9849d7a4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56be49d0-83f6-4216-9587-954f22c4af20", "sighting_of_ref": "indicator--9af7a5f9-5988-4814-a140-b34a9849d7a4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f815e531-caa3-4f3d-98ae-93914c2c58d8", "sighting_of_ref": "indicator--7f512469-c23d-4037-9749-13de531e9e66", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e5e971-398c-48a3-b3a3-0f2c9216add8", "sighting_of_ref": "indicator--66e3f981-e2a3-43c5-b110-d3aca3b77c9d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cb4df8-171d-4b53-ba92-50b67387612d", "sighting_of_ref": "indicator--ab5b9e70-34f4-4ad5-90a2-63973487416b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b8bfdb-4169-4b50-8290-2f637cdbcc3b", "sighting_of_ref": "indicator--41b67e46-281c-4957-b518-de869a40852a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b40d0d-3a02-4c83-bf58-3d196e39fc60", "sighting_of_ref": "indicator--b55ffe3f-c1c1-43f5-9549-d7d0abc661cd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a048a3cf-23f7-45a2-ac5c-407da9049ea0", "sighting_of_ref": "indicator--16bdfb0c-146d-4542-a5bf-798803f30e31", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3564c5c0-37bf-437a-88ff-ba2781754914", "sighting_of_ref": "indicator--0a251877-8b43-4b67-93b8-a15afac301fd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90fdf30-bac2-49de-8eca-4f2861c1f370", "sighting_of_ref": "indicator--e226305b-304d-41b7-a80a-804094ca7937", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd662d61-aab0-4626-bee9-f7f115a7040a", "sighting_of_ref": "indicator--f30c3879-2553-4998-b61c-c6ee343cee42", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b6ccba-af4f-4a19-972f-b7c5fcf5b70d", "sighting_of_ref": "indicator--ff575483-f9a0-4caf-825b-5bf3ed507a9a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537bb483-9c7c-41ef-b37e-c41db0f04347", "sighting_of_ref": "indicator--95525f51-3a9e-4662-a140-ddc91ccecfa3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f426cb3-c41f-4bf5-b610-0a3d4852fc1a", "sighting_of_ref": "indicator--a40b0ed4-8c0a-4e9d-b3b3-20e38428a339", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e4002e-9a1e-4884-8ee2-8b30ef06f015", "sighting_of_ref": "indicator--05ccb678-0107-40cf-bbd6-b0a7921fd9d8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d559a1b-92ad-4294-94ce-ea3d7beea2e7", "sighting_of_ref": "indicator--55fa10e2-f323-41e9-903b-87b2404e95e4", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62aa02df-9657-46b9-9b35-0b710b1bcea5", "sighting_of_ref": "indicator--eaac8b93-e153-4997-b204-bcdffe09c505", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb109a1-34e0-42f1-989e-bcb978be8e92", "sighting_of_ref": "indicator--5678d531-117b-4cf3-91ba-b6bff1235b56", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d7245d-db0d-4ae2-b81f-b7a76252bf6a", "sighting_of_ref": "indicator--4b881617-aad1-457e-becf-bf6097beed2a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8591566e-fc97-4f52-9640-14994bb48d5c", "sighting_of_ref": "indicator--e9eb2af0-d05e-4675-a17e-6a4700ef6c9d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241fcec9-3484-4808-8788-cb08d4dc04cc", "sighting_of_ref": "indicator--3173e19e-587a-42e7-b586-0ccd0c48ccbe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076c59d7-541b-4777-a175-6ceb3b7166f6", "sighting_of_ref": "indicator--7b20bf1c-30ff-48bc-8dae-1facb7f3fe79", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8db34c-ea66-4aa4-8bb2-5d1200050881", "sighting_of_ref": "indicator--9bb846d9-233c-4bd3-afe6-e206ca8baf2c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9f7354-9a87-4095-9271-64b40971d3d1", "sighting_of_ref": "indicator--6a1e9046-2b5c-4167-b02b-bb855de19605", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f0a0c3-bef7-4489-b8c6-c519a41e4ca6", "sighting_of_ref": "indicator--8a51579e-b380-4048-818b-a50d21b1ecec", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719e135f-ffb5-49b7-90c3-f6a7ebb21e22", "sighting_of_ref": "indicator--a4b282ac-1acc-46e2-8ed9-704f6d22afe8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6566c5ce-c129-44a4-a296-fa252dbbd5fc", "sighting_of_ref": "indicator--d98ff594-32b3-49f4-982c-efc5419d368a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73c7f8e-3fa6-4a14-a109-04072f265258", "sighting_of_ref": "indicator--f540d9af-a594-49a8-96ea-d3c7bbf177d7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d8092a-d0f1-44a1-882e-0345c4d3d143", "sighting_of_ref": "indicator--648c3f7b-b82d-4411-9677-64a74abf6d70", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca3ede6-89c1-4c77-ba64-04da13ef85bc", "sighting_of_ref": "indicator--e6a9da3e-f480-4203-b202-c2dae05f0cdf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57f5469-fed8-4998-bf95-4643e67ef14a", "sighting_of_ref": "indicator--e6a9da3e-f480-4203-b202-c2dae05f0cdf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c98b523-8c09-4406-be6d-885cc0389824", "sighting_of_ref": "indicator--b64ff364-d829-4340-b771-17862c0eb537", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c21f442-6d16-4427-8aab-c787d372f8c2", "sighting_of_ref": "indicator--806594ad-d2af-4df0-9dcf-fb770e320fc4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d0b001-603b-4338-87f0-3a7b97138138", "sighting_of_ref": "indicator--35275474-77bd-4722-939d-61dbf1c1ff16", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3608fc-7dd5-40f0-bd8e-33b7088f4137", "sighting_of_ref": "indicator--3b14e67a-658d-4c47-8d06-6301675c22be", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d21b0fd-a706-4252-abea-ca9de9fa61cd", "sighting_of_ref": "indicator--fa79f7e3-afb1-4fee-b240-32e0512f2577", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e355aa-c6d2-48be-b74d-c6fbd8af4951", "sighting_of_ref": "indicator--e3a6c957-5590-431c-a39a-fcf7c2d2f26a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7516f59-2b16-4bcf-9039-0c2d9ef3383b", "sighting_of_ref": "indicator--0fa9814c-a74e-4b0e-bb1b-4baef9b89b9d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7e819f-7002-453f-a34a-dfa9365ac4ca", "sighting_of_ref": "indicator--27e7ff63-e698-4862-badd-5b6ebdbee65b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53360460-0442-4af2-9c21-9cfdc1a858d7", "sighting_of_ref": "indicator--27e7ff63-e698-4862-badd-5b6ebdbee65b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69eee09e-0e44-4813-8c22-37d90335add9", "sighting_of_ref": "indicator--fadf51e1-1787-41c9-a940-efef17586641", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb67b35a-8ab7-4a94-be9d-2662ec44762e", "sighting_of_ref": "indicator--c55fa6a4-494f-4ad3-9c05-bd59f0bd611e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed69ff0-6256-45d0-80c6-7973c89d67b9", "sighting_of_ref": "indicator--f24887b0-3c68-4058-b08a-2cfc8bf51553", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec1b936-684b-4a78-99cd-2eac6733ad30", "sighting_of_ref": "indicator--f24887b0-3c68-4058-b08a-2cfc8bf51553", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974cf450-2996-4a78-8c6d-dc13d814ede7", "sighting_of_ref": "indicator--f24887b0-3c68-4058-b08a-2cfc8bf51553", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41acbe3f-283e-4ce4-ad34-eb6cf3f15f65", "sighting_of_ref": "indicator--beb5e2a4-2bfc-49f5-9318-b0bf7f624e12", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5967a101-3680-4093-a7d7-f09e7db18494", "sighting_of_ref": "indicator--d6745dad-20f2-4371-be79-c1c3332289e9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40b46b7-86fb-4d45-867a-11d86d310219", "sighting_of_ref": "indicator--d6745dad-20f2-4371-be79-c1c3332289e9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7031cb-8541-4e60-abfb-a52b5b29d262", "sighting_of_ref": "indicator--715320e4-af7b-40c0-80ad-49e17b360b32", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f0fede-4889-4a8d-a4cf-7eecb3dd2aab", "sighting_of_ref": "indicator--dbfe6bda-3cce-4ded-8812-aa20a47a9724", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20ca0fd-b9cb-43c2-a60b-200129f51922", "sighting_of_ref": "indicator--ab391457-96a9-4c95-af85-4faa981837f8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2792ef5-37d5-424e-a197-868b1d6cb445", "sighting_of_ref": "indicator--87d7f428-13da-4b06-9b24-ca00229383a4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1f94f8-3282-481c-ab18-9fe77d291afd", "sighting_of_ref": "indicator--507cd162-4084-455e-893a-e17b54fe25c7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbb0e33-a407-407f-9ebd-e4b2b98f9bb8", "sighting_of_ref": "indicator--507cd162-4084-455e-893a-e17b54fe25c7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0786657-1f88-4a77-91c3-4fb4ce4e3a34", "sighting_of_ref": "indicator--d03aecc4-a61e-4fb8-8049-0ad2a26efca1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0053ae-2d2e-407a-b245-9fe3cd2ccaf0", "sighting_of_ref": "indicator--bb44752a-d929-46ac-a75f-9b15943402e3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d31898-715b-4a5b-98f4-7049eec30c36", "sighting_of_ref": "indicator--f7bcd115-d3d7-4bb1-b05f-802f03308709", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ae468c-ca41-41c6-8c0c-722febb29cc3", "sighting_of_ref": "indicator--cbd123ba-fa3f-4155-ba0e-5c6277818e6a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e38478-eba8-4955-9f69-81055d0bcbca", "sighting_of_ref": "indicator--d56505e2-e309-4bee-97ff-10f16f401d88", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe1a329-41bc-4237-a768-ff1ef421f337", "sighting_of_ref": "indicator--29b2a82d-402f-464e-bc9a-072dc32b9fde", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5a9155-3bc1-4939-8f3d-54f8464bd643", "sighting_of_ref": "indicator--29b2a82d-402f-464e-bc9a-072dc32b9fde", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1855ebc-cbda-4577-9a6d-66f0ad6fdbdb", "sighting_of_ref": "indicator--c11c8b9f-df2c-476c-836f-033add7e1316", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90664bc-205f-4526-adbf-6dccb2333580", "sighting_of_ref": "indicator--1af3c6f6-3152-4cc1-bcac-364d7ee4164c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b81e5c-f40b-4eba-8929-f7d0aa2c2d54", "sighting_of_ref": "indicator--fbeb0982-ee51-4c5b-b0e0-25b123e9e994", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed9f294-7a4b-42f7-be94-5ffeb2df947e", "sighting_of_ref": "indicator--3765b724-e564-4f66-b3a6-c4c928944f84", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4947ded5-335a-4435-a53c-7820c85d6fcc", "sighting_of_ref": "indicator--18b6066c-e323-41fa-a905-431b0bc1b490", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c579398-c613-41dc-8d85-f91315e300ac", "sighting_of_ref": "indicator--4b8965b8-ca97-4ef3-909a-e8433ef7a2f6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59453c82-82d8-4f53-870f-750b3dec16c7", "sighting_of_ref": "indicator--1b8c4b0d-1c19-4d35-968c-8e15eeedb2db", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b500a8-766c-46ac-b0ea-a9b6a9ac0bb9", "sighting_of_ref": "indicator--0cb581fe-18b9-48e3-b63a-9e711814242b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c15cd1-2677-4bb7-ad59-857e8d33e606", "sighting_of_ref": "indicator--dfc5040b-9482-4d06-ba34-829ca435da04", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548cbd26-10a9-4a14-b1a8-9f32169339a9", "sighting_of_ref": "indicator--30f0c566-e2f7-4735-9447-ea327f9a5277", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e72687-cbf2-4858-bafd-b46b4d64a234", "sighting_of_ref": "indicator--c75d4bd1-1d1e-48c5-a7d7-addb39d11459", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274fcf62-3f6d-4365-bb3e-0651de39e826", "sighting_of_ref": "indicator--ce736002-b242-474b-82c4-fb1f336ba312", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5d4d1b-aa37-4cab-b9bb-73efe20d5bdc", "sighting_of_ref": "indicator--53de5300-da16-452f-b327-24408b92a14e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99fd840-0f98-428b-a12f-63af28eef099", "sighting_of_ref": "indicator--60cbb555-c857-45b1-a9a0-5c57989db18d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5f7035-e134-4408-babb-488df412b088", "sighting_of_ref": "indicator--ee5d0bdf-ccd1-474b-9f79-99dcbab4feb0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3605fbe-d192-44f7-b898-0a34f06c752d", "sighting_of_ref": "indicator--4e0b7651-9aaa-4e71-84a0-d924e2a35178", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e6e37b-661b-453c-9ba1-22262c5974a5", "sighting_of_ref": "indicator--2a74bbe3-0140-4e12-b7ce-6add04642bb2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9a6755-cd2b-437e-8496-f294ec99c6ca", "sighting_of_ref": "indicator--d33b2111-06dd-4342-954e-98e47911f0a6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88301486-7b5e-4bee-a515-dab0323d0f49", "sighting_of_ref": "indicator--a15dfbd3-0372-4d43-aa2f-3a45c8b32795", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9062cd2-0c1d-4a60-87f1-860985332c50", "sighting_of_ref": "indicator--a15dfbd3-0372-4d43-aa2f-3a45c8b32795", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a3e355-9b25-4cba-bc19-af99e7ce931d", "sighting_of_ref": "indicator--79395947-c8f0-4c13-b2a5-a20a5e4fb27e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d23f09-9351-4c29-9831-133ba5426893", "sighting_of_ref": "indicator--da1c3521-f92e-4d2b-8984-c99a9f23fb30", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab62bf6-0f10-4dd1-b467-d39d4f90b75d", "sighting_of_ref": "indicator--d3619cb2-6160-4eb0-b7e6-5ceaeb5ab869", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702e6ff2-b87a-4830-ada6-cca25e78f45a", "sighting_of_ref": "indicator--662faddc-ce12-4667-97af-ef4181b44d91", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905e021f-4960-48df-9d00-2824254457e5", "sighting_of_ref": "indicator--bd869e3a-8bf8-4e18-9587-b9aecab11352", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f00582-780b-4c92-8873-714824fb9cd2", "sighting_of_ref": "indicator--c61af695-3033-40af-9f26-f1c643b95975", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0866d0-7084-4f22-ae3d-d62989492475", "sighting_of_ref": "indicator--2fa88002-8ea3-4f11-9d15-7a2d6e6a8d38", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea4217b-2f4a-462e-824c-6c837a662318", "sighting_of_ref": "indicator--e032c0de-f315-4ced-9527-f1986844bc54", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf5bf7f-3489-4d45-9469-df2b8903d64a", "sighting_of_ref": "indicator--6d4591ec-d48a-472e-b084-70d46145627e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02f6aa9-8868-45e8-8d5d-0c1be6de0aee", "sighting_of_ref": "indicator--9550a007-50e7-4036-98a5-c15eb6645d2c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da57cf6-8de0-45a1-b62e-68942bc6ec19", "sighting_of_ref": "indicator--c5afb5f6-5f9f-4681-ad5e-af3057864b79", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ef3668-63df-4d90-9777-ce9c61f2ffc5", "sighting_of_ref": "indicator--35290a71-9e11-4274-a275-0e7f587ddd05", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4d4799-472b-4a66-9997-0fa60e59ff60", "sighting_of_ref": "indicator--e0b21f5a-692c-4182-84da-7cd1a61ece8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5683f5f9-2605-4a12-8033-c16068176b62", "sighting_of_ref": "indicator--6eea9bd2-7f2a-4b71-a598-49b52222afff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff04eb4-c946-462a-aa89-46d220dbda72", "sighting_of_ref": "indicator--64b6a75d-5516-41ac-bf4f-6401b6293789", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b07003f-a704-4829-a170-d30f2f6814eb", "sighting_of_ref": "indicator--1d06b3c7-e3a7-4dd8-98cb-694259f79b49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a36880-f50c-4257-bd78-035255f76cc3", "sighting_of_ref": "indicator--21f13a7e-6dd9-4cd4-af92-831b7619c655", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c85a9b-5632-4baf-8eb3-47defb1501ac", "sighting_of_ref": "indicator--13395166-20e6-41c8-8dcb-c69302d0a8c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c871f4f-3cf4-4777-8dfc-5e2635fff8ae", "sighting_of_ref": "indicator--207ba9ff-0116-41b3-843b-51e7039b5465", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfd13c7-a725-48d8-9134-eb267ba74e41", "sighting_of_ref": "indicator--9f0e35e1-7d88-4d74-b3b8-4fa563a87de6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c0d1af-5a17-4266-81ec-429dce1e9b78", "sighting_of_ref": "indicator--910f5778-f8a4-4127-8261-0e207f49b123", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779891e0-7f26-492f-b81a-550ef785693e", "sighting_of_ref": "indicator--16fd4338-c8c6-492c-a66f-3fe8c62b9bf1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50f9e97-e052-4e78-a19a-16f6d536a0ae", "sighting_of_ref": "indicator--5397b006-53b0-4026-a287-407ade3ab394", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24ed53a-51fc-4c80-8750-37b41185e8ec", "sighting_of_ref": "indicator--ef7a3445-0d67-4127-b8a6-ce542e12a617", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a3f9a1-1120-4613-b5d3-e43d2c0ea84d", "sighting_of_ref": "indicator--ad927398-3d0e-4d1a-9b1c-104be50a92f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8118f47-4b75-4b1e-aed5-0dc094eb49b6", "sighting_of_ref": "indicator--76944c46-6fc9-4cb7-860d-844fd1f07879", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c8f9a1-cdf8-4a2c-a1b2-3c688ced6fdd", "sighting_of_ref": "indicator--6baf59c4-826c-4b34-86f2-93fc11319e21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8241588d-5f43-447b-aa2f-c598db147bc8", "sighting_of_ref": "indicator--ebb81c7d-b300-46f5-8957-c0633cd62836", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f4a3e8-089c-4cbb-82db-7aa95bad74a1", "sighting_of_ref": "indicator--62c2499a-99dd-496b-bd4c-8f06f902cf09", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b8bf5a-cca2-4c1a-a4a5-098dc7f4e519", "sighting_of_ref": "indicator--bac49c22-5fa8-4e36-8940-c20b5c411ed4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc058073-29e2-4d05-b8bb-4893e094dba4", "sighting_of_ref": "indicator--669f8958-a24a-4926-8cf3-340a2d727929", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e9e280-0a8a-4aef-b2e8-0f352c8b19a5", "sighting_of_ref": "indicator--87c61731-036e-41d6-a3ad-4b6dfc358a59", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8779065-8acc-40cd-85dc-8c41685cbe39", "sighting_of_ref": "indicator--763902b6-28de-4343-b557-715199cfa626", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94e6c87-72b9-4704-a4eb-fd8777925e30", "sighting_of_ref": "indicator--eaecd551-38b3-4f6c-bda3-904081ef0b9f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5023246-c813-459a-8b6a-a12e425bb238", "sighting_of_ref": "indicator--9ab51fc0-eaa2-4fb5-82fb-c01b5737b254", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bbd70c-863f-4c0a-bdbb-78115687a823", "sighting_of_ref": "indicator--043a42d0-f98a-40b6-9571-8bb3157fce90", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396e9f1c-6fb5-427f-8710-662ab1a989a3", "sighting_of_ref": "indicator--a53059ca-c1e6-4bb6-8ae2-ac896d067ff8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afeeca1-eee8-48b5-bd64-a0056f7716b0", "sighting_of_ref": "indicator--31254fb5-c121-4127-8cc2-b8a6b6e45403", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a112607-85e0-4fbd-a10c-87a243e10eb3", "sighting_of_ref": "indicator--0e9235ab-8f03-491c-8091-2fb8c2c438b0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655c64b4-3a0b-4ce0-8d54-544e56f8b8de", "sighting_of_ref": "indicator--cc138dcd-3360-4a60-a6b2-78500b37c453", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a0ff03-6269-4a60-b3a2-b627d834b0ea", "sighting_of_ref": "indicator--41d5c243-50ec-4154-b7f8-5e08e5911015", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3365b10-756f-4251-9b79-270899297a19", "sighting_of_ref": "indicator--8f835d60-0d85-43e0-a366-40d8a02e136f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644ff7d3-1cf8-4a13-96e7-620b9705e519", "sighting_of_ref": "indicator--8f835d60-0d85-43e0-a366-40d8a02e136f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d2e0fa-5e89-4d9e-814a-689ff4e80542", "sighting_of_ref": "indicator--8f835d60-0d85-43e0-a366-40d8a02e136f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409ba742-40aa-4e25-8b5b-9e9317bc146f", "sighting_of_ref": "indicator--3176a487-9914-4c2f-8063-8e525cbb88b2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279c7b14-f87b-4eb6-90cd-95e70e11d5cf", "sighting_of_ref": "indicator--425cf3a0-5f3a-4f8a-b0c6-0cae59fdce81", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae42455-49b8-482c-ac58-2d80b12ae1a5", "sighting_of_ref": "indicator--673d827f-5a85-4bea-a512-2c4013c9c4f5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f15cf6a-3533-4315-a879-dc82f261c4b2", "sighting_of_ref": "indicator--5710c265-3dc0-4f98-8791-44312b24633f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a428f64-446a-45b7-b419-cb2e3cd6c99b", "sighting_of_ref": "indicator--7b7b4755-5889-4d5c-af0c-e9b17db72a19", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b781cf3-a659-467b-bfc0-3d8557157258", "sighting_of_ref": "indicator--54d7b3d7-9819-4cdf-a8c4-e2b92a8b2008", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32454ba-a87f-4788-bb93-0c94a8c012c9", "sighting_of_ref": "indicator--be394f11-33d2-45d2-88db-a8ca960d90a7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08490bc1-2b8b-4b10-a253-af9131d96766", "sighting_of_ref": "indicator--f7cc9e43-f77c-4669-9758-c7ba77ff1ca6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e26af5-2a2d-47eb-8f07-107340ad8549", "sighting_of_ref": "indicator--f71a5ef0-e03d-4f2f-a79d-b41355ecc4b7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df34f5a-d95f-4324-95e1-6b340ff596dc", "sighting_of_ref": "indicator--874d723e-88c5-4daa-a64f-44ebde5db4de", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eaa2a41-b0ad-4860-9111-b24199401c34", "sighting_of_ref": "indicator--874d723e-88c5-4daa-a64f-44ebde5db4de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4f2331-2afe-4b8c-a591-e99d60d83e63", "sighting_of_ref": "indicator--340f67da-adf8-4b1b-91f0-3838a28620ad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e9edbc-1dfc-4378-9fa4-d2799232efbd", "sighting_of_ref": "indicator--ee98bc9f-bb53-4d41-a0d0-0c079fef799d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc493493-cd81-4475-bf5f-ba209c2acc5e", "sighting_of_ref": "indicator--b87e286f-ecd3-4b03-ad35-2792373f2b8b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7023d334-4d89-499c-bbcb-a2add32890b2", "sighting_of_ref": "indicator--c12fb08b-5055-46f0-b37c-3fed6d6feaac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82dd2f2e-93d9-49a3-b9d1-23e6802bc87d", "sighting_of_ref": "indicator--dcd98565-50fe-4187-9b10-81e6f0035ef2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95ea64a-e512-482e-b95f-861159f7b3ca", "sighting_of_ref": "indicator--09a5d99f-07f3-4c1f-800f-452402d4ec83", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721a035f-02ca-4fd9-9bf0-b914f579bd09", "sighting_of_ref": "indicator--c42d2785-f3ab-40a4-842a-d410330e89bc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d08a2c7-b2db-4142-8230-84cfabed2bda", "sighting_of_ref": "indicator--765f00fe-4c7e-4d88-b5d1-ec0768954b05", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9b9419-4fc2-4aa6-97e6-38ae7beae4be", "sighting_of_ref": "indicator--765f00fe-4c7e-4d88-b5d1-ec0768954b05", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae85000-9f4e-41e6-b91b-50fa5ef56c19", "sighting_of_ref": "indicator--d1a65cae-2430-47d3-bb6b-5681fe59404d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f8c1d1-1b8e-4780-bbc1-92faaceb2b60", "sighting_of_ref": "indicator--7ebb6a40-9fab-4b51-bf0b-c4227d646770", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd153f6b-f26d-4cd6-94dc-6fe6da1bd919", "sighting_of_ref": "indicator--81151cf9-79fa-4dbd-9678-d95c29c678fe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35d126b-63d4-4de9-a116-60e334a7ef9c", "sighting_of_ref": "indicator--5ab779da-252c-4bcf-9c37-5b97d2ba23e8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbe01e5-3e2d-466b-bc10-e09b23ca4b55", "sighting_of_ref": "indicator--45764e18-7124-4f62-b6a4-0f104df15505", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67915102-b8db-43e8-9afc-c7e33385eca4", "sighting_of_ref": "indicator--631fa6fa-b0c0-4174-b7ee-e4271b46133a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826db6fd-ad6d-49aa-9c26-ecd275df2c69", "sighting_of_ref": "indicator--31c7e30e-f49c-474e-892d-ae1bc56d35d3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b133a2e-5e85-400a-9a5b-26a6d5c29c9e", "sighting_of_ref": "indicator--cd3457f5-19dd-4fd5-94d2-c8c6c7be3a54", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7a40c9-b82b-4f2b-a7b4-2fb60b594fdf", "sighting_of_ref": "indicator--9bac1857-50e9-4e5a-8178-c6eaadcf0905", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a219297f-7bac-4f2d-8305-7efc4111e865", "sighting_of_ref": "indicator--aacb28c8-960f-4e52-972f-3577acaea8fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a6a4af-a4ce-4493-959c-5e390456e5d7", "sighting_of_ref": "indicator--07d01e5b-28cf-4e6a-8197-8d02c9b8c4f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50af109f-ca5e-4dc8-ad3e-609e865b4109", "sighting_of_ref": "indicator--1b295757-93b1-4988-b41d-0df25854c8dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb16dc58-6c51-4a56-b41c-700b5d67771a", "sighting_of_ref": "indicator--7ad7e929-2ceb-420d-9817-55f8d7d99c96", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aef9f35-757e-40c5-b7ee-eede94f3e4d9", "sighting_of_ref": "indicator--bfdf941d-360e-4cc8-bc7c-0721b96249d1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bc5f13-182f-4636-be63-51ee7e3e73d0", "sighting_of_ref": "indicator--aed9f5d8-c7fe-48a5-a968-996963b59f91", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edaaedc6-fc80-4fa7-bf07-3ba226756f7e", "sighting_of_ref": "indicator--a8c76b94-d5a3-4b17-b66c-0b05a3cdb44a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaee977b-95f1-4b9e-ab8f-fccb550b1df7", "sighting_of_ref": "indicator--c746c844-2579-4f28-b537-6c9374a91a1e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9831c132-eacd-44f5-88fc-77ad0f4f175a", "sighting_of_ref": "indicator--c746c844-2579-4f28-b537-6c9374a91a1e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f1bf4a-4387-4471-8831-fa1109fadfd4", "sighting_of_ref": "indicator--a5b99cbb-08f4-466f-a981-4d3e96bf8a7d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e05bed-b27d-49e2-9a4e-c11212b0f259", "sighting_of_ref": "indicator--d594563d-8605-4ee1-8626-e7c7e97e026a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814a882d-8e26-45e5-a4b2-8bf7395e2e1b", "sighting_of_ref": "indicator--5ee931b4-bbc7-4fd5-87fa-eb4b5930df72", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c592c6b-ccb4-43a7-ad18-76ae619edf34", "sighting_of_ref": "indicator--5ecc6bb5-d882-4693-8017-5f1eeeb28e7b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c4df85-021c-40b1-9b93-0c6da752ed9e", "sighting_of_ref": "indicator--1ad5578e-6718-4bcb-8a2f-24bd4f0dbb3e", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac9227b-464a-4da6-a2e7-ec4028081753", "sighting_of_ref": "indicator--f66b695d-04a4-4788-a9c9-8498b4f403e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66154da9-23e2-4b22-bf89-9ed1b86a4b60", "sighting_of_ref": "indicator--d7aab70b-164f-4bd4-95b3-977da623fc83", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc19266f-5d5a-40c6-b9f1-adcf2564c50a", "sighting_of_ref": "indicator--d7aab70b-164f-4bd4-95b3-977da623fc83", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ee78db-50e4-4aa5-88bf-4905c007a185", "sighting_of_ref": "indicator--d7aab70b-164f-4bd4-95b3-977da623fc83", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e58a67-c747-4e8e-a94c-5e7a50b6a7bd", "sighting_of_ref": "indicator--08024714-b253-4f32-a196-8035948f6eaf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905896df-707d-4c2c-a142-9e673e415092", "sighting_of_ref": "indicator--3c46221a-d29e-44cc-ba5d-55383fbf3eb9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9c7af2-b724-4a5f-b421-70725bfc3517", "sighting_of_ref": "indicator--9e9e65d9-3ce9-48d1-a325-bc9e4b8e53a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63f5826-1ef9-4939-98f7-2d1376d927a6", "sighting_of_ref": "indicator--b2ac6e22-ebb4-4c5c-a43e-a1ae4ba32623", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ca4411-fc21-4626-82a0-a2f47b761d0f", "sighting_of_ref": "indicator--b7387103-3f97-4aa7-a6b4-4d3f6db48d30", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c692a36-c1ed-4925-8a07-d45bfa0ea452", "sighting_of_ref": "indicator--6d12e2a9-292b-40a8-95f9-55063cbf4556", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3314e32b-2c84-492c-8377-a60e7b729148", "sighting_of_ref": "indicator--460fdd3d-0bde-4090-ab9d-fe346644cfdb", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846321cf-b3ab-4dee-9e04-237112eb077a", "sighting_of_ref": "indicator--ed8f222a-8848-45d5-9db2-4e13f991bc6a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897947cf-318d-4c65-98a5-f4c00842ac10", "sighting_of_ref": "indicator--ed8f222a-8848-45d5-9db2-4e13f991bc6a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a99035d-70ef-450a-a3cf-e004c9b8300d", "sighting_of_ref": "indicator--959476f6-d53a-4c1e-b439-8b22a8be9070", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ea08fb-1591-4b7f-910b-f9f9618ba752", "sighting_of_ref": "indicator--d462d89d-c1f2-4722-8afd-7d24224c0951", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2fb6d3-8cfe-48ca-9dd1-aede54420ee6", "sighting_of_ref": "indicator--632fd963-23d4-467f-b335-1d6854d2f40b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a5dac3-58da-4164-9be1-134a8a85dd5a", "sighting_of_ref": "indicator--361d737e-6794-4ec6-82dc-df27f8272f31", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9f0b78-310d-4ff8-bf23-dcc433b40078", "sighting_of_ref": "indicator--361d737e-6794-4ec6-82dc-df27f8272f31", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fbfabd-1e55-4eef-a0e3-c020342ed023", "sighting_of_ref": "indicator--309f6cee-66d0-4abf-8522-c477d8476f88", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8027364b-d7d0-4d53-8bda-2eeba32b3d9c", "sighting_of_ref": "indicator--309f6cee-66d0-4abf-8522-c477d8476f88", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b071b84a-b3d9-4a9b-b259-3a10e78da81d", "sighting_of_ref": "indicator--b3573f03-5fee-4b60-81f1-45c64470b897", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6eff1a-c2da-4ca3-b2eb-47e1298bcbc4", "sighting_of_ref": "indicator--c5a7dea9-052a-4cf5-a2e4-302950a6761d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26dcc30b-ee26-4ebb-927c-d2bf45ed5ea7", "sighting_of_ref": "indicator--c5a7dea9-052a-4cf5-a2e4-302950a6761d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139d3c87-6fe9-48d1-9aad-b455114884d1", "sighting_of_ref": "indicator--c5a7dea9-052a-4cf5-a2e4-302950a6761d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe28a57-13c6-4180-9b98-3f14058cd2f8", "sighting_of_ref": "indicator--2639eb64-a1fd-4d73-a270-a9d34af687ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06693d38-fa19-46eb-8593-f34ee5f3a6ff", "sighting_of_ref": "indicator--0ef463a0-37f5-42c5-939f-559cab275047", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fa13bb-cb18-4058-84c3-b33b1b5a55d4", "sighting_of_ref": "indicator--9ebd34f0-96f9-4a63-9484-577d51249c7c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c98373-a64c-4487-8298-8871796d91a7", "sighting_of_ref": "indicator--068b18bb-9fb5-4542-9447-b5c92d9a5537", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab450fad-88f6-4146-a346-f1b78a96f8ca", "sighting_of_ref": "indicator--b7d51341-f163-416c-960e-515025b99688", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9579812a-e1ed-4fc5-a196-be5176c60f28", "sighting_of_ref": "indicator--93b1e87e-9f43-4920-be65-1ee18c0187b4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a19e10-bc04-400b-ba00-eaab3743f0fd", "sighting_of_ref": "indicator--4ab7a7b4-0a94-4ba2-82bf-d70e04ac5200", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8ab661-419f-4785-91f2-c1897211b439", "sighting_of_ref": "indicator--3b7fc443-d741-4962-a2b8-e4989e12ba18", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21437ca4-7dba-43cd-9db9-cbc531966690", "sighting_of_ref": "indicator--082a86ae-530f-48f3-8072-4f8f8ccfd002", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9007923-c95d-4bea-b754-ad923d544eef", "sighting_of_ref": "indicator--160d9b3b-394c-4fdd-a4ba-c79d1d154782", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39afeaa8-cf9d-44e5-83f5-12bae697c2ab", "sighting_of_ref": "indicator--9182fd82-874f-4325-ae1b-ae79c7227209", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a5284f-7d07-45e2-977b-ac280745e1a2", "sighting_of_ref": "indicator--079ce841-71b1-468f-b4e7-986fe5b9e532", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ef3447-d09d-4707-9ce5-fb12570856a6", "sighting_of_ref": "indicator--10a02110-f7ac-4846-b44f-4c3bc8c4b709", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aaa219e-4ef9-4dc4-9102-90ad28061518", "sighting_of_ref": "indicator--1d208652-e361-4be3-8c24-76fb35eb00c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec71024-4ea0-43b2-ab01-2e941f291184", "sighting_of_ref": "indicator--75226512-7a2a-4ea0-8613-b24c8e582d54", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b41624-c6ac-4c9f-8696-cb47a8e8cac6", "sighting_of_ref": "indicator--aae13f0b-4ed5-4d13-b071-34dd54ebc114", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40bddd6-1245-4987-9487-c2b77245ea4b", "sighting_of_ref": "indicator--aae13f0b-4ed5-4d13-b071-34dd54ebc114", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc00b369-eb68-4be8-9dce-ff6dbd304ff1", "sighting_of_ref": "indicator--aae13f0b-4ed5-4d13-b071-34dd54ebc114", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea7f3b7-21ee-47db-a30a-6b22b6cde2b1", "sighting_of_ref": "indicator--867b27a1-373c-4e44-9332-0b456652324d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc335365-d01a-46c9-aeb4-1d1dbe339393", "sighting_of_ref": "indicator--867b27a1-373c-4e44-9332-0b456652324d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c75392-7168-4a2b-a230-a1b60a4af971", "sighting_of_ref": "indicator--7bf2fbdc-e0b1-4189-b611-7c7c59d9de06", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4e9a61-892e-4492-a640-45f3636b7e68", "sighting_of_ref": "indicator--7bf2fbdc-e0b1-4189-b611-7c7c59d9de06", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb23055e-0579-4764-8266-a6ea61107cb2", "sighting_of_ref": "indicator--7bf2fbdc-e0b1-4189-b611-7c7c59d9de06", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2b911c-3d44-4073-9ff8-d77a47873a34", "sighting_of_ref": "indicator--7fadc4ff-c048-4b36-9aa5-13b889f9afa5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db8542c-50f1-4b94-a1c4-280eaf05331e", "sighting_of_ref": "indicator--7fadc4ff-c048-4b36-9aa5-13b889f9afa5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82642ca3-30f2-4762-9d88-4ef80ec24476", "sighting_of_ref": "indicator--7fadc4ff-c048-4b36-9aa5-13b889f9afa5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cf47e9-7320-418c-a5f5-a72b6e7a489c", "sighting_of_ref": "indicator--fd3d7a3f-8f5c-4f75-ae91-590a80028d4a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd02678-d46e-4209-9883-bf0eeb0280ed", "sighting_of_ref": "indicator--fd3d7a3f-8f5c-4f75-ae91-590a80028d4a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2e0d0d-6989-45ba-aae7-298c510fd1ab", "sighting_of_ref": "indicator--fd3d7a3f-8f5c-4f75-ae91-590a80028d4a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f626b9-1515-44b5-a2a8-a2a4dc034d3e", "sighting_of_ref": "indicator--73a19177-34c7-460f-8a07-19b8b049b142", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2da9d11-1b35-4a8c-a6b3-c25cd1b09014", "sighting_of_ref": "indicator--73a19177-34c7-460f-8a07-19b8b049b142", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7743314a-e3b9-4912-a9cf-02b3685c6ebd", "sighting_of_ref": "indicator--73a19177-34c7-460f-8a07-19b8b049b142", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912d1066-f023-4fcb-9369-58fc2b28b56d", "sighting_of_ref": "indicator--7d2c077a-14a4-49af-886c-5de5b5e317b5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa9f4c0-36ee-4b30-aba7-321f01fde13f", "sighting_of_ref": "indicator--7d2c077a-14a4-49af-886c-5de5b5e317b5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d13731-bde7-4e8c-9951-a67f091f44f5", "sighting_of_ref": "indicator--7d2c077a-14a4-49af-886c-5de5b5e317b5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d59c38-ba48-4602-adf7-e6cabbcc1d88", "sighting_of_ref": "indicator--ada50d8a-c34a-42a5-969b-4fae5a24a10a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878ceeff-da3b-44d9-a135-035ae9c5c7ff", "sighting_of_ref": "indicator--ada50d8a-c34a-42a5-969b-4fae5a24a10a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4635aa8c-3f5b-453f-9385-53acb63d19e3", "sighting_of_ref": "indicator--ada50d8a-c34a-42a5-969b-4fae5a24a10a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7aaadb2-f6df-4e6c-a912-60dfdcf75e9b", "sighting_of_ref": "indicator--8299724c-13e5-440a-a78a-7a1fd7c75d11", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9130819d-9f74-4a70-b393-b03056722295", "sighting_of_ref": "indicator--8299724c-13e5-440a-a78a-7a1fd7c75d11", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6827150f-ed0b-4c98-8aa6-113851c52190", "sighting_of_ref": "indicator--8299724c-13e5-440a-a78a-7a1fd7c75d11", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe281d5-c604-4474-b506-9e0d8a849262", "sighting_of_ref": "indicator--69f0bcde-dda4-4758-b4f2-814d19a7e1b4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f223d8d8-e68e-4e6b-88e1-7ef044bb3604", "sighting_of_ref": "indicator--69f0bcde-dda4-4758-b4f2-814d19a7e1b4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a545a7-7e76-4525-91e3-533091369ac9", "sighting_of_ref": "indicator--69f0bcde-dda4-4758-b4f2-814d19a7e1b4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13f9e78-d227-463f-af69-29a2c836c4e0", "sighting_of_ref": "indicator--9592de82-404b-4cea-9543-2ed3cd847dbe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37e2cbb-bcb6-4686-be54-a4e39b977aec", "sighting_of_ref": "indicator--9592de82-404b-4cea-9543-2ed3cd847dbe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fcc1c8-5d07-468b-8c8f-12cbaf2b5ecc", "sighting_of_ref": "indicator--9592de82-404b-4cea-9543-2ed3cd847dbe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540d5c65-2dc0-4b96-8d32-6626eee4276b", "sighting_of_ref": "indicator--247a3693-501f-4e09-834b-24a856ad8345", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a0b8e3-104b-4fcb-99ca-213577e26826", "sighting_of_ref": "indicator--247a3693-501f-4e09-834b-24a856ad8345", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d17fbb1-713f-4837-b93b-aa329d3e5d6e", "sighting_of_ref": "indicator--247a3693-501f-4e09-834b-24a856ad8345", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebea17b-3ba5-4127-858f-0256e1b9e88c", "sighting_of_ref": "indicator--7e661198-e7a6-4135-97bb-3ee7c4078342", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d135a54-f4cb-493f-8ba4-b4f834c3cc11", "sighting_of_ref": "indicator--7e661198-e7a6-4135-97bb-3ee7c4078342", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a7bdf0-3cdb-4970-a986-cad4dcf963d9", "sighting_of_ref": "indicator--7e661198-e7a6-4135-97bb-3ee7c4078342", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef085b1-bb2a-4882-83f1-d6287b77f974", "sighting_of_ref": "indicator--5e400e7f-e4be-4f5a-af9f-c6e42848eca0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275206c8-338e-44bd-a40e-ac67b27c8376", "sighting_of_ref": "indicator--5e400e7f-e4be-4f5a-af9f-c6e42848eca0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a93d11f-8f6a-4440-9ce7-0f69387b1b47", "sighting_of_ref": "indicator--5e400e7f-e4be-4f5a-af9f-c6e42848eca0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bce8263-ce45-4790-b44b-d6121185a143", "sighting_of_ref": "indicator--b56313d0-e12f-4f54-ab3c-a9852756af71", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5963297-8eb5-47d2-b2b2-098dd17b665e", "sighting_of_ref": "indicator--b56313d0-e12f-4f54-ab3c-a9852756af71", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4295e35-a1e7-49e6-9334-b83c50997eb7", "sighting_of_ref": "indicator--b56313d0-e12f-4f54-ab3c-a9852756af71", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b454df2b-4991-46e8-ba6e-8da3fbb5ec65", "sighting_of_ref": "indicator--e078043f-6e9c-4d15-93e9-f3a4710499e4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1a3d63-84b1-4fb7-945d-d8e148d74907", "sighting_of_ref": "indicator--e078043f-6e9c-4d15-93e9-f3a4710499e4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe32bc9-c897-4630-aacc-add6bf14361a", "sighting_of_ref": "indicator--e078043f-6e9c-4d15-93e9-f3a4710499e4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055d4b4c-deb6-449a-9497-cde9fc0fed2c", "sighting_of_ref": "indicator--bf747cd1-247a-4dd9-9e64-7c45590a7ef7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ed9024-15c6-45e6-abd2-05960d57c844", "sighting_of_ref": "indicator--bf747cd1-247a-4dd9-9e64-7c45590a7ef7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fab0c5-75b7-4d0b-9ec0-6cd56c7a900a", "sighting_of_ref": "indicator--bf747cd1-247a-4dd9-9e64-7c45590a7ef7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad4ab03-dd82-4d92-8fd6-bab03ad94b10", "sighting_of_ref": "indicator--7d83db08-852f-4590-a5f3-5a3b5819b951", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90d183f-314a-4d01-85ad-24c51a55e3f8", "sighting_of_ref": "indicator--7d83db08-852f-4590-a5f3-5a3b5819b951", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4a594b-0d69-40be-b589-bd93927c37f5", "sighting_of_ref": "indicator--7d83db08-852f-4590-a5f3-5a3b5819b951", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42c7acb-66e8-40f0-963a-0ffbd38bdc6f", "sighting_of_ref": "indicator--72fdb0de-9df0-4ac2-881d-08a2543a3683", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2625aaa0-4c1d-4dee-ae42-612eaf1f7018", "sighting_of_ref": "indicator--72fdb0de-9df0-4ac2-881d-08a2543a3683", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b603f5-25f2-4f7a-904f-9ac803b942cc", "sighting_of_ref": "indicator--72fdb0de-9df0-4ac2-881d-08a2543a3683", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d603875a-c6b9-49e8-abe5-751f691a760f", "sighting_of_ref": "indicator--3658b7a4-7f93-46f9-a470-c0959e6ab4c0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa5f742-2884-42c0-b6ae-c4d8aedb60d5", "sighting_of_ref": "indicator--3658b7a4-7f93-46f9-a470-c0959e6ab4c0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36595d4f-8079-4a9e-ac01-8b395d6ad97a", "sighting_of_ref": "indicator--3658b7a4-7f93-46f9-a470-c0959e6ab4c0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da11c1ef-b401-460c-9db7-18607598b40d", "sighting_of_ref": "indicator--6b75a80c-972c-4ad0-b004-0dd9dba822f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1dd9acb-ea10-4ca0-a264-0cc862f11ae3", "sighting_of_ref": "indicator--6b75a80c-972c-4ad0-b004-0dd9dba822f2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8063b45-d48b-4934-be9b-a5f545ae8900", "sighting_of_ref": "indicator--6b75a80c-972c-4ad0-b004-0dd9dba822f2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff9771d-b40b-4072-8eee-99534ad46145", "sighting_of_ref": "indicator--4b9d6861-4aba-4fd9-a782-1cf20b2f872a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9bf811-ebdc-4f3e-92f5-f9f18dacc9b1", "sighting_of_ref": "indicator--94332b83-190b-42d3-ad51-854cb6c288da", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b731f539-4457-47ee-a2a7-a6c1e91dbf47", "sighting_of_ref": "indicator--8d1a4749-6227-4a02-a480-5f746cab7857", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b7f500-404a-40e2-b517-92856c2017d3", "sighting_of_ref": "indicator--f52cce83-e033-401c-b2ff-dd738cecf5f7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6656e5-ce45-4d2c-95a8-5793a50f33cb", "sighting_of_ref": "indicator--7abc5510-68ac-499e-82ed-9e3e4b2dd3d4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923c3f38-7e25-4dac-951b-f11e616a0a30", "sighting_of_ref": "indicator--309dc227-7311-4ee2-b5bd-51e0703b1338", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0819bf-51db-4e88-af87-b37e35d0f84a", "sighting_of_ref": "indicator--5ef82019-04b9-4ac0-9d31-aaf0f6be5b55", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a896b5c5-a5b2-47c8-909c-86a3a79b371c", "sighting_of_ref": "indicator--ca405661-43be-4fe5-aa4c-073222577c79", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a278b45-2a04-4c8c-b222-ce9f4cac9f67", "sighting_of_ref": "indicator--f3ed504a-19c6-4891-ba17-6cbaeced1825", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251ef3b1-c8f4-4fbd-86aa-0e6f55b171e9", "sighting_of_ref": "indicator--ef54b92b-9452-4d37-aa36-fb9185c641e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df17d73b-f563-46f5-8a5e-8f97d4201f11", "sighting_of_ref": "indicator--04ff07c1-75a3-4850-8281-2be5fe015861", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67328185-1ae5-4182-81fe-5245e8ba8239", "sighting_of_ref": "indicator--68348cfc-e01a-4741-be1a-f1c5d6a993c7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42a9d3f-9ac1-4361-b3d1-246277433267", "sighting_of_ref": "indicator--0a7d28a8-f777-4f64-8cc4-e3a490105d30", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e4ea86-c474-488c-bfc9-e0a9c8a45fe5", "sighting_of_ref": "indicator--e4625ec6-22d9-4631-a897-264e1a853a83", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4947448-08e7-4e5a-9b38-9595b3029c18", "sighting_of_ref": "indicator--843111c6-9970-4bc5-bd08-59ae42a7ddb5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513b9822-cc93-4abd-a358-91e783221af6", "sighting_of_ref": "indicator--a8d3df26-db03-4c57-9e69-b4fe9e3f2132", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f18ab2a-e028-4f37-af0a-9b389fca0c0d", "sighting_of_ref": "indicator--47229ced-a918-4c77-b431-7f5372dcf01a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77168d0a-3137-4407-ada8-d7c777e7f3d8", "sighting_of_ref": "indicator--fb0ec4c6-8d36-42e7-94fe-3550f45a6cba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9e0760-320d-4695-ac18-528585b65b79", "sighting_of_ref": "indicator--a8e9c923-1bcf-4d86-98e4-a2614b19e9a4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c662b696-f84c-44a9-8c79-653d4e79ff51", "sighting_of_ref": "indicator--3840db80-5447-476f-8d4c-6dab0547c6ac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ac7de2-3a98-4b39-a28b-bb61e7c31f7e", "sighting_of_ref": "indicator--4dac29ac-be13-4f7d-8ceb-fe7bcc0402b2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f5f138-3bf9-43c7-ab3a-178ef6894f8d", "sighting_of_ref": "indicator--342b3499-853a-43f7-8bc5-a66314512ecd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460134ad-511d-4487-9d23-f75291771f08", "sighting_of_ref": "indicator--ae7909b5-6cf9-43bb-8411-c10fc276b7d7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b939f958-ba1b-43b2-b2d9-6aaf28857a56", "sighting_of_ref": "indicator--0cf2fa70-1b11-430a-a019-507283efa1e1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ac907e-efb7-408d-a1dd-a5e445362859", "sighting_of_ref": "indicator--edc29321-b30d-4072-afeb-0e4897d3f17e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a3c558-ad52-429b-ada4-59531521dcde", "sighting_of_ref": "indicator--c2951c43-1709-4d44-b8d9-867929f182b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75142d6-9257-4510-b994-4255be7a0935", "sighting_of_ref": "indicator--fc5967e3-6d84-45d5-8118-1fb697630579", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624163c5-9cfa-46f3-8928-714f9f8b5e6b", "sighting_of_ref": "indicator--f4ee2c86-904c-4cac-a79d-a61d0733061e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41573de5-dae9-4330-ba36-5b3bed4defa0", "sighting_of_ref": "indicator--61c9ec16-9ab3-4334-8108-fac05115890d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49be980-8524-40ed-9d1e-b7462e6e6bd0", "sighting_of_ref": "indicator--6234a493-6683-438b-9f83-41ee4540aa7b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d56892-b21f-4c93-a0ff-74c1f82c2f9b", "sighting_of_ref": "indicator--4d62ebd3-bd00-4a23-97f5-3f2e32b0bf93", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fff6a7-846b-443d-bc87-c61b4b66abe1", "sighting_of_ref": "indicator--f46ebab8-fcad-47c9-b2ae-402de52b5aaa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c38425a-17fb-4eda-92a7-33fb79eaee91", "sighting_of_ref": "indicator--8a5cdc28-eddd-41fd-a3ef-043a00e8dc93", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d206f88-e208-4210-b21d-8bc92ad1d128", "sighting_of_ref": "indicator--fde19308-f435-4331-b884-0743dc9cd4b3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb2ef93-cd8a-4a20-99b4-be1899502dd9", "sighting_of_ref": "indicator--a5417ff4-fbc2-4d68-8705-e7872e6ee9d8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a2a162-20b9-4f13-95e7-b65d88676e99", "sighting_of_ref": "indicator--a5417ff4-fbc2-4d68-8705-e7872e6ee9d8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca76f4c-d72d-4b6f-92ac-1ed7e0dbf7d8", "sighting_of_ref": "indicator--a5417ff4-fbc2-4d68-8705-e7872e6ee9d8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118aa99e-1a14-4b47-99de-b6595310f6d7", "sighting_of_ref": "indicator--af31b64d-a0f8-4b60-bc02-c7d5d9d8f270", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7f4c00-ddea-49ed-8361-a5169d930dca", "sighting_of_ref": "indicator--8249edfa-301a-4a27-aaf1-216b63dcf6f8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705c343f-38be-4dd1-9b64-fcfcfa0fe3d9", "sighting_of_ref": "indicator--8249edfa-301a-4a27-aaf1-216b63dcf6f8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af79cba9-1de2-4919-8140-cac080da8b98", "sighting_of_ref": "indicator--c7f9848d-62a7-4a2e-875c-a03c451629dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824fb70c-90bd-4e98-a519-749c1df8b5d1", "sighting_of_ref": "indicator--d77a82d8-c9a8-44e1-a6fc-76de91482cf1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee0bf2d-b746-43ae-893e-67221cc0b4b7", "sighting_of_ref": "indicator--d77a82d8-c9a8-44e1-a6fc-76de91482cf1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4caea7dc-43ac-4f0f-88c8-57ee8c6539e8", "sighting_of_ref": "indicator--d77a82d8-c9a8-44e1-a6fc-76de91482cf1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604c6ee6-8644-4e53-aaa4-37c2eb12602a", "sighting_of_ref": "indicator--fdb1769b-c8e1-4e6e-b39d-65ab6733848d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedcfed8-920d-4754-8ac5-adce09ae4912", "sighting_of_ref": "indicator--0697686a-502c-4c91-80b4-c747fa88d83a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6a3221-5aeb-4d38-846b-d7617108b5ac", "sighting_of_ref": "indicator--0697686a-502c-4c91-80b4-c747fa88d83a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683ff413-49e1-42eb-9380-3516b49ee4ba", "sighting_of_ref": "indicator--7f70d941-e270-4871-ab6f-3ac4b038a035", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53388c1d-76a5-4375-9976-c5e412a89651", "sighting_of_ref": "indicator--425867c9-931a-4f82-a28f-666dcfd11c41", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da41f690-a269-41ab-8162-c847fd44ade6", "sighting_of_ref": "indicator--46dccec1-9bae-4537-acd2-9776c1b6d602", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce401e94-7e46-4706-a041-2a946080c995", "sighting_of_ref": "indicator--3ee00dad-1bab-4171-b5a6-e2f9878594fa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d2acf4-16d9-442a-8b71-fb49576f1af8", "sighting_of_ref": "indicator--3ee00dad-1bab-4171-b5a6-e2f9878594fa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a016070-8f54-4c4a-9074-75cf8e403ae7", "sighting_of_ref": "indicator--3ee00dad-1bab-4171-b5a6-e2f9878594fa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e544c006-02f8-4d27-afd2-29188b52cb51", "sighting_of_ref": "indicator--229be937-a61e-4564-a48b-6f9bd6f5dbe4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f14de8-fca2-4a16-8e2c-1352084cbc45", "sighting_of_ref": "indicator--229be937-a61e-4564-a48b-6f9bd6f5dbe4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00065c7-3895-436a-a50f-7a1fb7747c6b", "sighting_of_ref": "indicator--e33f51e4-84e0-464d-b421-e1cc6933a3fe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70967240-40a0-4c27-a5fb-6fbc7e72f5e6", "sighting_of_ref": "indicator--e33f51e4-84e0-464d-b421-e1cc6933a3fe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2d8c4c-a8b6-4dbe-825e-971350d89494", "sighting_of_ref": "indicator--e33f51e4-84e0-464d-b421-e1cc6933a3fe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a44706-34a9-4813-90ff-2b23603c8e31", "sighting_of_ref": "indicator--459209e3-645c-47a4-aea3-59645167c389", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b459e1-95d0-4f80-9554-7fe8ea887995", "sighting_of_ref": "indicator--459209e3-645c-47a4-aea3-59645167c389", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e4c609-8505-41bf-9633-4e22150084b7", "sighting_of_ref": "indicator--bcae2bae-8064-4c9e-9f98-4e0cfe796219", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a120fb1-ee27-4d9c-9a9d-0daaec235562", "sighting_of_ref": "indicator--bcae2bae-8064-4c9e-9f98-4e0cfe796219", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e875bea4-7885-4e29-9b07-e5580f9f5821", "sighting_of_ref": "indicator--3d687a2b-ee2e-4105-a0f5-e9f6429c4308", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049e19e6-6835-4e39-b029-2be02ff9280a", "sighting_of_ref": "indicator--3d687a2b-ee2e-4105-a0f5-e9f6429c4308", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1754e4dd-da9b-4cf0-9fee-634c20f94dc6", "sighting_of_ref": "indicator--3d687a2b-ee2e-4105-a0f5-e9f6429c4308", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a24728-9d06-45e9-8b42-6eea90ba1396", "sighting_of_ref": "indicator--fd8f13c1-0963-4db6-a743-3a5a758446a3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca3f873-5150-4bee-9224-564b01460d28", "sighting_of_ref": "indicator--0968454c-2978-4792-9234-ca91d7c040f9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79605885-c20e-4026-beae-3cc065022978", "sighting_of_ref": "indicator--206f2afc-5365-4c4c-9634-c5b4e433ea1a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e095111f-758f-49b1-9aae-be5e3d8f6b68", "sighting_of_ref": "indicator--6d7cfcb2-498d-4a1a-beb0-c4ad4be8cbe9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617f3d02-d532-4b52-b24e-a912d06e3672", "sighting_of_ref": "indicator--6d7cfcb2-498d-4a1a-beb0-c4ad4be8cbe9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cb8004-4bfb-4887-9492-18a1ea6d6be9", "sighting_of_ref": "indicator--6d7cfcb2-498d-4a1a-beb0-c4ad4be8cbe9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed806256-30df-45fc-b967-4f84336025d8", "sighting_of_ref": "indicator--9f302b37-c563-473f-8e7a-671d9ab43917", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a864cacf-b94b-4f4f-8327-ba0c12c0cbe6", "sighting_of_ref": "indicator--0c32819c-fd5e-48e4-a06b-127e9e9219c8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20dc6773-6e70-46a7-8664-d520874297b3", "sighting_of_ref": "indicator--0c32819c-fd5e-48e4-a06b-127e9e9219c8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626514d6-33c6-4d80-8e81-264f0138e686", "sighting_of_ref": "indicator--0c32819c-fd5e-48e4-a06b-127e9e9219c8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275eaf70-4fd6-4c94-9165-e060b0ad4a39", "sighting_of_ref": "indicator--c9df406e-1097-478e-9626-f864334f2843", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1687b3af-8fe3-4d89-82b9-b969f6d10957", "sighting_of_ref": "indicator--c9df406e-1097-478e-9626-f864334f2843", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9db1b51-8c2c-495e-ba9a-ed82851c3bd5", "sighting_of_ref": "indicator--c9df406e-1097-478e-9626-f864334f2843", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7874ed90-33b7-484e-9dba-95eae3681630", "sighting_of_ref": "indicator--d2bb01e5-4618-4d86-87c8-5ace3448f658", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc70234-b62e-4f3e-a58a-6b5a7d681e80", "sighting_of_ref": "indicator--d2bb01e5-4618-4d86-87c8-5ace3448f658", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c4e519-6cc0-4147-b515-9f4b78983af6", "sighting_of_ref": "indicator--d2bb01e5-4618-4d86-87c8-5ace3448f658", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb71c8b8-81ea-4137-8834-d97b818767ca", "sighting_of_ref": "indicator--0f2d8032-be2b-4cb9-b7d3-1fa68572a3f0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1889c2c8-cc05-482e-8cd2-13c6d9d10239", "sighting_of_ref": "indicator--0f2d8032-be2b-4cb9-b7d3-1fa68572a3f0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c05cf03-b62d-4a2d-bccc-2ab248d6360f", "sighting_of_ref": "indicator--0f2d8032-be2b-4cb9-b7d3-1fa68572a3f0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3ae08c-0b12-4baa-9342-2d6bda7e2c45", "sighting_of_ref": "indicator--49b6b28e-8f81-44d7-b40a-dfd96e24d8a8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b062573-7fbb-4614-a83f-68ba47b6722b", "sighting_of_ref": "indicator--49b6b28e-8f81-44d7-b40a-dfd96e24d8a8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c86a83-4ba3-4cae-8092-a6eb81e931ff", "sighting_of_ref": "indicator--49b6b28e-8f81-44d7-b40a-dfd96e24d8a8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58398be7-dd04-4660-8336-2fd457656592", "sighting_of_ref": "indicator--73822a34-038d-4e49-8e5f-162fe69ba482", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d83fc3-ce83-4179-89ec-444d7440d7c1", "sighting_of_ref": "indicator--73822a34-038d-4e49-8e5f-162fe69ba482", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5abe60-62e6-4e94-b7f7-b33fe355a023", "sighting_of_ref": "indicator--73822a34-038d-4e49-8e5f-162fe69ba482", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31a813b-230a-4f62-af23-b25572527b79", "sighting_of_ref": "indicator--6df4a420-7b7f-481f-a64a-d02a49833928", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0775ee06-3880-4dd0-8ad7-699ac08cbfd1", "sighting_of_ref": "indicator--6df4a420-7b7f-481f-a64a-d02a49833928", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5127376a-2c01-4e1a-b9a5-594260ac3873", "sighting_of_ref": "indicator--6df4a420-7b7f-481f-a64a-d02a49833928", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7ef0df-d2e8-4908-a26c-d520b563e7f1", "sighting_of_ref": "indicator--22c5ac95-4329-4244-baf6-a0ffecb8e6fe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193c5191-0541-41c7-bbad-574521552e6b", "sighting_of_ref": "indicator--22c5ac95-4329-4244-baf6-a0ffecb8e6fe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643f5475-f418-43c8-a677-2e5adb69e1ec", "sighting_of_ref": "indicator--22c5ac95-4329-4244-baf6-a0ffecb8e6fe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89660aa-56e8-400f-936b-5a28b1d819a8", "sighting_of_ref": "indicator--453ca4be-5510-4f1f-808c-50f134e3811f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106933b0-4f5c-49c1-9351-a798f5d7584a", "sighting_of_ref": "indicator--541aec23-ed2d-4de1-a285-f36f6487bcf8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1131b0ea-61a1-44fd-875c-2355fb92ff3b", "sighting_of_ref": "indicator--541aec23-ed2d-4de1-a285-f36f6487bcf8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa3b5f0-5032-4453-8e61-2ef03199cf12", "sighting_of_ref": "indicator--541aec23-ed2d-4de1-a285-f36f6487bcf8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f107511c-478a-42c0-a6bf-3fd64fd85faf", "sighting_of_ref": "indicator--d99b28e4-9bb8-49f2-a045-162da1dda914", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471b5eb1-bab4-4605-84c1-79285483e180", "sighting_of_ref": "indicator--d99b28e4-9bb8-49f2-a045-162da1dda914", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44938d64-62a0-42b9-a3a0-b8b219341035", "sighting_of_ref": "indicator--d99b28e4-9bb8-49f2-a045-162da1dda914", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d5d1f3-c649-4853-a992-7e4bde0590a1", "sighting_of_ref": "indicator--c28a43f3-1913-4079-9b07-d1544ddfe4e9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f492d8-3ca2-4871-9d49-af6a3a61474e", "sighting_of_ref": "indicator--c28a43f3-1913-4079-9b07-d1544ddfe4e9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5672a62-b526-46c9-b522-0420bfec39ee", "sighting_of_ref": "indicator--c28a43f3-1913-4079-9b07-d1544ddfe4e9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df963c8-e04e-4eae-8ee8-6aeb00b11e0b", "sighting_of_ref": "indicator--eb888eb1-6f6e-45ba-8aa5-7c6dbe14ae82", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a827a0-f882-49cb-9972-bf94ef96d3db", "sighting_of_ref": "indicator--eb888eb1-6f6e-45ba-8aa5-7c6dbe14ae82", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a348e4-cdcf-4120-9790-4b899789284c", "sighting_of_ref": "indicator--eb888eb1-6f6e-45ba-8aa5-7c6dbe14ae82", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465b76b9-1a56-4c3e-b368-3fc8a16eda9d", "sighting_of_ref": "indicator--b15815bc-f9af-4c19-928f-4680f26017ac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13076f58-af52-4e4a-bda6-7ddcb8f09d43", "sighting_of_ref": "indicator--84009630-25e5-44f5-a93f-04ddb7ad1000", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecf74bf-2e5d-4889-88e4-97732dfade6e", "sighting_of_ref": "indicator--3f154157-8bf6-4b59-b214-81790363e8dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d86944-36f9-488f-b277-8fc4c9bb7426", "sighting_of_ref": "indicator--3f154157-8bf6-4b59-b214-81790363e8dc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2907d4ec-c206-426d-b303-b045ee64e447", "sighting_of_ref": "indicator--3f154157-8bf6-4b59-b214-81790363e8dc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf60e0b-640e-4a3e-a507-07bc404df7e2", "sighting_of_ref": "indicator--3f154157-8bf6-4b59-b214-81790363e8dc", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a21502-0860-453b-b087-389154433699", "sighting_of_ref": "indicator--d26a9b50-71fe-437a-97f8-b926cb35156f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee5c05a-249b-4703-91f3-0badaa2cb4bf", "sighting_of_ref": "indicator--d26a9b50-71fe-437a-97f8-b926cb35156f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a427e5c9-94fc-4246-a5bb-0f8c04b882b8", "sighting_of_ref": "indicator--d26a9b50-71fe-437a-97f8-b926cb35156f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f53943e-74dd-4bcc-9c94-eb6c83674bc5", "sighting_of_ref": "indicator--3e2de172-bc9e-4b8f-b662-40030af6805a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cbc51c-ab8c-465e-a511-d630000d3dd5", "sighting_of_ref": "indicator--3e2de172-bc9e-4b8f-b662-40030af6805a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0a1a82-3bb8-4c27-aee7-bc5350feb548", "sighting_of_ref": "indicator--3e2de172-bc9e-4b8f-b662-40030af6805a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9200f25-f252-43ea-964a-d8062c5bf182", "sighting_of_ref": "indicator--3e2de172-bc9e-4b8f-b662-40030af6805a", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc59f1a1-b4d2-4c04-982a-7bab76c8363e", "sighting_of_ref": "indicator--c19e3aec-38fb-48c5-b451-a1c2b7f48537", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfae29c-491d-410f-bd3e-6e96a879dd86", "sighting_of_ref": "indicator--c19e3aec-38fb-48c5-b451-a1c2b7f48537", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7f89ae-ee37-4ec2-92cd-0c7dcfc20bc1", "sighting_of_ref": "indicator--c19e3aec-38fb-48c5-b451-a1c2b7f48537", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ead4985-5301-4b8d-ba69-75e75828fc2d", "sighting_of_ref": "indicator--c19e3aec-38fb-48c5-b451-a1c2b7f48537", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fcfbd1-6975-4de6-88b0-ea4a2e3b2838", "sighting_of_ref": "indicator--099bd722-2877-4a47-a36c-fed76310c1fa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ac97df-91f2-48cb-b0f3-8b0baefed067", "sighting_of_ref": "indicator--099bd722-2877-4a47-a36c-fed76310c1fa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b157ec6e-84b2-4d8e-b7bf-ef164a52a29b", "sighting_of_ref": "indicator--099bd722-2877-4a47-a36c-fed76310c1fa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fcf3b51-2109-4e18-bf92-3d55438d0c35", "sighting_of_ref": "indicator--099bd722-2877-4a47-a36c-fed76310c1fa", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774002e9-6f14-4e86-b631-e34c7d4c7b64", "sighting_of_ref": "indicator--bd7e52a5-1b34-4f27-8e96-0a76d6a3eed1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2624c4c8-6503-4b66-98c3-c23618d9a908", "sighting_of_ref": "indicator--bd7e52a5-1b34-4f27-8e96-0a76d6a3eed1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0a6c47-e1ab-4c72-b9a4-697c0943309b", "sighting_of_ref": "indicator--bd7e52a5-1b34-4f27-8e96-0a76d6a3eed1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b63d606-980d-4bdb-a721-cb016cdf6b8a", "sighting_of_ref": "indicator--bd7e52a5-1b34-4f27-8e96-0a76d6a3eed1", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b132fce-22d4-4cd6-9694-1ebce95a4c0c", "sighting_of_ref": "indicator--11f02661-cd1d-43a2-b09a-d01e8dd0ec39", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e95af9-5236-437a-84e5-f60b5c48566a", "sighting_of_ref": "indicator--11f02661-cd1d-43a2-b09a-d01e8dd0ec39", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0943317c-3b22-45c4-91cf-2ae626b291a2", "sighting_of_ref": "indicator--11f02661-cd1d-43a2-b09a-d01e8dd0ec39", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578997a8-5d82-45ec-af2a-025cd475e217", "sighting_of_ref": "indicator--11f02661-cd1d-43a2-b09a-d01e8dd0ec39", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14d3d8a-1502-48eb-9437-1436340b44b9", "sighting_of_ref": "indicator--663216bd-b3c6-4fe0-8970-1f113552641c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1beb82-3a1b-4055-a0bc-6d2c31b8f4dd", "sighting_of_ref": "indicator--2949c0ee-63a7-4d71-9d1e-bf9f2cbda8a4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73da1b6e-0178-4c9f-852c-2621e1db83ab", "sighting_of_ref": "indicator--2949c0ee-63a7-4d71-9d1e-bf9f2cbda8a4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e87c53d-4dc7-4e38-923e-2f49cb5e3447", "sighting_of_ref": "indicator--14339976-9802-4cdd-9be7-efde4b015bf5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6433a509-a7dd-4b99-8699-a9ea83f2076f", "sighting_of_ref": "indicator--14339976-9802-4cdd-9be7-efde4b015bf5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857a79d7-e5c4-4de7-935c-c44c01538e90", "sighting_of_ref": "indicator--14339976-9802-4cdd-9be7-efde4b015bf5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9680a2-4d59-4a7d-8a43-8b756526ec74", "sighting_of_ref": "indicator--2f62cf68-d70d-4a00-a9d0-469a8c49faad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccd0e0f-c1ea-4a78-9f78-6cce5f79dbdc", "sighting_of_ref": "indicator--2f62cf68-d70d-4a00-a9d0-469a8c49faad", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5efdd5c-8834-49b3-8816-babe9c372ebd", "sighting_of_ref": "indicator--2f62cf68-d70d-4a00-a9d0-469a8c49faad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825b9f21-8fee-49dc-bc92-c3b3acdcfcb3", "sighting_of_ref": "indicator--34597c48-b286-42ce-b010-f2dad6ab2c46", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952dad49-ad54-4ac7-a561-a6550318b5eb", "sighting_of_ref": "indicator--34597c48-b286-42ce-b010-f2dad6ab2c46", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1df72fb-7ec3-49f7-826e-fc1ed62a8f35", "sighting_of_ref": "indicator--34597c48-b286-42ce-b010-f2dad6ab2c46", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fa92c4-7ec0-48b4-a0e1-6b2652483d14", "sighting_of_ref": "indicator--086416cf-30d8-428a-a5db-dfdd9a95b801", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc3c6c7-9adc-4d83-a921-7b65d53d215b", "sighting_of_ref": "indicator--baa25b88-c525-44ee-bb10-e71021783b58", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89189f6d-2304-4587-aef8-0219ef4cef5f", "sighting_of_ref": "indicator--1f93fdf0-5c06-4eae-ba61-3839e6702e83", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fb8b35-cb30-4c81-aaf7-2cb5bad0935a", "sighting_of_ref": "indicator--d6d045bf-5e54-4b2f-8c86-06944fbf64cb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfd749a-ebc3-4b60-bc0a-54ea2cf1da3b", "sighting_of_ref": "indicator--551a6166-c221-4211-8148-5a6da1f2fd69", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368e18d1-5e23-4037-8c06-e32052f81edf", "sighting_of_ref": "indicator--1f808255-f407-44e7-8beb-de2c371f8495", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e854469-adfe-4ffe-9101-378bc31b3267", "sighting_of_ref": "indicator--aa7f4b84-f27f-4b3f-bfe4-9e546848d6c8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3a3cd4-cc40-4a72-a75e-5c69c83e5fda", "sighting_of_ref": "indicator--22526fa9-0279-43c0-8fd5-935e75bc3a23", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570d8234-9844-436b-a726-ba968694cd44", "sighting_of_ref": "indicator--63dda1fa-18c6-430b-8b62-a44617e9c6f6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7e138e-3b9c-4f09-90cf-66f2b1400095", "sighting_of_ref": "indicator--63dda1fa-18c6-430b-8b62-a44617e9c6f6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458570af-9e58-4fb7-a05a-47071e8f697c", "sighting_of_ref": "indicator--63dda1fa-18c6-430b-8b62-a44617e9c6f6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d486e1-849d-446a-8a31-e1b131283f3c", "sighting_of_ref": "indicator--fee32a87-b439-4cc5-b2fd-55ab68312372", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7ff331-9686-4a94-be9e-226aad1481ae", "sighting_of_ref": "indicator--fee32a87-b439-4cc5-b2fd-55ab68312372", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2374a08a-5c59-44bb-a091-f30df8b32eda", "sighting_of_ref": "indicator--5edb6e6b-8263-420e-9477-74a213ab3021", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f39e21-7086-41fd-938d-c133563203fd", "sighting_of_ref": "indicator--6086a3fe-8739-4f3f-ad62-19645228a13f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f37afc-469b-4b16-95fb-7b70a87703cf", "sighting_of_ref": "indicator--8787b436-8727-4a18-8166-4a0991dc9014", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8620b051-c78b-40e4-9469-02c66125b863", "sighting_of_ref": "indicator--1f771529-0fb9-4448-afba-ba4cdf43dfff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe859aae-6768-44ef-bff6-148e6b8360a9", "sighting_of_ref": "indicator--1f771529-0fb9-4448-afba-ba4cdf43dfff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f62c0f-2019-4561-9804-e1854f7150a9", "sighting_of_ref": "indicator--c78655df-512a-4f7a-870d-120e098846c8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8801ad-ebe6-4294-92c4-8bb8576207a7", "sighting_of_ref": "indicator--c78655df-512a-4f7a-870d-120e098846c8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9e356c-1be0-4ef6-a8fc-55c8d78fec7e", "sighting_of_ref": "indicator--c25b0004-fbf1-4cb7-965e-ffc00ac4eb25", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44443270-b311-4c53-b092-c165d711b6c9", "sighting_of_ref": "indicator--b54cb25d-ef83-47ce-9188-279f76bf3386", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e7bbe6-8a6b-4f3e-a7df-0938e82b99b8", "sighting_of_ref": "indicator--293ec79b-ade8-4d0e-9c17-1af057e3e047", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d643a77-914a-499f-a7e1-c2d488760ee9", "sighting_of_ref": "indicator--1e7e03f5-2600-4338-aee1-c3d2ddf41d09", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb14571b-27c5-485b-a598-8dd7613c1dbd", "sighting_of_ref": "indicator--5581c1ee-eab4-4d17-b252-15405cdefe90", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cc148d-89f2-462c-b3e1-9c883131af7a", "sighting_of_ref": "indicator--ed057a77-9901-48fd-82c1-ba23084727f7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5302654a-d295-4758-85f7-419979dccf83", "sighting_of_ref": "indicator--15fb458c-cc06-4b5d-91ee-c4690d1dce36", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601c163f-64fa-46ac-9e9e-1f48928c75d7", "sighting_of_ref": "indicator--494d6f54-bb5b-4d48-8097-f5aa07f9d19c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d280a0b2-4a50-432a-bc2c-228214e9f42b", "sighting_of_ref": "indicator--494d6f54-bb5b-4d48-8097-f5aa07f9d19c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a55a95-2759-44ae-88aa-34db8e982dcf", "sighting_of_ref": "indicator--494d6f54-bb5b-4d48-8097-f5aa07f9d19c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e503cb7-dcc1-414c-a4a5-945a9e281487", "sighting_of_ref": "indicator--4ec20f8e-0f1c-4092-bb10-8099d59e4853", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfd6414-0eb9-42a3-a77f-7565890410e9", "sighting_of_ref": "indicator--84134d6f-7ad2-400f-8781-9d1ebc67ae4a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0e85fe-615b-44e7-8b76-ab4bbc95ab0e", "sighting_of_ref": "indicator--84134d6f-7ad2-400f-8781-9d1ebc67ae4a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6c2281-52b4-4406-b282-84b62851c1a5", "sighting_of_ref": "indicator--7fe44cbc-dc43-4c5d-a391-2046375d16d5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371a171d-d8fc-447e-a704-58b8fab853ef", "sighting_of_ref": "indicator--b0e9e2ee-d010-49f4-b6ff-c1f6bc478081", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65dccf72-5287-46f5-931d-7447301faf96", "sighting_of_ref": "indicator--2419b29a-6476-42d8-88bf-cd7868d000f7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e355437-0f2e-4aa5-9831-ad33b91f35a6", "sighting_of_ref": "indicator--26b9a3b9-3a6c-4a50-85ae-ef81de1c2f46", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c45405-4a6f-4e0a-ae61-4913a47c609f", "sighting_of_ref": "indicator--e49e43b5-2b20-42f7-91b6-c2221768066f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c108bd5-6d2e-483a-af57-aa8c8e54ef9b", "sighting_of_ref": "indicator--05ce49fc-b7aa-43a3-8bed-d12ec58bace5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130da9c4-e7d0-4583-b5e7-e77047ab99ff", "sighting_of_ref": "indicator--28c3abaa-a637-4319-9bf7-bc625398597d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2485da-d151-460b-947b-0233dd2d2f56", "sighting_of_ref": "indicator--c2d6e806-2cb0-4ba8-b92c-48ca9bb1b9a0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50da9933-1289-4723-ab90-537acc1bc1be", "sighting_of_ref": "indicator--c2d6e806-2cb0-4ba8-b92c-48ca9bb1b9a0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9da75a1-da5d-45f2-bd0f-2e920ed0ff68", "sighting_of_ref": "indicator--fd343e0b-1513-4696-8a3e-ffa82677b95e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbb9e88-6215-4725-9483-fd1c807a2a01", "sighting_of_ref": "indicator--9630cbea-0b4e-4179-9706-e69f61dee7dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38591073-f980-4e1c-98d8-1c0363f4fb4c", "sighting_of_ref": "indicator--9630cbea-0b4e-4179-9706-e69f61dee7dc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b55230-4586-44c3-8099-72aac569335f", "sighting_of_ref": "indicator--9b3bb2d3-e8a1-4ed6-82f1-dbaf98b28457", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1377e31f-0d30-41a7-9884-cd8b376ae464", "sighting_of_ref": "indicator--0b365c74-b035-4c5f-a70d-584d85d8e664", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4544d7f6-23ca-4873-964c-d34fed7ac23a", "sighting_of_ref": "indicator--aeea253d-1e29-464f-8cd5-89797d7c7193", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8405197-14ba-4513-ada8-b2c8da46ab64", "sighting_of_ref": "indicator--f677fdc4-2459-49f4-9106-2a7702dfa6ad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe89baa-e0b1-4be4-aedc-b518528a60b4", "sighting_of_ref": "indicator--f241e984-fcf3-42b9-904d-58f402df0c16", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51053eed-61d5-4199-96d4-a709822cc034", "sighting_of_ref": "indicator--9b7b3e7a-8b12-4520-8657-db2de0069f8b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e75fa6-4768-4644-824d-05d60d716a50", "sighting_of_ref": "indicator--e505e999-5520-43ca-ae6e-46290cb154b2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b1b6f5-2af7-4042-978e-816fbdaaba53", "sighting_of_ref": "indicator--aa6f4dbd-e73b-488c-8c3d-bd6c58a3c560", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e5314c-f4d4-44bb-8e84-dc4db18ad0e0", "sighting_of_ref": "indicator--a69b8e95-68d1-46ca-ab45-faa76839c19a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c39693-e101-409e-89c8-cc0d3ff54fe5", "sighting_of_ref": "indicator--6fa33849-900b-4f6b-96a6-c504d8cf8097", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71645fa0-d06a-4114-b750-ccdbb29c6118", "sighting_of_ref": "indicator--56e7c8ea-b1d3-42a2-b942-a1b3b622ba70", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47fc98b-2f36-4e2a-a7b4-a6480b2a0f20", "sighting_of_ref": "indicator--2a1e2a98-3a24-49db-bf71-550003ae7521", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b741c3c-741a-4af6-b871-dc927c460925", "sighting_of_ref": "indicator--aff9fdf2-be82-47e8-9ff1-0a8e8005e17e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f7323f-af73-4fd1-ae13-c9e77dfc0c4b", "sighting_of_ref": "indicator--1884da03-f3e1-41e4-a244-297f375936b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c7a38a-7b8a-4bb4-88c4-564d56d78ecf", "sighting_of_ref": "indicator--5bb471c8-85cd-4336-978d-986221d5843f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75315065-5989-4bf5-89e4-d009f0a79b2c", "sighting_of_ref": "indicator--906fcac4-a01c-4ba2-bcd8-0063c6595b50", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff528e3-14c9-48f4-b721-cf38c62b7d3d", "sighting_of_ref": "indicator--906fcac4-a01c-4ba2-bcd8-0063c6595b50", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854a7a7e-4290-4a81-acaa-b382cda535d8", "sighting_of_ref": "indicator--df0faa21-4c18-415d-9c7b-3fe0e92edcf8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6639fd9-05ce-4662-8f07-273939004af8", "sighting_of_ref": "indicator--187f4229-a89c-42b7-b61c-692ae194d9fb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e5834f-83c1-48ad-b7f5-bc4a6b2f74a9", "sighting_of_ref": "indicator--187f4229-a89c-42b7-b61c-692ae194d9fb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1d7720-4dab-4fe8-8c6a-5e0b70ebe6c4", "sighting_of_ref": "indicator--187f4229-a89c-42b7-b61c-692ae194d9fb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a432056-efc0-4c78-8c97-e560bad4569b", "sighting_of_ref": "indicator--a03ddc1c-c9c1-4297-bfc8-2a4625ddfe3b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cccf281-19e5-48ac-8b1a-bf1c715abdd1", "sighting_of_ref": "indicator--a813f834-796c-483b-844b-e73732cd5efa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8958902-1df7-470c-98b9-678335bc9b8f", "sighting_of_ref": "indicator--878707d1-f296-4249-8e81-f0d8f71b50b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b2f672-2b26-4fcd-b8f4-5285bc82e8df", "sighting_of_ref": "indicator--67379183-3843-4da5-bb2a-ebe2c7c1d079", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4e265a-7f9d-42b2-9596-83e10f4a3228", "sighting_of_ref": "indicator--aafe8eec-6c66-4645-ae52-370a59107d7e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadb7c88-9bdd-4155-9ce2-7894607aef25", "sighting_of_ref": "indicator--aafe8eec-6c66-4645-ae52-370a59107d7e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efd40bb-5b84-463d-b22a-8034b1beb5ef", "sighting_of_ref": "indicator--aafe8eec-6c66-4645-ae52-370a59107d7e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26dac5ed-5cf1-4fb3-9dc0-61b7db47c0ff", "sighting_of_ref": "indicator--1549710b-82c5-48ce-851b-ea345371b62a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1c71c1-514b-4408-85b3-eda8838e07e6", "sighting_of_ref": "indicator--5fea47ad-e343-4f9b-b6c2-ece6cb3e2f42", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3a99b8-c083-443d-a228-c05c497ca185", "sighting_of_ref": "indicator--0779ede0-adc5-4aac-ac11-24a9904cda5b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac07a67-d8c6-4958-92a8-ffa8605ae494", "sighting_of_ref": "indicator--b4f7268e-5697-4126-8510-06d7efed2d49", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772784a3-cb11-4cfd-bba4-8f9e9b241d3e", "sighting_of_ref": "indicator--132b2576-f2f0-4952-8b40-a92309ae5e69", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd33c90-0ee8-4afc-bc2e-7196a9df99ed", "sighting_of_ref": "indicator--7d3380c3-d6a6-454a-9be9-5a0672b77ddf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e97eb7-b780-4ef0-8485-e3131a708394", "sighting_of_ref": "indicator--a71a224b-f216-45d7-b25f-dcd2f454b686", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0070d0f-2ba1-4b55-975a-4c2c5b727595", "sighting_of_ref": "indicator--a71a224b-f216-45d7-b25f-dcd2f454b686", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5a002a-181d-42ad-bb0f-5d192f041842", "sighting_of_ref": "indicator--a71a224b-f216-45d7-b25f-dcd2f454b686", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ca8a27-833f-4b3a-b455-ee483862c167", "sighting_of_ref": "indicator--6e18f825-ec79-48d6-b857-fa3bdfb2db56", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a0dc35-b2eb-485b-9997-66a40f331217", "sighting_of_ref": "indicator--47636d91-4958-4d0e-8f6b-72cda94f4c69", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62e9b16-c776-42af-84ee-b592b8f4fd59", "sighting_of_ref": "indicator--40432383-1a0f-47b1-913a-d030132744c5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bf5101-c463-4d28-928c-8e4322f6005f", "sighting_of_ref": "indicator--3a80acf4-74ad-44f7-93d5-6d1c12bf3155", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310ba756-f811-4e3c-856b-00c00aa61a68", "sighting_of_ref": "indicator--1f4a9f40-162d-4846-b7c6-ba964cb0ba9c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b106ed1f-9bea-4edb-973a-8cf5a2efb537", "sighting_of_ref": "indicator--70fb328a-ce24-4811-8cd1-0e286bca6814", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be177c0-5650-48f2-9a5e-12d4c3875a67", "sighting_of_ref": "indicator--d718e43b-03a7-4159-906d-e9346848c04c", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24610bdc-58d5-499b-a95d-33e3895a9df4", "sighting_of_ref": "indicator--d03f85c1-f9fd-4071-b4a6-bdcdaa2577bc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ecbf33-e704-4c88-82df-e8bfba084ec0", "sighting_of_ref": "indicator--7a4299fd-9b67-42f4-ac71-640ff07e9d74", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114d98d3-746e-4513-bf94-54b68d6604df", "sighting_of_ref": "indicator--e7e08809-3ed5-45cc-bcf0-1076ad334203", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbaecd5d-29b1-4a99-be19-1da65ad72f4a", "sighting_of_ref": "indicator--26f57f6e-0a9d-44e8-827e-23c8eaeacb45", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c016144c-dbac-4372-95ac-3b35cc1244d8", "sighting_of_ref": "indicator--478ff11b-71c1-491e-a8ed-d7cf8c480be2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4734e2-8b1b-4ced-bf90-b6cb3a0a5247", "sighting_of_ref": "indicator--1132ba83-3f77-41b5-971f-9c1c3f7ce286", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74547d4f-95bd-4ad1-a0b3-150e99fae4ef", "sighting_of_ref": "indicator--3ef5f6a9-46f5-4042-a4df-bff246b2e1a0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc7438e-bc26-4cd9-a09c-019018699a4f", "sighting_of_ref": "indicator--c3c08650-9933-4a59-982b-469fbab2d943", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74714a7e-972d-4144-832c-5b27c885035d", "sighting_of_ref": "indicator--ef5747c1-3273-454f-89a7-2ecb4186cc34", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1118a1-e727-4baa-85d9-daac9f3bdda8", "sighting_of_ref": "indicator--36e2594c-94a5-4a76-b2f6-e447f38c9ca7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d9db05-c674-49d5-8cc3-88ebefcb4a24", "sighting_of_ref": "indicator--d1cae03c-e2fa-4976-8570-897b14111c7f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520cbb89-ddae-487a-b162-a027d14f9a02", "sighting_of_ref": "indicator--796f1612-3a77-4125-81b8-0ce759b38351", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7628f802-369c-4e12-aefb-33e6502ba84b", "sighting_of_ref": "indicator--c6a84e2d-6f31-476f-b55f-8f576510a433", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9f440c-79ea-436b-bf88-a171878aede5", "sighting_of_ref": "indicator--aff780cc-21c2-4895-8aef-227becf96e71", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747f877c-d4fc-437e-bbab-3b186cd9a0f9", "sighting_of_ref": "indicator--f1cb2e11-6bf5-4e76-a3bd-9bacc71b866e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c90789-ce8d-411d-b45d-14ca7d071c0c", "sighting_of_ref": "indicator--f1cb2e11-6bf5-4e76-a3bd-9bacc71b866e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6606d4d0-8b68-4614-861e-225d7c207802", "sighting_of_ref": "indicator--f1cb2e11-6bf5-4e76-a3bd-9bacc71b866e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbad67ad-c5b0-43ee-9d5b-83e560948965", "sighting_of_ref": "indicator--85281a8e-8fec-47e3-893d-567dc06aebf1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d465f4-10f5-48fa-a640-19db3e88e8f7", "sighting_of_ref": "indicator--2ac64b7a-471e-4c3b-ac7c-e6f8e9212d7f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0451953c-17f6-4d07-b6d7-707cd8a771b5", "sighting_of_ref": "indicator--2ac64b7a-471e-4c3b-ac7c-e6f8e9212d7f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3250b61e-fa48-496c-8518-874a91dab945", "sighting_of_ref": "indicator--2ac64b7a-471e-4c3b-ac7c-e6f8e9212d7f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4fdf6b-327e-427c-aed7-8bf644d4b1ef", "sighting_of_ref": "indicator--88e4f154-df27-493d-b0f7-bce5e84b7718", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581c38ef-3a9a-48b7-8b1e-d8aaeab7a585", "sighting_of_ref": "indicator--88e4f154-df27-493d-b0f7-bce5e84b7718", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cd5873-b725-48ac-8223-a9a2bdcbe5ea", "sighting_of_ref": "indicator--88e4f154-df27-493d-b0f7-bce5e84b7718", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91428a76-c49e-4edb-a22e-f8c27498314d", "sighting_of_ref": "indicator--58a1760c-e9ab-48cc-8a77-0aafd9ae4677", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6651b43-5702-4ca7-9ece-452c6355656b", "sighting_of_ref": "indicator--58a1760c-e9ab-48cc-8a77-0aafd9ae4677", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333a48c1-f13d-49b9-9ef2-38f803c38de2", "sighting_of_ref": "indicator--94c4891f-5cd2-497a-abbc-1c957430ea5e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f1e64f-1f89-4cd4-969c-1b5ff7c823b6", "sighting_of_ref": "indicator--94c4891f-5cd2-497a-abbc-1c957430ea5e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226c9a1f-b1f4-40bf-a707-a51019fe13d0", "sighting_of_ref": "indicator--94c4891f-5cd2-497a-abbc-1c957430ea5e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd71d65-5eb8-42d5-a33f-fbae100fda73", "sighting_of_ref": "indicator--88e21871-197f-48e0-9f9b-961f71ed2326", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f00505f-2931-4291-9541-1d2f60753e10", "sighting_of_ref": "indicator--88e21871-197f-48e0-9f9b-961f71ed2326", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d92499c-1fce-4ccb-860d-3fc0b88ce720", "sighting_of_ref": "indicator--b7a05310-b6bd-4fc6-89b5-254c62ee8e7b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c67145-8403-487e-b396-b5464c1bf683", "sighting_of_ref": "indicator--b7a05310-b6bd-4fc6-89b5-254c62ee8e7b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f191270a-38a6-48d4-8afa-6fecae815eb0", "sighting_of_ref": "indicator--b7a05310-b6bd-4fc6-89b5-254c62ee8e7b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1346b1-c916-4ea4-bb8a-7bf04d0113fc", "sighting_of_ref": "indicator--b976036d-5b34-4751-9e92-f7545df432e9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9b5ee1-f3d1-4562-b90d-4758fa00cc8e", "sighting_of_ref": "indicator--b976036d-5b34-4751-9e92-f7545df432e9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70847583-3394-4eba-8312-818576b89ff8", "sighting_of_ref": "indicator--b976036d-5b34-4751-9e92-f7545df432e9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e79e168-65ff-4785-86d3-5bdd3e6c750c", "sighting_of_ref": "indicator--511b070f-7d61-4d49-8705-3dafb1be0dad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f6efe1-cb58-4424-a221-2d3ca83db7f2", "sighting_of_ref": "indicator--511b070f-7d61-4d49-8705-3dafb1be0dad", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40044130-215b-4907-8dd4-7e2ba10dc9e8", "sighting_of_ref": "indicator--511b070f-7d61-4d49-8705-3dafb1be0dad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44578dd-4e87-49be-a04c-a6924d64b83f", "sighting_of_ref": "indicator--0e185056-85f0-4c2d-9949-ef8958ccf061", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050689b1-2c99-4aa5-ba0d-646347cd7529", "sighting_of_ref": "indicator--0e185056-85f0-4c2d-9949-ef8958ccf061", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626568d5-8a1b-46b5-b581-d5901f5ec626", "sighting_of_ref": "indicator--0e185056-85f0-4c2d-9949-ef8958ccf061", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2ae7d8-bcf2-4c1f-8739-e869526509f6", "sighting_of_ref": "indicator--6bbb16d9-dc89-4b84-8507-01c36f2d93ed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f683daf-489d-4011-9de8-c545811f25a8", "sighting_of_ref": "indicator--6bbb16d9-dc89-4b84-8507-01c36f2d93ed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4cadf5-4f23-42f5-a939-d764709b29fa", "sighting_of_ref": "indicator--6bbb16d9-dc89-4b84-8507-01c36f2d93ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4817a1-4bdd-4b4d-88b7-ea5ab59b0427", "sighting_of_ref": "indicator--5f804cbd-d513-4cd3-a6e6-fa955c880752", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f52bf3-8b39-4cbf-a1b4-f7e664a29a5d", "sighting_of_ref": "indicator--5f804cbd-d513-4cd3-a6e6-fa955c880752", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f4cda8-8735-42ca-aecc-9341d55caf73", "sighting_of_ref": "indicator--5f804cbd-d513-4cd3-a6e6-fa955c880752", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c0d063-ddcd-4ce4-be70-83745d6f18e1", "sighting_of_ref": "indicator--5561dde3-bf9b-4270-adc9-7450674a70a0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0673819-09eb-4d12-b249-b6df063bca0c", "sighting_of_ref": "indicator--5561dde3-bf9b-4270-adc9-7450674a70a0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a95e18b-7ac7-4b97-ba8d-00f596ee4463", "sighting_of_ref": "indicator--5561dde3-bf9b-4270-adc9-7450674a70a0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc42524-39f4-4b14-8966-0ca10c39a9f5", "sighting_of_ref": "indicator--c4df5dc4-9036-4092-9a57-dbb5bb6b89fa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054cdf01-53f7-4b74-bcc3-7f6fd2f01483", "sighting_of_ref": "indicator--c4df5dc4-9036-4092-9a57-dbb5bb6b89fa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af5b63c-65bd-4518-b396-0482b4dac295", "sighting_of_ref": "indicator--c4df5dc4-9036-4092-9a57-dbb5bb6b89fa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297fd767-5fe9-493e-b4eb-14fc6c786f73", "sighting_of_ref": "indicator--0accd374-3ba6-4f70-a7c5-7d42635bf3f9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855dd0b6-18e9-4238-ab1f-fdef1919dbfb", "sighting_of_ref": "indicator--0accd374-3ba6-4f70-a7c5-7d42635bf3f9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65445d2-9418-43b3-adfe-3e526f7123b8", "sighting_of_ref": "indicator--0accd374-3ba6-4f70-a7c5-7d42635bf3f9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa03a47-5689-4423-81af-120bc0fba250", "sighting_of_ref": "indicator--3ba0b798-8d45-4946-a917-e61cf138c4f5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afa8be1-2a2a-47b3-87e4-1ffca433a440", "sighting_of_ref": "indicator--3ba0b798-8d45-4946-a917-e61cf138c4f5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8e9440-47d3-4184-904c-ad6857de4bf3", "sighting_of_ref": "indicator--3ba0b798-8d45-4946-a917-e61cf138c4f5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b285e5-e014-454e-a696-3eb02cd3937d", "sighting_of_ref": "indicator--df0fe462-e92e-49ba-b491-50e1130035ef", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642163f0-8577-40f2-9b3e-05c1d2d9c5ef", "sighting_of_ref": "indicator--df0fe462-e92e-49ba-b491-50e1130035ef", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a582f6-a5a7-434e-a5a8-b3bca0ad51ed", "sighting_of_ref": "indicator--df0fe462-e92e-49ba-b491-50e1130035ef", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfda3d2-9a4d-4164-a71b-7b62c3de07d3", "sighting_of_ref": "indicator--4cf1eedd-1de1-4bf3-b2a8-386f96ef42bf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf77398d-1965-4d12-98a4-c08ee855ac16", "sighting_of_ref": "indicator--4cf1eedd-1de1-4bf3-b2a8-386f96ef42bf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117767d6-db55-4d36-8e5c-cc095be833cc", "sighting_of_ref": "indicator--4cf1eedd-1de1-4bf3-b2a8-386f96ef42bf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcb6de2-1bac-4d00-979c-734344fe1cfa", "sighting_of_ref": "indicator--490b9b2a-4951-4c0d-b9ae-031a14172479", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279a5620-bba1-4dad-8ada-a0a81712f36e", "sighting_of_ref": "indicator--b422c7be-181e-4a5c-bcc3-88958ea72dfb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373eea2b-9415-485a-bd65-13aebbdaaedf", "sighting_of_ref": "indicator--118027a3-b7db-4ecc-8917-2d301a49b9f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96890c10-6568-42bc-ba13-5a92ed452de3", "sighting_of_ref": "indicator--d69da562-e8d0-458f-bdc7-8097fd0b4cb2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c1014b-b116-4442-a273-24883cd5ef1c", "sighting_of_ref": "indicator--5c75716f-3f1f-4130-b63f-6eb05be458a2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b921e9-24e9-49e6-a30a-6182b223f223", "sighting_of_ref": "indicator--5c75716f-3f1f-4130-b63f-6eb05be458a2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a34a409-2847-47fb-92ff-edc8cefd2ff8", "sighting_of_ref": "indicator--5c75716f-3f1f-4130-b63f-6eb05be458a2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caab8acd-fd3b-4b18-945f-2d347b08f5d2", "sighting_of_ref": "indicator--5c75716f-3f1f-4130-b63f-6eb05be458a2", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4cb7d9-5c93-49b2-9880-9a93de92208a", "sighting_of_ref": "indicator--22df5f45-4fda-4e7d-8a23-de962fb1a3d3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9344c1cc-13be-470b-9710-78bb60eb392a", "sighting_of_ref": "indicator--133f77ec-baec-4649-94f9-eff5ddfe2b97", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfc7a4b-d6b9-42f0-a3c6-c34a18a52f4a", "sighting_of_ref": "indicator--3c2ab3e1-890e-4615-a1be-88f51ab24363", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd923f3-e15b-47ef-9a86-91a70d6cca37", "sighting_of_ref": "indicator--bf76e079-fed3-4f68-9fb4-d482d70b73ff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3d1a6f-a069-4354-b9e5-e6d54b41f635", "sighting_of_ref": "indicator--bf76e079-fed3-4f68-9fb4-d482d70b73ff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99b4ef6-b0e9-49be-ab44-1b952b597269", "sighting_of_ref": "indicator--bf76e079-fed3-4f68-9fb4-d482d70b73ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711a91e3-9841-46d9-a4ea-10301ae9ab74", "sighting_of_ref": "indicator--ea908323-5f68-40f5-8611-767536da4bcc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42846999-0911-4c71-a042-283364ec1d55", "sighting_of_ref": "indicator--ea908323-5f68-40f5-8611-767536da4bcc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a385228a-2d70-49f2-8756-f094c37214c7", "sighting_of_ref": "indicator--ea908323-5f68-40f5-8611-767536da4bcc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924bfd6f-5004-45b0-a91b-55b55382af06", "sighting_of_ref": "indicator--db15df18-1b58-4a62-a43b-f1f8936bacb3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6dbf6d-16bc-46e7-a368-a14d47ecd123", "sighting_of_ref": "indicator--db15df18-1b58-4a62-a43b-f1f8936bacb3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6689c6f8-204c-4041-8a10-3a18eae83a92", "sighting_of_ref": "indicator--db15df18-1b58-4a62-a43b-f1f8936bacb3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9176cd5c-03fc-4897-a75e-af0d106334c7", "sighting_of_ref": "indicator--e890ca8a-774b-4c62-aa24-30f013f60d3a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767513fd-2446-40c3-b66b-fd09c709cdba", "sighting_of_ref": "indicator--e890ca8a-774b-4c62-aa24-30f013f60d3a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6ccf2c-8a41-4bbb-89ed-1635fe91269a", "sighting_of_ref": "indicator--e890ca8a-774b-4c62-aa24-30f013f60d3a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb32a41b-de66-465c-88f5-491f84cdc259", "sighting_of_ref": "indicator--bd2d610d-cb65-4891-8214-64936ef16e02", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917e472c-482c-47f8-99e2-5462df51a43d", "sighting_of_ref": "indicator--bd2d610d-cb65-4891-8214-64936ef16e02", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6f85d5-53f6-4cf4-89f9-904af5b53c91", "sighting_of_ref": "indicator--bd2d610d-cb65-4891-8214-64936ef16e02", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731625b1-fb35-4981-bd44-e25c24fc796e", "sighting_of_ref": "indicator--534016cc-5aa8-47f9-8803-a3fd9e91205c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5995d9c0-7631-4b71-adce-c0fa5df9f44f", "sighting_of_ref": "indicator--534016cc-5aa8-47f9-8803-a3fd9e91205c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2b18a2-8bb0-4654-a517-75376ef9e68a", "sighting_of_ref": "indicator--20797ff7-48b5-447a-a772-90414f4603f5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2322d5-a2ba-4145-92ef-ac179b4b33d5", "sighting_of_ref": "indicator--a91228a1-fb4a-4cc9-b98b-9082ea70daab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ae3ce7-0f4f-458a-9345-5a8d5ecb4cbc", "sighting_of_ref": "indicator--ae9f072c-76dd-46bb-a020-976d4da17762", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1be1c23-6cee-4bac-a605-a8f351bffb03", "sighting_of_ref": "indicator--ae9f072c-76dd-46bb-a020-976d4da17762", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf91d589-3956-4cbc-99d9-32dbf9baa4de", "sighting_of_ref": "indicator--6d9fed28-d346-40e9-af3b-39e58a997a53", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf995f36-5096-4865-8316-8e766b31e3ed", "sighting_of_ref": "indicator--6d9fed28-d346-40e9-af3b-39e58a997a53", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e980408c-b851-4645-8e45-6e66b17f3cb8", "sighting_of_ref": "indicator--6d9fed28-d346-40e9-af3b-39e58a997a53", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd3ca71-e2f4-4a84-aef0-b2dce744205d", "sighting_of_ref": "indicator--bbf492bb-cf4b-4293-94b8-b8693eca6272", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe8a01f-5448-41a9-919c-a66291e902d9", "sighting_of_ref": "indicator--bbf492bb-cf4b-4293-94b8-b8693eca6272", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d77bc6-6b40-4a2f-9528-64b7d1ea992e", "sighting_of_ref": "indicator--422b65cb-8893-4b0f-a4a7-a675ad1dd63f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf36815-5fa4-4424-b1cf-0ed0bb4d0b3c", "sighting_of_ref": "indicator--544edf11-11c0-4038-a027-533f326d98db", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b10f3c3-b2bd-495d-8837-997c1a9b6df1", "sighting_of_ref": "indicator--cbcfd687-e5d7-490c-857d-da275c7c12d9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f8d340-46b4-45c6-b091-87fcb6d2827e", "sighting_of_ref": "indicator--10ed4ce4-1d4b-4a05-9b87-837303749c83", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b7be27-67a0-44fa-8b89-298894a7f04b", "sighting_of_ref": "indicator--95a9b5a8-9ad4-496b-9537-588437ed56ac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523631f4-b35e-48e3-8fbd-63add0a86a47", "sighting_of_ref": "indicator--95a9b5a8-9ad4-496b-9537-588437ed56ac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2f09b0-c21a-4ccb-ba02-196269e42ba7", "sighting_of_ref": "indicator--95a9b5a8-9ad4-496b-9537-588437ed56ac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15e5341-c446-4687-a7e0-f262672b15c0", "sighting_of_ref": "indicator--e94c6bb8-4801-481d-ab66-22c3394f558e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c935d7-a1aa-4517-ad9a-fe336c9c49aa", "sighting_of_ref": "indicator--e94c6bb8-4801-481d-ab66-22c3394f558e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a58c5a-46b1-411e-a25b-936f8f70d663", "sighting_of_ref": "indicator--e94c6bb8-4801-481d-ab66-22c3394f558e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5cb77d-cbe4-402d-a106-bcf98d23ede9", "sighting_of_ref": "indicator--0aec23fc-538c-4514-89c4-94bd06db4e2a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ddfc695-321b-4ade-8ff0-91eb7b73a6cc", "sighting_of_ref": "indicator--0aec23fc-538c-4514-89c4-94bd06db4e2a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae90879-615f-4220-a8ea-2559596d4555", "sighting_of_ref": "indicator--0aec23fc-538c-4514-89c4-94bd06db4e2a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2274d663-2433-4faa-a57f-cbf9e6eb7d01", "sighting_of_ref": "indicator--c0abeeec-f8f5-4919-9599-24599acf6fe3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd5e54e-c8a2-465b-a715-6216b85ecc7f", "sighting_of_ref": "indicator--c0abeeec-f8f5-4919-9599-24599acf6fe3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e425612-2f83-48ab-9f6f-99ed22531a10", "sighting_of_ref": "indicator--c0abeeec-f8f5-4919-9599-24599acf6fe3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aeefb2f-05b3-4bf9-9555-994080cacc9e", "sighting_of_ref": "indicator--4c27314a-51a0-4769-8780-60acd7bbd4f6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed08646-0d22-4965-9ec6-8c8842950a39", "sighting_of_ref": "indicator--4c27314a-51a0-4769-8780-60acd7bbd4f6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d575c12-4be0-43d1-9dc4-17d67bad29b7", "sighting_of_ref": "indicator--4c27314a-51a0-4769-8780-60acd7bbd4f6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf13780c-4152-4f34-8014-8cdccee0334b", "sighting_of_ref": "indicator--64094669-d150-4da2-a4f0-f25e57a12001", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7758a2-9929-46c9-bb56-f3fd2184c3a7", "sighting_of_ref": "indicator--a87000b9-5726-4c2f-99ef-cc0dd098cf3e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b053840c-b302-4ba6-8aa7-fe46cee71810", "sighting_of_ref": "indicator--de772def-dfae-499e-abe3-0ffe1a8fa517", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a80a11-c00f-4668-8144-7589c90b8d86", "sighting_of_ref": "indicator--421f891e-528f-4801-b0c0-1424cd9b8898", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b17c3f-2439-41f6-a6c8-bece9dca5b86", "sighting_of_ref": "indicator--d9a19ef7-e25b-42d6-8fee-59fb395b9165", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28480585-eb1d-4251-8fb4-0e950ccfea41", "sighting_of_ref": "indicator--283c4c89-12f5-441c-9d78-57ab708ee152", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0c8d62-63c5-47ef-a8d5-ccbd2134031d", "sighting_of_ref": "indicator--538a8c2e-8250-47b2-a532-96cad876b1ef", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0a83ae-eecd-4a45-83bf-def8eff0854c", "sighting_of_ref": "indicator--55e6c3a4-f0a7-44da-82fa-abc3de02ee9e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02228c9-64c2-4f15-a15d-e0247cf733bb", "sighting_of_ref": "indicator--7a86a4c1-ac03-49e8-bb2b-94289f93316b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0543f2bd-e56f-4b1c-8aaf-711786c48fd5", "sighting_of_ref": "indicator--0d1910a1-e4a3-4d57-ba5f-b85ab97694a8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d71b361-fa8b-4787-bad1-9426c6ea92b6", "sighting_of_ref": "indicator--a38bea65-ddd8-4713-beb9-066670e281b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e88caa-3971-4ba2-8b48-2fbcf4cc1598", "sighting_of_ref": "indicator--18e2dd70-a4f2-4b71-8361-21c459eceaf8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70412eed-3a09-4306-8d02-8bf751947754", "sighting_of_ref": "indicator--18e2dd70-a4f2-4b71-8361-21c459eceaf8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ce2672-fe65-4f7f-b6af-332f4813dfbc", "sighting_of_ref": "indicator--18e2dd70-a4f2-4b71-8361-21c459eceaf8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11da4531-fe69-4869-8aeb-e6913d3afe80", "sighting_of_ref": "indicator--8a843de1-b0d1-45ae-9b76-77a0e2c97729", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352073a4-19de-4d38-af12-658b2e9c88db", "sighting_of_ref": "indicator--84a0caa2-5134-493e-bf71-becdc71fb1d5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c163c97-2ed3-4c5b-a6ed-963901e3d3c9", "sighting_of_ref": "indicator--13ac0ff0-b89e-4677-806e-1a204edf7cff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028f7f8b-aa9b-49b1-9f5a-2d109dde4d71", "sighting_of_ref": "indicator--eb797e2d-bc5a-492a-9056-d3e70fe466e7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4f8a12-818e-4dfe-b335-a88ad17effc3", "sighting_of_ref": "indicator--eb797e2d-bc5a-492a-9056-d3e70fe466e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e70034-dd74-41f3-8311-c6a91a9fbbbb", "sighting_of_ref": "indicator--eb797e2d-bc5a-492a-9056-d3e70fe466e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4a9bda-91f5-44e8-8942-2eb049bb194d", "sighting_of_ref": "indicator--8d8accd4-679d-42d3-a41d-0b19ccba9939", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c744d2-31e3-4a8b-8b70-d8a9f0af9f1e", "sighting_of_ref": "indicator--409d627c-ea4d-48a8-89e1-400f3e24c563", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbedf78-9aac-4090-8afc-5df340815af1", "sighting_of_ref": "indicator--409d627c-ea4d-48a8-89e1-400f3e24c563", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33993c55-d507-48e2-bd8e-07b85040431f", "sighting_of_ref": "indicator--eec20c91-e461-40a2-8c43-6e9d53652beb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730a126f-3fc5-4ebf-884a-1364529613c8", "sighting_of_ref": "indicator--eec20c91-e461-40a2-8c43-6e9d53652beb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201b4da1-e951-4497-86a2-671a996f3a27", "sighting_of_ref": "indicator--e6795236-a360-40de-9ff2-cde67e762f74", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689e8cae-b887-48bd-afe1-8aae61fbf0d6", "sighting_of_ref": "indicator--e6795236-a360-40de-9ff2-cde67e762f74", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6dbe98-ac3b-45bf-b8ae-5ab90a96f1ba", "sighting_of_ref": "indicator--e6795236-a360-40de-9ff2-cde67e762f74", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672881eb-d444-4ed8-995e-0729669f9c0c", "sighting_of_ref": "indicator--9125495c-ac48-49c8-880b-9fc31dc07311", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19a5564-17be-4922-a2ab-e5b657cde64b", "sighting_of_ref": "indicator--9125495c-ac48-49c8-880b-9fc31dc07311", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206cee0a-5d15-44ad-8360-23284af11183", "sighting_of_ref": "indicator--041909cd-1bff-4917-acd1-15da37f5ab48", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9601fedc-3560-41a4-ad29-7149e01b1c99", "sighting_of_ref": "indicator--e3dd9c70-941d-42be-92a2-6f9c9a01fd82", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0999df9d-4776-4a60-8eef-d45226fcc8d5", "sighting_of_ref": "indicator--2877959c-58f6-4136-b06d-0bf3828e525c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e0fd31-4144-4531-bdcd-3be726d3624d", "sighting_of_ref": "indicator--2877959c-58f6-4136-b06d-0bf3828e525c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc81c80e-434c-405b-bb18-240c9bff8733", "sighting_of_ref": "indicator--2877959c-58f6-4136-b06d-0bf3828e525c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce28c57-9c53-48b9-b984-92768706a764", "sighting_of_ref": "indicator--f44c44b4-8e92-432b-ab26-a16e03874d53", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140f1fb1-e0e3-4853-9619-bb18d246956b", "sighting_of_ref": "indicator--92df6acd-e2af-4e13-af83-dc5baf675ae2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8be79c8-b9a8-43e0-8479-3d392afc3ed3", "sighting_of_ref": "indicator--92df6acd-e2af-4e13-af83-dc5baf675ae2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce7931e-1b69-467a-9270-9d944226b723", "sighting_of_ref": "indicator--92df6acd-e2af-4e13-af83-dc5baf675ae2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500844bf-1be5-4091-bbc2-ff7d5a6d0f01", "sighting_of_ref": "indicator--42914005-6684-4ef7-b062-7c4ae8a28b27", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a6c38a-8db9-439c-a9f8-72954aadba2b", "sighting_of_ref": "indicator--c66b5c88-d4f3-4ae0-9f16-8b18a90cb804", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3e5c7e-9595-4a16-8a01-2aa0d0b6b6d1", "sighting_of_ref": "indicator--c66b5c88-d4f3-4ae0-9f16-8b18a90cb804", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3f8af3-38fd-470e-b1f3-896d68fe62d3", "sighting_of_ref": "indicator--c66b5c88-d4f3-4ae0-9f16-8b18a90cb804", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819f66c1-86d5-43c7-8890-29f5ddc33b77", "sighting_of_ref": "indicator--f60ad903-4290-479f-83c0-e6b7ec87b413", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f651dd9-71e4-437e-ae92-8242d7244530", "sighting_of_ref": "indicator--f60ad903-4290-479f-83c0-e6b7ec87b413", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0546998-a01b-411b-8c40-97d5ec2d8c74", "sighting_of_ref": "indicator--f60ad903-4290-479f-83c0-e6b7ec87b413", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43cdfe4-d0aa-4692-8935-e9bab882335c", "sighting_of_ref": "indicator--5557c023-a7d1-4c8c-8b20-1ffcd6e70edf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f79689-ec30-47a6-a581-c0f6c5f69a23", "sighting_of_ref": "indicator--5557c023-a7d1-4c8c-8b20-1ffcd6e70edf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7abcd99-7950-466a-8bd2-b7ebe033a442", "sighting_of_ref": "indicator--5557c023-a7d1-4c8c-8b20-1ffcd6e70edf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc4968e-f56c-47af-ace3-381313768dce", "sighting_of_ref": "indicator--934c6e11-7b84-42d5-84cf-4a1f2b0327f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737273bc-6bf1-4e47-918e-95cbd90eae71", "sighting_of_ref": "indicator--934c6e11-7b84-42d5-84cf-4a1f2b0327f2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c17c24-b417-494c-bc27-53242f37dfb6", "sighting_of_ref": "indicator--934c6e11-7b84-42d5-84cf-4a1f2b0327f2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf7ee33-f670-4270-a630-92647d4a7230", "sighting_of_ref": "indicator--181ceb1c-9dc0-4508-96fc-2b3d83b963e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d112b69e-087c-4942-bc05-9b5e8d1a50b5", "sighting_of_ref": "indicator--a4d39a66-8804-460f-a8e7-98c50f5bcd00", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932f11e4-c53a-420f-ba91-5c72cf74505e", "sighting_of_ref": "indicator--a4d39a66-8804-460f-a8e7-98c50f5bcd00", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb473b2-8136-47f0-b16f-784f337964da", "sighting_of_ref": "indicator--9895c87c-c2e0-43f5-b690-fe0865b0eaab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d462f444-2d75-45e3-bcc0-976867aa28c4", "sighting_of_ref": "indicator--9895c87c-c2e0-43f5-b690-fe0865b0eaab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44a655c-953f-4865-bcc0-25c1a60053d5", "sighting_of_ref": "indicator--4d18ca83-17a5-4a3c-9518-2380ee7b69c2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52509852-060b-4883-a7e5-e1e86de17446", "sighting_of_ref": "indicator--4d18ca83-17a5-4a3c-9518-2380ee7b69c2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbed7be0-9ab7-4ad7-9e30-5459bc04727d", "sighting_of_ref": "indicator--14a45be6-1a91-4387-90da-de7eae13a577", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c2dde2-651b-4858-a832-b9f1b6bdd536", "sighting_of_ref": "indicator--440f737e-88c0-43fd-93ab-fd8e7f5e3439", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac3e6ff-c644-4346-aea5-01f715d21ad5", "sighting_of_ref": "indicator--f061d8cc-c02a-4e60-a437-7d37228d48d3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b318ef86-c00a-4040-b907-0d18bfd28d6c", "sighting_of_ref": "indicator--d5d148fa-b4b3-435b-9994-7413524d4554", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ca6463-0bba-42c8-bbff-71a5941513b7", "sighting_of_ref": "indicator--b083a375-87c4-42f3-a495-3e20c1cc32a5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc4018e-53b5-4582-940a-18f1d1a9ca09", "sighting_of_ref": "indicator--6d3e8d16-6d38-48a6-8ef7-5254f1feb1d1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753f661a-f383-4c64-86ac-0f1e2d1bf100", "sighting_of_ref": "indicator--69db73d0-d730-4b9b-9c0b-6cef6f96df3d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a432df7-66d8-42a0-802a-ebcedfdfcd59", "sighting_of_ref": "indicator--c1588e55-00e1-4692-b31a-693ba817e8b3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f473e190-ccaf-47b6-b304-6a9805acd587", "sighting_of_ref": "indicator--a93ec8bc-e94e-4e80-a580-f795da63635e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a151e8d-d4d3-4931-b348-2491f2450fdc", "sighting_of_ref": "indicator--a93ec8bc-e94e-4e80-a580-f795da63635e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835f50c2-bced-4616-ad88-06521cd23535", "sighting_of_ref": "indicator--8c459e5a-3c4c-4c18-8e44-651955f5b15f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0b21b2-9cee-4289-b30e-d3d5648bc843", "sighting_of_ref": "indicator--8c459e5a-3c4c-4c18-8e44-651955f5b15f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ec458b-5825-4fca-8280-1c17a768b82c", "sighting_of_ref": "indicator--8c459e5a-3c4c-4c18-8e44-651955f5b15f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36620e2d-3bf4-49b3-b041-890585de30a2", "sighting_of_ref": "indicator--efd1364d-a4e2-4bb0-a7a6-ea1d7eab31f0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1553d593-7957-4e89-9b64-0c9ddf6452e8", "sighting_of_ref": "indicator--b8cb23d3-aeb7-4115-bdf3-034630c6a4a9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb04f382-a74c-4290-bb29-95b35db052c7", "sighting_of_ref": "indicator--b8cb23d3-aeb7-4115-bdf3-034630c6a4a9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9cbd776-cf8f-4446-a397-6fdd0c0a95e8", "sighting_of_ref": "indicator--b8cb23d3-aeb7-4115-bdf3-034630c6a4a9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c3a4f6-a458-4247-a62e-9ad93cdcbb63", "sighting_of_ref": "indicator--f19a3e25-8949-4d3c-8c03-8945f556ac7e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150b19a3-006d-4d36-9df1-f1df108d8ea2", "sighting_of_ref": "indicator--f19a3e25-8949-4d3c-8c03-8945f556ac7e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ed877b-d94c-4320-bbaf-900040454d69", "sighting_of_ref": "indicator--f19a3e25-8949-4d3c-8c03-8945f556ac7e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c3c996-74f3-4222-8e12-f60a18feec2c", "sighting_of_ref": "indicator--c01128f8-0c02-4e2b-b766-26fdb55b45c7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d93efd-4293-41d2-9ed7-1ec02e17a9a0", "sighting_of_ref": "indicator--f5920e09-f513-4ddd-83af-4f36c5e02bb1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ede702-27b3-4922-b783-9ffff314a685", "sighting_of_ref": "indicator--3da5d464-21a1-4b5b-9f89-d3a79ebd441c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5a3161-9d80-4f37-8c17-89ecd7b9680f", "sighting_of_ref": "indicator--dafc7863-5e61-42f3-a23e-5caa6422a11c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e241795-864c-41af-ae57-996c55983b0e", "sighting_of_ref": "indicator--b190af1d-d3fa-40d2-9940-2512b1b9cdfd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929100e7-630b-4c5a-8d05-b11998fc4828", "sighting_of_ref": "indicator--9ca6bc5b-e027-4840-b8af-75e9af243001", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5306f44-09dd-496d-9344-9ef956fb7425", "sighting_of_ref": "indicator--a2dabe5b-725f-4d9d-89de-2df11a40ed50", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccf6ac2-24ca-4470-a546-958d2b903a4e", "sighting_of_ref": "indicator--2771180e-ef55-4410-b058-5a4bd7d44523", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae9c07f-63db-46a3-b0c3-cceda5c9a16a", "sighting_of_ref": "indicator--f4721844-0456-4840-acb0-3a8c71e309d3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa5ba9f-c080-4a9c-ad4d-925a5234c17a", "sighting_of_ref": "indicator--f4721844-0456-4840-acb0-3a8c71e309d3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c82806-83ec-46df-ae45-5a2671940702", "sighting_of_ref": "indicator--7c470844-608a-499e-981f-28c48921f2ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc756453-41d9-4572-98ac-f4f3dd27eb27", "sighting_of_ref": "indicator--3b00bef2-cef3-4629-abb3-9ce7cc56d7c8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd6a802-03a2-4744-91fa-cfd1961f16b1", "sighting_of_ref": "indicator--0584a0d0-16fe-47e1-8b8e-1f01bf0949e1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c50a906-27cd-461d-8fce-8672e31bda4c", "sighting_of_ref": "indicator--0584a0d0-16fe-47e1-8b8e-1f01bf0949e1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c02cabb-9129-4b50-903b-1c96750cac5f", "sighting_of_ref": "indicator--0584a0d0-16fe-47e1-8b8e-1f01bf0949e1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f4b25e-7143-4c71-a633-35d87696a48e", "sighting_of_ref": "indicator--fb3355d0-5b48-4137-84e2-13d3265fe4b6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c9096c-b83f-4d12-8b8a-6a7749aed365", "sighting_of_ref": "indicator--fb3355d0-5b48-4137-84e2-13d3265fe4b6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7609927-4eed-4bef-bf2e-c13ef18feaf5", "sighting_of_ref": "indicator--735889d8-f003-4be9-b2a5-8821a3830f2f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42444183-c14e-43d0-99f5-1db7068f5d78", "sighting_of_ref": "indicator--2d1931f8-5d9a-41bf-b463-050d345be8d5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd5111c-22fe-4a4f-acf3-1a24e61641bf", "sighting_of_ref": "indicator--2d1931f8-5d9a-41bf-b463-050d345be8d5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27174f9-5a0f-40ca-8238-81cea73f626e", "sighting_of_ref": "indicator--2d1931f8-5d9a-41bf-b463-050d345be8d5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d0cabd-c0c9-4ebf-89ce-02873ef862c1", "sighting_of_ref": "indicator--32c9eda3-1762-48f3-b296-9b4a3a05d0ae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cb6330-83e7-4349-a113-7922a1b306d6", "sighting_of_ref": "indicator--32c9eda3-1762-48f3-b296-9b4a3a05d0ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7621a3f-493a-400e-be25-11118c6c01b8", "sighting_of_ref": "indicator--32c9eda3-1762-48f3-b296-9b4a3a05d0ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a22b021-4e21-4dfd-8906-7701f2a75a33", "sighting_of_ref": "indicator--a7eb9280-589d-4c75-9411-8358b1f22485", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060158f0-09bc-422c-bdbc-ee2be91c25a9", "sighting_of_ref": "indicator--a7eb9280-589d-4c75-9411-8358b1f22485", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8944e9e2-5c45-4f45-a663-4612d878350f", "sighting_of_ref": "indicator--a7eb9280-589d-4c75-9411-8358b1f22485", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c0cdf4-fbeb-4244-ba14-3226fdb61a51", "sighting_of_ref": "indicator--4a4a7bc9-08e8-42c2-a0b4-ebe1e33d0c21", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf03cb6-8c77-4076-af7e-9a9b57ced844", "sighting_of_ref": "indicator--4a4a7bc9-08e8-42c2-a0b4-ebe1e33d0c21", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117282be-5bf4-4058-8224-4adcf5882745", "sighting_of_ref": "indicator--4a4a7bc9-08e8-42c2-a0b4-ebe1e33d0c21", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b8c9dd-1607-4fc4-be00-d56972f20897", "sighting_of_ref": "indicator--4b850459-be14-4fa7-95f8-e095f7f0c5f1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4a60fb-92fa-42e0-af7f-0d19f79fbe7a", "sighting_of_ref": "indicator--4b850459-be14-4fa7-95f8-e095f7f0c5f1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706ff686-0578-48e7-88c1-a1da5d7150d0", "sighting_of_ref": "indicator--4b850459-be14-4fa7-95f8-e095f7f0c5f1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6166ef0e-2f02-483b-96e7-5e7da834fa19", "sighting_of_ref": "indicator--45a8f898-b3f5-49a7-a05e-a1607d471869", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02068666-e8fe-4804-be9d-e71932b21af6", "sighting_of_ref": "indicator--7b09a5ac-0fdb-43e1-8593-0b97842039aa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc54c355-635e-46cf-b665-162ab31bd9c3", "sighting_of_ref": "indicator--30839477-d06a-4b12-bd76-4a05c7b48360", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07be9589-d263-4b5f-a0cd-fc411330ab4f", "sighting_of_ref": "indicator--aaaf8b2a-adec-4207-9921-eb4ef27c61ff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcbd22d-d380-4655-bbdb-ab8efc1aadaa", "sighting_of_ref": "indicator--aaaf8b2a-adec-4207-9921-eb4ef27c61ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9c55c4-5176-4c64-90e7-51e8d1de6b85", "sighting_of_ref": "indicator--964a0dd8-48bc-40a3-8dba-9ddb345496a3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b93ac5b-de3a-4d02-99c6-f39ca4e48c90", "sighting_of_ref": "indicator--1bfc66fb-a218-4924-9dc8-d0114f7d2680", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84ae1b6-db42-4357-9db1-9618009ef567", "sighting_of_ref": "indicator--2f158e5d-7b7e-40e3-9b91-9e380fab8f97", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bceb60-71f4-404e-a6a2-55a2b00f843d", "sighting_of_ref": "indicator--2f158e5d-7b7e-40e3-9b91-9e380fab8f97", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427330f7-baae-4d24-b61f-9b1310ad95e9", "sighting_of_ref": "indicator--2f158e5d-7b7e-40e3-9b91-9e380fab8f97", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b34484-d9e9-43ba-99dc-a0fc9e447422", "sighting_of_ref": "indicator--b900b6e6-44ec-4f3f-a130-b2f70744b345", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1f3139-188a-4daa-83db-f29a302dd460", "sighting_of_ref": "indicator--e8e117f0-661d-4380-9a3a-b46cec36e09b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec8de39-670d-49ee-84d1-fbb6faa34e08", "sighting_of_ref": "indicator--ffca21d3-7895-4986-924d-02eed0fb8e61", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37432038-0762-48e5-becf-5b6db990704a", "sighting_of_ref": "indicator--7e516787-e923-4169-b09d-9c829325f57e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abc24e7-fc0e-44fd-9d27-de24ab774bfe", "sighting_of_ref": "indicator--7e516787-e923-4169-b09d-9c829325f57e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94cda51-63a8-458a-9025-65be01515dd1", "sighting_of_ref": "indicator--7e516787-e923-4169-b09d-9c829325f57e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4e1a71-afd3-4689-98e0-f25a44972aca", "sighting_of_ref": "indicator--0316515b-ef4e-434d-89dc-6983db2b5b33", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905b89a6-8075-443a-b419-3ada9f5a8659", "sighting_of_ref": "indicator--0316515b-ef4e-434d-89dc-6983db2b5b33", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2e700a-7a31-4a0e-a86f-c12ce0bc3859", "sighting_of_ref": "indicator--0316515b-ef4e-434d-89dc-6983db2b5b33", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9283d656-3a5b-4654-9d61-a5c6e2256b96", "sighting_of_ref": "indicator--29509b95-6520-4d76-9c47-bcc8a54b5874", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb0e482-9df2-41cb-87f6-01ea107b3341", "sighting_of_ref": "indicator--29509b95-6520-4d76-9c47-bcc8a54b5874", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbcc188-722a-4961-81dc-d5bafa7a5e89", "sighting_of_ref": "indicator--29509b95-6520-4d76-9c47-bcc8a54b5874", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571991d9-9d30-4fbc-a5b5-da2c7314e3da", "sighting_of_ref": "indicator--23a032a8-bb0d-40f2-8a99-da738dd7c6bd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66447ca-65f9-4ad2-9513-9c5e43a91552", "sighting_of_ref": "indicator--23a032a8-bb0d-40f2-8a99-da738dd7c6bd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ef7f0c-5860-4037-a392-0f9ed5d6cae3", "sighting_of_ref": "indicator--23a032a8-bb0d-40f2-8a99-da738dd7c6bd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31e52c7-4b2b-450e-8d09-a664b95d92a1", "sighting_of_ref": "indicator--2e506477-1010-4b2d-b991-80cd5f527b8f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--decd2fb6-5345-4fd1-966f-5ae79628841f", "sighting_of_ref": "indicator--2e506477-1010-4b2d-b991-80cd5f527b8f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d7d7d0-cb9d-42a4-85f9-c33c7f54c178", "sighting_of_ref": "indicator--2e506477-1010-4b2d-b991-80cd5f527b8f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08e2088-001a-44cc-b754-fa948543f901", "sighting_of_ref": "indicator--2b6087a5-f94c-4e17-821d-9af01855e884", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5861ba27-286a-4669-b1af-a5ac4d8b4ed4", "sighting_of_ref": "indicator--2b6087a5-f94c-4e17-821d-9af01855e884", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c501ea-7229-45ed-9945-f62ed38343c8", "sighting_of_ref": "indicator--2b6087a5-f94c-4e17-821d-9af01855e884", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7807fe03-16d4-4c14-8fb6-262acabd5a76", "sighting_of_ref": "indicator--1e8c9c86-bb9a-47e8-8e62-467905716500", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817ce594-279b-4798-866a-f40b4358afb9", "sighting_of_ref": "indicator--1e8c9c86-bb9a-47e8-8e62-467905716500", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a3ff93-f548-4d2d-8a23-132db1d3be43", "sighting_of_ref": "indicator--0e88c896-b9a6-48c0-87bc-67242b16466b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe7bfa2-2309-44be-b358-26766db83dcf", "sighting_of_ref": "indicator--5ab177e9-7651-4afe-8502-eaa112d19bbe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d36360b-2fc9-43c5-95d4-cb34d1c9024e", "sighting_of_ref": "indicator--15371d3d-85c0-45b4-8e09-eb8117b17ab8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5775ed7-6b71-406e-acc1-076a38bb4c96", "sighting_of_ref": "indicator--15371d3d-85c0-45b4-8e09-eb8117b17ab8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1aea7eb-8465-44ae-bb63-3042738c618d", "sighting_of_ref": "indicator--757ce897-83a7-4224-b094-4beb235e53ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b273bc-8c52-4601-81da-8dd0a4d94006", "sighting_of_ref": "indicator--a4a95373-a5eb-47f9-b994-b1fdf8cc3ad7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e379d8-3957-48d4-9723-03ab1314d482", "sighting_of_ref": "indicator--0fa08d58-a6de-4030-aadb-53a1639c6ccd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722a8e24-06e1-4b65-b0b8-b0f331a2882c", "sighting_of_ref": "indicator--97e3bb07-5745-4002-a46b-90f19558e533", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57a773f-1adf-4185-91da-f867d99f7fec", "sighting_of_ref": "indicator--97e3bb07-5745-4002-a46b-90f19558e533", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf036033-5a26-4c87-8478-c845e1f89bfb", "sighting_of_ref": "indicator--97e3bb07-5745-4002-a46b-90f19558e533", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a93007-ed03-4032-a63d-98f2d640a80d", "sighting_of_ref": "indicator--f3a2ee2e-cb24-4481-9fa6-a3e4f73a5df4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae70b2d-cabc-4ad2-a3e3-29b8256aaaf1", "sighting_of_ref": "indicator--5120149d-59cc-4b82-894b-b78f2f0b6acf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac5acaa-f792-40c6-b064-60cf83296c27", "sighting_of_ref": "indicator--0e1b5257-678e-4105-ae02-1ed4e9bd8edc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6522e5-bac9-4974-8d52-6b6554a94d2d", "sighting_of_ref": "indicator--bb2f46ba-e36c-48a2-a00e-996dad22ae11", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fa58ec-6062-4cb5-827b-bebdb800a601", "sighting_of_ref": "indicator--bed18278-46a4-4b2f-b4f9-e2b7a921eed2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d3b3d2-3082-44a3-8eb4-aa2fb3f48f06", "sighting_of_ref": "indicator--6e8cd19e-8a75-40e4-8963-8e053f717824", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21726cbd-c77a-4c01-8050-b026177598e4", "sighting_of_ref": "indicator--b36383c7-7656-401b-824b-729db2cf3477", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48496c5e-31d1-45cf-ab83-f9dd7d4e8f84", "sighting_of_ref": "indicator--bd379aab-dac4-458f-b6da-e482ea4f2715", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26eb4915-c301-41a9-9976-26c6360288e1", "sighting_of_ref": "indicator--2ef6d13d-afdd-42c0-86d3-5e451376e799", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afba9af8-b13b-4835-981c-2edd32e1cf7c", "sighting_of_ref": "indicator--74d6c5fc-94ff-4a57-8a5d-6d6d1fa4ccd5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1cac90-f0ee-4920-939b-acaf90f6d3e7", "sighting_of_ref": "indicator--afa3c6ea-f53c-490b-b7d5-8f03b7921054", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720c7bed-2013-484e-ae81-1384c908576c", "sighting_of_ref": "indicator--04631a8e-db78-4d71-9dea-84ece2c9c719", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e438755c-505b-4c8c-85ce-bcd370139c19", "sighting_of_ref": "indicator--a89611d6-35cb-4b4b-88f0-d84ee785f1d4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd502b4-8b90-4574-b1fc-230706ec9161", "sighting_of_ref": "indicator--1e250924-2d65-4e84-b3ce-d4a26b468773", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d3e46b-3ab9-496b-abfe-9b563ec3b478", "sighting_of_ref": "indicator--f50e0d0c-f01f-412b-9717-6d9e319bd355", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63507043-d145-40f2-b649-468375bc1837", "sighting_of_ref": "indicator--27eb2070-7e44-45d4-a0aa-145e9a7dc8b6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23d99d1-551f-4cca-ab59-1ca2f51fdac8", "sighting_of_ref": "indicator--8a89da67-8546-4fd3-b2da-29a0ff05aa56", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ced6c4-f89a-4f11-beb7-b02c0ab28ad9", "sighting_of_ref": "indicator--8a89da67-8546-4fd3-b2da-29a0ff05aa56", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbad2e75-8463-4733-8124-de1745bbb232", "sighting_of_ref": "indicator--8a89da67-8546-4fd3-b2da-29a0ff05aa56", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3a3fa5-ded8-4d23-ae69-72d63181a05f", "sighting_of_ref": "indicator--34f88da9-5fe7-4bba-a18c-dfc015ecc4ba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73eba9f-2885-4b85-b8f3-b7c1d8701db6", "sighting_of_ref": "indicator--34f88da9-5fe7-4bba-a18c-dfc015ecc4ba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf30d6db-9b63-4208-bf30-63a809c9121c", "sighting_of_ref": "indicator--34f88da9-5fe7-4bba-a18c-dfc015ecc4ba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8dcdb08-cb13-448a-a65f-870c83471fee", "sighting_of_ref": "indicator--406b1272-5ebf-4db9-8b74-adf3ca9e5306", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9576e20a-4661-4af2-83e0-fa2a3e051a25", "sighting_of_ref": "indicator--406b1272-5ebf-4db9-8b74-adf3ca9e5306", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d700be-9cb8-487f-943d-a7b0952f7fd2", "sighting_of_ref": "indicator--fa8bea82-00f2-4a91-b98c-59b2661ad832", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114dcf39-a511-429a-9652-e3d255d4f185", "sighting_of_ref": "indicator--fa8bea82-00f2-4a91-b98c-59b2661ad832", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83d3647-b46d-4589-9e62-47d435bd130b", "sighting_of_ref": "indicator--a475fa7d-e6fb-45d2-a397-71e84d98b453", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8197f99-0d60-4000-a774-c8b2cdb7de36", "sighting_of_ref": "indicator--4597f1ac-4943-432d-8f79-3550749dae4e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37700d66-b517-481e-b048-903c28786d33", "sighting_of_ref": "indicator--5210d083-1dfb-44cb-b54c-7973183618d9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af0b5b0-9726-4237-9a19-019369c71e28", "sighting_of_ref": "indicator--5210d083-1dfb-44cb-b54c-7973183618d9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d16f346-614f-413f-93f1-b342b4080d8b", "sighting_of_ref": "indicator--221137a3-8403-41bc-b35b-5b18efb77509", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5bf92d-c13b-4519-9f1c-3cfc26431077", "sighting_of_ref": "indicator--51c821f5-9d65-42ef-b26c-234654bacc8b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761ffb7e-de58-4e1e-af1d-cf96c9f23554", "sighting_of_ref": "indicator--fa7daa54-b887-4938-a8ae-02a5d54e109c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394e8a32-ef14-48d5-8243-374530ab3b45", "sighting_of_ref": "indicator--095ebe59-1126-46a0-82eb-3a1e0fd45564", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8507d5-16e9-42d1-88ff-622e2955764f", "sighting_of_ref": "indicator--095ebe59-1126-46a0-82eb-3a1e0fd45564", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8b0174-bdc5-4e9e-913d-71e6818e99e6", "sighting_of_ref": "indicator--f76922cd-814c-4c12-aa35-1028dbdd6bc5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ccfc5c-ba00-4450-9fdc-b0b89b152d41", "sighting_of_ref": "indicator--ff341106-f014-4fff-a3ce-3ddd384404c1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe48f728-adc8-4f83-bb33-8751f6ef76d5", "sighting_of_ref": "indicator--64c48aa0-2650-45a6-b5b2-682acad2fb1d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78618d59-8cf1-46d0-8c11-45b5f7cb13c5", "sighting_of_ref": "indicator--64c48aa0-2650-45a6-b5b2-682acad2fb1d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd805ed-47d9-427a-9ea1-b29bf797273b", "sighting_of_ref": "indicator--64c48aa0-2650-45a6-b5b2-682acad2fb1d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9e9eb0-82bc-477c-8189-10be8def9f73", "sighting_of_ref": "indicator--3c560539-2170-48e5-b459-df0b046905e5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3def8c-5c7c-4df6-8022-53a87f9058c0", "sighting_of_ref": "indicator--8704aa7a-a517-4ce7-b188-8a1f89e84b75", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9645103-439e-4a22-8bb0-6b44ee94e8a0", "sighting_of_ref": "indicator--c0d82ad8-8447-429e-8643-41f34a204e26", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ba6d92-818a-444f-97d4-a5cafee8e0dd", "sighting_of_ref": "indicator--4cf62662-edcc-43de-a441-4e999edd1264", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a60c490-afeb-4019-bb6c-7722c2aa38fa", "sighting_of_ref": "indicator--f717f9d9-633a-4dbc-ad19-293e836f9cca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4f758d-74d3-4937-ba70-30ae3440d957", "sighting_of_ref": "indicator--39208edf-0fe5-41d8-879a-41f8573897b8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85812dd-2e75-4527-92de-6d1ea7c6cd46", "sighting_of_ref": "indicator--2aaeac4c-d8af-4840-ba0b-cb10feb44744", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5745a016-f4e6-4e95-b090-943c145b95f2", "sighting_of_ref": "indicator--021ce25d-ab89-44ff-9a32-abcfb1e1f08b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbf4e17-c0df-4adc-8204-65c6cb66fd21", "sighting_of_ref": "indicator--021ce25d-ab89-44ff-9a32-abcfb1e1f08b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747b2be2-5723-4682-92f0-72e09cd79d77", "sighting_of_ref": "indicator--021ce25d-ab89-44ff-9a32-abcfb1e1f08b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943911de-559c-4b3a-90f8-5f99dba6bbc3", "sighting_of_ref": "indicator--5581e06e-7e59-4ce5-8d6e-21636bf5d59f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7038ee2b-e441-4476-9f26-f429b5b1830a", "sighting_of_ref": "indicator--97ba510d-78cf-4f0e-8b27-85b12c2b9a80", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3221f7-83ce-4545-8ad6-c52b0c2cc458", "sighting_of_ref": "indicator--97ba510d-78cf-4f0e-8b27-85b12c2b9a80", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29051b83-ca85-4c0a-aacd-c0194c17882f", "sighting_of_ref": "indicator--8252fc3d-8972-45ab-8144-4c3a111766f5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1153c937-d7b9-45ba-b4c8-bd2df317dc2e", "sighting_of_ref": "indicator--8252fc3d-8972-45ab-8144-4c3a111766f5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b98c5a4-22be-4ee1-93ef-2488a7844df3", "sighting_of_ref": "indicator--8252fc3d-8972-45ab-8144-4c3a111766f5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d433e6d3-fd2b-4ee4-b2a1-e94e1e84c8a0", "sighting_of_ref": "indicator--44d918de-2e89-4169-8ef5-f00d5e2be5b1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f99b23-78fd-439b-856c-550260494750", "sighting_of_ref": "indicator--fdffd56f-0e81-446a-968c-12ef897a1120", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b242713-c1a6-4a01-9189-e2338ef2bb08", "sighting_of_ref": "indicator--fdffd56f-0e81-446a-968c-12ef897a1120", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f549e05e-750e-4f0f-9b27-b370f125112a", "sighting_of_ref": "indicator--18b0ae2f-7aca-4ee6-ba3e-dc3c352b5036", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4804d3-b92e-46c1-bf5c-6bbd4d1e562a", "sighting_of_ref": "indicator--18b0ae2f-7aca-4ee6-ba3e-dc3c352b5036", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9fb66d1-e089-4e58-9cc0-9d1bd43b527c", "sighting_of_ref": "indicator--18b0ae2f-7aca-4ee6-ba3e-dc3c352b5036", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdf2f2e-323b-4867-821f-0b56ac8afd14", "sighting_of_ref": "indicator--c591634a-d1be-4dd2-9c2d-1ce675f894ba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3628af33-5e87-4fcd-89f0-f90bc1067320", "sighting_of_ref": "indicator--58c6648e-2bd4-4c9b-8cfa-102a05067193", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7977f568-b5fb-4bf7-8044-076d8579169c", "sighting_of_ref": "indicator--194b49c8-ff2c-4a8d-91e0-3251f13ea83d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40472997-155b-4e23-bb99-960c0e87e05f", "sighting_of_ref": "indicator--f36bddb4-cf76-46a9-ae97-6085983be766", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb08fb1-01ed-4d9b-8f5b-7777319d1a7e", "sighting_of_ref": "indicator--f36bddb4-cf76-46a9-ae97-6085983be766", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7498502a-bc64-4738-973d-6c05fc2d5e2e", "sighting_of_ref": "indicator--eb0e72c9-6c98-4ec7-8656-ddd3f303a247", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec376d3-7422-426c-bba5-610596569870", "sighting_of_ref": "indicator--2518e7dc-de9f-4443-b9fd-eb00cb30331f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0770a1-40ce-4dc9-beaa-825104090a27", "sighting_of_ref": "indicator--72766df3-171b-4b04-9027-4cd26d996368", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac96ef9-2e83-46e6-9c02-7bf9fa1e20ba", "sighting_of_ref": "indicator--76f5be4f-e802-49e3-992f-b53f2a0d24a1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567282b1-3594-4cb3-a9bc-a00663370371", "sighting_of_ref": "indicator--76f5be4f-e802-49e3-992f-b53f2a0d24a1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e2db18-a28a-40b4-ad9c-aa1286581ffe", "sighting_of_ref": "indicator--76f5be4f-e802-49e3-992f-b53f2a0d24a1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1373d12c-faf5-4f57-ac2e-a18a888b9f39", "sighting_of_ref": "indicator--bd86e82f-bd82-4413-bccf-7442e6ccc7eb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6069fcd6-7e9a-4503-a1c7-f61486eaab5e", "sighting_of_ref": "indicator--b0bb1e3c-baa6-4bdd-8f31-886da99b8cda", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934761ac-d958-4d5b-8f84-1cb7e4768879", "sighting_of_ref": "indicator--b33c5444-adc0-45b1-89a1-0317134ba7b9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19fccea-56ab-4c9c-b57a-b50527b34589", "sighting_of_ref": "indicator--b33c5444-adc0-45b1-89a1-0317134ba7b9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92215310-b9dd-4254-badf-2204fc30b16b", "sighting_of_ref": "indicator--b33c5444-adc0-45b1-89a1-0317134ba7b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2977174-06b9-4f37-a94d-1583556df257", "sighting_of_ref": "indicator--73a0776c-59b2-4bc8-bb69-f7108b00b0b8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a933a78f-7886-424c-9b68-bf9cbf6da5e1", "sighting_of_ref": "indicator--73a0776c-59b2-4bc8-bb69-f7108b00b0b8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29da2157-4002-4134-9d00-207628dcb096", "sighting_of_ref": "indicator--73a0776c-59b2-4bc8-bb69-f7108b00b0b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d196550b-425c-442d-a60c-646d4c6cd44c", "sighting_of_ref": "indicator--c05b5707-5efc-4157-a567-7b58d734085d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d035b1f-fca6-4b8f-af9d-7f385feebd1e", "sighting_of_ref": "indicator--c05b5707-5efc-4157-a567-7b58d734085d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76928627-2a8a-493c-834e-5917fd12a6b2", "sighting_of_ref": "indicator--c05b5707-5efc-4157-a567-7b58d734085d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46c4ed7-fa42-4536-96c2-ed624bfacfac", "sighting_of_ref": "indicator--66248843-843e-411f-b736-5fb09989f865", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2d398a-3313-4d6a-a2a4-3de8df42315d", "sighting_of_ref": "indicator--f894c4f1-7cf6-4f86-976a-cb5d44a0c95f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17424b49-b664-48b2-af4e-7862a26b4dae", "sighting_of_ref": "indicator--fc84c9cc-a957-4e92-9ff3-15ed860d5638", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c22441-0a54-4898-9863-d701c1d461d4", "sighting_of_ref": "indicator--800230a0-9593-4fca-b536-bcd5c5d7d1f3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec7c85a-7bf9-4b66-8a05-c6563fc3dc35", "sighting_of_ref": "indicator--800230a0-9593-4fca-b536-bcd5c5d7d1f3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b12184-55c4-4b96-a69d-d33ff0aef267", "sighting_of_ref": "indicator--800230a0-9593-4fca-b536-bcd5c5d7d1f3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88953546-3d66-461a-9d6d-93b2b77472ac", "sighting_of_ref": "indicator--e07c9ca7-b52f-4107-9626-cc17ce32469c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210f4839-4284-4f6b-bcaf-f7f06a167825", "sighting_of_ref": "indicator--e07c9ca7-b52f-4107-9626-cc17ce32469c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745b9f55-5e82-48bb-a7f9-643648f21838", "sighting_of_ref": "indicator--2518fe72-fb9e-41f6-b14e-7166df4edfb6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7e503c-2b9c-4686-a385-af4cc4a94455", "sighting_of_ref": "indicator--2518fe72-fb9e-41f6-b14e-7166df4edfb6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017dee43-bbc1-4e50-9d91-60c0a51338b5", "sighting_of_ref": "indicator--df451815-c53d-4986-9cb9-8eea6b02b849", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b92b58-7d03-4996-a114-f1e47f10caa0", "sighting_of_ref": "indicator--df451815-c53d-4986-9cb9-8eea6b02b849", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b15cb7c-0853-4278-8035-cad84ec6e681", "sighting_of_ref": "indicator--df451815-c53d-4986-9cb9-8eea6b02b849", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a10c11-1703-4aad-9d94-6bf193894e0d", "sighting_of_ref": "indicator--fd7f5a36-622a-433f-8fd7-df6839d9936b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b6436c-c164-4a2b-9648-63e6a62e9fce", "sighting_of_ref": "indicator--fd7f5a36-622a-433f-8fd7-df6839d9936b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b899ab8-295b-4f82-b218-7f8c2ee867f7", "sighting_of_ref": "indicator--0cf421cd-4d1f-487a-b912-28264343a843", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef21922d-c7a8-446d-8899-290986bdbc80", "sighting_of_ref": "indicator--0cf421cd-4d1f-487a-b912-28264343a843", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda1d0f4-f2dd-45a6-a08b-5411c604d7c0", "sighting_of_ref": "indicator--0cf421cd-4d1f-487a-b912-28264343a843", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e193b96b-ae4c-4073-b1d7-0c062183ac59", "sighting_of_ref": "indicator--c2c6e124-1605-4660-96af-1363c1756534", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95eff7d-ed0e-4db8-b2c8-60b5c26a066f", "sighting_of_ref": "indicator--c2c6e124-1605-4660-96af-1363c1756534", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1a1df4-8e80-44c4-9a7d-1b7175c0f28b", "sighting_of_ref": "indicator--3ad0d7ab-bb79-47b8-baee-457147e4d896", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16209497-0a8c-454e-8662-e9f7e06bd0d0", "sighting_of_ref": "indicator--3ad0d7ab-bb79-47b8-baee-457147e4d896", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4ea590-d73a-4bcf-9049-1e40b7088b11", "sighting_of_ref": "indicator--7b7ee8ff-7926-4dbe-bade-992c5500c3ad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26e38e3-0d67-4fa1-8005-d84aee8e4559", "sighting_of_ref": "indicator--7b7ee8ff-7926-4dbe-bade-992c5500c3ad", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77502f23-39fd-4373-a366-0e171b2034ce", "sighting_of_ref": "indicator--fc50bcf5-ee8e-442f-99a6-36610c511217", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b893e427-8092-4452-874e-43360a87873e", "sighting_of_ref": "indicator--fc50bcf5-ee8e-442f-99a6-36610c511217", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5aab9c-4aa8-4038-96e6-3d1ffe3a55f3", "sighting_of_ref": "indicator--fc50bcf5-ee8e-442f-99a6-36610c511217", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b13828-eeca-4b2f-b916-0180dd474954", "sighting_of_ref": "indicator--6c461edb-1c3f-407c-9e41-43e6fcb1c8dd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161822fe-1f88-47c6-a47a-81d0f42f9d91", "sighting_of_ref": "indicator--6c461edb-1c3f-407c-9e41-43e6fcb1c8dd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6d4cc9-e8ba-4f1b-b0ba-e5bedc57a341", "sighting_of_ref": "indicator--934e04bd-abb8-4f1c-b5fb-8cbcf1c02dda", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229e122f-7ff0-4062-a90a-551014b88b9c", "sighting_of_ref": "indicator--934e04bd-abb8-4f1c-b5fb-8cbcf1c02dda", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983decbf-d185-4272-8e69-f30b20891008", "sighting_of_ref": "indicator--1daa965d-1c0b-4b2b-8017-e8af9ababe70", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60aa7a90-fc27-40c7-8516-2e32f479a31a", "sighting_of_ref": "indicator--1daa965d-1c0b-4b2b-8017-e8af9ababe70", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30cc27f4-0132-401b-838f-a2cce3dbd826", "sighting_of_ref": "indicator--6a07039c-e734-4d97-92f8-753066755668", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56dbf11a-f554-49de-9060-c3cd74f25ee0", "sighting_of_ref": "indicator--6a07039c-e734-4d97-92f8-753066755668", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e054803e-8d70-40bb-9087-f4fcee4245d9", "sighting_of_ref": "indicator--6a07039c-e734-4d97-92f8-753066755668", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb82527f-c13b-4988-9dcb-2a56b1f8992d", "sighting_of_ref": "indicator--fb6a69d8-17d3-4b23-8d88-9f782db91f65", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe25f99-a9f0-4f6e-b4bd-8f86810c7393", "sighting_of_ref": "indicator--fb6a69d8-17d3-4b23-8d88-9f782db91f65", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7e249f-4919-4928-ba46-56827c8dbbc9", "sighting_of_ref": "indicator--5bf24e0f-5d9c-44ce-964f-cd09e52c2ad9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fb6c29-dab6-4f60-8659-c2d4b1e58145", "sighting_of_ref": "indicator--5bf24e0f-5d9c-44ce-964f-cd09e52c2ad9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e58c860-11e9-4a2b-8006-c30d47282a90", "sighting_of_ref": "indicator--39cdd23b-5da6-4b2b-90fc-db4e4311d3af", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e679ce45-4c7e-49aa-812e-b1d0d0bd63ac", "sighting_of_ref": "indicator--39cdd23b-5da6-4b2b-90fc-db4e4311d3af", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5caa81-33e9-4050-95a2-4f6419909da6", "sighting_of_ref": "indicator--39cdd23b-5da6-4b2b-90fc-db4e4311d3af", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1550f6a5-3fdc-4af2-96db-0da0d8c6dafa", "sighting_of_ref": "indicator--0efb1626-59a3-4d92-b869-b6910f8c09e4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fe6e32-05ce-4c58-94bd-18addb20b9a8", "sighting_of_ref": "indicator--0efb1626-59a3-4d92-b869-b6910f8c09e4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f1ecbd-f7e6-4fd2-b069-7cedd6ad8354", "sighting_of_ref": "indicator--0efb1626-59a3-4d92-b869-b6910f8c09e4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04ce36e-0fa5-475a-ac6f-95ae1cdf58a0", "sighting_of_ref": "indicator--35554554-3c91-4a08-83dc-31a61d8fc7bf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87692102-5d68-4c4d-b363-0e84324469c0", "sighting_of_ref": "indicator--35554554-3c91-4a08-83dc-31a61d8fc7bf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46671d9f-5005-4b74-99f6-be2fcd44c38b", "sighting_of_ref": "indicator--7bebd552-315e-4dc2-8f93-21afeb5fe732", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41197b2-6c19-44e1-90e9-f8f01a948dca", "sighting_of_ref": "indicator--975352aa-cb5d-4fc9-8f7a-e720c18b89f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438c3b92-0b30-408a-aef4-61023bb1f7d1", "sighting_of_ref": "indicator--975352aa-cb5d-4fc9-8f7a-e720c18b89f2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c18b47b-b046-4c06-a6a8-9d90a3709481", "sighting_of_ref": "indicator--975352aa-cb5d-4fc9-8f7a-e720c18b89f2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4075f501-ebfd-4df1-a33f-41c7372ffa9a", "sighting_of_ref": "indicator--dbd30988-dfe7-460d-8208-f44c252a9793", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e178a1bc-ed5b-4833-b48f-125110c9c117", "sighting_of_ref": "indicator--dbd30988-dfe7-460d-8208-f44c252a9793", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90aa41d9-8cee-4200-aeab-76fb27c6f59c", "sighting_of_ref": "indicator--dbd30988-dfe7-460d-8208-f44c252a9793", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe394ef-3fbd-471f-a86c-f1b85c0dee28", "sighting_of_ref": "indicator--fbfb6dc3-cfce-4342-83ab-1d0c36b2c4e2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc60bd1-3098-492b-ae86-1419a485db15", "sighting_of_ref": "indicator--fbfb6dc3-cfce-4342-83ab-1d0c36b2c4e2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5581d6-4017-446d-aee0-1262787ba597", "sighting_of_ref": "indicator--dbc045d9-fa8b-4625-8839-db14d2a4b10b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1227a51-30e5-4dfd-823a-18364dfac9ac", "sighting_of_ref": "indicator--dbc045d9-fa8b-4625-8839-db14d2a4b10b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e439ca-4826-4223-9894-d357f459f1eb", "sighting_of_ref": "indicator--dbc045d9-fa8b-4625-8839-db14d2a4b10b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e5a0ee-3813-49d5-a9ba-19499461e3e4", "sighting_of_ref": "indicator--a9bfc349-acf3-49a6-bbd5-dc23b797df89", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da35882c-a93f-440f-8d6f-4323f81aa80b", "sighting_of_ref": "indicator--a9bfc349-acf3-49a6-bbd5-dc23b797df89", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fe4f0c-71be-4c0f-b2d4-21e8de4fcbde", "sighting_of_ref": "indicator--a9bfc349-acf3-49a6-bbd5-dc23b797df89", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c25084-a4fa-4611-92da-93d574a86889", "sighting_of_ref": "indicator--8e1a8283-5aa4-492e-b49d-c423a4c018a4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddaed4e6-1875-4398-8340-cf680bca7308", "sighting_of_ref": "indicator--8e1a8283-5aa4-492e-b49d-c423a4c018a4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c275c73-b9a4-4f77-a4f6-4bbc5004761e", "sighting_of_ref": "indicator--662be27c-bce4-481d-8cdb-7e335ef6d9b1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ff4431-a2c1-4fb7-b5f0-1b30c8fd2683", "sighting_of_ref": "indicator--662be27c-bce4-481d-8cdb-7e335ef6d9b1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ae8325-25df-42a5-825c-cc89c4fe0e8f", "sighting_of_ref": "indicator--382c9bc5-312f-4b3c-b17a-d6e93a4eb03e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bb10b3-38bc-4e35-a313-7d7be4269b70", "sighting_of_ref": "indicator--382c9bc5-312f-4b3c-b17a-d6e93a4eb03e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5d89cd-0a4d-4dc4-ad88-2f13540fa060", "sighting_of_ref": "indicator--382c9bc5-312f-4b3c-b17a-d6e93a4eb03e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b85ed83-24bf-4c23-a6b9-cea61a2caf1c", "sighting_of_ref": "indicator--94717e05-9c3b-4c07-bb7f-656bc4561b4e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2745a4ef-117d-449d-83cc-6d38e0b99e8f", "sighting_of_ref": "indicator--94717e05-9c3b-4c07-bb7f-656bc4561b4e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8891e099-9184-4371-9df3-0150eea548bd", "sighting_of_ref": "indicator--9a7f7875-f1c9-4a9a-992f-f2cb42fc6a66", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a226983-e9c7-4f34-8fd2-a718b416d0c7", "sighting_of_ref": "indicator--9a7f7875-f1c9-4a9a-992f-f2cb42fc6a66", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b2e132-df92-4c11-8557-b68115b29876", "sighting_of_ref": "indicator--bd29d740-5b08-4f9c-9a0a-8481f69d8a5c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f8b62b-668a-4711-a492-c1f106f64645", "sighting_of_ref": "indicator--bd29d740-5b08-4f9c-9a0a-8481f69d8a5c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cc9e58-0c40-468f-90ec-1626b0d5e2d5", "sighting_of_ref": "indicator--bd29d740-5b08-4f9c-9a0a-8481f69d8a5c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8e6b7b-a9c3-4733-ad5b-6d960e815b3a", "sighting_of_ref": "indicator--aabd012c-c7e6-4cc5-a7fa-d43891aa365a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef19af0-8336-4f20-b40b-ddabf761ddea", "sighting_of_ref": "indicator--8946f797-cca1-4d68-b161-70ce416809f1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0707bc-b224-4503-8ff2-109e8af81c7f", "sighting_of_ref": "indicator--8946f797-cca1-4d68-b161-70ce416809f1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51137a13-6e12-4eab-8a8a-f03dec998b8b", "sighting_of_ref": "indicator--d1d54bb4-8942-4f3f-93b5-b543461938cc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bda7d3-4b84-4afa-b668-acb9ae4bfaab", "sighting_of_ref": "indicator--d1d54bb4-8942-4f3f-93b5-b543461938cc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd1ed75-0a36-46b9-9e9d-2becb7ba28d6", "sighting_of_ref": "indicator--02fd8b41-a0fc-49ec-8531-765c754995cf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a4a090-267b-4da3-8025-bb1cf63cbb2b", "sighting_of_ref": "indicator--02fd8b41-a0fc-49ec-8531-765c754995cf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d21efca-3365-475b-928c-c57879768c56", "sighting_of_ref": "indicator--02fd8b41-a0fc-49ec-8531-765c754995cf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9cf9215-465d-4d4a-acf2-0d3c97aeb68b", "sighting_of_ref": "indicator--d92289c0-fdf6-4316-bfa8-4c3720204923", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b37b92-04ef-4279-a1bf-70a924492ee8", "sighting_of_ref": "indicator--78eee8de-bc5b-400c-be0b-81df266a5aad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00dd5ce8-527a-48dd-8ab5-3a1f39e9b773", "sighting_of_ref": "indicator--0632872d-f847-4915-b589-7645448a283d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25482814-3afd-4172-8b8e-6596b246f1aa", "sighting_of_ref": "indicator--0632872d-f847-4915-b589-7645448a283d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8687d1d8-b356-4cbd-a8d4-40f715b42b0c", "sighting_of_ref": "indicator--0ab131e6-b138-4d22-b643-34664d3adb15", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6919e61-c0a9-4fbe-b8a1-7e760183860f", "sighting_of_ref": "indicator--0ab131e6-b138-4d22-b643-34664d3adb15", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f350c56a-a2f9-4c0a-895b-7c20c8ce0bdf", "sighting_of_ref": "indicator--0ab131e6-b138-4d22-b643-34664d3adb15", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea8f0e7-0b1e-4447-a2ee-fa38d654213f", "sighting_of_ref": "indicator--e08cf948-efdf-49d9-89c5-62ae1e4714ee", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bcdbcb-15d1-466d-9dab-a3a476a90082", "sighting_of_ref": "indicator--e08cf948-efdf-49d9-89c5-62ae1e4714ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbfcc90-fa35-4aff-bde0-173dd1d6bede", "sighting_of_ref": "indicator--b032e096-ecb4-449d-b1f4-c621ed2ae3b3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0fda6b-51c2-40e0-ac4e-690032f4bebc", "sighting_of_ref": "indicator--a52b02bd-aac6-4c48-99b6-14d9edb1dd34", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a718bf-8cf2-41c1-881e-8284cf1c59c0", "sighting_of_ref": "indicator--2337ba84-3057-4606-9f2d-6a7658e1fe11", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d959e7-a716-4375-ba61-04fcbc1392c4", "sighting_of_ref": "indicator--e49d2364-541f-42d3-b443-279fee247696", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d77f820-694a-44e3-9962-a0af78068cc6", "sighting_of_ref": "indicator--288ab1b2-913c-468f-b407-0bbf184405ae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1393e9b-1c0c-41d8-9b13-67f787918503", "sighting_of_ref": "indicator--288ab1b2-913c-468f-b407-0bbf184405ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bf26c3-2b7e-4af2-905c-c63b6e8389de", "sighting_of_ref": "indicator--288ab1b2-913c-468f-b407-0bbf184405ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703de119-0412-49bf-b8d4-baae7e061db5", "sighting_of_ref": "indicator--59904f3d-620d-49ae-978c-1f1b1f458480", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdecaf45-a2ad-4d63-8259-830633587be1", "sighting_of_ref": "indicator--79e87bbb-2cb0-4fa7-812a-1cf8b87db0fd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8632f605-4394-4be9-b2ff-2192a36865b4", "sighting_of_ref": "indicator--2e280c4e-cb53-4662-b8be-b487498f9c0d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42f8582-b44a-44c8-a05c-1a5a677abaa2", "sighting_of_ref": "indicator--2e280c4e-cb53-4662-b8be-b487498f9c0d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a34fbe-2755-4230-b039-b2d8000a3b5b", "sighting_of_ref": "indicator--0e3217e0-297f-4c4c-a8ae-f344cba56bc6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78617ed0-6af3-4c39-a56f-d10f5d43d9d1", "sighting_of_ref": "indicator--0e3217e0-297f-4c4c-a8ae-f344cba56bc6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250551a4-a34e-4ab3-af9e-99573749a67c", "sighting_of_ref": "indicator--e7ad64e7-4e11-453c-a8a4-3eb010d87a42", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2578786-590d-4049-9fa9-255a9d4811db", "sighting_of_ref": "indicator--345df9dd-7949-4bc2-9e83-0c3e25d1bdac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89c4d3a-e6a6-43bb-a426-782029434e3f", "sighting_of_ref": "indicator--d7e79a81-94c8-442d-98ee-e0a80f41ec50", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f9e558-1fc1-4ec9-839c-a1c2355a840f", "sighting_of_ref": "indicator--e110cb39-013f-4f50-b8f5-dfba57f62440", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe434b91-4e7b-4108-ab30-44c9b5e22f03", "sighting_of_ref": "indicator--e110cb39-013f-4f50-b8f5-dfba57f62440", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569ac0bd-a65b-4086-acda-d21c46a62b56", "sighting_of_ref": "indicator--efc3c29f-3df8-4d14-a70c-605bcdf1f5d1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b47ed35-3de0-4104-a1b6-5f9109e40989", "sighting_of_ref": "indicator--91528b9c-612b-4c06-b5fb-043819b86cce", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136c0349-4387-4597-98d8-964d2be1ebf8", "sighting_of_ref": "indicator--8b14f7a2-ebbd-47f1-8285-9476627bc470", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07aca0a-f252-442d-92f5-f6ec176f03ad", "sighting_of_ref": "indicator--2d589e40-a53f-4b2f-9a98-f970dd59274d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca435ec-67df-4f8f-a02e-c891a8375625", "sighting_of_ref": "indicator--f50d6566-a888-41fa-9db8-72a4a778ef65", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616c35c3-c9f6-4c91-b4f9-caf28a0ff65a", "sighting_of_ref": "indicator--44ebadca-8e74-450a-ad8e-9f3bea197043", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58be3f2e-1e74-4ed0-b80b-a9dd10ef6628", "sighting_of_ref": "indicator--b59b87b6-b954-4457-b004-5856e1724a8e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e17f75-dce4-4852-a154-92240434f9cb", "sighting_of_ref": "indicator--23a05cff-4cdc-4a4d-bbe8-ee37f593ff7b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b46513a-cdc8-4ec5-a33c-ac78b64ce11d", "sighting_of_ref": "indicator--39f42b87-6247-421a-ae7b-0862c25ebf67", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d280e22d-e4cd-4431-97c4-46ff3788e349", "sighting_of_ref": "indicator--39f42b87-6247-421a-ae7b-0862c25ebf67", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1693d1dd-9817-4c21-9f67-78da71d10609", "sighting_of_ref": "indicator--39f42b87-6247-421a-ae7b-0862c25ebf67", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a0d952-8f49-4188-9532-9f80c1aafc01", "sighting_of_ref": "indicator--a461d488-56f7-4df3-bda1-7b5d8b03ff6c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fba756-17ce-4c32-abfa-87b856db5a7d", "sighting_of_ref": "indicator--d4dcc3ee-0969-4180-9d19-95aadf3c405d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2eeec1-2a97-438b-a792-110cc03d9191", "sighting_of_ref": "indicator--d4dcc3ee-0969-4180-9d19-95aadf3c405d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27bfba5-c8a3-4c5d-8d3e-5b2049ab32b0", "sighting_of_ref": "indicator--d4dcc3ee-0969-4180-9d19-95aadf3c405d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dccb02f-5f01-4541-98a1-6b5273a5e416", "sighting_of_ref": "indicator--f5acd671-b81d-4ef1-9e56-9ea29691c6c0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc90b22-3083-4e61-8447-d4b9d57d8071", "sighting_of_ref": "indicator--14ff7e5b-15f1-4ee2-9e62-9331fb209d53", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9f7cf8-4bb8-4e95-9ad6-c8e123accf48", "sighting_of_ref": "indicator--5e75833f-45b6-4cc2-aa24-9560e83eab05", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8cff81-ec73-41ce-b164-86bdecb8e43f", "sighting_of_ref": "indicator--5e75833f-45b6-4cc2-aa24-9560e83eab05", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ff57fb-5b1a-4bcf-ba6e-39b21bed5b3d", "sighting_of_ref": "indicator--9123eff8-cddf-4870-bebb-3ce199969e67", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15997cfc-21aa-4b31-8b7a-ee9274aeab27", "sighting_of_ref": "indicator--2552f262-749f-4484-bbde-bafa7f19dbf0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce266983-107e-41a5-89c3-16779859e95f", "sighting_of_ref": "indicator--2552f262-749f-4484-bbde-bafa7f19dbf0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed351faa-e07f-4b07-ae22-89ebccd67980", "sighting_of_ref": "indicator--74dc2c52-2860-43f7-996d-677e358db220", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f71264-48f9-44dd-bca5-09eafc74edf6", "sighting_of_ref": "indicator--321bd4b3-2d9d-4c5c-9ddc-199a09162afd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053a157e-5c35-437e-8fa8-d07890b50979", "sighting_of_ref": "indicator--7292e6cc-7823-4f6b-8ec1-d27ad9a908a1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d95871f-2e25-4e69-84f2-fbbdb5039bb0", "sighting_of_ref": "indicator--a81e0236-ead3-4adc-a46a-d66c9189c6be", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dde7069-e758-4b64-a5a0-8314cef319ce", "sighting_of_ref": "indicator--8681984c-4fc2-4d07-803b-d4249e0652ee", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579f16c1-46e9-44f6-9066-37834966a78a", "sighting_of_ref": "indicator--8513f407-031c-46a5-94bb-bc735cc44cba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c9e8e8-aedf-4388-9967-bee3a965d3e0", "sighting_of_ref": "indicator--1a995bc7-4f18-4664-8357-f8484cc7dc4b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93b43fb-c9d4-413f-8bf2-0d217d973ad2", "sighting_of_ref": "indicator--7b075095-85b7-41fa-8619-f5103870af5a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a7a7b8-868c-42b0-901e-b5cfd09a9d81", "sighting_of_ref": "indicator--b9f1489c-6790-467f-843d-45791f16aed3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4251463d-ab9b-40db-8738-0065f001e758", "sighting_of_ref": "indicator--62f8ab8d-4103-44ca-bb25-1786c74fb19c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698a00d3-efb9-4dff-97d4-bd8fc7a3d98a", "sighting_of_ref": "indicator--b46567b9-f84e-4469-88a0-11e9eb25eb69", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fad15e9-69db-4f9a-bb52-e57567e6c2d4", "sighting_of_ref": "indicator--bfefa227-085d-49ae-a558-f4e5e9376660", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0427224d-09c3-4fa9-95c9-a8f9f1f45105", "sighting_of_ref": "indicator--2038f51f-7f20-4803-b199-31fd901e1867", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e503c15-34cb-4be7-9471-d5d4f5e5aafd", "sighting_of_ref": "indicator--de136d53-b292-4840-ae38-424fb098e70e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdbbe97-ff89-4fe1-9c22-c4093b15a7a5", "sighting_of_ref": "indicator--bbe31c20-e7cc-4126-820d-87364dd1e48b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb733257-b1b9-4300-9100-d3e441ccdbb2", "sighting_of_ref": "indicator--12f6128f-ba15-45a6-ae34-d25b90a02082", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0731462-c85e-4984-8192-5c57adae86e7", "sighting_of_ref": "indicator--cb459ee2-94c2-4020-864b-a98b1d82c83f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffea5ab-d601-45e7-9953-d4c429dcff8f", "sighting_of_ref": "indicator--a6c29c79-d00d-43dd-b441-07902c5811b2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a789017f-3ded-457a-8ce2-6f1476aae9b5", "sighting_of_ref": "indicator--e66aaf9d-3f9a-445b-b752-def0d8a5b336", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f63d77-b774-434a-805e-a6a6252eabbe", "sighting_of_ref": "indicator--c06022bf-9729-4cac-882d-8167628d1cfa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e38351-05ff-4e8c-b581-54158d14a6d7", "sighting_of_ref": "indicator--ab93fe23-9068-40e2-b8f3-e1e0f3d81ec0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f578d63-1b5c-4197-b977-c45287f5be1a", "sighting_of_ref": "indicator--26d1dd9d-406e-4a6e-bb28-515b9a732665", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d897298c-122d-4a6e-a098-188715858888", "sighting_of_ref": "indicator--ab16f4a0-442c-4524-ba6b-901d3c5a6333", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279a97db-7a6f-4f59-a873-1a47259abfbe", "sighting_of_ref": "indicator--4aac07f7-257b-441c-8d90-68e1d661ef6e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c92e6a6-ec40-45fe-bd4f-1ae11bb7754a", "sighting_of_ref": "indicator--7611339e-760e-44d7-8dae-6e6c82cc33b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eabe560-1ff9-41e8-b667-211ff9e5a401", "sighting_of_ref": "indicator--6b39b90d-0a93-45b8-8d9f-3298b5d6311d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9873c6b0-ca34-4f6f-b60b-3cddcd31ba4e", "sighting_of_ref": "indicator--86ce90c7-2d8f-4641-b758-9504ca23a709", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b16946-2a6b-4510-a5b9-546a73acef7e", "sighting_of_ref": "indicator--53edc4dd-d0d0-46c9-9384-d9575180d4e8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43acaf7-893d-4136-a336-a6db33ec62fe", "sighting_of_ref": "indicator--0515925a-7119-4d5e-9663-be4035cb1d9c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d858200-7347-49a1-b94f-6562b95aa6b9", "sighting_of_ref": "indicator--c682d94c-dac4-4575-a5b4-36648d43aa95", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59647919-8934-4680-9826-d982404f3311", "sighting_of_ref": "indicator--0b368124-241c-4346-83fd-accd8cf4fe73", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44570cb8-3a5e-48ad-a5c0-3ee7983b07d2", "sighting_of_ref": "indicator--5b0b119c-83f0-4074-9258-617ca632d4bf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175d1021-0a9f-476d-9780-cb23a479fa9a", "sighting_of_ref": "indicator--8298a03b-4945-401f-a580-32556f5944a5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cd8e4b-2024-45e2-8aef-ab755b727cb0", "sighting_of_ref": "indicator--fd246546-c81f-4821-a70f-db2d49bb3b4b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5592b913-61b7-4c91-91d4-7d2e801009e9", "sighting_of_ref": "indicator--f89f9797-116f-412f-b9ae-d590c8151253", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabca499-447b-4219-b5e0-229aeeef9a63", "sighting_of_ref": "indicator--f89f9797-116f-412f-b9ae-d590c8151253", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2197d9f3-5ceb-4787-8f74-b456e5520024", "sighting_of_ref": "indicator--a600e95c-ba92-4f86-87ca-a022eac01580", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db207ce-4b80-4883-b04e-5b7b5682c608", "sighting_of_ref": "indicator--bd5d7429-060f-42fb-91dd-5cbcd02e9919", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee0caf6-e078-4a11-98a0-27e9208c0427", "sighting_of_ref": "indicator--42a476d8-c349-4a54-9ff9-ea804d86f4f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b0e1de-7047-4dcd-b74a-3b7c9d4776d6", "sighting_of_ref": "indicator--755cc844-761a-46be-80d0-f80edc0ccb73", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2ebff1-80a5-4382-b3c9-8de54d20f386", "sighting_of_ref": "indicator--ba5d9b61-42c0-4e16-8d9a-5dc48de73586", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ff32f4-9532-42d2-bbc9-9c70c143da54", "sighting_of_ref": "indicator--2180cdee-f240-4dd6-8380-c568b8be5d43", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b551033a-ecab-4fd9-bc24-01ca8bfda40d", "sighting_of_ref": "indicator--30ef0c2c-1aee-4a86-b7e1-4ebd032fbb10", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd55d1fb-7e84-448d-b544-7b3a71c4a64c", "sighting_of_ref": "indicator--30ef0c2c-1aee-4a86-b7e1-4ebd032fbb10", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e714de64-56cc-458b-a2b3-223a60e51893", "sighting_of_ref": "indicator--f6022c1c-a0bb-40ca-891b-13f3fa7e2c5b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30e4e35-bbcf-490f-a4e2-9d1f6dd100b3", "sighting_of_ref": "indicator--5f918947-6265-4d8d-ad58-8b635876957c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21e881b-b4eb-462f-8c61-c7eef7929ded", "sighting_of_ref": "indicator--24009a5b-d276-4099-ad36-f52e0cc9fd1e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71262f3-aac8-4fa2-923d-7f26325ec17e", "sighting_of_ref": "indicator--dfb48868-1d99-4933-82ca-2f1e9c4ab4d1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa10a38c-606a-4594-a4b6-9706a0a31844", "sighting_of_ref": "indicator--dfb48868-1d99-4933-82ca-2f1e9c4ab4d1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f25ee3-7482-4b8e-8fe7-e4dff12cbc6a", "sighting_of_ref": "indicator--ff0becf4-5387-41cf-b0bf-e3262c96e7c3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c78bbe-c684-4084-8e25-eb139ac3beeb", "sighting_of_ref": "indicator--1ead0ca0-1145-4264-bb9c-21c1093c9276", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2caa92fb-5da1-424a-aae2-4d72a5915659", "sighting_of_ref": "indicator--34214aa3-907d-4851-aeda-4990f495a45d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63945380-f89e-40c9-b21a-15e9d83a3204", "sighting_of_ref": "indicator--87ef0e7d-ff3e-4f5c-adca-43701f53a759", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83dce844-8b33-4950-adb3-75cec7398fd7", "sighting_of_ref": "indicator--2780b07e-a463-4b2c-94d0-dceaf57cc6e9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bca6fd-2755-4030-a0aa-d127cd51cb67", "sighting_of_ref": "indicator--d1411937-e324-4de3-b5a1-6659192c324a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1547c125-b884-4c0e-819d-126cb5e0396a", "sighting_of_ref": "indicator--a9fe07b6-d904-43e9-a14b-039df035ae57", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721100af-1d8b-41c2-b2f1-ad84619a804d", "sighting_of_ref": "indicator--57755184-0c2d-4fd9-a59f-1e215a15e973", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74eecd9f-f02b-49b4-b5a2-f231031fe89f", "sighting_of_ref": "indicator--97919c5e-a896-46df-96c9-9d8140d3ef99", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8dda33-0643-40bd-97d2-416af4a8632b", "sighting_of_ref": "indicator--b8b93fc1-f76f-43b4-aa48-1ed3c86f0195", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ccf702-e396-4f64-bd78-566609c731f6", "sighting_of_ref": "indicator--0d442f44-e3ea-4520-bff9-944705681cbf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbde919-ebfa-46ca-b784-a60db3f111a6", "sighting_of_ref": "indicator--fcc476f5-8a82-4020-87ec-2ed7b9b94614", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c2ab34-ceda-4432-80b9-da9ed8cbb27c", "sighting_of_ref": "indicator--fcc476f5-8a82-4020-87ec-2ed7b9b94614", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3548a4-05de-43a1-81df-214209fbda50", "sighting_of_ref": "indicator--be5b11d7-ef41-4cbe-b5d0-f0896b032f95", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93691b5-030c-4dbb-874d-b316fffa3c41", "sighting_of_ref": "indicator--e4b5ffd0-2f09-4feb-a614-604d06b4856b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5899577c-94e6-4faa-a37c-2068b8de435a", "sighting_of_ref": "indicator--27f1cf3b-a6c2-47b4-9e77-029ba869d766", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74534456-1b4c-4c34-b040-ad3558525b3c", "sighting_of_ref": "indicator--3bc89312-7e61-435c-ac23-d2d91cf4f2c3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d97843-22cb-4371-9443-d7fe6c256334", "sighting_of_ref": "indicator--c8870981-17df-4145-b748-574736eec174", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48035907-0622-41b1-afa2-3e7c6b1f8ad6", "sighting_of_ref": "indicator--c8870981-17df-4145-b748-574736eec174", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c3b27c-7495-4985-b1d2-2b15533d2246", "sighting_of_ref": "indicator--f5fe5beb-9bdf-417c-b756-4db2f3dc9c2d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031933ea-23f2-486c-bb49-9939cac7fafb", "sighting_of_ref": "indicator--9715bad4-a957-44ae-8184-c14f58fe0972", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63ce900-86b2-4b14-8c55-c9259db0da00", "sighting_of_ref": "indicator--e7de529d-8f94-4945-9377-aee7fd8f4959", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1f7a03-6e73-476b-a875-03e3589a4e4f", "sighting_of_ref": "indicator--824f0f34-5f23-4315-876a-69b69ae9953c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35fd98ce-1e73-4fe7-96f0-4515b6e0b13c", "sighting_of_ref": "indicator--17ff8d01-ae18-479e-bc39-9e648560f75e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5508b6-1ebc-4464-8f04-97e9da9583db", "sighting_of_ref": "indicator--a48e9be8-2b3c-42fd-b4a7-c7809823c4d6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75d74de-baf1-4b94-b2ec-ca3550281559", "sighting_of_ref": "indicator--a48e9be8-2b3c-42fd-b4a7-c7809823c4d6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2d5810-0e06-43ff-9c4c-d99b33f9c914", "sighting_of_ref": "indicator--98f91412-667d-4e69-b8a5-b14eccc13ef0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d77c0d-5915-45cf-bb90-d7063305ab25", "sighting_of_ref": "indicator--38678522-750f-4992-a1d6-a8b61d899a33", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d44cb01-0b08-423e-aab7-16f722b193d1", "sighting_of_ref": "indicator--3f3b695d-a3c6-4e96-82ca-8dd5b19bcf41", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc53510-1bf0-423f-bd28-e20a94981352", "sighting_of_ref": "indicator--a91c2b68-3b81-4095-b26e-035180fad50f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9e8ed2-863b-44eb-a882-8f884bef2302", "sighting_of_ref": "indicator--927e5e58-5967-40b5-aa3c-9854fe999f39", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a235e2c-68fd-4d4c-ac18-5b66d70a2e39", "sighting_of_ref": "indicator--786c14c6-61d1-4e2a-b2df-4cafb074ac73", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4693e589-2223-4fa9-ae8b-4c493d877e4c", "sighting_of_ref": "indicator--310538e1-5c76-4964-8e06-b62bb83b14c5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734d8c6c-0e3e-4d58-8a6e-64f2da38cc7f", "sighting_of_ref": "indicator--51944248-353b-4953-a5f7-656066780b1a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95df22b3-2206-402d-9d62-2fc9d8a7bd42", "sighting_of_ref": "indicator--0c9a8d7b-4957-4816-a311-49b7200c8168", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870bb312-5f26-4107-8b03-272489bb172d", "sighting_of_ref": "indicator--3c44fd9b-b4c9-4eeb-b810-5d034bbdc5e3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d651c2e-6898-447b-8e4f-fb182f45a9ca", "sighting_of_ref": "indicator--c2025586-c696-4e69-a5ad-c869f9b9ceae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69879b46-3ea1-4776-99dc-10b8e6a25bad", "sighting_of_ref": "indicator--25002213-804b-417f-8745-675aa7e00322", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ba539e-d29e-4c1d-9842-50a6225dbe91", "sighting_of_ref": "indicator--730e9385-9641-4895-b55a-1605243c37de", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9d0856-2a69-4186-a3bb-bca6414e1d8d", "sighting_of_ref": "indicator--730e9385-9641-4895-b55a-1605243c37de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa8b5ce-7a35-4123-9e49-9128d27d2319", "sighting_of_ref": "indicator--515bcd43-4490-4176-b8e5-4c15b41c3326", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c06d486-e2da-4c41-b577-8f20a2355b8e", "sighting_of_ref": "indicator--4c000f0b-a5f6-481c-9422-c6f5448bec41", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf48e2e-d2a4-45c4-82cc-f789975224d8", "sighting_of_ref": "indicator--30f6057d-ca0d-4f30-9add-753e3b5407e9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c4a9af-cf5f-4b40-a204-846dfdd9a366", "sighting_of_ref": "indicator--198d5ffd-dbe1-4bd0-a576-f5e12745aa4d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc12ebcd-304d-490c-be4b-17ddae11b628", "sighting_of_ref": "indicator--7d793067-1c93-4849-bb5e-ff2d12d9bf2f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9c9887-11e8-40f2-9489-672353b9a7c9", "sighting_of_ref": "indicator--175a6bac-d203-49d0-8a09-889967703e42", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822204c9-1e27-4656-87d6-83299aad84dd", "sighting_of_ref": "indicator--5829ec1f-d075-485f-b842-15bf269c5b2c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b808d119-be2a-4a8f-9f40-baf0fdcbb94f", "sighting_of_ref": "indicator--14c750c4-5c5e-4cdf-b606-9a4048d235e7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feac982c-c952-4de3-bfb9-46ce0909cab2", "sighting_of_ref": "indicator--c5aacff3-a33a-4a91-8d95-95549a3ab2e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b03dc7c-eea5-4340-9e94-ebe2ea6293f7", "sighting_of_ref": "indicator--c5aacff3-a33a-4a91-8d95-95549a3ab2e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac7e4ab-8171-4f0c-b9b0-7135486ad97e", "sighting_of_ref": "indicator--e424f923-11f1-4c9e-933e-b47571fc0eaa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745d563e-7b12-4eb1-881e-145513f8a795", "sighting_of_ref": "indicator--3a62a808-978d-4579-a2d6-751e8be2181d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e55c916-a2a9-43f3-8093-20092d4876ab", "sighting_of_ref": "indicator--9f97e989-6358-4799-80ae-8d13de576d6c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca7c22a-805b-4ce7-bb87-8aff2a5b2aa8", "sighting_of_ref": "indicator--6388e064-3fbe-4141-b932-87b991b4440b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07aa6975-5d97-45be-a773-0618a3f30795", "sighting_of_ref": "indicator--0003dd23-e6b4-4b27-b89c-bb2479c013b1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06184c73-5183-483b-b6f8-abfa6e76a037", "sighting_of_ref": "indicator--a7a001fa-ecec-4e8a-bc59-a4d1a816e94c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4245444-b5cb-4253-9973-1960c35b9993", "sighting_of_ref": "indicator--4b78c14f-83e2-4003-a784-f763b0efcb16", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce8faa3-23eb-4c67-ad1c-c77f4d71e4b1", "sighting_of_ref": "indicator--59f2fa36-5f3e-43fa-8ab9-d43138aee1d6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9011c08f-fdd6-4138-9241-2c530f0ffca4", "sighting_of_ref": "indicator--e698f89e-421e-49db-9585-54183118eb66", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9472711-eb58-40c1-b6c7-4994afcdb1a5", "sighting_of_ref": "indicator--467423bc-8dbc-4769-a818-4a7a1f88dba6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34ce99f-b3e8-42cc-aea7-21e5ef076745", "sighting_of_ref": "indicator--bdf2961a-6931-48c0-8ba7-e8b93a4e8b8d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e907312a-f3e0-4422-9482-c2685f8cd969", "sighting_of_ref": "indicator--ff312566-0794-402b-a223-1b615dbf7ee5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c29aa5-04c2-46cc-8317-16e22666c96e", "sighting_of_ref": "indicator--f5ed9fd4-42e5-4ae6-80a9-611fdcd8fe01", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347518fc-8900-4198-bd4e-54d4967e5401", "sighting_of_ref": "indicator--3f75b85f-2915-4743-9967-2e8ed7e97c54", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e326d0-dcc1-4505-bd32-c912bae5e718", "sighting_of_ref": "indicator--fdf90a96-1321-4c9a-826a-0c02672a9607", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e4c3b1-0498-4efa-ac79-bc5977a1bd34", "sighting_of_ref": "indicator--1538970c-e8c7-458e-9e72-8d82f95f317e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9931cc-d01f-4e54-a2d6-2e522c499c20", "sighting_of_ref": "indicator--46612174-ea7a-4927-a329-2cedaa759822", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201be059-eaf7-4e65-bbf2-56a5e0e792ff", "sighting_of_ref": "indicator--4cc8850f-5016-4dc5-8849-6073303b56ce", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935b4e8e-cbaf-4c09-bdfb-4bd66efec0b5", "sighting_of_ref": "indicator--0b09f468-a382-4172-b1ee-f3587b8782d6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07403392-f27a-4dfc-bc49-64d7fd28d7f9", "sighting_of_ref": "indicator--c9523288-1880-4c72-8596-c1cb6ca93aa8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6eca0b-9d19-438f-920c-a0faa2a7b979", "sighting_of_ref": "indicator--43c816e3-ea6a-44bd-bcd5-c165638065ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d2c73d-dc2c-468d-b656-132da3b8e800", "sighting_of_ref": "indicator--3be384f7-0a05-4539-9c7e-ac15dbe6e0c2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539fb867-4cd0-4b28-8a3a-08a2f1d640ae", "sighting_of_ref": "indicator--1744e046-7ce2-4caf-b137-4153f6468508", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3862c83-9c06-4997-9c59-c97a47f3129b", "sighting_of_ref": "indicator--427f887e-3138-433d-815e-67efcb10a52a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04cb251e-4b36-4399-b20b-3a2e88641e99", "sighting_of_ref": "indicator--a7df2661-c63d-4b0a-bd4c-4aba5e8bdc2b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd3220e-cd0f-4598-86bd-37de6f6caf87", "sighting_of_ref": "indicator--7b4d19d6-ed1e-4691-90d8-e6b72718930d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c635a76-cd9a-4019-a5eb-01d5e1c2b364", "sighting_of_ref": "indicator--9f7f7e7c-68dc-4cc5-91c9-079cd3e7f34d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b46ca49-3236-4b30-8699-f152791ae480", "sighting_of_ref": "indicator--0c067889-5db7-45e3-88b2-3823765d76df", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86acc564-325c-4489-b026-8ac42b259e2d", "sighting_of_ref": "indicator--14a0ea15-c45f-4146-95cb-13179cf2af90", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489cee63-3c01-4273-9c03-b775b0c67348", "sighting_of_ref": "indicator--56e85992-e0ed-47ac-a331-ce6b314313b7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0350d3-ec55-4fc6-ba33-abc1b4f1d89c", "sighting_of_ref": "indicator--d3e3591e-0c84-462b-ba86-d5618fc47682", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ccc270-a570-4fcc-bd6d-ef665b019d6a", "sighting_of_ref": "indicator--8e67d6a6-b13e-4401-9cc1-06ab8a1e61a9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a25cd78-9327-4aae-bdf1-952c92c549f4", "sighting_of_ref": "indicator--b5572628-175d-4cfa-a99e-1d839936d0d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e0e06b-98ec-4988-800d-fc8e536e0d93", "sighting_of_ref": "indicator--9795116c-e5c7-42b1-a64c-ea5d27d8879f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec90d94-490a-42ba-bf38-acddfbbe3f46", "sighting_of_ref": "indicator--f7865464-66f0-4450-b8fa-15978148c4e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba17aec-6a52-4ee0-a31a-e49237f8b287", "sighting_of_ref": "indicator--bd657f07-921f-4f1c-a251-0df6ab2cd3f7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4457c1ba-ff6e-480b-8f91-38202365ddd3", "sighting_of_ref": "indicator--458f1a22-de91-4f1b-a611-1ff453156cb5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca176c4-7844-42a3-bb5d-0412a9cdba86", "sighting_of_ref": "indicator--a32eeb07-5777-4ede-a702-41edcaead943", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2cedf3-495b-4c76-9fb6-0739b5a02bd6", "sighting_of_ref": "indicator--6bdc36e4-a44f-4b3c-8d6f-af379f637f45", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c251ad-b06c-46cd-8acf-64cbd747f6d3", "sighting_of_ref": "indicator--70d99494-6774-44d6-aca5-e3906aff04c1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4375092-413f-4532-89ce-cbb6ea90c223", "sighting_of_ref": "indicator--ef803036-0215-4bde-9d24-e01bd8a205ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d32904-3573-45b3-894b-99f698621ca1", "sighting_of_ref": "indicator--6da73369-1339-4488-8252-836daef8d5ec", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68026159-93c2-43b6-926e-4f800db14d03", "sighting_of_ref": "indicator--2272fa63-f23c-48df-93c2-f97592224cb6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca58bfa8-408e-4070-9083-48b867509c75", "sighting_of_ref": "indicator--707a45c4-1ed2-4ce9-8cba-07430e5cf26f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a98a272-44f5-479e-a8e8-b0ec0b918cbc", "sighting_of_ref": "indicator--bf30144c-350b-4afe-ba16-fe8af6cea3dc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb0053c-6af9-4382-a902-25227ea54d10", "sighting_of_ref": "indicator--757d3d28-f7fe-4f99-96e8-d94cde5784f6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175976a8-e992-4768-ad8c-562a66bb8f01", "sighting_of_ref": "indicator--81c7eaa8-ab56-4bb3-81f2-f643afc438ad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02716c2-69fd-4457-aab5-872bdb71858b", "sighting_of_ref": "indicator--f2e2db09-71db-43d2-9e3e-a7fb4b5cdf06", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6d7a95-43c4-415b-8938-5aca19d7d65e", "sighting_of_ref": "indicator--8e3db4bb-e71e-40b7-89ff-c9fc69fc6e0a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a7868b-8858-4796-926c-9560ef0beb35", "sighting_of_ref": "indicator--4f2d26ea-a0eb-40dd-9aaa-f9d36e93c581", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa0e6ea-f48d-4220-ba3a-46c31e9dffa7", "sighting_of_ref": "indicator--f7ab3876-4635-4be0-9b8b-6543b1af19e8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf6f997-e336-4fe8-8110-48593b1777d0", "sighting_of_ref": "indicator--87a2d902-a6b5-4eb1-83b5-c82fc6647b51", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059e57c5-69a7-449c-9a33-756413f0e524", "sighting_of_ref": "indicator--96c51c69-6820-41c6-ab3e-d27291c67940", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2833eb4e-d165-4165-b9cf-32c26ff4fc0f", "sighting_of_ref": "indicator--d6a97651-daf0-4b67-80dd-d9cb50117ec3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5fddca0-87c1-4c4a-a352-d6b7c7d31c8e", "sighting_of_ref": "indicator--55a8e10f-d45e-484c-9efd-6a7de63dfd7e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38582505-87af-4b88-8503-05536e96b4d6", "sighting_of_ref": "indicator--6be449d9-15c1-4a5b-a24d-f075bcd4f394", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde683c2-f9c1-41b3-8598-d67315e2621a", "sighting_of_ref": "indicator--52404a3e-7a7e-46c3-91a2-1d416a91b2de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2999964-c36f-4ba1-a189-abe4b22a93f7", "sighting_of_ref": "indicator--6d92c661-8d88-4b70-87a2-8b12047b0813", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd242fe-d2a6-4025-ab67-c499dca05c12", "sighting_of_ref": "indicator--53edfd7e-da07-486f-bd4a-10415e41aa20", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c250f4b-0e18-428e-8c0f-adb364d1ca3a", "sighting_of_ref": "indicator--5ea7709b-b0c6-4089-a10c-110865d05443", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d28b9e-e1df-42fd-974a-98ed5a8580fc", "sighting_of_ref": "indicator--d0d7b340-0080-45d7-abe3-803a69adec74", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25520aa-c4b1-4cb4-a5ac-2d638bfe8a91", "sighting_of_ref": "indicator--ac8502d2-170e-4d4e-8bbe-8c141cd72bce", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dfcd78-7231-4972-9d8e-bd80d2da729b", "sighting_of_ref": "indicator--d6db4e6a-7305-41db-b4ec-e409db6e0552", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978f014f-6348-47fb-89d1-9d0dce268aa2", "sighting_of_ref": "indicator--072bd267-c763-4333-9c42-e4d3825c2da0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf9b4fe-0f8a-4276-a000-4568b71bae8f", "sighting_of_ref": "indicator--1ff106c9-1b8b-46de-9ec8-895299d1408a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5955b075-e31a-495a-b661-c094436925e4", "sighting_of_ref": "indicator--c5b0993b-ee29-48a5-ab33-7a1de9c17a93", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da49481-8ad1-4642-8c74-ab7e6261eb13", "sighting_of_ref": "indicator--bfdfb66a-fdea-4804-b6e1-c475386c64e9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7631b5f-161f-48ee-9aab-3a2fddabcee9", "sighting_of_ref": "indicator--0b79b20c-9945-4c1f-9240-2070cdc52abb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227d5028-621a-4c61-8d78-4644009bff3b", "sighting_of_ref": "indicator--4adafa6d-9591-420e-914e-82d6fcd0aba6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a389ad88-d531-43f6-8910-8a481c28d2ec", "sighting_of_ref": "indicator--993a5289-5f32-4e51-980c-26eaafbf27fe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb41145-78d9-4749-9366-a1785822634c", "sighting_of_ref": "indicator--39f01dbd-8061-4879-bf26-b7395add5b3e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51ee003-136e-4952-8641-5c1b8e498c37", "sighting_of_ref": "indicator--562fa2b2-5593-4ec0-b23d-2848925e0bc7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeeb8295-a371-4fe7-8b31-fee41c8a4bce", "sighting_of_ref": "indicator--b4aa69e8-93c0-4fdb-908f-bef8eaa39193", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde32064-c88e-4a4c-b3f6-6202e294ed17", "sighting_of_ref": "indicator--42b9d8a4-7e6a-4683-83b2-8192c48f7e82", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947ab7eb-e67b-42cd-8441-db42134e3fd1", "sighting_of_ref": "indicator--db34e2a8-e01a-4bf0-858b-da0bfff6d09b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6309159e-6042-4b97-9e21-46126832c45f", "sighting_of_ref": "indicator--014ff9d7-d734-4c47-92b1-1aad35965aed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981064c2-b259-4124-a39e-2b483b218d49", "sighting_of_ref": "indicator--56f6702e-e70c-4823-a090-5b1d224e19e9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb2e8c5-adb6-4793-bed9-348b45330041", "sighting_of_ref": "indicator--56f6702e-e70c-4823-a090-5b1d224e19e9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775a9441-df41-4cc1-a9d3-b677f30f8ed0", "sighting_of_ref": "indicator--c1bb42db-f38b-4a3f-b217-709939faebec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f272f9d9-bd63-4277-b8d2-d171053787ba", "sighting_of_ref": "indicator--732a241d-1bf6-4a65-adab-370a79f9a724", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb06594d-d16e-4e20-b674-71220b10a45d", "sighting_of_ref": "indicator--89860c12-c15c-4d00-910b-387e21f2953a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b5ac1c-d0df-4535-9a0a-56b68e55e3c7", "sighting_of_ref": "indicator--89860c12-c15c-4d00-910b-387e21f2953a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b507022c-47b0-4a88-b723-44f2a997e36c", "sighting_of_ref": "indicator--d8c3d6a1-0a51-4be3-8c56-d943d1d7f37f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dc0255-11e3-4035-9184-8f73e12d07f8", "sighting_of_ref": "indicator--df8d5ef5-a3b3-4670-8afe-5f3be2bc35b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b47d5b-a77d-45f2-af35-ddfd418d03b3", "sighting_of_ref": "indicator--7133b62c-edfe-49e7-a4e7-3dda01370846", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8a3d99-994f-44ef-9ab8-64979411159e", "sighting_of_ref": "indicator--ac355815-712a-4fd0-a73b-4e06fdcb591f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fd6e6f-3343-41de-a1db-7d1e5f8110f0", "sighting_of_ref": "indicator--79362537-c0b8-48d2-9d59-39dfa49231b0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95d7f16-28d0-494c-8698-fc0e5c8d1243", "sighting_of_ref": "indicator--e11daff9-d085-428a-9203-a7b4e873145a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f41105-c760-4220-8bd4-a9956daa896f", "sighting_of_ref": "indicator--262fe997-dda8-474f-98a8-7b3849b9e1d9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12548ffc-2c40-47dc-a64e-1f7515938bc0", "sighting_of_ref": "indicator--7480d6c1-1a3d-4e5a-b7e7-f126df1ee58e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e492a7cf-63a2-4b18-b3e4-ff4bccb3c589", "sighting_of_ref": "indicator--7c470d5a-bb2d-46b2-b5ec-423527362cbe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a92ef43-05fb-451e-a1dd-23386b31ace6", "sighting_of_ref": "indicator--b446430f-5902-4c75-803d-c2f33a268342", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ca523f-10db-4c77-8903-6f737316e668", "sighting_of_ref": "indicator--985328d5-258e-495e-86f9-c6ef53e0624b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9a2ba1-235b-4ac6-95c7-bd95f73e7e68", "sighting_of_ref": "indicator--9c352e27-cce2-4429-803c-0e8f0a4e6503", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ad14c1-3dd3-4055-ac1b-d839327246f5", "sighting_of_ref": "indicator--ba02d4db-da60-40f4-bef7-188b6c2f3ee2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781b833f-1f1c-4b96-805f-5555763fd133", "sighting_of_ref": "indicator--a056a24a-f04e-42ee-9b41-deb1f963af9f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983bc1e2-2962-4e87-8d36-e9369764cf07", "sighting_of_ref": "indicator--854714d7-e043-4822-ac8b-34db2bb258d7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e4741e-e654-4ee6-ae7b-26cc58835bee", "sighting_of_ref": "indicator--7a0d456f-d4eb-4ba4-abfc-468f60a368d3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6a2a7a-ecb5-49b0-9990-8ce6ddd259bb", "sighting_of_ref": "indicator--0ff7c643-36cd-4b81-9674-ee14c0957885", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d7a287-670a-44c0-80ac-bb45bf7cb9e5", "sighting_of_ref": "indicator--5df4eacc-5af7-4145-b7e8-e5da7ca38105", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafe8388-5406-40f1-b045-0d286b1096a8", "sighting_of_ref": "indicator--47dcdc78-0360-44eb-adf8-454981bded9a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d63b8a7-2451-4587-80c1-30aa24ab0933", "sighting_of_ref": "indicator--0112337c-3abd-45dc-8df8-3eb6efaa1363", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b080e274-835d-4aac-944c-3fa5de93265d", "sighting_of_ref": "indicator--158eedbd-6f7d-43f8-ae6d-443a6e595a57", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774adcf1-db7c-4c66-8934-23d24d876e8a", "sighting_of_ref": "indicator--0aa64383-6589-41c6-bc75-91ab27a3846a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c89df63-3276-46d0-84ac-6c462013582a", "sighting_of_ref": "indicator--748746bf-1eac-4115-96bd-38dab08fbfca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4026e3-bf81-4283-952f-77778218e6af", "sighting_of_ref": "indicator--4a395e8e-8758-4708-86d3-327c6cbe7c8a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5458caf6-2472-417f-bd4f-4a50d78caea7", "sighting_of_ref": "indicator--5eda52dd-010a-4914-a2ee-a496974eb2b1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf74e6b-e908-495e-ab5c-e18888403604", "sighting_of_ref": "indicator--29e1b911-60b9-4425-9f43-eb0e7dae978f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3272cb-6c31-4cbf-bdad-be8cfac4d20d", "sighting_of_ref": "indicator--ec2a5804-ba1b-4636-bdb5-035a5fe8d4f4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575d6e15-a7e9-416d-a8c1-48e83f6dae6b", "sighting_of_ref": "indicator--6efe54b8-d94f-48c3-91f6-512110341e01", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04598200-184c-44cd-97da-21efffdde1a5", "sighting_of_ref": "indicator--d9b28a80-5cb5-44ac-9504-b08f6a005ee9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63fc23e2-e47c-4d9f-a4a3-988f7b0ab92b", "sighting_of_ref": "indicator--bf165f2c-6446-4fb4-9bee-9785e8c71691", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef739d57-7a6e-4d95-9357-f2fa99d73475", "sighting_of_ref": "indicator--319fc993-af3b-4291-ba5d-6680fad0d5e2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686a41df-de0c-4598-9630-869c83741210", "sighting_of_ref": "indicator--26813d97-58b2-4765-abdb-ad8da6799d11", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68fb0ef-edf1-45ed-9ca9-d9bbe2d305af", "sighting_of_ref": "indicator--2eb8ee0c-9e50-4679-8607-3487679103c1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c83bed5-9b31-4393-b8ee-2d903b5e11cf", "sighting_of_ref": "indicator--4306b748-8f1b-40c3-b532-4e231b27eba0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8f8209-bf5c-422c-bc84-e00307aa2886", "sighting_of_ref": "indicator--4306b748-8f1b-40c3-b532-4e231b27eba0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f1a004-29d7-4e4c-943a-0aa5a688f20a", "sighting_of_ref": "indicator--ad9a0a5c-d990-44e5-b01f-93c01c25a329", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb1e4d8-38d3-430d-b6f9-d0c92128d042", "sighting_of_ref": "indicator--420487a2-fa54-4fcc-878c-6d2821e5dca5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe279c20-24db-4f63-895d-0aeeb2207e08", "sighting_of_ref": "indicator--8a9aeddb-402d-4f61-9c32-5fa65f678580", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a39ae7f-304e-432e-af54-f7c227b7db77", "sighting_of_ref": "indicator--8a9aeddb-402d-4f61-9c32-5fa65f678580", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc634079-f824-4fd7-880c-c943593aeff5", "sighting_of_ref": "indicator--c33b7e2b-127f-4a62-a3e2-5221ed688d97", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ceb4bd9-ba68-47ed-9235-06b0e875b8f5", "sighting_of_ref": "indicator--d0be67ae-0a2e-41ff-bb0d-0549ffbf6cba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f60cd0-bdc7-48a4-ab21-1ab397ccff28", "sighting_of_ref": "indicator--17052526-8965-4fba-bd73-ddfd105c2397", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd12c6b-5bc6-49f7-8e84-59ab8b9f9ec0", "sighting_of_ref": "indicator--413c9ff3-f118-4391-9512-6af559ba3663", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846602f1-0dd5-451d-9ac5-b140885e5093", "sighting_of_ref": "indicator--e2bf8b2d-8ec2-4fe1-b9c1-a5d2da209d52", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88cbffe-9ee7-4506-92f8-723bf19a3a33", "sighting_of_ref": "indicator--d1ea728e-779d-4762-acaa-56538b3d841b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5063b4ee-a56c-4c9f-a2ba-ad384aed7d4e", "sighting_of_ref": "indicator--43295f12-7c23-4dc7-a64d-6f2aab71c4d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cbb2d7-f0a9-4fbb-b7ce-c965b0746f37", "sighting_of_ref": "indicator--43295f12-7c23-4dc7-a64d-6f2aab71c4d0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9421b54f-7bbd-4e0a-b472-c53ccea10e85", "sighting_of_ref": "indicator--3f9f9bd0-f9d5-4a4c-9ba5-b8115d49ddb2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0a4324-5898-493e-b7c2-df9cd8046742", "sighting_of_ref": "indicator--405e6c41-e6f6-4b60-af3e-5ad09ebd37ba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89225e2e-d8fc-4ddc-b27a-863bbbcefc9b", "sighting_of_ref": "indicator--ae78d98e-1337-4a92-8e3c-f501b3de9aa6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1dffb88-c726-4267-b42f-80e3a0a5e030", "sighting_of_ref": "indicator--580283e8-e56c-4d6e-8481-453e24656f17", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b841eda-7ed4-4a6a-ae01-aae3106be8d7", "sighting_of_ref": "indicator--580283e8-e56c-4d6e-8481-453e24656f17", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea35585-7268-4a4c-b83a-5bc11c4c45fd", "sighting_of_ref": "indicator--b226f624-7da3-4048-856a-f89870674861", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68892c6-d86f-43da-8f9e-2e84e388ecdc", "sighting_of_ref": "indicator--92084c20-e4c0-4b49-83f4-9db3072c20a9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2be5b4-9693-4527-b6af-9711e9d641d9", "sighting_of_ref": "indicator--55759d5e-9dc1-4ded-b630-b78cd13fb918", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ad2192-5669-48c0-9723-29678486912c", "sighting_of_ref": "indicator--53c07e41-708d-464a-bcb0-a82ac786c2da", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfadcf9-b097-48cf-8bad-4470f3e5bdfc", "sighting_of_ref": "indicator--d079c3df-4801-41c0-b449-a2b9b8e79ab8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcac225-72ab-406c-aec0-658df9b0570a", "sighting_of_ref": "indicator--d079c3df-4801-41c0-b449-a2b9b8e79ab8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c01e1b6-dac6-4ee0-9fd1-0c32d9801cd0", "sighting_of_ref": "indicator--f5898d07-d972-4998-b2ef-447b12c1dce6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2260d93a-03fd-4fc3-a5c0-941201afa9b2", "sighting_of_ref": "indicator--c57ef6ae-396b-4560-955e-8323ce322a84", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c923f408-41a6-4536-98ba-0ce486b8f20d", "sighting_of_ref": "indicator--1c211b4c-bed3-421a-b1c8-44a0fb80ae2c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a6461e-40ea-430a-abf7-4b8f80d29e55", "sighting_of_ref": "indicator--7322936c-c227-4458-856a-8130e40d2778", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367081ae-12e7-467c-8fc5-2f433abf9df4", "sighting_of_ref": "indicator--e6d21829-a473-4f67-8684-7845c72ab00d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f8582d-9213-431c-9f7c-c9a491fb79e3", "sighting_of_ref": "indicator--e6d21829-a473-4f67-8684-7845c72ab00d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab6a7db-a99f-469c-bfdf-ba9910712136", "sighting_of_ref": "indicator--b6954d17-d500-4319-90ef-4317dc4aa718", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56ea0fa-5924-4fa0-8084-03f561e5e19b", "sighting_of_ref": "indicator--a782bc97-4a92-4d2d-9424-a52a65dd45c1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7dab8de-4561-4ea4-bd30-ce208b5f8875", "sighting_of_ref": "indicator--340c5fbe-d824-49a4-9013-ac3d23cfc729", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d977f2-25ea-4826-954f-fb8dcde518ed", "sighting_of_ref": "indicator--941fb9a9-0bb0-44e1-81cb-6b6a74e2b2b5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c666f4ee-c900-43b3-8f5a-58148202027c", "sighting_of_ref": "indicator--437f3054-f521-4518-94b1-fc070bf93626", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf6aeec-9302-451e-a19e-79e09e020e73", "sighting_of_ref": "indicator--82062b92-d6b7-4b4c-82e6-27d1adea4129", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b0e315-6b98-4069-868c-f3ad7a38d5ce", "sighting_of_ref": "indicator--360b6ced-e5f7-4bed-bcc5-6c1919893be0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6b04cc-4b68-44bb-b52d-f4151c6a2227", "sighting_of_ref": "indicator--360b6ced-e5f7-4bed-bcc5-6c1919893be0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d39ba2f-0148-4546-afed-a845d584903d", "sighting_of_ref": "indicator--688578e4-5b1f-4d00-8120-21a5aef78e25", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc98259-11cf-4bf5-8230-e66537e91d80", "sighting_of_ref": "indicator--af0a27df-5a65-483f-a088-cd106a1c6fff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2023db-cb42-47f3-b9df-6178df971df5", "sighting_of_ref": "indicator--d728503c-54a6-4a53-a797-a1864559a124", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c4ea2c-93bb-4e64-82f2-f2a0c2b8ea59", "sighting_of_ref": "indicator--586ac4f6-ccac-4c84-b2a3-395e11fdfa41", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23891cd6-35dc-42d4-9685-5956830b225f", "sighting_of_ref": "indicator--1f129d81-b64d-45ee-8e17-5f015f348814", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ac4b08-9079-4601-8a5d-64db019a6c02", "sighting_of_ref": "indicator--f5085560-fdfb-4c4e-b809-4c342270a524", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc75d8e-da7e-4ab8-b79e-c1916d4ac6d1", "sighting_of_ref": "indicator--4ce93c2d-e11f-4a1b-aeb1-f34603acc5e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dffa402-7f6e-4f17-8006-c42ebb9d3904", "sighting_of_ref": "indicator--4ce93c2d-e11f-4a1b-aeb1-f34603acc5e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085cf9b5-2645-465c-86a0-119ab0cd826d", "sighting_of_ref": "indicator--0c619f4b-9502-43ab-a4e4-a502ff135b62", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f0a357-5c10-44c4-986d-b386e2d05ef0", "sighting_of_ref": "indicator--69ada390-a358-40c8-83a5-0f93c2bee1a6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526931e8-1184-435f-bcf6-af75ca1c6cfd", "sighting_of_ref": "indicator--563b02e9-0fb1-4a9d-bffa-bd0317aa5710", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a81ee7d-8b22-4dd7-b4cc-b95bffea44c8", "sighting_of_ref": "indicator--563b02e9-0fb1-4a9d-bffa-bd0317aa5710", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08834d43-c5ea-4fe1-bcba-2d6625e4b4b6", "sighting_of_ref": "indicator--86f2c2d9-eba8-4267-af57-16f083ab035c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f677bf8-545d-4926-9606-94bcfa7f2e5f", "sighting_of_ref": "indicator--5008d87f-29ec-4f7b-9b41-dd1be6a92a03", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f5fbf8-8b61-425b-9026-32f1e1a11344", "sighting_of_ref": "indicator--60e82a8f-362b-4a21-8adf-be8848af2809", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7974227a-13dc-4979-97c6-6a4ed16eb9c2", "sighting_of_ref": "indicator--360c5fcf-3884-4069-bc7d-98de9a41a7e1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f22137c-8282-405f-9c01-a2e4ebfda830", "sighting_of_ref": "indicator--8d7d2238-502a-4921-9ba0-12ff78f14843", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0766f534-5e2f-4cb1-860c-1afe3f07ed4e", "sighting_of_ref": "indicator--ef04ab71-c3ea-4276-97e4-8dacd0b7f30d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da1e9d6-6496-4092-9946-8309678702ca", "sighting_of_ref": "indicator--30facff4-7407-4dac-98ea-4413f9eb2064", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8795077c-a8d1-482c-b0f3-f9af28bb21bc", "sighting_of_ref": "indicator--73c04423-1e78-4777-9824-cec0b63b5b17", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7da3556-b71a-4239-960b-92bb3e0e8f24", "sighting_of_ref": "indicator--585299b2-82ef-4436-8572-a199f1632353", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940713f4-622c-4334-9ace-166bc6886516", "sighting_of_ref": "indicator--c0a9f0e5-0277-43a0-96e8-689b3ace788d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31efb402-b6cf-4b90-b53b-0fb906af8765", "sighting_of_ref": "indicator--5410c9e1-3deb-4375-9e39-f82e454af8d2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee0490a-5b93-4d1a-861b-b22adc012f94", "sighting_of_ref": "indicator--7dd2991d-00db-4889-b7e1-e4cac0bf06e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65345f24-2a0d-4306-b9b7-daeb1c653a05", "sighting_of_ref": "indicator--e36e526c-64b0-44fe-ba7a-089e5721a37e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4459fa32-1776-426f-85e3-a75cda4fd615", "sighting_of_ref": "indicator--57475a85-72fb-4db2-bbf9-1618313f8ec2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38657b17-c424-40b5-a37b-80aeaea183f2", "sighting_of_ref": "indicator--0cb0de50-d8e8-4122-805a-d131c5d7bd01", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a47dfd-6bfc-46ea-8b7a-6f1432ea3e2e", "sighting_of_ref": "indicator--c269c64d-a653-46d4-81cc-a5c011f84e6b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9685a26-ab1d-4c83-8965-86e2b8cc6fbb", "sighting_of_ref": "indicator--c269c64d-a653-46d4-81cc-a5c011f84e6b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e36a1d-8141-4a1d-b2e0-de2ea9aa3d5b", "sighting_of_ref": "indicator--e72e002a-2fe2-4407-a145-4f2b98e74360", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5cf8fec-d0e0-4d4b-a0f4-f7e31743114c", "sighting_of_ref": "indicator--e72e002a-2fe2-4407-a145-4f2b98e74360", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f50443-ceb0-4da3-8427-afb2b7c03889", "sighting_of_ref": "indicator--c91444ce-988c-4fc9-8cb0-a3cdaf9982c6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914d9010-dac9-465d-a837-d38231fdfb56", "sighting_of_ref": "indicator--4fc60cb6-5e36-41b7-81ee-ce91d26030ba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4708316-9c64-4c66-b6fa-86e95875d643", "sighting_of_ref": "indicator--d3cd5f32-681f-43ca-bc0d-a67aa0afa412", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d417f8-52b0-43ed-9c2c-5562daac0694", "sighting_of_ref": "indicator--d3cd5f32-681f-43ca-bc0d-a67aa0afa412", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d588e7e-cf40-4ae3-a295-29dc31cd0f45", "sighting_of_ref": "indicator--9866b11e-c808-4b53-8305-d47a0614de51", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2405775e-6d77-460e-bb67-8b4120247c9b", "sighting_of_ref": "indicator--9f2a942b-c340-4285-bdc9-55e72a1a4420", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051df40f-c738-4fb9-8852-3166457ffe88", "sighting_of_ref": "indicator--031bb86f-3f4f-42cd-b41e-e20a02033046", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2f3897-8bc2-4295-a61a-a10a362e84cd", "sighting_of_ref": "indicator--00ca28fd-6fa2-4f33-bc02-916e7ef65404", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037ef521-4ff4-4748-b2c6-8c85dab7f35e", "sighting_of_ref": "indicator--6e0727c0-b2c2-4674-a79c-8f9845a44482", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f6c9c4-8b13-4026-b652-85ec88614ae1", "sighting_of_ref": "indicator--b3f0cb54-e2b5-463d-91d1-1f14244434c4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3874e70e-7e5c-4e27-a629-a97f73904e12", "sighting_of_ref": "indicator--d72f1298-1910-4bfa-8402-4f9f84b117ac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7f48b7-4f84-46e0-b232-7e7984880913", "sighting_of_ref": "indicator--7ce99f12-8818-4ae0-8022-4cb0967fce25", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee53004-060d-4b7c-a28e-f415103dc00b", "sighting_of_ref": "indicator--bb393357-81a5-4a73-ac37-cd9d793e209b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0aae18f-ee64-4ba5-a7c1-bc995fb02e46", "sighting_of_ref": "indicator--25c21782-37a6-4894-8c55-c87d37ed0b9d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eedb6a2-f264-4046-82ec-0fa3a46f143d", "sighting_of_ref": "indicator--b2cf8258-8bfc-4834-a0ef-973a0b8e6318", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e9d327-e597-48e3-92e5-7cd83e652ace", "sighting_of_ref": "indicator--fb8750ba-5032-405f-bbb4-ebe21025afd9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b68985f-e2df-4c62-98c8-e06d0d76c442", "sighting_of_ref": "indicator--62dfb58b-3afc-4c40-8b6f-ecb52b9d9a17", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1f6bc7-e537-4e40-ae9e-4fad16956bcd", "sighting_of_ref": "indicator--1315d158-b1ff-4800-a47b-3ed979d2c93a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeeb04c5-819c-420c-815b-159a918b469e", "sighting_of_ref": "indicator--476147df-e8f2-49db-921b-70cee78acefa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbdd7a5-8c29-4938-bbf2-d8b176ff8014", "sighting_of_ref": "indicator--b70ae716-bdb5-4d02-a789-d66cc6b6884c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6741f75a-c7a3-436e-afbe-f2cfa9f0fa2e", "sighting_of_ref": "indicator--10c8a951-ba3c-426d-9e58-9e170dba1851", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420e203d-ec2e-4e6c-b8f7-ea0b46317a44", "sighting_of_ref": "indicator--10c8a951-ba3c-426d-9e58-9e170dba1851", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d61d1c-283c-40f4-a823-1068dc84060e", "sighting_of_ref": "indicator--2cb917ce-39b8-4a9a-86f9-9bec7956303f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4ac191-ee7b-42bb-8286-b7569e26b4f7", "sighting_of_ref": "indicator--9474b130-69b6-4b98-b233-3b714818518b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3186cfaa-ecdf-4274-b80d-948a8ee6b197", "sighting_of_ref": "indicator--b76a5e00-3374-4976-9e67-48a0660de025", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471c0eb7-9a15-4d13-b2a5-23dfcdc0d629", "sighting_of_ref": "indicator--ca7eaca6-f85a-49f4-8215-9995d43a2756", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a352dc05-8548-46af-8e6d-55a8ab87f284", "sighting_of_ref": "indicator--82901eca-ed26-4107-990c-4a31b1ae881a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82c5f10-b606-42d7-86ee-96cb753937f7", "sighting_of_ref": "indicator--c0ad6927-55ca-4049-82a5-d52864786fb5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dca1cd6-7f52-4066-9ac5-1ded6b110fb0", "sighting_of_ref": "indicator--c0ad6927-55ca-4049-82a5-d52864786fb5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31181512-4fae-434b-a92c-89e829e5d72c", "sighting_of_ref": "indicator--14643dc1-08c2-4c66-866a-aaaba33f86f1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8ea489-6e5a-4949-92e2-d067dc31e989", "sighting_of_ref": "indicator--0998b092-59f0-4c0a-8146-90511856c753", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938349eb-0c96-41cb-88d1-705250f57e67", "sighting_of_ref": "indicator--17164a01-d76c-440c-bf0c-6a800d4f0716", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db2f01d-9417-45a6-a4c3-5f1f092758f4", "sighting_of_ref": "indicator--5d1f7744-c591-46f5-9dfc-82b56ad7dbd7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060900ad-32f0-4e07-bb5a-224b765561d3", "sighting_of_ref": "indicator--b511b4b4-ed4a-4e2f-bbc0-201e4844e36e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa82d388-7303-4510-b8c5-39f2d6e7cc42", "sighting_of_ref": "indicator--dca0eee8-48a7-451d-a50d-02928d346c43", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1eeea8c-9350-438b-9a81-58159bf2fd71", "sighting_of_ref": "indicator--da6e1601-9893-417c-8894-afddcd03ddcc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9745094f-e9e6-4161-beb3-5eb25dbfd7f7", "sighting_of_ref": "indicator--a4997346-5d60-45ea-bc38-257e706b546b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9904394-552e-4ce4-82cd-ab1eab60631c", "sighting_of_ref": "indicator--2c9bce39-32ae-46ec-9b51-316d42fd9d1f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d53566-59e4-47c4-8d8f-4149d9b3aa42", "sighting_of_ref": "indicator--840bfec0-6274-4cc9-afba-2ba4cc294088", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ef7c6b-b20f-47b3-9834-0343aa78df62", "sighting_of_ref": "indicator--5c5313a3-ca1a-4fa9-b734-308b9c115b8b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49a29b8-79c7-4a99-b56c-8a534cbe702e", "sighting_of_ref": "indicator--80055fbb-1e73-4920-83df-334d510b9257", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad03b31-43f8-4e18-a637-12f77676f237", "sighting_of_ref": "indicator--24e63a4a-a95d-4233-8efc-772ed44cc94f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1e305a-d834-4d9f-b6e1-c68b900ddb36", "sighting_of_ref": "indicator--e7bc9f13-63a0-4b27-a187-4a1a6c2a2597", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca66beef-9896-45ab-9a9a-85054b6e3b3e", "sighting_of_ref": "indicator--47c3a182-e3a3-4c70-81f3-8dfeb3bc681e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bb41c0-7faf-41c8-a33c-83f134f66e2b", "sighting_of_ref": "indicator--8adde943-cc26-4d85-a885-123356881a52", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619d3ff2-1fa8-48e6-80fe-a6a23bc64167", "sighting_of_ref": "indicator--5125d6ca-09aa-47ba-b2f0-e191bd9898fe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a3bf3c-d18d-4918-8fce-80ce94df4a8b", "sighting_of_ref": "indicator--ada552db-4b93-48af-9215-f543a0748ceb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd639c5d-4b4d-4229-8e62-e08707ff1d91", "sighting_of_ref": "indicator--4c01e12f-1938-4f50-b9a7-08bc4eb5464c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc72660d-68f1-49a2-b415-c435a514f67d", "sighting_of_ref": "indicator--f6aee560-f0f1-4b8d-aa50-143327db8d0c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86b666f-4287-4990-a7b7-c82f1e0fcc09", "sighting_of_ref": "indicator--e3c44121-70b4-4e53-b0ec-109a7464753f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9156055-b626-4d8c-a16b-73a29b39b305", "sighting_of_ref": "indicator--70a237f8-9579-4d21-8f3b-82fae1b939d9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e81a9ed-22c5-48ef-9001-e163c6fc6b33", "sighting_of_ref": "indicator--831cfda5-177a-4ce5-ae23-948173d083de", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89c5026-242b-4f36-87a2-6bb843686922", "sighting_of_ref": "indicator--82f52b37-8f55-4327-b3ed-e1bef7db580b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db7221b-5458-4a94-9034-a8c66a45ea27", "sighting_of_ref": "indicator--ffc1faaf-dea2-4e22-bc25-0c7a0e63898b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6edc16-4aa5-4ef8-9888-43de02bdccf1", "sighting_of_ref": "indicator--df0707a2-ed57-4935-9d37-2181bba3b8f5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c82b8a-929c-4a74-9400-44284406eb6a", "sighting_of_ref": "indicator--ff546597-fd3b-4b10-ab5b-1609eeb2489f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a3b2ca-54c7-4f00-b3e0-5842df77262d", "sighting_of_ref": "indicator--80285edb-c63e-4fe5-94c0-ddb47a392801", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e208c88-92f1-4519-b228-e254eef26ac4", "sighting_of_ref": "indicator--2886a72d-675d-461c-9edf-0d3078ebd32f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c69476-ea02-4e3d-9917-35a56cd64059", "sighting_of_ref": "indicator--1ba6bae5-1608-47ba-937b-1579951609cd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9970ad19-4e5c-4fb2-965d-99940eb00c01", "sighting_of_ref": "indicator--596e2353-a073-4045-9718-f5068c9a9978", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac9812a-5f2f-40b3-903a-e1d433e0442f", "sighting_of_ref": "indicator--f3f5c8ac-f07c-4020-820f-a282c364abf9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fd748a-c5ad-4a7a-a3a4-f15331554d0d", "sighting_of_ref": "indicator--4f983a4b-28c4-443f-9ad2-fe84635115f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4d926d-c765-49bc-8c97-8a58c3a55fbc", "sighting_of_ref": "indicator--4f983a4b-28c4-443f-9ad2-fe84635115f2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386912b9-b2c5-4e66-a54c-950fc9debec5", "sighting_of_ref": "indicator--d1bac226-8237-416e-89ca-c523ba289754", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de9a27d-b0a0-4e9e-9736-94c5fab6acf7", "sighting_of_ref": "indicator--13e388ab-0cf9-415b-82b1-476be4996a1f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76a1050-75f4-41c7-837a-932c508dc98a", "sighting_of_ref": "indicator--e3e1c907-93ca-4bec-9bae-3f6797bac74d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d92b280-097c-47c3-8ba3-a7e65bd75345", "sighting_of_ref": "indicator--f49c97c6-0193-4060-b944-e340c7388bd4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c1a493-a602-419a-83a5-43ee2c059766", "sighting_of_ref": "indicator--568c3592-d23f-4c60-b5a0-3b3638aae936", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0355153c-1048-472c-9e53-fe6f3b7c907f", "sighting_of_ref": "indicator--9cea9f15-f06a-485a-adbb-7a6a14ea781f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb1b3e2-7af0-4cd2-8d3d-0d0276850109", "sighting_of_ref": "indicator--1ebede19-3d53-4e08-99cf-608941cbea8f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd71ef11-c2d5-4fb1-b93d-55921cd60126", "sighting_of_ref": "indicator--c24fe85f-6817-494a-8d76-a6aa66c0c6d5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287be0a6-6dbf-4300-856c-85d63c2377c9", "sighting_of_ref": "indicator--52d16833-a931-44b8-98ae-3e42030e4dbd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a3bd89-20ba-4587-acd8-64a1f498cafb", "sighting_of_ref": "indicator--7d6be314-4741-49b1-80b4-a41a26f7b7e0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91509e79-f6e9-4361-8a8d-5f33ff71fe8b", "sighting_of_ref": "indicator--e39e5997-58a2-453f-88ae-931ebc9e7ed2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e307183-f969-45b7-babf-48806f55358f", "sighting_of_ref": "indicator--67df987f-df72-434e-9f57-9e4407f326b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c890c7-26f8-48f3-ae4b-39e2bf6d3213", "sighting_of_ref": "indicator--46bcf532-e53d-4a93-961d-2ec08ff9006a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2717f447-3577-47cc-a355-fcab6f347d53", "sighting_of_ref": "indicator--5c9d5c4f-3e7c-4dd8-985c-37218c2e9275", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d76f37-7e87-4a78-b082-6a4ae80bb6cd", "sighting_of_ref": "indicator--46bff813-4eae-44cc-bbcb-59e4ef5f4d78", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265cfb23-3482-4016-be15-32e7fbe32ccb", "sighting_of_ref": "indicator--59131d1a-6805-48e4-8257-0161211b5cae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08635a4-c683-4f89-a096-b2bfc5d0d466", "sighting_of_ref": "indicator--59131d1a-6805-48e4-8257-0161211b5cae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8ddef5-7ec7-4a65-bfeb-46c1d90e2850", "sighting_of_ref": "indicator--33fe66a6-466f-48c9-b263-819c7a08c7c8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1c56a1-ce28-425f-9c83-e7f695a9af08", "sighting_of_ref": "indicator--031edfed-99bf-49a7-835a-5e94eb1892b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b73eae-6a55-40c9-9777-096a73458f02", "sighting_of_ref": "indicator--79288470-c9ce-4da0-a9a3-312752df3b92", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d75060e-6d08-4033-91b6-e63f8a6e2a3f", "sighting_of_ref": "indicator--4fe48c71-7c77-43ab-ac5f-22efbc2cb88b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f30ea6a-aa53-4969-9086-1878cf803423", "sighting_of_ref": "indicator--b3bac63f-eed3-41d6-bf67-85abae231c70", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e7f76b-ea25-4b1f-9c97-011d28db3d41", "sighting_of_ref": "indicator--d4b18089-5774-4f9a-9585-74dc8c3ea6d1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8972bc5-409f-4e66-af75-6f0632949bcd", "sighting_of_ref": "indicator--94d7d28b-59ef-4af9-a9a0-4906053dc0d4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee833fd6-cf81-495d-ba82-c315b450a7a6", "sighting_of_ref": "indicator--d312ecc6-cf14-43da-b166-96a1004f9bd5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab6876e-16c4-49ae-a851-f22a7c6c332c", "sighting_of_ref": "indicator--0a289066-84e6-4f19-bfc7-f278d7926d13", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30991c0a-dfc3-4a97-b08d-504132dffdd7", "sighting_of_ref": "indicator--05e118df-fe81-4399-b727-2121184dd251", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a478a87f-dadd-46c7-8294-2b03a140c81b", "sighting_of_ref": "indicator--3087492d-e3ef-4d8e-be7a-29cf0dcd223f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89b9311-c834-454b-9a19-e04865a02fbe", "sighting_of_ref": "indicator--221c76a3-4472-4bad-aa02-2631dae2abef", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdf8a4b-4caa-4207-bb3d-7957590444f7", "sighting_of_ref": "indicator--f2b07119-b511-4c22-a672-312d57398248", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321ebeed-8ba0-41a8-8f51-6702b018e7b8", "sighting_of_ref": "indicator--e40e9dc0-6ae6-49f2-8a45-051337d79336", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b04ae58-a13e-487e-8d9d-e0f774d422ce", "sighting_of_ref": "indicator--b8798ba4-e318-4e71-b673-a892b2acd692", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a76b57-4d7e-4a15-875d-97582ccfaa0b", "sighting_of_ref": "indicator--b8798ba4-e318-4e71-b673-a892b2acd692", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcfa935-6a65-47ab-94d9-296f727de84d", "sighting_of_ref": "indicator--0dfe3a8d-f65a-4fb8-9a25-0840f1c77d63", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d882d926-a75b-445a-99a7-c75c2bf154c7", "sighting_of_ref": "indicator--f692fe17-5cfd-4b41-8653-8705b0ee32db", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccb6f77-500e-4e5a-bb2a-022559ac76c7", "sighting_of_ref": "indicator--222a2ea7-d277-4c77-ae49-f4485c4bbaa2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3797b458-001a-493d-bf8a-ef6026823356", "sighting_of_ref": "indicator--82003a54-4a72-4404-9811-5b7f9bcb4cbc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bce477-f306-4575-bd47-f7fe8aa3eb7f", "sighting_of_ref": "indicator--82003a54-4a72-4404-9811-5b7f9bcb4cbc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f97886-3858-4400-ad07-14ea8c70b539", "sighting_of_ref": "indicator--dfe6fd6f-e4ad-459b-afe3-af85f87bff37", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71da672b-2190-4a1f-87ea-b6e1ffc5c48b", "sighting_of_ref": "indicator--6a5797c0-db1b-4d89-9870-2a33c8a6fdca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5aee574-10e5-40d0-aeda-dcac7e606fb4", "sighting_of_ref": "indicator--0b4d8a4a-b450-4178-9fe8-b26f024f01f5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b029c85-4aa0-4bdd-9fe9-513f25e05a7c", "sighting_of_ref": "indicator--d361802d-2175-4e76-9a50-b9664e53abaa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd17277-3100-47d5-a545-9046e7a4b914", "sighting_of_ref": "indicator--32cb16c9-5ab3-44d3-a5d4-a8d87d26ec2f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84d0b8f-0504-4c63-80ab-5949d70fd6ba", "sighting_of_ref": "indicator--1577fa08-6981-47ec-af2c-be0336a23a3a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50c7db5-3ed7-4420-850f-615f4d66f254", "sighting_of_ref": "indicator--a5b938e8-c69e-44b7-bfbf-e727f53fbab6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b400f62-9347-4e61-b615-2a0b7aba7ed6", "sighting_of_ref": "indicator--2636acb3-3b89-41e7-9de4-c837c44c5734", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48973eef-9c00-4ec6-8de1-c4aa0ebc67bf", "sighting_of_ref": "indicator--53ea0931-5c33-4adf-8d0f-148586d1d12a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694b7d39-537b-4ac0-9ea1-51b70153708a", "sighting_of_ref": "indicator--a1d88d22-1bf3-41ae-9442-8a97d4440cf8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2695d63-1cd8-4222-805f-66c723ca1acd", "sighting_of_ref": "indicator--5c0e68c0-9697-4219-93fb-2fe14144d2a2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7b8cf0-eb81-4fc9-b349-4636e1ff61d0", "sighting_of_ref": "indicator--063c84f9-4605-4ea5-a59e-cabe2f8d1ffe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88df69fb-d203-4a90-ad96-dab203509395", "sighting_of_ref": "indicator--8c4e2e1f-a03a-4fce-9255-87e0be4cc185", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a67028-396a-4440-8a8b-c59d434ad9ca", "sighting_of_ref": "indicator--e4af6db6-d070-4ff0-afdd-5a9bfc7e0a01", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720e0b07-70e8-49e1-ae5d-1c046e692e42", "sighting_of_ref": "indicator--4e14a3ac-e63a-4593-bf5a-107703ec637a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0dc005c-ff60-415d-a14f-cf3adc899bed", "sighting_of_ref": "indicator--e5e96833-6411-4a3b-a573-732e21140a75", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ce41f8-0271-49f3-9bc8-6f1d5d3afe2a", "sighting_of_ref": "indicator--df0364d2-f55a-4cf0-adf3-2df03249fba0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e33b28f-da27-42d6-a0a5-9e82972f3cd5", "sighting_of_ref": "indicator--6e66e3cf-3a0b-48f2-9bb4-bbcca06b963a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3bce65e-2da9-42b5-9670-659c1e841588", "sighting_of_ref": "indicator--6bd7170e-b425-46bd-bbc4-0e54b5d1e6ed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e75fbe-5bdc-4c93-acec-d0df4ce359cf", "sighting_of_ref": "indicator--550b90e7-76a3-4495-8766-bb3b6951d2a3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb27142-87df-44e9-86ee-d25f1c12dfe4", "sighting_of_ref": "indicator--d15b3390-5961-4062-8fc7-c6ed8c64b15b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ea9824-68cb-499e-ab9b-a820351f678e", "sighting_of_ref": "indicator--684483dc-d3c4-4bbb-9084-56a4a537ad54", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1c3e8a-6c08-499d-bcd9-1b48adf6166c", "sighting_of_ref": "indicator--e2416e63-42e9-45aa-82fc-6d33aa2c1d91", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15e994a-e2c8-4e86-86d6-f95dc72514be", "sighting_of_ref": "indicator--3823e43b-3939-4d61-90f7-4f8d04f64fb7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b06100f-7b15-466d-8160-5d14c40f18bb", "sighting_of_ref": "indicator--9e91d54c-fe70-44aa-bc4c-7e4d961a8cd0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20eb1dc3-7088-4629-96da-e9e4717dcdf1", "sighting_of_ref": "indicator--fc23c4fd-1c05-4476-a6f8-c2f71d306bdd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c26ed0-0f61-403b-8d5d-9792d7400ee7", "sighting_of_ref": "indicator--5a263157-28e8-4a3b-a898-369b0d629c67", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a417f2-f430-4a82-ad92-2658800636e1", "sighting_of_ref": "indicator--6ff5fb21-7300-4043-bcf9-0876ddbe2ea3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68f5dc9-d7d8-4911-895a-83f535867468", "sighting_of_ref": "indicator--3ed250f6-38e6-46d1-a41a-fda6a1cd917e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbaf796-e42c-47eb-bc99-fa94bd953a09", "sighting_of_ref": "indicator--88715a2a-db6c-466f-aea4-ebe72062feed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3008a689-6d80-4f24-b5ad-bc2e83f3589b", "sighting_of_ref": "indicator--3dbcf6f6-ae3c-43be-aa2d-cade6f1f1554", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372d22e0-5907-4bfe-9412-78231b8280a6", "sighting_of_ref": "indicator--c741db8e-52a8-4099-99c2-11a62a4f65df", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5ee591-78b8-4e6c-bce9-6e0a17a99f33", "sighting_of_ref": "indicator--0c6c16a5-e723-48d6-bb2a-0d0abc847e40", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec72216-df2f-4469-b674-2014dea65a5d", "sighting_of_ref": "indicator--8e8c3d7d-75da-435b-84a7-20c814df5e22", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca01b7d-30b2-4508-b6cd-44e529130684", "sighting_of_ref": "indicator--eacda392-8250-4cc5-907a-3bb5173dcee2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252c2c30-d52a-4bf7-8315-7f160049748c", "sighting_of_ref": "indicator--a86e03a7-df30-4c3d-8d7f-cfbe143eee81", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b052903f-5958-411b-b10d-2c71a86893f3", "sighting_of_ref": "indicator--ad5b858a-b139-45cf-89c9-5f6d2059ae85", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25b2dc3-1dc0-42d8-901b-1bda02f84216", "sighting_of_ref": "indicator--28ff33bc-7252-4f8d-9849-1039920f0af6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7390d9d4-bad1-408f-808d-cf90586a60a4", "sighting_of_ref": "indicator--a67805f7-7469-40a4-b7fe-f807c9e5bac3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f30139c-586e-42e9-9003-9e771f097f9c", "sighting_of_ref": "indicator--106a3779-35ce-481b-a5eb-ff283d77d25e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5faf41-e91e-4b15-ade8-3a1ff5c20fa1", "sighting_of_ref": "indicator--8979d15b-15ed-4aba-9fbb-1994dd871185", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2474e4c-1426-4f83-bceb-d45c92faf3dd", "sighting_of_ref": "indicator--8f5ae2f6-0cb3-42be-a6a2-aaab60862011", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3622a4-ce44-4897-813d-967cfdb9f98a", "sighting_of_ref": "indicator--e823705f-1ca1-4bde-87c5-bcbb621b05dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22119540-2c0e-4d62-b556-17ec07caca7e", "sighting_of_ref": "indicator--0572af64-f98a-4d21-97f1-d55a475e5965", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc4f33a-7073-4b85-8740-0b77a74babef", "sighting_of_ref": "indicator--05f6ac1a-93d8-442b-a696-4c87bc2d007f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2846c949-1056-4acf-be67-ed4866e7c584", "sighting_of_ref": "indicator--277cb6e3-6254-4dfb-ad82-a9b150cb930f", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9d3782-c5ce-4f4a-9a09-1fde9dc782ff", "sighting_of_ref": "indicator--33cc16a3-2b68-46cb-94ee-8fc9d3247f03", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82db60a5-4b49-46a4-b759-11c80d98b60b", "sighting_of_ref": "indicator--d244a367-09e5-4764-81f7-82940e81611d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a9f64a-9cba-448c-95da-8574e00cd4c2", "sighting_of_ref": "indicator--568dbb59-f69a-4c64-b22f-eeadc81872da", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40729685-fdb4-4972-bd2d-e7633522a9ff", "sighting_of_ref": "indicator--65ffb80c-1e8f-414e-9a4b-713135b23662", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cac7efa-4cb5-4176-b374-5e366254e16d", "sighting_of_ref": "indicator--efd644a8-a642-4bd4-9223-d8f075233898", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20e646e-d856-43c7-ad27-1f49ec63f972", "sighting_of_ref": "indicator--c5a6f3a1-004e-4544-b4ff-9389fce04ca5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6065811-b073-422e-9518-a6e10e845610", "sighting_of_ref": "indicator--f386f956-28e3-47dd-8e96-b4e1995bcbd6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852d03bf-c2ee-49fb-a7c2-e57200871821", "sighting_of_ref": "indicator--7480b78b-1fb1-4fe4-967a-d97576d25d3c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9995384f-8839-4c0c-9178-f25c9411201b", "sighting_of_ref": "indicator--7480b78b-1fb1-4fe4-967a-d97576d25d3c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cbd312-f628-4d33-9cbb-908a0d92fab1", "sighting_of_ref": "indicator--7480b78b-1fb1-4fe4-967a-d97576d25d3c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3571c135-ed53-40a1-8624-ef042d537bde", "sighting_of_ref": "indicator--869a2fe7-9931-499f-a642-3dd010f3b9f9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed6a75b-618e-4833-8ee7-d0647d671e47", "sighting_of_ref": "indicator--31e02c0d-c904-4884-81e4-4a1b9a91f819", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87088b49-a4c5-495b-af37-e73d8d686cb6", "sighting_of_ref": "indicator--31e02c0d-c904-4884-81e4-4a1b9a91f819", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e98083-41e0-4b16-adf2-e591e736c763", "sighting_of_ref": "indicator--61d3aff3-6618-4f8a-8609-68613709a7b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731fb9e6-4d1f-45bb-83ff-dbbce017ed6c", "sighting_of_ref": "indicator--e8167747-4faf-4605-80fb-b0dcab2fad1a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b48bfb5-f337-4f16-9c8c-3395c5d9cf36", "sighting_of_ref": "indicator--273756af-9937-479a-8f86-41ceaf09cced", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ad33b1-48f6-4373-b1e8-765d7db10801", "sighting_of_ref": "indicator--273756af-9937-479a-8f86-41ceaf09cced", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ade44a-0fee-43a6-a4bd-0e4d0923a2a3", "sighting_of_ref": "indicator--273756af-9937-479a-8f86-41ceaf09cced", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be94f367-c314-4dba-8ffa-d5e4ac373b94", "sighting_of_ref": "indicator--269103c6-efa8-4218-a2a2-ff154bdb03ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4893763f-713e-440b-994e-eb8e99d91f0c", "sighting_of_ref": "indicator--29d42203-614b-4876-810e-e5c7c7f6df8b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa072e6-bfce-4aad-9527-7aaeee6ba1de", "sighting_of_ref": "indicator--29d42203-614b-4876-810e-e5c7c7f6df8b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3ddc75-25b3-4ccf-ac84-3c4d37bd3c68", "sighting_of_ref": "indicator--29d42203-614b-4876-810e-e5c7c7f6df8b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a776352a-6240-46a9-9d1e-e3d648a7b3e1", "sighting_of_ref": "indicator--f6dc2cab-0242-4293-bc57-ff06090f4988", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ecb308-89bd-46a6-96de-c72f9797f3b8", "sighting_of_ref": "indicator--aecbcfdb-3551-4d26-a4cf-7540266d73d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21945ba4-dc91-4685-93df-1003a5d8729a", "sighting_of_ref": "indicator--5187d8c9-5dfe-4108-a2af-2530e28d7994", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c044d3-d35a-4abd-973f-f137e17dae54", "sighting_of_ref": "indicator--8e5d2753-3d7e-49e6-bdb4-bd644b5f272e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a6a639-347a-42e5-a91f-d42ab27cac97", "sighting_of_ref": "indicator--8e5d2753-3d7e-49e6-bdb4-bd644b5f272e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d38b6b-b3eb-415d-bf0f-55a5d8e469fc", "sighting_of_ref": "indicator--8e5d2753-3d7e-49e6-bdb4-bd644b5f272e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3360f014-9b31-48aa-80bf-edd4e5c2a04c", "sighting_of_ref": "indicator--ce042c2e-cee1-4a9d-9b61-3ec6bb72554e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae06f00-fd13-47fa-be77-77d0565153f6", "sighting_of_ref": "indicator--ce042c2e-cee1-4a9d-9b61-3ec6bb72554e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1701ff44-0162-4c84-99a2-1589acfe8f2d", "sighting_of_ref": "indicator--ce042c2e-cee1-4a9d-9b61-3ec6bb72554e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40d3e4c-49af-4df1-8c90-6485d21e9254", "sighting_of_ref": "indicator--db50621a-9cff-4c07-95f7-16ff25034cb0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802a7b80-b779-4f79-ae3f-24d73e7ae0fb", "sighting_of_ref": "indicator--db50621a-9cff-4c07-95f7-16ff25034cb0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbd3510-0db9-4197-acd6-6ee7682d8813", "sighting_of_ref": "indicator--db50621a-9cff-4c07-95f7-16ff25034cb0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc68c8b4-76ae-4543-877d-a01debcec4b7", "sighting_of_ref": "indicator--ed7d4763-d027-4154-ac2a-4af9422d63f4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709f54eb-4017-4047-95e3-d7761919f704", "sighting_of_ref": "indicator--ed7d4763-d027-4154-ac2a-4af9422d63f4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2772f65-002a-4266-b1e9-7eadc9a4284d", "sighting_of_ref": "indicator--bf37cf4c-062a-46b1-833e-bbf7ef506c85", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1972ee6-e229-4694-b4ba-3a375fa6eae7", "sighting_of_ref": "indicator--11007989-a399-43a8-8df0-7e2aa2e4c102", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b616b7-cd9e-4f69-8c5a-9f369f4f8540", "sighting_of_ref": "indicator--11007989-a399-43a8-8df0-7e2aa2e4c102", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356ac15c-bee0-46bb-9afc-eaf21a46e55d", "sighting_of_ref": "indicator--fec59f5d-8280-481a-ac73-e94475d567ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7eb0e6-3183-40d6-9a9a-11b9914b2792", "sighting_of_ref": "indicator--a8d5cc41-1722-488d-a6df-d4bc74be76c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3501d77b-f5fb-4f57-9aad-8a321ceaab0a", "sighting_of_ref": "indicator--5b7c4eb1-0c4c-41fb-b005-0fa215245107", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578a6f97-c1d2-4b53-ac3f-7f205348aa1a", "sighting_of_ref": "indicator--46eca97a-8548-4164-97ec-2b158dd430f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10383e8f-5018-4fa7-8b82-b7f7606eafd4", "sighting_of_ref": "indicator--d6ec6167-72b6-431c-a7d4-43565928d35d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abeea1b4-5e7c-469a-939a-7c7b0ce3e575", "sighting_of_ref": "indicator--0d8cbd8a-1402-4dc2-bfcf-7757ec281a48", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ce5b0e-5a13-416e-a4b7-e4dadfc52728", "sighting_of_ref": "indicator--a3e6522f-500b-46ef-9350-0c68cf7bf538", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f956fb8c-aeb0-467e-95eb-20cc9c64e765", "sighting_of_ref": "indicator--29021c2e-ebbe-4cfe-95d0-4c128f82ec5e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4441fe04-9239-44c5-b6a7-4d9f1b9ceba6", "sighting_of_ref": "indicator--d7cb86ec-fdc3-4da4-b65d-0f3b9b42eadd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbbb29c-4413-480d-bd8f-daa028f4db96", "sighting_of_ref": "indicator--edeb1e46-7c49-45d7-a240-560a153ac0ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd4640d-e6c7-4d7a-84ec-30e17e0e33c6", "sighting_of_ref": "indicator--f814a3bd-74df-4af8-a2ab-c441764cd36d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899d98d5-df51-4af5-8f17-e0c8fdfe9d5e", "sighting_of_ref": "indicator--1ce677d5-cd27-4b75-a967-96236b5c7e6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0fba5d-5449-4204-a4f3-69c0562fee06", "sighting_of_ref": "indicator--eb43d4d0-fc61-428a-b3c7-8507c6b3b81b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4c894f-bbb5-4ff9-8e0f-b7ac1edc5f9e", "sighting_of_ref": "indicator--97443da1-72ac-4c51-a5ac-7789e17683a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9801582e-e1a6-403a-80ff-81e788f74d0d", "sighting_of_ref": "indicator--fe8633b5-96c1-4dfe-8d41-eef758988496", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018abb82-0fcf-4446-a8c3-e9ebd2d9511a", "sighting_of_ref": "indicator--a2fbb2af-6324-47e9-863a-05c98cad4da5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6cdd9f5-87ac-4684-8ab7-007a7f1dc5a1", "sighting_of_ref": "indicator--a2fbb2af-6324-47e9-863a-05c98cad4da5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f7f63f-1fac-4cf1-8e5c-ca9ef71421b3", "sighting_of_ref": "indicator--a2fbb2af-6324-47e9-863a-05c98cad4da5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423e19e0-7b29-4c10-b816-74bbcc08908e", "sighting_of_ref": "indicator--bd60dd67-43d9-4002-a4dc-fbdfee1f8624", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9825b50e-e3d6-4028-9ea7-3adafebf5178", "sighting_of_ref": "indicator--4ea10abe-72c4-4233-9374-5a6f83f8d37b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290c3b88-b94c-4e72-9232-9d98481dd793", "sighting_of_ref": "indicator--4ea10abe-72c4-4233-9374-5a6f83f8d37b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08800387-243a-4a2d-933e-d3a174863453", "sighting_of_ref": "indicator--4ea10abe-72c4-4233-9374-5a6f83f8d37b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cad43e-aac8-4ca6-8160-34f22929a2a2", "sighting_of_ref": "indicator--2caac11b-9246-41cb-a672-4a08b684737f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb604d9-5f10-4340-866e-cdcb7d0a0846", "sighting_of_ref": "indicator--2caac11b-9246-41cb-a672-4a08b684737f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f928ba98-bc6b-49c4-a579-e825312310a7", "sighting_of_ref": "indicator--87724068-46bf-43d8-b1af-39ab8bcd7758", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b45882-8ab4-447f-bd66-d1548bf26af3", "sighting_of_ref": "indicator--84256278-51e3-4eb0-8060-f81ec2bb753d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93a8a3b-00d1-48b3-b1b2-7161340a9fda", "sighting_of_ref": "indicator--84256278-51e3-4eb0-8060-f81ec2bb753d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7679469e-250c-4a83-a2ea-cad056172f2a", "sighting_of_ref": "indicator--84256278-51e3-4eb0-8060-f81ec2bb753d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4c7abf-1c6b-420b-8d75-ccb2b351163c", "sighting_of_ref": "indicator--b59a48a2-36ec-4b87-9a8c-88796f9dc039", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea32bb94-ffc6-4922-bc50-faffe1a5a945", "sighting_of_ref": "indicator--b59a48a2-36ec-4b87-9a8c-88796f9dc039", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf5b493-a829-4c02-9344-ce6f817d29b5", "sighting_of_ref": "indicator--b59a48a2-36ec-4b87-9a8c-88796f9dc039", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3d674d-e9f5-489c-be1a-983ee92e1556", "sighting_of_ref": "indicator--a34a0e71-4162-41f2-81e1-895d5e08f2e6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e99dc6-8c9c-4df1-8f2f-3d052e2a8ee4", "sighting_of_ref": "indicator--1e97c741-3660-4476-bdfa-bcc8ebcbd1ea", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020b84d5-3c47-4f9b-b443-12b17eeca6a3", "sighting_of_ref": "indicator--edec1790-cb67-4f0d-84e8-3bfc55e73bbe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7476a5ce-b587-4c8d-9810-037ca07bc4da", "sighting_of_ref": "indicator--837e5d4a-9437-4247-a354-78b7b5847f2d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a7d399-24a9-4318-88c9-f2e0711a66b9", "sighting_of_ref": "indicator--837e5d4a-9437-4247-a354-78b7b5847f2d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea15cbf2-d1e9-4c3b-bd87-8966d6e041f6", "sighting_of_ref": "indicator--da9bb5e1-c3b7-42c8-8a6f-b76f1b235467", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdd15da-a0c0-4762-a5e5-d32c02a6ec67", "sighting_of_ref": "indicator--aed73931-7974-4ce3-aef2-3d980b599168", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755941d5-3b4f-4129-a400-ea0a20708d95", "sighting_of_ref": "indicator--04f5cc60-8f0a-4108-9b5a-1ae5a9c22a35", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1c1923-b404-4b06-84ac-609ae4061856", "sighting_of_ref": "indicator--b030704d-8e97-4aa7-8fbc-f55911201b30", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbf0b5c-cd00-4f66-afec-042ff52ff502", "sighting_of_ref": "indicator--99f66452-abd1-43b0-af57-bbb2e305e7a2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8019b991-a305-4dc9-a705-322d87e16e95", "sighting_of_ref": "indicator--21a48824-6fde-4456-bd26-c41c3e2598b6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d6a271-23df-4466-8802-e729b387394b", "sighting_of_ref": "indicator--21a48824-6fde-4456-bd26-c41c3e2598b6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcd45c1-0a39-49ac-a53f-a27e26552599", "sighting_of_ref": "indicator--d140d29f-e2c9-424f-8809-fd77d9abc780", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e28b0e-df12-4dfc-b46e-7a1093b49dda", "sighting_of_ref": "indicator--13b0fbae-902f-47ba-9f13-7832e26c1e43", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cf80c3-f244-453d-a8e3-ba8800586f99", "sighting_of_ref": "indicator--5237e946-de54-4a71-b654-618518fa0827", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e820ebcc-bf9e-4076-bf1a-3288140a195d", "sighting_of_ref": "indicator--717ac3d2-0893-4192-8bad-6bc58763bf8d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f05a08-3785-4876-8471-59306c06e75c", "sighting_of_ref": "indicator--10a09498-cb10-4f54-8a51-1919330d0fea", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e22d8fa-cb5c-4bf8-a1b1-996105aaac3b", "sighting_of_ref": "indicator--10a09498-cb10-4f54-8a51-1919330d0fea", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190a0908-4fc8-47b3-8e91-d11816b5b732", "sighting_of_ref": "indicator--4a27c1c5-d080-4e0f-8604-490f4e5db402", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410d5af3-5cc4-4777-b4f4-c10ec4d0e833", "sighting_of_ref": "indicator--dbc77fa2-ae42-4662-a8ba-ba88ec70c31f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bb8095-5de1-4299-9d49-77f5bb5e44b9", "sighting_of_ref": "indicator--a563722e-6348-4791-91f8-6a5ebe6da966", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30b4eef-8cef-41bb-95aa-c95db0be59ac", "sighting_of_ref": "indicator--9ec19688-b23a-4b85-a982-532875f6d60c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b247e9-31c9-4391-b9c7-cc8c97478b99", "sighting_of_ref": "indicator--15ee9659-c475-46cd-8774-c12512774a48", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fe3de0-0cb2-4817-ad46-e361fef66496", "sighting_of_ref": "indicator--85057f39-054d-4660-9c22-f28ad504663c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937480a3-5aa1-4a38-924f-cc727c7f47d9", "sighting_of_ref": "indicator--85057f39-054d-4660-9c22-f28ad504663c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bed06b-8eb5-4eda-a6b3-dd78a52beb93", "sighting_of_ref": "indicator--81409caa-28ed-42b2-984e-4ef669b7d790", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47759ebd-f529-43d2-a612-86b032e121f5", "sighting_of_ref": "indicator--4d229d81-de1b-48bc-a999-8404773365d7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc668c72-df37-4d02-b0e5-05a75fdb3731", "sighting_of_ref": "indicator--03f89d6f-0daf-47c0-90d2-2dc22e541a7c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32279f4a-f937-47c1-a9e5-6effcac7bf75", "sighting_of_ref": "indicator--03f89d6f-0daf-47c0-90d2-2dc22e541a7c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12980f9-7b49-4d75-8c7b-bd79890ce6e1", "sighting_of_ref": "indicator--de348e46-a595-4ad7-a012-e7f93cb7ce34", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fe7ea0-ccd3-465f-add6-0fd38d5edd0c", "sighting_of_ref": "indicator--0af79e4d-c63a-47fb-973e-3cdca788dfdf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213cc3d2-150c-4e3f-b0fb-87b02cd30ffe", "sighting_of_ref": "indicator--50b57d26-18ca-4ee6-a3df-5832a005af4a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10974294-72f8-46df-8725-507faad10748", "sighting_of_ref": "indicator--50b57d26-18ca-4ee6-a3df-5832a005af4a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a9d9d4-44a1-4841-97ec-da19869399b1", "sighting_of_ref": "indicator--deda2832-63ca-4136-b5cd-5310f9865f5d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465747cf-c9fd-487b-8bca-cdde5c476f5b", "sighting_of_ref": "indicator--deda2832-63ca-4136-b5cd-5310f9865f5d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab56d621-2e23-426a-9bd1-85849cccb260", "sighting_of_ref": "indicator--1fc1d7a9-eb8d-4373-89d8-3589118ac0e1", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9a390a-7394-4fd1-9c27-16c37ada8f40", "sighting_of_ref": "indicator--63c7cf00-aa8b-4eb0-b4b8-72c7ee9ef739", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eccdb35-077d-4c3f-949b-9c77fef10903", "sighting_of_ref": "indicator--8d9f66fb-c3da-4780-b384-d5dc506ad3eb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46871d6-60fd-460a-9baa-9a235b7f1749", "sighting_of_ref": "indicator--8d9f66fb-c3da-4780-b384-d5dc506ad3eb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fe98c1-a0bf-4791-8b95-29c42b84f538", "sighting_of_ref": "indicator--b5d9349c-9594-43d4-813b-ddd27e57ee48", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7986f6a5-357f-4d33-977f-72f903b401d6", "sighting_of_ref": "indicator--b5d9349c-9594-43d4-813b-ddd27e57ee48", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1a1a03-cc21-4406-bf1c-627c3345c4bf", "sighting_of_ref": "indicator--bd1dfb3b-9a81-48c6-9545-226a349da26b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18629e08-a773-4daa-85c2-6f751c62b60c", "sighting_of_ref": "indicator--bd1dfb3b-9a81-48c6-9545-226a349da26b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075f9efe-42a8-402d-8972-1042640e89d8", "sighting_of_ref": "indicator--bd1dfb3b-9a81-48c6-9545-226a349da26b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1fb8d1-a0fb-4261-9384-2a520eb40b19", "sighting_of_ref": "indicator--63ba8bb1-10fe-424c-b905-2541f0bf9e7d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1218b450-bdc8-487c-a55d-e5363860be5f", "sighting_of_ref": "indicator--265f29a7-d3d8-4b6c-a3b6-d9e742636b8b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec90b03-186e-4781-a208-55395dd3060f", "sighting_of_ref": "indicator--265f29a7-d3d8-4b6c-a3b6-d9e742636b8b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9f36ac-d9f5-412d-8e12-2ea5ab0d3924", "sighting_of_ref": "indicator--38a91479-68f2-459f-ae69-af739c119734", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009bced0-bf5a-4418-99eb-ca4aa52ea323", "sighting_of_ref": "indicator--38a91479-68f2-459f-ae69-af739c119734", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4333f5-0d1a-49da-b6b8-6e7cca9bc37b", "sighting_of_ref": "indicator--38a91479-68f2-459f-ae69-af739c119734", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2dd85da-a6bc-473f-945a-38c67733aae6", "sighting_of_ref": "indicator--ed32fdf2-953f-4075-abe3-3b638064bc53", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa01ed6f-b938-4dc2-a861-3abf17a56ca4", "sighting_of_ref": "indicator--ed32fdf2-953f-4075-abe3-3b638064bc53", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61123f82-e4d5-47d1-8b18-f764829a83b4", "sighting_of_ref": "indicator--33ea0413-e660-40f5-8843-1970d0898729", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66deb97-8c0d-468c-9bfb-69035191335b", "sighting_of_ref": "indicator--3c910505-7b76-44e5-be52-53092ad21456", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8186667f-ed6c-40e7-b24c-7cd86abc4a3a", "sighting_of_ref": "indicator--3c910505-7b76-44e5-be52-53092ad21456", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631eb958-1b68-4ddc-8d87-93d99a792d49", "sighting_of_ref": "indicator--43791e5b-90ca-44ef-b835-0a26eeea6601", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65438685-580d-4f1c-9e7d-fbbfb922acec", "sighting_of_ref": "indicator--eb24da63-320f-4f44-8524-587a8e20e17f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0203dd36-669d-455a-99c7-2a1bb4527d81", "sighting_of_ref": "indicator--4a84fa47-c8ef-4c39-82c0-71108ba587c0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24094e1-9026-4cc3-9686-0a943d0e05e6", "sighting_of_ref": "indicator--4a84fa47-c8ef-4c39-82c0-71108ba587c0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788123e2-c3f9-4eb5-9780-b2a6299427c2", "sighting_of_ref": "indicator--0ced9f4d-0dc8-4b84-bd93-0502d35f9aa9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1e109b-8aca-4014-ac5a-a0652ebe2854", "sighting_of_ref": "indicator--0ced9f4d-0dc8-4b84-bd93-0502d35f9aa9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12d1bca-6686-4ca7-8476-2fa61ca16675", "sighting_of_ref": "indicator--0ced9f4d-0dc8-4b84-bd93-0502d35f9aa9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503f12a2-b27e-4bb4-a554-190164c6291c", "sighting_of_ref": "indicator--17f48cab-cd96-40fd-b056-dbcc171ca547", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeffe3d3-1430-4615-b2c0-a2d45a4f49f2", "sighting_of_ref": "indicator--17f48cab-cd96-40fd-b056-dbcc171ca547", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f633b5e9-930b-4458-b9f3-7c32c5d1fc86", "sighting_of_ref": "indicator--17f48cab-cd96-40fd-b056-dbcc171ca547", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32910c5-32f1-4bb4-9174-ae4f20b2e245", "sighting_of_ref": "indicator--78785c12-f2ff-4e5e-9df2-caa485e3068c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fd1a26-0aa6-40b7-ae36-dce107515046", "sighting_of_ref": "indicator--b738810e-d71e-499c-8290-4b108c47ed49", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36f38f5-fa48-4f73-b774-7396e71bef30", "sighting_of_ref": "indicator--d790eea9-7ad9-4e3e-a09f-0da079fd9aee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244caafb-1d0f-4382-9d82-12eab12b69db", "sighting_of_ref": "indicator--d790eea9-7ad9-4e3e-a09f-0da079fd9aee", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e17d0d-2cfb-4f94-a2c4-84d9df6b2213", "sighting_of_ref": "indicator--d790eea9-7ad9-4e3e-a09f-0da079fd9aee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93e3515-82c2-4fd2-b0ef-c97aad9b965c", "sighting_of_ref": "indicator--4b229a6c-1532-43fe-bad5-81cba124dbd4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbcdb28-4971-409d-8092-1186831f9b80", "sighting_of_ref": "indicator--aa9663cd-9fc2-4e09-9054-084632818d99", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c240df-f50d-435e-affd-7e1743ae16bf", "sighting_of_ref": "indicator--7461b7f6-3ced-4182-86ff-9a9025f1b965", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e56bbab-44bf-4826-93e9-cb094ff9f8a1", "sighting_of_ref": "indicator--61fb3132-7d3d-4619-80db-b818219bd914", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3824d7d-ea38-4e14-a28a-8f218b89d062", "sighting_of_ref": "indicator--61fb3132-7d3d-4619-80db-b818219bd914", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6cfdc1-ccc1-4660-8620-4624d6c4e9cc", "sighting_of_ref": "indicator--61fb3132-7d3d-4619-80db-b818219bd914", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f59eed-17f3-4757-9433-7823af5afa33", "sighting_of_ref": "indicator--3641222b-6136-450e-a801-3e672ef636bf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a6f95b-ea9a-4663-85f1-4c8c099eaf41", "sighting_of_ref": "indicator--3641222b-6136-450e-a801-3e672ef636bf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49003c2c-44b7-4eda-98f1-a460ae8b9a5d", "sighting_of_ref": "indicator--3641222b-6136-450e-a801-3e672ef636bf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de8f38c-830d-41df-a522-5e51eb1fecc5", "sighting_of_ref": "indicator--35379fc3-3a09-4a85-9143-bc5891140f33", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a4a286-d145-4e98-8d22-85b5ca3ee4fa", "sighting_of_ref": "indicator--29b8989a-e6e2-4af2-8628-a2d2ad1a4f57", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4d585f-8b42-4fa2-9e55-652a93a04187", "sighting_of_ref": "indicator--fafceea4-73d7-40a7-a169-b5e30a9bb6be", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e5aa6c-b973-4898-9e00-cfe2eb57acb4", "sighting_of_ref": "indicator--50a9646c-0030-495b-bfcd-a22223800976", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d702ad1-8993-406c-b770-d3f9c901cae4", "sighting_of_ref": "indicator--0a262d94-15dc-4953-803c-f2cce0bb38fd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4871e91b-901e-463e-bae6-1ecb0a3f0b61", "sighting_of_ref": "indicator--dc97d95e-3a8f-4c93-b7fa-5931a0bbf551", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb748a4-24a0-4e03-ba87-3b50a365686d", "sighting_of_ref": "indicator--00987114-c65f-4dd2-996a-efd7f3d3d9f9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc52e934-b34d-4e36-b63e-d38c49ddcf51", "sighting_of_ref": "indicator--1422299f-5bf4-4392-a077-cec814d82c48", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd41f195-11d5-4b88-a500-d0318fea44c3", "sighting_of_ref": "indicator--46fbd81d-f810-45a3-8b5b-74c2718d2460", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f431c4-a5bd-46da-8360-eb438001a4c8", "sighting_of_ref": "indicator--27db0978-7265-4c6c-acbc-48fd5cabd145", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2988f377-c09a-4226-9670-ec440d85caa4", "sighting_of_ref": "indicator--5b4a4157-6594-4692-bb5b-95cba0fb7876", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2486cc0-e79f-4b29-a166-43f801beea65", "sighting_of_ref": "indicator--7efd2baf-f984-4efe-9a64-28e004b2ea3c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1524dacc-b06d-447d-9e4f-67ae392b268f", "sighting_of_ref": "indicator--7efd2baf-f984-4efe-9a64-28e004b2ea3c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8114b67f-f218-419b-b3db-b3182fc0a547", "sighting_of_ref": "indicator--ef8be08a-9d98-4b6a-9c0b-17fa83dcf714", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b48b44-0843-4bea-bf8c-04a8bfc028ca", "sighting_of_ref": "indicator--49567220-0504-463f-b638-08ddd06831a5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513735e0-f3d9-4862-9ff4-937169a0de00", "sighting_of_ref": "indicator--0ca7eb7e-2cbc-4b3c-8bd0-2ca136125601", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb09414-52c2-44bb-8c3e-98e55c20bb82", "sighting_of_ref": "indicator--3b9a7f90-7db3-476f-ba52-22373563ec9f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb2ca7a-1d34-40a0-8130-ea4186f3285c", "sighting_of_ref": "indicator--7547f43c-0044-48d5-a6f9-810b027f5a02", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6956e31-ff1d-495a-9f7e-8808fe8d37c8", "sighting_of_ref": "indicator--bdbc4361-7263-4578-891c-cfb498b714e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb78940-8ee2-4686-9716-fc43ca154679", "sighting_of_ref": "indicator--ef38a136-c21f-4f9e-9984-fd39de6ff4ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d12b0c-a9e0-4ef1-8e4c-888892ff482c", "sighting_of_ref": "indicator--9b1edd8a-a808-43ad-9185-4dbb896c94d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c32607f-abb0-4738-978c-117f6752bd39", "sighting_of_ref": "indicator--07f8844b-28fb-401a-a120-dab742ae6184", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f57e64-2858-4a0f-b150-fa9f1d6798a8", "sighting_of_ref": "indicator--2f58ef32-d595-4139-9a01-8cad797c6c4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6f0657-c571-40ec-bff9-adc246899072", "sighting_of_ref": "indicator--1b6cff9f-81c0-4998-ba88-fc5ba059a3c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d362855-8aba-4556-b955-178098f5c903", "sighting_of_ref": "indicator--32aca2be-17d0-4ae0-a144-352f9b7e5038", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6da140-0e10-446b-a4e7-43aeff2da39b", "sighting_of_ref": "indicator--09024fce-0d7c-425e-99da-8c3140a31bee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ba964f-cb31-4562-928b-161ef982b45d", "sighting_of_ref": "indicator--f67ec474-09b8-4294-863b-1c572c250f94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7979752b-d531-4490-96de-d9940f8af004", "sighting_of_ref": "indicator--7014f9de-b086-4968-bff4-f21f009f6c6c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84d16d2-22be-452c-ae29-0613a64af2f1", "sighting_of_ref": "indicator--6af8caf8-b97a-4066-a58a-0a8014f94723", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5accf916-6a8e-4124-9238-4527b9a47e8c", "sighting_of_ref": "indicator--9579ca51-8c1a-4807-a071-4f8de63765bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8890eaa4-cf89-4059-b7dc-4cbdfe6b3b64", "sighting_of_ref": "indicator--6565e899-b346-4be5-8ae1-db9b70b8199f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e0d812-2ef0-4c08-a3bb-f3d10d34a016", "sighting_of_ref": "indicator--dc119c90-234e-409a-95e7-3ceb9f3522b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1d12b9-afe0-4e24-957d-7c49577c40e4", "sighting_of_ref": "indicator--6273596e-1dfe-45a1-a30d-d0b489a49938", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9582a4d1-9a4e-42cb-95b7-c216beb8348f", "sighting_of_ref": "indicator--fbb70d2e-d08a-4d4c-a32a-c8538de6a422", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932b7d94-3817-454f-96f3-38259e88ac69", "sighting_of_ref": "indicator--df641c1b-04de-4337-9eed-5084313beb7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b16d81a-a9ad-45af-a8c8-744654511ccb", "sighting_of_ref": "indicator--d70a1072-4307-44d1-a66c-2af51b384fe2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae392f3-a91f-4a96-866f-6a62ffde3ff4", "sighting_of_ref": "indicator--7bdd9ddb-3725-4217-8502-3d9b5171b67c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f290113-2011-4e37-913f-6f325ff60aaa", "sighting_of_ref": "indicator--c9a2ee5a-c274-456d-9704-3028f4b89458", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27404fb-05c6-4bc8-84f4-b28142209a0e", "sighting_of_ref": "indicator--15d9b81a-9e3f-4e1e-ae76-0e1b9d630f37", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa8bc87-a18f-445b-9846-1f2ac6e46c7e", "sighting_of_ref": "indicator--15d9b81a-9e3f-4e1e-ae76-0e1b9d630f37", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240638a6-6bd5-4ce2-ae9d-c96e00729fb5", "sighting_of_ref": "indicator--14f04740-eddf-4774-96bd-2ef7e7671ff5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7213550d-8a64-4051-8dd6-4e77f9e9a2b7", "sighting_of_ref": "indicator--14f04740-eddf-4774-96bd-2ef7e7671ff5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19775d4c-a50c-4e30-9913-038190fd3eea", "sighting_of_ref": "indicator--14f04740-eddf-4774-96bd-2ef7e7671ff5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a9ca1b-b271-469b-bece-3150c162448d", "sighting_of_ref": "indicator--94577d06-1a45-4d0b-86dd-9d23565154bd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c421f8c9-8384-4f98-9a0d-d0ba579f8550", "sighting_of_ref": "indicator--db549790-fa14-4312-8b1d-0f72bec8643a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7c5bd3-8292-4216-9f2a-bee47917993d", "sighting_of_ref": "indicator--d52285b1-e407-467b-a816-8f1674a04d76", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ec5a4d-990c-4f51-90dd-e9da079179fa", "sighting_of_ref": "indicator--e33f405a-9507-401d-91f4-825a725f5cb9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f15a75-f7bf-42a2-b139-2da478c01701", "sighting_of_ref": "indicator--ebe05c03-325b-4179-a365-7a9f062e6cd8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dc151a-9ded-4861-9d59-155d7778ef0f", "sighting_of_ref": "indicator--40c383fa-1506-4856-b972-319cf3e39da9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c2575f-383f-4f08-85c2-e31fdbdd2e5f", "sighting_of_ref": "indicator--a1235630-9672-4078-9eb6-66f44af40251", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57422384-e92e-4fd2-82e8-3f5cab19874f", "sighting_of_ref": "indicator--a1235630-9672-4078-9eb6-66f44af40251", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f16859b-9e70-4927-b71f-85dc21e0c1b0", "sighting_of_ref": "indicator--fc318f6b-04f5-46a1-b88e-8cd23d74d91e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47466083-aa82-47df-95b7-3bd0286fa968", "sighting_of_ref": "indicator--5fb5fa83-0893-44f8-82a6-64077984a8c4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4e30cc-c633-491c-8ada-815165a1f263", "sighting_of_ref": "indicator--d59b5463-3ae4-4928-9e3d-701eaa79dea0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d3ecdb-960e-41ad-ab63-04edac5d82aa", "sighting_of_ref": "indicator--342e9db8-ee5a-4c87-8c3b-367738b2b925", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a50268-2a11-46b9-b56d-36688b373efe", "sighting_of_ref": "indicator--342e9db8-ee5a-4c87-8c3b-367738b2b925", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b50eb6e-ef91-4f98-9d28-82e93367a26e", "sighting_of_ref": "indicator--342e9db8-ee5a-4c87-8c3b-367738b2b925", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ee1091-1efd-4931-80d3-300737aa0a6a", "sighting_of_ref": "indicator--9967a9e5-a69c-4ba4-868c-088477b29c56", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e82dd79-8cfe-4b2a-a8f5-f6063bdf2dae", "sighting_of_ref": "indicator--68104615-b3e9-42c7-bd65-1c4e8891a4b2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31400e4-a220-41b8-a6b0-0a614168197e", "sighting_of_ref": "indicator--68104615-b3e9-42c7-bd65-1c4e8891a4b2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e1c395-38a7-4701-b990-f7e64a8c1680", "sighting_of_ref": "indicator--86ed6107-dd06-4959-a0ea-93970737f530", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0375f584-10e9-40cd-a0bf-0063b79b3e03", "sighting_of_ref": "indicator--86ed6107-dd06-4959-a0ea-93970737f530", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a1fa94-6019-41b1-8260-a3a36973580d", "sighting_of_ref": "indicator--0f1401fc-d2ff-4bd6-ac65-627487fceb37", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d2a239-e877-4f67-ab86-b7a5807eaa68", "sighting_of_ref": "indicator--18927273-9732-45be-a48f-975bfae7e853", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506715f0-38d2-4003-9dd9-803af14fab12", "sighting_of_ref": "indicator--18927273-9732-45be-a48f-975bfae7e853", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b77f73b-402f-4d99-908d-b97bc3606f4f", "sighting_of_ref": "indicator--5f1d7f91-4612-4393-bf30-38849704d6ff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e53229c-12ba-4d75-aeae-7983079fed68", "sighting_of_ref": "indicator--807d1433-e891-4dec-92a0-ecbe0ffe06e8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2199911e-16ec-495e-aa9e-09442d847f33", "sighting_of_ref": "indicator--8b6c58ef-4356-4e66-9e1c-ea3db96b7133", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3316bd7d-d04f-473b-acf1-c51b5e2ef181", "sighting_of_ref": "indicator--97af4f45-9c09-4c9d-aef4-073c58bd2522", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fb5c00-119a-44a9-9bb3-5d91dcf63170", "sighting_of_ref": "indicator--f28cecd6-acfb-4ea6-b031-de50b093983e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d5abe5-039b-4b9d-9f52-4e387a6ab369", "sighting_of_ref": "indicator--5ed23548-6efe-4b7e-8bad-9291a1d64022", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e292f86a-d1b2-47c5-a9f6-ec6f86512771", "sighting_of_ref": "indicator--8f2f31db-2462-4861-ae2a-a8ceb9b7cc05", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e3abff-e478-4845-bb44-6610869a3890", "sighting_of_ref": "indicator--6508a3b6-0c56-4ac8-b5c2-7651c1a3e659", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb5d4cd-690d-4e2c-9dfa-05291df980ae", "sighting_of_ref": "indicator--aa2c5eee-cc86-4ef2-af19-d9ca99fb6130", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b33a58-1ccf-4724-8089-c0ad916d1a0a", "sighting_of_ref": "indicator--1e5fa85d-fef7-47f2-a1ce-028719596fb9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8710bcd2-c668-4e3c-a134-719666065782", "sighting_of_ref": "indicator--635f1a82-8f0a-4daf-911a-1139fa346e2e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ad6ce0-1c6e-4167-9737-b4b754f1a9c3", "sighting_of_ref": "indicator--635f1a82-8f0a-4daf-911a-1139fa346e2e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49c07bb-2ddc-475e-a55d-20db6459d1e2", "sighting_of_ref": "indicator--635f1a82-8f0a-4daf-911a-1139fa346e2e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2389ff91-f387-4caa-899c-6264ec43b489", "sighting_of_ref": "indicator--8b5c0dff-f5dc-4450-a9ce-db5c4117ad63", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10780a33-bda3-4ad4-9d30-82a5cc8357a7", "sighting_of_ref": "indicator--8b5c0dff-f5dc-4450-a9ce-db5c4117ad63", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f00cd5c-3aa8-4c24-9505-3e71ca7300be", "sighting_of_ref": "indicator--fa8eea5e-f605-4c54-beae-82f4a70497cf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44da2932-c7f9-4a79-a53b-769e03b7ee8c", "sighting_of_ref": "indicator--cd358d75-e4d8-44da-89cb-674b2ce073e9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8c60f6-a1be-41ca-974b-7d967e5e64ac", "sighting_of_ref": "indicator--d0f3d214-0642-4b13-b63c-4fdcd5f01778", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d75c0f-b7a8-40a3-ba74-abcf3b247ac0", "sighting_of_ref": "indicator--a1117844-936d-4874-b49f-204992fc6963", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d2d469-102c-4545-a1ac-779985ca1cc8", "sighting_of_ref": "indicator--1a693e1c-5c97-4985-9bd4-a52b0e588388", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6184d7-c64c-4524-b419-255c791cb51c", "sighting_of_ref": "indicator--8dd64885-ed8d-418b-baf6-90ca13aa7f28", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b6ce76-f20a-48f5-833e-5081ad043666", "sighting_of_ref": "indicator--498db2f0-5b26-4383-beab-8503599cc711", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42231923-437c-441e-9109-f2baffda1a35", "sighting_of_ref": "indicator--47712252-b804-4559-98c8-ba173deceffb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a791d466-fdc9-4670-9ae1-ff2f043be192", "sighting_of_ref": "indicator--c8babd4d-d1b4-4778-b8dc-cb4562dadbfb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087d0af1-75e6-49fd-b755-3651bca2e615", "sighting_of_ref": "indicator--53a9b419-483c-47c6-870d-6260a57d1dc8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d23480-cede-40f3-928f-460a8ba1c76e", "sighting_of_ref": "indicator--64d8bf53-d73d-424e-9120-d202333d72a5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a97284e-cb8f-4cbf-a2b3-8347eb0a9f7f", "sighting_of_ref": "indicator--e7fcb2d1-0f1e-4a13-84e7-177c0060fa51", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce87c3ae-c72a-44f6-b823-cea716d8c50a", "sighting_of_ref": "indicator--5e0b4f06-00d8-4e22-8d9e-0eeaf667b4e0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0462c986-0da2-4ec7-9217-9acc36a3ecd5", "sighting_of_ref": "indicator--e77b4086-5e09-48d5-94c6-056ded419fca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0424cd66-5c36-4126-803c-d8f102994883", "sighting_of_ref": "indicator--0ffa5547-2755-4559-b302-5d37dbbd34e2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c956432a-99c9-4316-8a8e-e1af7c07a3b0", "sighting_of_ref": "indicator--f36063d8-363c-43c8-8d79-c2f7af965753", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2add794e-ec83-4cab-bf07-aeb98d0066b5", "sighting_of_ref": "indicator--f36063d8-363c-43c8-8d79-c2f7af965753", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7a1b3d-996b-4451-86c6-d7e705fed9a1", "sighting_of_ref": "indicator--422a698d-6712-4938-ab35-c5cb860237e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086f2b78-387f-4177-8e6e-e68a9faa9065", "sighting_of_ref": "indicator--0c754d36-d450-41e1-8fc7-eeac0602c8e6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4363b3b8-3669-45bf-b804-da08412a0d37", "sighting_of_ref": "indicator--c3d1e76a-24ac-4fdc-a897-11ca3d99e322", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed113883-9c2b-4b9f-b348-389b807ab336", "sighting_of_ref": "indicator--30dada45-c6ab-42c5-a77f-ace5396636b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f5ff04-d4e2-4494-b142-9a81a7aa2e0a", "sighting_of_ref": "indicator--e8947ef3-5a73-4f3c-a849-27be4c09f052", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cd8dba-0c20-4e4a-beb2-67acaad02a57", "sighting_of_ref": "indicator--a44b8eb4-98ed-4229-825e-ac3a27f7cf46", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a013fa90-ac60-4bae-ad44-50b7c418f740", "sighting_of_ref": "indicator--b65f9936-e7cd-492d-9239-7bbd26ba35ad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf87639-4d08-4697-9b30-18e93b3d309a", "sighting_of_ref": "indicator--f2a5c75d-88ac-4e46-8cf6-c28eae1ab471", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5eaef57-c169-4b31-8770-8e99562d68dc", "sighting_of_ref": "indicator--7b40f679-cfe3-4e66-b211-7d5822eed260", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d77d5a-7f25-4b85-b82c-5be61476cd1d", "sighting_of_ref": "indicator--38f561e4-1d04-4c75-b020-1bcbdb4c85c3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b880736-268d-4115-9754-145c0cbc29ce", "sighting_of_ref": "indicator--34aa685a-dbc7-4399-ae0c-faf38b267e37", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d488efe6-cd64-43eb-82e9-9823931d4868", "sighting_of_ref": "indicator--b4917006-76ad-4e71-bcbb-a3558b67c59b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77188b8-7df5-40c9-9bfc-e1841789d581", "sighting_of_ref": "indicator--b4917006-76ad-4e71-bcbb-a3558b67c59b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735da29a-0e8b-494e-a0a4-ce9d1d780997", "sighting_of_ref": "indicator--4ed83c9c-cce2-4813-b1e9-a37ac6b4fefa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf15947-4268-45c7-b77f-4de19eeb1987", "sighting_of_ref": "indicator--cd73f2d4-bee0-45a9-8b23-191c51562061", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e96483-9494-4065-b3e5-a732903fa354", "sighting_of_ref": "indicator--1a5f32e2-81d2-4949-be70-55a7b86eed6d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf364d8-b318-46e4-b891-eab414e8e04d", "sighting_of_ref": "indicator--3d9c0a8b-4582-48b3-9d52-fa4d46053cb9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3bf1d8-8e13-439e-b7aa-ce3c30484ea3", "sighting_of_ref": "indicator--933647a4-3fd9-4458-a873-bca297361bc8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc486fa6-97a3-4d61-addf-efc875baa63d", "sighting_of_ref": "indicator--c0084ea7-f225-4f07-9d14-1d0238664370", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e4538f-7718-4ac8-ab48-579107bd7a01", "sighting_of_ref": "indicator--f92055dc-a05b-471c-8b75-e78fb8cd2adc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5dcb66a-86fd-4997-bb0c-66106da63ad3", "sighting_of_ref": "indicator--366a09bb-006b-4e3e-8264-afcda8d32b3c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde7cbcd-0da3-43bf-a57f-f0c2a9eaac62", "sighting_of_ref": "indicator--372e8768-8bdb-43d2-9ae4-5691a670abac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06703845-0602-49f6-bd1b-6267a52b65f2", "sighting_of_ref": "indicator--ffc7ad3b-332b-41e5-bc3b-51801cc4991f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972d1d38-04fe-42a5-8538-ed799ac11533", "sighting_of_ref": "indicator--bb61aae7-d884-4cd8-a141-cc77242bd4f7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf0196e-bc20-4c1a-9229-b9249f09fb7c", "sighting_of_ref": "indicator--6c51e68b-48b9-4aab-bf27-9a33bc0f1bd3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3970b65-710f-4548-95df-0b7fb3bfda65", "sighting_of_ref": "indicator--ed6336fb-7475-4f52-ae5c-b11b6e656c73", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae1737c-ea76-4a8f-b758-e911a0b82d10", "sighting_of_ref": "indicator--674aeb4e-c920-4b0a-bcea-8be0c245ff79", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f84451-0611-4f29-93bc-27c3979a1df8", "sighting_of_ref": "indicator--a970b593-6d9f-43ba-b5e5-308bc19e23ef", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395e9a07-5424-42d6-8ba3-6e63a20fe46f", "sighting_of_ref": "indicator--e0c1fec6-4091-4017-988a-e2938239c547", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521c07dd-a03e-4cc9-b604-95371d142af5", "sighting_of_ref": "indicator--d2ee707f-db21-4658-88e7-b4ef30ad3f48", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc43936a-1181-4454-9279-9dd614b550c1", "sighting_of_ref": "indicator--813a2bba-b0be-41e1-9f11-7c32b64397d1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306b15cd-94fc-4ad3-b8a7-02bed45a90b2", "sighting_of_ref": "indicator--75636f4f-e7d4-49c9-8df6-8f68e9823283", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfc2c88-a2e0-4b9b-bfbb-0117d923c13b", "sighting_of_ref": "indicator--083027a8-fe64-4d1f-877f-2a4a7c49f00d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd65104-435a-4085-bce1-0ad3a03af2c7", "sighting_of_ref": "indicator--7e3dec87-d12d-4af8-b9ab-677889395b46", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6fbbab-e93d-4422-8a8a-36509ef1786c", "sighting_of_ref": "indicator--334e1eb0-7af0-439d-85f1-3b1a7c582543", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73cf2bf-f666-4773-9771-fc6b533957fc", "sighting_of_ref": "indicator--d0965a9d-f9b4-4009-9fd0-022fdc47e998", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f4a1fd-933f-4a9c-a347-eb82fb1e5fcf", "sighting_of_ref": "indicator--89a72e2a-28ad-4a19-b31e-2753eb617c24", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f40184-39c3-44a8-b9b8-0e0627e0cd4f", "sighting_of_ref": "indicator--5152bf61-3ebc-4196-953a-436293c69aa3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9baf009b-0967-45dc-b069-eed56ffbf944", "sighting_of_ref": "indicator--3b0b9f47-0c78-43b5-9649-93efb7428d04", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d774b6a-dd80-4aad-a5d8-6ec68b046af7", "sighting_of_ref": "indicator--37638b51-4ca3-4fc9-a81f-6b44db27ffd8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb61b27-85cd-440f-871e-f121e1104fb5", "sighting_of_ref": "indicator--db338e7c-0ad6-4c94-b06d-a5a8a127032f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f11764a-0ca1-47cc-b506-04b22852e5d1", "sighting_of_ref": "indicator--85305a82-db65-4c0e-8a21-8c0a845794b3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f105862-6942-4fb4-8a30-bdd207f21259", "sighting_of_ref": "indicator--74820c13-d3ed-42d7-a4bb-568af2c02a7d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907b07f8-33c7-4e82-a5bc-4b05dd605f65", "sighting_of_ref": "indicator--74820c13-d3ed-42d7-a4bb-568af2c02a7d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46a4fa3-0b49-430e-b39d-29384c604512", "sighting_of_ref": "indicator--810ff15f-d2b7-4b8b-bb39-8f9d9cae2693", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac3c268-95fb-4293-94da-2a2c8a5bee59", "sighting_of_ref": "indicator--810ff15f-d2b7-4b8b-bb39-8f9d9cae2693", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bb7a49-899d-4304-9b65-6029e2b979b0", "sighting_of_ref": "indicator--810ff15f-d2b7-4b8b-bb39-8f9d9cae2693", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751cfddc-9234-415c-a0f4-4db3dce90fb9", "sighting_of_ref": "indicator--e0ba9b6b-befc-45d2-a59c-bd68280577bf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eec962a-500a-45a7-ae8b-71068b7d3963", "sighting_of_ref": "indicator--e0ba9b6b-befc-45d2-a59c-bd68280577bf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d72c5d-5254-46ea-8160-eaf3269fad22", "sighting_of_ref": "indicator--e0ba9b6b-befc-45d2-a59c-bd68280577bf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a60c60c-37db-4510-a5e6-673e99fd78cf", "sighting_of_ref": "indicator--76d4dc20-3089-41a2-8d37-c60f930ab4cd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0b91a4-8b11-4834-8347-10bc8ecdff4b", "sighting_of_ref": "indicator--9051bc51-7151-4afa-a13e-2c708a8513ec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b03e00a-d7fc-4e64-b8e6-8f65c7386c59", "sighting_of_ref": "indicator--9e1d03e3-7f00-4143-a0f9-24b27f3d6e17", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cd9984-8854-4b1c-a370-e3e6575d32e2", "sighting_of_ref": "indicator--9e1d03e3-7f00-4143-a0f9-24b27f3d6e17", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46d4fda-83b5-439f-8513-1f7fa6ec2cc3", "sighting_of_ref": "indicator--9e1d03e3-7f00-4143-a0f9-24b27f3d6e17", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0acc8b-e3f9-4105-8f1d-270152156c5f", "sighting_of_ref": "indicator--caa44b10-b52c-436d-9fea-b608ecd682c7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d77e6d7-0d18-4afc-a592-98050c6ee212", "sighting_of_ref": "indicator--caa44b10-b52c-436d-9fea-b608ecd682c7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7672da2a-b010-40c7-bbcd-565fe6b7d74f", "sighting_of_ref": "indicator--555dd34a-bae7-42fc-8f1b-180276a8e385", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c2890e-1aca-421f-ab21-db6f9820599c", "sighting_of_ref": "indicator--555dd34a-bae7-42fc-8f1b-180276a8e385", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805c5e59-32a6-4dcc-96ff-6254b9ec8e6d", "sighting_of_ref": "indicator--c15469ac-62fa-410d-9738-26b0e23203b7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e26f452-52bd-43c7-8a03-d2f017b636d2", "sighting_of_ref": "indicator--739b2d85-fb55-4675-be3c-1a0c2a23d90b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d079f3-95c7-4b7e-a182-19f6a76ec495", "sighting_of_ref": "indicator--ff894f0e-2ac7-4901-85bf-45ecfbee8917", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0162c88-22cb-4d6d-a2c7-952cd9dc0701", "sighting_of_ref": "indicator--380b7e89-6fad-461a-b83e-81e2fb00fbf2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e30d6c5-23cd-453c-8e99-032d1a15750c", "sighting_of_ref": "indicator--098c35a3-e19b-42a0-83a9-04305329270d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d115ba-bdc1-4a54-b52f-40796cf5ce27", "sighting_of_ref": "indicator--951bc735-b62e-4c3a-b57b-2d3086e361df", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2151b6e-dd4b-443b-9028-257800158f66", "sighting_of_ref": "indicator--951bc735-b62e-4c3a-b57b-2d3086e361df", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d183a44c-6557-4ae5-a55a-f57a361d9e17", "sighting_of_ref": "indicator--951bc735-b62e-4c3a-b57b-2d3086e361df", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c2a0ce-84d7-4735-af59-f6c8ab3b043d", "sighting_of_ref": "indicator--907c2075-09be-4052-96d7-d7ef132440e9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6659343f-52b6-4234-ae88-a6f5888d690f", "sighting_of_ref": "indicator--819554c3-4227-45f3-8103-686f4509ffc4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7a4e55-24b9-47d9-9859-9b3eacd67827", "sighting_of_ref": "indicator--cc9e6e53-5911-4c30-bc92-4afbe2f2846b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ee59be-fd22-446f-8430-82290fe89892", "sighting_of_ref": "indicator--cc9e6e53-5911-4c30-bc92-4afbe2f2846b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe6612a-ddf2-439b-a3d9-de405e32aaa5", "sighting_of_ref": "indicator--2fb1c370-cd78-420f-99a5-f0093598b8e9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60b7045-84ec-4e6c-a5e8-87ee80e18357", "sighting_of_ref": "indicator--2fb1c370-cd78-420f-99a5-f0093598b8e9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17353edf-b0b1-49d9-9d1d-a6a96c624c44", "sighting_of_ref": "indicator--708166db-6ac4-498e-827c-bb6902240388", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a58a46-a9bd-459c-bdb8-483004390c7e", "sighting_of_ref": "indicator--708166db-6ac4-498e-827c-bb6902240388", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce15e6a8-758f-441c-ba6f-6670b6c7864c", "sighting_of_ref": "indicator--708166db-6ac4-498e-827c-bb6902240388", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af474ab-6905-4e8e-90c1-a9f963a3c38f", "sighting_of_ref": "indicator--791a6661-8e4c-4e00-9453-14af7d5ec6df", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856785db-9021-4077-a10b-c285a4ebc592", "sighting_of_ref": "indicator--791a6661-8e4c-4e00-9453-14af7d5ec6df", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf27af76-d2ba-4ad5-ac9f-0308bf52e341", "sighting_of_ref": "indicator--bfa2b5df-a087-4e64-9488-344004fd6756", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4aca04e-4ecf-4e13-8ddd-2a2d7369cc45", "sighting_of_ref": "indicator--879e14be-52b3-4653-8e15-bf6080b8b237", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4ca134-3bb6-413a-9517-bef5a11317a7", "sighting_of_ref": "indicator--879e14be-52b3-4653-8e15-bf6080b8b237", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce78465b-d971-48a0-a292-53b70ba2fc4f", "sighting_of_ref": "indicator--084269c0-365e-4052-b603-d3b4f3c0fdce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4e3680-4560-4805-b307-50d03f5b7f0b", "sighting_of_ref": "indicator--882f2086-adb9-49b5-a47a-d7e6e3a5a9eb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7f306e-cf40-4985-8f63-0d87cdc51a79", "sighting_of_ref": "indicator--cc5ecfa0-fc03-41a8-9527-f8096f04e426", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa37894-326e-4436-8284-f2de14b29f72", "sighting_of_ref": "indicator--b5363951-7f9c-4b42-9415-b79a42c6a5df", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c545fdcf-9314-4d3a-b4ca-03c78321731f", "sighting_of_ref": "indicator--62a74e9f-a7a8-4c38-aff6-f649184e1d1e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc9cbf0-5316-4ef2-b6ba-c7385d40544c", "sighting_of_ref": "indicator--b1b99d5b-07b7-45f6-a463-01d71ea2c9ea", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893c2209-d0e9-41b0-91ae-126d6c7558c2", "sighting_of_ref": "indicator--ad529eb0-569f-4b45-9bc7-a834a3139c75", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f51de8d-9627-435b-834b-37a45a135cf6", "sighting_of_ref": "indicator--f418b026-093f-4144-9a6c-c57220605f93", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08dfe772-b4ab-4c83-9853-73e15774c603", "sighting_of_ref": "indicator--86177672-fbfb-4a15-a933-ef1d7a35228e", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fc89a4-24cd-4bf6-baec-8b2a32a9edfb", "sighting_of_ref": "indicator--0f22a1d5-9b03-43c9-a18a-0f437d562ee3", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c60eafb-c074-4a09-8cc5-d6274d6d4fbe", "sighting_of_ref": "indicator--8d126c38-3737-4572-b1cc-f1afc56b377c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9342cc65-b22a-48f1-aa2d-36ff6f562d95", "sighting_of_ref": "indicator--8e385749-6c27-4f66-8020-cfa9d13aa6ef", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d427531e-2469-40d6-8182-b7141a54bcae", "sighting_of_ref": "indicator--100ee625-14f7-4627-9ac0-1d7fe7f37e28", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdb5ed8-ef88-43d7-bdda-8bc9ba4448af", "sighting_of_ref": "indicator--6746b973-4c06-4dc4-9c75-e03c1d75bdd3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d247b61-027f-4c3b-a904-d7caef673082", "sighting_of_ref": "indicator--b6252bf3-ece4-421d-8f16-b2ef3cbdeffa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f8b72c-05c7-4673-ba21-78b027bd33ea", "sighting_of_ref": "indicator--bd04e53e-1d1c-4406-8826-7f68cd7cc70b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc90ee6-3518-4f94-8142-43d4acb82c0c", "sighting_of_ref": "indicator--2d4a4c98-2d39-4fd8-a338-8dc502d05fbe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5aa3262-652f-445e-b55d-4202c2c27a14", "sighting_of_ref": "indicator--fca4ae4b-a11f-4ea1-a33c-04212638ec85", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212c8aa6-c083-40a7-836f-d825e68198a7", "sighting_of_ref": "indicator--6981896f-4e70-4159-aa33-80ee6c3a41ba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f89bff-d4de-4520-b577-55c49558d521", "sighting_of_ref": "indicator--6981896f-4e70-4159-aa33-80ee6c3a41ba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91410c5-4f26-45ac-8180-8eed02c0d51f", "sighting_of_ref": "indicator--6981896f-4e70-4159-aa33-80ee6c3a41ba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98da83b-80a2-4fe7-875e-dcbfb6dbf2fe", "sighting_of_ref": "indicator--16bce865-f5c9-45ca-aa6a-9b2d780eb04a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b73ce09-8114-4be7-b8f0-4d7977fa40fa", "sighting_of_ref": "indicator--03fcf078-37fd-4f4e-a93d-4b7cb7aefdbc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297df095-11f8-4883-a8d1-252ed18cd2c3", "sighting_of_ref": "indicator--03fcf078-37fd-4f4e-a93d-4b7cb7aefdbc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8b55c2-37a1-45a2-a788-309e4573a4e0", "sighting_of_ref": "indicator--a4e22b16-2bc7-46cf-9857-bc736aadb3b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e404abb6-b193-4231-9cbe-dc01d29c3fc9", "sighting_of_ref": "indicator--255a3391-8709-452e-8f8d-dc04c296df97", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5aedb4f-a91c-4060-8c3b-c27cd0e9dd85", "sighting_of_ref": "indicator--255a3391-8709-452e-8f8d-dc04c296df97", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177cc604-7bc8-47e3-bb93-43db062757d4", "sighting_of_ref": "indicator--3a6f85c9-f0bf-4f62-ac97-e3d4740aa544", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5f4de3-c02b-4818-95fb-e6c41fafe3bb", "sighting_of_ref": "indicator--3a6f85c9-f0bf-4f62-ac97-e3d4740aa544", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54a70f1-5529-48d7-8c29-b78bc64a936b", "sighting_of_ref": "indicator--3f5776ee-7855-4c4b-bbcf-bb3fb619f146", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a6e8c9-075a-4800-8782-90ec7ce019ef", "sighting_of_ref": "indicator--9a463b04-a167-4e51-aa70-50a7727056cd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd9bdb9-576f-4598-8379-e3a3eddc8127", "sighting_of_ref": "indicator--91575148-114f-4990-9be7-e0126a29cac0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70339800-fddb-4757-a83e-c32d5b0a40ad", "sighting_of_ref": "indicator--aededbea-b323-4ffc-a6ba-8bb7a02fc93b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44b4ebf-03dd-4e42-b5ac-ea30c6a75c4c", "sighting_of_ref": "indicator--aededbea-b323-4ffc-a6ba-8bb7a02fc93b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2df6d7-8e16-4441-ab84-e31b644694f0", "sighting_of_ref": "indicator--aededbea-b323-4ffc-a6ba-8bb7a02fc93b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2963a5da-0b12-4f92-9ab4-502a6f0c064a", "sighting_of_ref": "indicator--e15e5cd5-a166-4f19-a583-fe2247c98291", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f4c545-8f3a-4141-8222-f6369ebd7196", "sighting_of_ref": "indicator--9675d3c8-ca3b-4eaf-a8a0-a6c123e1224c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7c6924-2610-42f4-a80f-3e164e4e4f7d", "sighting_of_ref": "indicator--9675d3c8-ca3b-4eaf-a8a0-a6c123e1224c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8cb825-0931-4f06-8cdb-3a87e813f554", "sighting_of_ref": "indicator--ab122abe-a1d7-42b4-b9c5-9f18cdb792cb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94edc276-09f2-424f-9982-6ea040508424", "sighting_of_ref": "indicator--ab122abe-a1d7-42b4-b9c5-9f18cdb792cb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f862300-77d8-41f1-a5e8-6e603fcf2b26", "sighting_of_ref": "indicator--bc3873da-9ec9-41a1-b747-96d1d67cc6f6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09625f8-1e75-4425-9afe-b433a91874ba", "sighting_of_ref": "indicator--342b1a61-493a-4b2d-b6d3-6b375d30b86d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011dfe12-7230-474e-81ee-2c1a90004180", "sighting_of_ref": "indicator--342b1a61-493a-4b2d-b6d3-6b375d30b86d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f24ac5-7a2e-4762-ad04-dd549598aa40", "sighting_of_ref": "indicator--b0974413-9f82-4c13-a999-3d44780d5486", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59433015-4f21-4dce-b6c6-3cff1ac37c03", "sighting_of_ref": "indicator--b0974413-9f82-4c13-a999-3d44780d5486", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3044f7ce-0720-44bb-bcd6-660219febb08", "sighting_of_ref": "indicator--6f6fbf74-a34f-49b4-b9ea-3622d7716567", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6bc37b-789a-4e34-bd97-a999990071e4", "sighting_of_ref": "indicator--ad415ef3-f3b5-4e9c-aaae-abce428ff40b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d4793c-e557-4462-bfd8-849642b82c6e", "sighting_of_ref": "indicator--8463bb0a-7fa9-463a-9d1c-a024751a27a8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9eed44c-7db0-4582-8b7e-622f090b2958", "sighting_of_ref": "indicator--8463bb0a-7fa9-463a-9d1c-a024751a27a8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226b604d-e70d-4e35-8bf9-4873ad998bf7", "sighting_of_ref": "indicator--8463bb0a-7fa9-463a-9d1c-a024751a27a8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6336e5e-b2fd-4f16-a84b-e6a36a2b5c93", "sighting_of_ref": "indicator--a1ac5e97-be21-49d1-afae-564e2000cb77", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3288f2e-a03c-425f-845e-85fae11fd1a5", "sighting_of_ref": "indicator--017cd6c7-3716-4d14-8b25-9b81618aba3b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2362d1f7-501b-4e54-85ee-b692d8ea37bf", "sighting_of_ref": "indicator--e4a7350b-9262-45fb-83c2-e916682b1680", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f937f7-fcc7-4f62-9ebc-7a947c8a4b1a", "sighting_of_ref": "indicator--e4a7350b-9262-45fb-83c2-e916682b1680", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9b8de1-1a14-41c5-b42c-bdbbc12307c2", "sighting_of_ref": "indicator--017cd1ee-83fd-43e5-b8f0-6f14544d0453", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011d93db-321d-403e-be13-53a341b20a97", "sighting_of_ref": "indicator--017cd1ee-83fd-43e5-b8f0-6f14544d0453", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af082dac-3491-463c-acf1-ba7f051b4844", "sighting_of_ref": "indicator--673cbfb4-39bf-47cb-8f87-c2c00a65f6d3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3669ac-65a3-4acd-97f5-a864b88b8b78", "sighting_of_ref": "indicator--d83d75c5-7ed0-488f-a105-cfdc3d4f1746", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f61135-3bf1-4cf3-940a-efa37c647915", "sighting_of_ref": "indicator--654e5164-57df-442a-a082-12516fe96b75", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b13825-0905-45fe-92f9-13f0776ca407", "sighting_of_ref": "indicator--789ddfd6-ea61-4542-ab90-d7d24da99b29", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ac0a71-e87c-4b3a-8c46-57573b92de92", "sighting_of_ref": "indicator--789ddfd6-ea61-4542-ab90-d7d24da99b29", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb535169-c6d5-4c6a-bfe3-e64ea181147d", "sighting_of_ref": "indicator--ec0a32fd-6437-4262-9416-38690e501f63", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f59d98-6dbe-49d4-9600-5c50df325842", "sighting_of_ref": "indicator--db5851ab-de0d-4423-8201-2a7144e1961a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447a6390-99a9-4f84-b889-2af627e2146b", "sighting_of_ref": "indicator--d28f6be1-b99a-4f0d-877c-ca48047f5045", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bce5b8e-7e21-40e7-89b9-73fa80d1261c", "sighting_of_ref": "indicator--d28f6be1-b99a-4f0d-877c-ca48047f5045", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7079615d-8abc-4bd5-8faa-ce7fc9ebfc06", "sighting_of_ref": "indicator--7c0e7a75-f35c-49f6-b58e-94200c0dca4f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c405e6-db47-4f85-b132-092d5ce3bfc3", "sighting_of_ref": "indicator--72fe0fca-8541-4d69-be11-6ad55a441d81", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1709fd78-30fd-4d41-8ebb-8cfe325e9a7e", "sighting_of_ref": "indicator--d1085e0b-6461-457c-9f5b-a4247adbfe5b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849d0499-8fb2-4bdb-9391-347e9c5d1fec", "sighting_of_ref": "indicator--bcd0f9b6-accf-4c8d-9600-8689bb289b19", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45baf852-67ab-4f71-96b4-e8f34e0a45a7", "sighting_of_ref": "indicator--bcd0f9b6-accf-4c8d-9600-8689bb289b19", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf11990b-0958-4198-9836-408d5f469fc9", "sighting_of_ref": "indicator--df303b48-074f-4305-9429-e26db81a23c3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319b4fb8-0dd9-42ed-aa8f-76f6a1404ac8", "sighting_of_ref": "indicator--df303b48-074f-4305-9429-e26db81a23c3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3826c4-c5ab-49d3-a719-1cc6b481062b", "sighting_of_ref": "indicator--7dcea41b-0b33-42cd-9f21-d34e7806a65b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc4eba7-1731-4f87-9aaa-3aaf3b5c3d0b", "sighting_of_ref": "indicator--e3a2a42e-0a7e-4d1e-a98a-27b69e87c3d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0308893a-ca3b-46ab-8464-85d4bfa6ace3", "sighting_of_ref": "indicator--8b173436-4020-42fb-987c-81690e93ee4d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67b274f-05fd-4a65-a152-b4adf31387d3", "sighting_of_ref": "indicator--c1ebe152-08a2-48df-9b01-5fb3f56016e9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858bf8ca-dbe5-4171-bc4f-5310233d302e", "sighting_of_ref": "indicator--6d800da0-4f69-4bf9-a6b2-32e2e1dbfbf2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59853f53-d1f0-42c7-8407-8445dee610ee", "sighting_of_ref": "indicator--2366d3a1-7893-4b08-8ebc-4d9b237547ef", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3ab81e-3158-4576-b4c9-d1fdc377d630", "sighting_of_ref": "indicator--2366d3a1-7893-4b08-8ebc-4d9b237547ef", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c898e55b-ddd1-4a8e-9b00-4a112e613a42", "sighting_of_ref": "indicator--2366d3a1-7893-4b08-8ebc-4d9b237547ef", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b955c999-63f7-4641-af24-1bc6fa7e2ae8", "sighting_of_ref": "indicator--e7597dad-2d5e-413c-9fc9-1f4587f28a53", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84dc003a-8189-4d64-b531-e2a3933544c2", "sighting_of_ref": "indicator--4fc51e4b-a721-416a-b413-58a9052f17ad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33de2031-0dc0-4c9a-b518-93bb9ea3325b", "sighting_of_ref": "indicator--4fc51e4b-a721-416a-b413-58a9052f17ad", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2436dcbc-f0e8-45c2-bb13-08e6811ac249", "sighting_of_ref": "indicator--21f39b55-654c-4244-b193-a13873ba6778", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc2412e-fcbf-4ba5-a9ad-c7a68496ec67", "sighting_of_ref": "indicator--a7fe6e21-3819-4551-a7e6-df2fa0adbf52", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dffb8d0-c653-4d8a-977a-0bad6efa185f", "sighting_of_ref": "indicator--a7fe6e21-3819-4551-a7e6-df2fa0adbf52", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde1b0dc-f7a9-4deb-8e63-7e2790ffe5d2", "sighting_of_ref": "indicator--a7fe6e21-3819-4551-a7e6-df2fa0adbf52", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1298d6a-713d-4451-b7d4-e25d6437ea70", "sighting_of_ref": "indicator--510bdb11-6a17-4e8a-99ff-ab8b7939954d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30185543-6e7a-40aa-83b4-bb6f3d02d7f2", "sighting_of_ref": "indicator--0152aaea-3dd5-493e-aca6-08b107fec009", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6a3e05-3f9f-4d84-937e-0174320e96bb", "sighting_of_ref": "indicator--0152aaea-3dd5-493e-aca6-08b107fec009", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16eb312-3712-4dee-83f7-f30278569c55", "sighting_of_ref": "indicator--9ba04d7f-4ac3-4672-84d3-f6955a1b7b00", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad1ca6b-8fb3-4646-aee2-c355d7bef789", "sighting_of_ref": "indicator--9ba04d7f-4ac3-4672-84d3-f6955a1b7b00", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b4f53a-f26a-41d0-b52b-c495f114251c", "sighting_of_ref": "indicator--edac7585-391b-41ee-ac59-3ce2a0cebf29", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9cdc1b-e30e-4f01-aae0-a1f04b1cdc46", "sighting_of_ref": "indicator--fbf84699-715b-487c-b8b1-19339a3d9015", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87de37fe-3378-402f-adf7-4766158e518b", "sighting_of_ref": "indicator--fbf84699-715b-487c-b8b1-19339a3d9015", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bacb24-60e6-4b55-8a9d-ca2f2a2b5dc6", "sighting_of_ref": "indicator--de23c343-7df5-4467-8f37-4ee000a9802c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19ddd0d-30d7-4c5f-a024-2a88a4aa9b28", "sighting_of_ref": "indicator--de23c343-7df5-4467-8f37-4ee000a9802c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07760e03-3340-4236-91f0-9da71e2b13d4", "sighting_of_ref": "indicator--ad7e4665-0210-472b-8d30-410891c3d486", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74394880-3b94-4e50-b9b9-2faedb58b136", "sighting_of_ref": "indicator--e2713e7a-091d-456e-bfc4-93b38140457f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54acbf4-568f-429f-b5a7-55d6fe4f916d", "sighting_of_ref": "indicator--1acac36f-4679-4541-abc9-2d9969a58093", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f83228-8ff9-4f7e-b7d7-bfca9613c2ee", "sighting_of_ref": "indicator--1acac36f-4679-4541-abc9-2d9969a58093", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a135f77f-cec9-4f21-b8b7-149f2e9676dc", "sighting_of_ref": "indicator--0be745b3-2c0b-4e1e-973a-7ddbed12641a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2db4f40-6751-4a5a-8f33-55a527496bad", "sighting_of_ref": "indicator--2c1990df-cd4b-48f8-9fcf-4f7116effec0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175cb548-9d1d-4a24-89b5-4f612930a7e1", "sighting_of_ref": "indicator--ff939ca3-c2fe-4e30-846e-2bec7d9eecff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5830cdfb-de01-4d01-8455-260c55ae4b69", "sighting_of_ref": "indicator--ff939ca3-c2fe-4e30-846e-2bec7d9eecff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ba0292-7dfe-47fe-a276-93230599ddb8", "sighting_of_ref": "indicator--953097c6-3a2a-462e-bbed-19619bfa8b23", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861aa7bd-3e17-4880-b772-025670023e85", "sighting_of_ref": "indicator--2501b786-ae69-49cc-9b0f-50d14edcaf71", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326ab054-2e90-45a9-90f4-78f7699b412d", "sighting_of_ref": "indicator--691649c6-0f1a-45bb-b6c5-2bbcecc33bcf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6e21e9-0da9-4d49-bd9e-51bbfb89a7e5", "sighting_of_ref": "indicator--a985ac07-0224-4e8b-b027-24a45eac5adf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41da7a4c-215c-42fb-9c13-be5c94edcb2e", "sighting_of_ref": "indicator--fb759d5a-1c2e-47f6-9939-e62c578a81ce", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683c2392-470a-464e-9e72-b261ea4b2931", "sighting_of_ref": "indicator--572b2b34-73fd-413c-a4c6-f3339867ef66", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7987272b-33f0-4a32-b1d6-3858e31d7d28", "sighting_of_ref": "indicator--bd3401df-52f6-4330-b6ff-56b8ca5c2f7b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32410958-45b0-402b-906b-883d9a1c10aa", "sighting_of_ref": "indicator--ca15ef97-02bb-469c-bc62-ae717880fee7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04004fb1-afdb-46bf-94d7-625fd5fcc8c6", "sighting_of_ref": "indicator--2e174175-07ad-45e5-a007-870c7b1521d4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee779f15-cd5e-428e-9485-7d9a5680cbb0", "sighting_of_ref": "indicator--2e174175-07ad-45e5-a007-870c7b1521d4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1f85e8-7ed5-4dc7-b2c3-65518533e7a3", "sighting_of_ref": "indicator--d2e7c64f-1181-4cf2-a1f1-3552438d72b0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f61deb1-9a85-4b5a-aa40-6ffff2f4a679", "sighting_of_ref": "indicator--718593c5-a6b1-4b1a-91ca-629022e23b29", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1aac811-6ed6-4001-a871-728ec26c1fe5", "sighting_of_ref": "indicator--e326a46e-97a6-4bc8-94f3-e9454c000f80", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcb6669-9c04-49c6-9ba6-a48b7795f59f", "sighting_of_ref": "indicator--7ce6b908-ee9a-43ac-9a13-86ef7de339b1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7804b6f8-9c9d-432b-8eca-574f573296e5", "sighting_of_ref": "indicator--8e569d2c-c2f1-4326-97a6-1ec502267816", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a89ff8-6b81-4b98-9a1a-8f6336108aee", "sighting_of_ref": "indicator--179593be-d545-4996-ae32-be2a103d22ea", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b68f6e6-ca8e-4fda-8826-856f2c4ea6a3", "sighting_of_ref": "indicator--179593be-d545-4996-ae32-be2a103d22ea", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a1fb2a-1ad9-49a5-a1f5-99b202bc8e03", "sighting_of_ref": "indicator--063f152a-f026-4a4a-b314-4afc4d27667e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9263a10-f6dc-4c97-8ca1-e881c57f905b", "sighting_of_ref": "indicator--7c180b6f-1c3c-46bb-bfb7-cf32240ba985", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0106e0-a668-4195-b2c4-0fca4c7cb9d8", "sighting_of_ref": "indicator--7c180b6f-1c3c-46bb-bfb7-cf32240ba985", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c64f27-36e1-4bef-b0c6-2378618cbc1b", "sighting_of_ref": "indicator--a7d24edb-d9cf-4945-8c99-8a3025b40e05", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1637f8c0-3704-4a7c-acf4-6b0f0ad35fce", "sighting_of_ref": "indicator--a7d24edb-d9cf-4945-8c99-8a3025b40e05", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3b1c23-a434-4b6c-b5e0-83518c307ed1", "sighting_of_ref": "indicator--a7d24edb-d9cf-4945-8c99-8a3025b40e05", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8579481-b414-4610-9968-639c4fc7a5f0", "sighting_of_ref": "indicator--33b9eba4-99e6-4869-a3a7-cc180ee22c4a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c846d9b-737b-4e8e-b07d-d7d365293661", "sighting_of_ref": "indicator--33b9eba4-99e6-4869-a3a7-cc180ee22c4a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae85399-94f6-408d-ab95-c33717657e6a", "sighting_of_ref": "indicator--33b9eba4-99e6-4869-a3a7-cc180ee22c4a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79989694-2a6c-4692-b818-f1553bc02077", "sighting_of_ref": "indicator--79490c0e-0b59-4142-9148-e5654fbb4e24", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1da068d-518c-4abe-a907-67940bc82e08", "sighting_of_ref": "indicator--c61b2113-11b2-453f-892d-db54206ab220", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7dba17-1ddb-44e8-a288-e0554bd7ee7d", "sighting_of_ref": "indicator--c61b2113-11b2-453f-892d-db54206ab220", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3880ee39-38df-403b-9cc0-645f9735aa32", "sighting_of_ref": "indicator--5f82ed20-13a1-4851-bac9-a39169c52111", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9514dc90-6877-47e0-934f-3eed1c659c67", "sighting_of_ref": "indicator--0d927349-1ec3-476b-adcd-604d7eee730e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7cfec7b-e30d-4307-b55f-c30266804333", "sighting_of_ref": "indicator--0d927349-1ec3-476b-adcd-604d7eee730e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1938129-3719-4906-aff4-362842c845d9", "sighting_of_ref": "indicator--0d927349-1ec3-476b-adcd-604d7eee730e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64a497f-d83b-4953-be6c-844f9fbc4a3f", "sighting_of_ref": "indicator--82e6c77a-3b34-4d15-b882-498de386c5ec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1547cef2-492e-4909-a8a6-69ac1c78542f", "sighting_of_ref": "indicator--82e6c77a-3b34-4d15-b882-498de386c5ec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3869c416-c034-4db8-9a82-08cf50c733cf", "sighting_of_ref": "indicator--1db2a1ed-3022-4b4f-8f9a-014c92078975", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ff17fb-4441-4533-9e11-7f3ec2267915", "sighting_of_ref": "indicator--1db2a1ed-3022-4b4f-8f9a-014c92078975", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173be876-3671-4f43-8276-c6adc9d92480", "sighting_of_ref": "indicator--8bbd1d60-853c-48c2-882a-457007e92c79", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca1eef4-fe9c-412f-8614-7f76f3a7f891", "sighting_of_ref": "indicator--8bbd1d60-853c-48c2-882a-457007e92c79", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073b3086-4e2b-4bf5-a29e-8fdc00970967", "sighting_of_ref": "indicator--8bbd1d60-853c-48c2-882a-457007e92c79", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08565f14-4521-4503-9232-7bde065fe435", "sighting_of_ref": "indicator--584fcdf4-b814-41bb-a8e2-fbab1fdd5bee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a437b572-13c2-4018-b487-fb10bb2c63b5", "sighting_of_ref": "indicator--584fcdf4-b814-41bb-a8e2-fbab1fdd5bee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae7ab25-6d4c-4766-be1d-ce4f8b768484", "sighting_of_ref": "indicator--fc452112-3ccc-417b-a0d3-1c9d2d67803d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e326673-53f4-48b8-a924-c291ef6dddee", "sighting_of_ref": "indicator--fc452112-3ccc-417b-a0d3-1c9d2d67803d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca7f443-7eae-4251-8a5b-e635c7dc7fe0", "sighting_of_ref": "indicator--ebaebb5e-cc6c-4882-9a4a-32e841dc8809", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188d5f5d-3d4f-47cf-a2df-b9539c3d6348", "sighting_of_ref": "indicator--ebaebb5e-cc6c-4882-9a4a-32e841dc8809", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de36b78f-fd1e-4ba5-8b6d-c111b204f713", "sighting_of_ref": "indicator--a5369d51-5890-42c2-9c7f-9342d3b5ef09", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109d2a7b-f56d-4224-b487-819bf511050f", "sighting_of_ref": "indicator--a5369d51-5890-42c2-9c7f-9342d3b5ef09", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076a31a6-dd5f-4774-b2bb-452e0361383b", "sighting_of_ref": "indicator--9227e751-41ec-4f56-b9e0-8303e34ed501", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059bcc80-2c7c-4682-afd4-fe20078a3449", "sighting_of_ref": "indicator--5c024304-a4a8-40ba-9f59-573f555d16c6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95126b8b-820c-44a8-a397-a2051ba64968", "sighting_of_ref": "indicator--65d1ec1c-495c-418e-a4f8-ac914fd40591", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29342d07-d116-4fb8-933c-3f0034bd6666", "sighting_of_ref": "indicator--2745d513-5d81-48cc-8d53-eb3ec44f5f7e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5e9620-7d73-457a-b78a-71e8f7faa24e", "sighting_of_ref": "indicator--b90336e5-3820-4f55-a42c-bc1b939cac80", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faeb4527-1ebb-4463-ac35-b7a9655287ed", "sighting_of_ref": "indicator--0340827f-1cdd-43cb-919b-bbf585f1d090", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27540c92-33ce-4cef-875c-963dafcfc594", "sighting_of_ref": "indicator--0340827f-1cdd-43cb-919b-bbf585f1d090", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8448b7-98c3-49f0-acc4-df89b0be7332", "sighting_of_ref": "indicator--0340827f-1cdd-43cb-919b-bbf585f1d090", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f63b84e-32a4-4e8c-832d-a59bcaee5200", "sighting_of_ref": "indicator--79fabf86-fff6-4ce8-8fbd-8e8a05688eed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0400087-1616-4818-8984-efe2987d9470", "sighting_of_ref": "indicator--aa45c0e5-6c8c-4799-9d4d-203c27cc2839", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0d7691-b9c0-4c9b-982d-8fbdc1ed1376", "sighting_of_ref": "indicator--aa45c0e5-6c8c-4799-9d4d-203c27cc2839", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116c3838-ce35-4c47-9288-800d9520a5e3", "sighting_of_ref": "indicator--baddefa0-5082-4f2c-9a2b-281227227938", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d587e2d-7999-4b87-83d4-bfafb0477e05", "sighting_of_ref": "indicator--baddefa0-5082-4f2c-9a2b-281227227938", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ea99d4-b01d-4223-8246-1ea18a5fd993", "sighting_of_ref": "indicator--baddefa0-5082-4f2c-9a2b-281227227938", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e1e4fa-a6a7-4a18-9404-ff7329b697b6", "sighting_of_ref": "indicator--90a742f3-b96f-430c-8e36-97f8ed230762", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d381c050-cb04-4d13-b151-907679f5382d", "sighting_of_ref": "indicator--c3100bae-504a-4c5c-9382-5a4f72e851c8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73978420-e695-4d48-9bc7-393f794993fa", "sighting_of_ref": "indicator--82056353-8627-42de-9a15-247237b67e14", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd69d89-1af6-4d17-8d5e-225ed249ab91", "sighting_of_ref": "indicator--82056353-8627-42de-9a15-247237b67e14", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e0c0d3-1422-4fc3-a332-de4a7a3aed23", "sighting_of_ref": "indicator--1f0feaf2-e3a1-442e-8fd0-0982c70840ff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0e6aa7-20bc-4f1c-adcc-553721e5701d", "sighting_of_ref": "indicator--1f0feaf2-e3a1-442e-8fd0-0982c70840ff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2b8311-4309-48e5-bd78-1d84bd2a5c9c", "sighting_of_ref": "indicator--d6176a87-6fe0-47c3-ad4c-90b0d5aab06b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9792f5bc-e111-4525-9fe9-7b5b822fcb94", "sighting_of_ref": "indicator--d6176a87-6fe0-47c3-ad4c-90b0d5aab06b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fa7d29-c836-403e-9c47-9446db3d49e0", "sighting_of_ref": "indicator--2ba9ea8f-b666-4743-a7f1-c60c568e05c4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b17587-2163-483a-8cd0-d7b998b0cd05", "sighting_of_ref": "indicator--2ba9ea8f-b666-4743-a7f1-c60c568e05c4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06eaf93c-2377-4cd6-ba28-bf4c251c5435", "sighting_of_ref": "indicator--9762cb3e-5431-4567-abe3-b9ba81d2777d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ada27c-119f-4d49-aaeb-4b9ba308be2b", "sighting_of_ref": "indicator--9762cb3e-5431-4567-abe3-b9ba81d2777d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9fc7c7-af77-467d-b363-c95fa383cba8", "sighting_of_ref": "indicator--3327e172-5b2f-44ab-ad6b-5e56f675ddad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6cb755-a593-4045-a5c4-39f9a67fdc9f", "sighting_of_ref": "indicator--fdb62c0c-c902-4d42-88e9-e7af744c7d79", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac7ca30-d55e-42bb-b440-d2435c90d049", "sighting_of_ref": "indicator--fdb62c0c-c902-4d42-88e9-e7af744c7d79", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bb95cb-1188-44f4-a0c8-bcbe1b77b8ea", "sighting_of_ref": "indicator--68149593-6df6-4ebe-b805-58dc4171f4a6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16161f8c-a019-4bb1-8eae-d1223043dec5", "sighting_of_ref": "indicator--68149593-6df6-4ebe-b805-58dc4171f4a6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65944e0-6216-4e62-9c8b-a467d8bbae7c", "sighting_of_ref": "indicator--22a799ca-487b-4ae7-b9c2-ec94820078bf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2c7e98-9ea3-4903-bee1-b9ef11e2cc8d", "sighting_of_ref": "indicator--466a2635-330a-40a6-bc12-a25fdf50d29a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed6570d-0c76-4117-884d-e326e212b5c5", "sighting_of_ref": "indicator--05b1dadf-f9e8-4874-9938-0c0461986641", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05365fc4-66ff-45f4-b286-b7b632791f5d", "sighting_of_ref": "indicator--0966d542-53eb-4090-af27-c4219c761b4b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d8d917-5089-47e3-91e6-ca0bab4ad209", "sighting_of_ref": "indicator--0966d542-53eb-4090-af27-c4219c761b4b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4286dd1-f5ed-4cfe-9063-c3208e0a4040", "sighting_of_ref": "indicator--110c4599-ab78-4c01-a045-74abbc53a4b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79de8324-2215-4317-a56f-6bd3ccb898bb", "sighting_of_ref": "indicator--98616687-feba-4779-8ce0-9eeb929d98a0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8d54e5-eb34-4792-9054-db2d95b10b63", "sighting_of_ref": "indicator--98616687-feba-4779-8ce0-9eeb929d98a0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3fefe9-6348-47a5-9e56-21b86767c637", "sighting_of_ref": "indicator--70d02964-ddcf-41d2-b4f0-5b2ebe067513", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d6ae85-778e-4a02-bfe9-0af4571b3ae6", "sighting_of_ref": "indicator--8f0b1c6c-26e2-4b80-9950-a64239255f92", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b9034f-af7e-491b-b1b8-3e579107bde4", "sighting_of_ref": "indicator--ffdd1da6-3d6a-4c35-aac7-b57100bd6c77", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf77600c-a441-4b56-84d3-a0cda39de029", "sighting_of_ref": "indicator--9c2050a8-215e-43d9-b5e8-35842373e273", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0092fd64-afd5-4353-ab4f-228985e7acf9", "sighting_of_ref": "indicator--6dfb9c9c-867b-471a-8e72-148f5e9ca35e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a1ed0b-18e1-47fc-80e9-d1794369b328", "sighting_of_ref": "indicator--65a4a063-0899-4361-b0f7-5f176faf045a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faac85cc-fb64-45cc-a0c6-320b06b480f8", "sighting_of_ref": "indicator--65a4a063-0899-4361-b0f7-5f176faf045a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e99398a-788a-446d-b862-fc3098a34a95", "sighting_of_ref": "indicator--e10886ca-7c15-45a5-8a29-f93c63a1650c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddae6cc0-5ec6-47e1-925f-b71c5da6d878", "sighting_of_ref": "indicator--e10886ca-7c15-45a5-8a29-f93c63a1650c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706bd758-45c6-4e3b-9eb3-c0777c3996ad", "sighting_of_ref": "indicator--be00130c-36c4-4af1-ae87-0846806b97a7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46db4d95-92d7-4596-b689-f1c30795315f", "sighting_of_ref": "indicator--74da9730-0fe5-4d6a-9d9d-85c28f404fab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63293c41-24a7-43b2-a1f9-27a078e13ee4", "sighting_of_ref": "indicator--cb40480b-eae5-451c-93f8-ec157940f736", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84aeea8-d42a-4766-9dd3-cb7d03299d04", "sighting_of_ref": "indicator--40a81652-cd20-4e6b-b934-991653199c42", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12143fc4-2c1e-4ee9-bee9-3590948da2cc", "sighting_of_ref": "indicator--9eee2542-0330-4873-bf8e-55352c94be76", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fcddb7-4be6-476f-a8d5-1beadcadd259", "sighting_of_ref": "indicator--6d363910-e485-4fe1-83b2-06ca679ca3eb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02eebbb5-603b-4f64-a5f8-16e795606157", "sighting_of_ref": "indicator--9063beac-f56b-4fef-aa18-610b93db7d52", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eced7fd-ae26-424a-b04d-d04753bc0ab8", "sighting_of_ref": "indicator--9063beac-f56b-4fef-aa18-610b93db7d52", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad688ae-aba6-4e21-b09b-42f8509d56b2", "sighting_of_ref": "indicator--c1408bb6-6f44-4a03-9cfe-bcd94949747a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5162a419-a8c2-4902-974f-48c1c87a9493", "sighting_of_ref": "indicator--c1408bb6-6f44-4a03-9cfe-bcd94949747a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c905ad2-3a4b-4d58-be9e-9014781dfe1c", "sighting_of_ref": "indicator--f7dfa062-aded-4167-bc86-4e931d0b800c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a4d11f-3276-41d2-a3d0-bdbf6df05944", "sighting_of_ref": "indicator--f7dfa062-aded-4167-bc86-4e931d0b800c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648bf2a9-d853-42f8-8384-99ffc38c485c", "sighting_of_ref": "indicator--0bc269f9-258c-408a-8ff3-8a1a2ffe2ac2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7320d183-7037-442f-8ef0-36906d807306", "sighting_of_ref": "indicator--4a2af5e1-9bfd-4144-9a81-5f755b1cdff0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e479aa8e-73d8-4422-b19c-59c7e5267964", "sighting_of_ref": "indicator--603f2c89-059b-4251-9c33-9018462fd411", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d88ce1b-ed6a-47a9-888a-6caf9c54656e", "sighting_of_ref": "indicator--b68d9e3c-b1db-4b22-affa-848629379a8b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb5bb7f-794a-427a-8fa2-53695c7cddfb", "sighting_of_ref": "indicator--70d26226-fa6c-4c69-99f3-fc7a4cd9fb91", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5bb1a65-31fa-49ab-865f-f291a62a5d8d", "sighting_of_ref": "indicator--70d26226-fa6c-4c69-99f3-fc7a4cd9fb91", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f83eb3b-b8f5-44e8-bf5b-125c9603d69b", "sighting_of_ref": "indicator--75db5979-3a15-4917-9958-27ed1d2d4dc7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0187e0c4-64ac-41b7-91a7-42265c3ef669", "sighting_of_ref": "indicator--f75a4d0e-3b72-4e44-8665-fb1d59bde02b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff37908-bc06-4704-a62b-bc46f4106463", "sighting_of_ref": "indicator--f75a4d0e-3b72-4e44-8665-fb1d59bde02b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9603514e-f0b0-4a1c-b1ac-9a4c33d00b4f", "sighting_of_ref": "indicator--88f8aa70-5fa3-47b8-95b6-6e03cc87f8d5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63058fa8-87cf-4415-9ba7-4403ca2c52fc", "sighting_of_ref": "indicator--88f8aa70-5fa3-47b8-95b6-6e03cc87f8d5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a909a06e-918e-4218-bcb6-eb526ba493b0", "sighting_of_ref": "indicator--05f06286-cda9-482c-997a-96f098f7b789", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034bbf07-dc5f-4853-8c55-d59a0d18b64b", "sighting_of_ref": "indicator--819cd92c-4203-477b-a5c4-21c51d80e543", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2f1840-4f2b-4873-b54f-da7fce9c7ecf", "sighting_of_ref": "indicator--cfee4cb5-6cd7-44c2-80a6-56d0d5c6914b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee9072e-91b2-417d-87bb-63090c2ae2c5", "sighting_of_ref": "indicator--d114e490-a49e-43bb-81d5-d9d841a7e715", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b3093a-f65d-496a-aa26-c1425900f915", "sighting_of_ref": "indicator--a14b8a9e-e0b8-420d-b1b7-c0d71b5087c3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc969e8-88cf-49f8-a5ec-919353c1f122", "sighting_of_ref": "indicator--9ba8b8c4-5218-4e13-bf2f-2aa134770d75", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60a4298-fee4-4a44-ba3d-d35703877b1a", "sighting_of_ref": "indicator--8671e987-807d-4b8b-9cf0-fe4ffb0c236f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b473e313-87ad-49ef-996d-4d94df5bfef0", "sighting_of_ref": "indicator--fbc9d4b0-3438-4546-a08f-f74234581a35", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7309910-4ad0-4ac2-bfca-cbf07e3f81b0", "sighting_of_ref": "indicator--0a609b89-f0fe-40c4-b238-523847b15f4b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242b4e9a-7bf5-4abe-b23e-688a13495a39", "sighting_of_ref": "indicator--0a609b89-f0fe-40c4-b238-523847b15f4b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9190b7d-0296-40cd-8d22-ccb6a971de94", "sighting_of_ref": "indicator--a5340d23-921d-4a24-920e-8b19dc5bb3d2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f5daa2-3d9d-41b0-8bee-05115ce65b02", "sighting_of_ref": "indicator--3540125d-696d-443e-994a-a4d038f5aa72", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adadc25-aefd-44a5-befb-53a9ffaf067b", "sighting_of_ref": "indicator--3540125d-696d-443e-994a-a4d038f5aa72", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731338e2-519b-44e9-ac62-2dc151692e3a", "sighting_of_ref": "indicator--3f047f68-77b4-4617-bec3-a1579ca4881f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0611f37-b9ad-4bed-af2f-14416fb6f0f3", "sighting_of_ref": "indicator--3f047f68-77b4-4617-bec3-a1579ca4881f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8bb2d04-f678-459f-9763-2fc9a27f98db", "sighting_of_ref": "indicator--1d26d63a-6b00-4627-b47a-47870f221f0d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20e5601-790c-415a-a322-da10f572a67b", "sighting_of_ref": "indicator--df9950d7-d293-4e4c-873a-d0077b36d814", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10578fb7-0978-444d-bfbe-5837157aa595", "sighting_of_ref": "indicator--df9950d7-d293-4e4c-873a-d0077b36d814", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d192075-113c-4383-b594-ce4b2535ec9e", "sighting_of_ref": "indicator--fd62a07f-d878-4944-93d5-ad52c4e670be", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d655a92e-c6e2-4483-bb00-01ddd6cdee15", "sighting_of_ref": "indicator--d37e3fde-dd15-43ce-8721-18819ac7c8c0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68feab3d-51fb-4041-a215-5df94d2b757e", "sighting_of_ref": "indicator--7ef9b2e9-db51-4c4a-8e33-4602b9f13c3d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377fdaed-49a8-442a-873d-bd8b01c96b14", "sighting_of_ref": "indicator--7ef9b2e9-db51-4c4a-8e33-4602b9f13c3d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c052076b-df99-4653-aac7-869d18b4b422", "sighting_of_ref": "indicator--7ef9b2e9-db51-4c4a-8e33-4602b9f13c3d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea62d094-f5a1-41d8-be8d-3547ccaeebc8", "sighting_of_ref": "indicator--99bb4785-30dd-4a50-a689-bb668f1ae3f7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e980c947-d7f4-46b4-a24f-05b6b75c1b34", "sighting_of_ref": "indicator--99bb4785-30dd-4a50-a689-bb668f1ae3f7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d57cf92-eb72-4990-a94f-a875fd9bea55", "sighting_of_ref": "indicator--d30e16fb-0f0c-43bc-af49-42d914d11bd6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d208e5-ac45-432b-80f0-a124a5af026b", "sighting_of_ref": "indicator--d30e16fb-0f0c-43bc-af49-42d914d11bd6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e26822-8327-45c6-b445-b79f0e1afeff", "sighting_of_ref": "indicator--c51f1970-0fb6-4957-a864-164bc47d3431", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e07a31-ac2b-4e8c-b998-6d46994ce97e", "sighting_of_ref": "indicator--9e29e581-d2c9-43c2-a005-9fc1341811ec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fc9c96-3f16-4ae5-ab6e-3333948745ff", "sighting_of_ref": "indicator--c6e66fe8-49dc-4f0f-bc19-cb67f2f2cf69", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf6ea28-e4f3-4bf3-8ec0-a8f15d28ff4d", "sighting_of_ref": "indicator--28981d03-a08a-4ca6-ac3b-c9d0e05eb82a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bef37c6-48a5-4540-80b2-96e6525f6cda", "sighting_of_ref": "indicator--2c33139e-4de2-4de5-9ef6-33547d104051", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3558749-41bb-4561-88b3-efb61304820d", "sighting_of_ref": "indicator--958eb4f5-741c-4e35-b9b8-5f9d0e63e440", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c482545c-e3c3-4b47-bd56-c87ef4f86120", "sighting_of_ref": "indicator--cba14932-7a9e-42d2-927c-832bfd456fbe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0530c5f-8809-4708-b5e1-2420eff13404", "sighting_of_ref": "indicator--2e8d3dfa-8aba-403b-973b-f5fa0b2c310d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e41d705-60ae-41de-8676-d4fd93dff214", "sighting_of_ref": "indicator--a79e4e0e-b898-431a-bcda-812086b1c590", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f985baf3-79b2-438c-a4ea-5d91d10bb0e5", "sighting_of_ref": "indicator--3722e9e0-1c72-441a-a222-d598dfdf2bbf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2046433c-15fa-4d40-9347-4266fa5a136a", "sighting_of_ref": "indicator--c6ab39b6-ce79-42ac-bcf0-21e42b06fcb3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e311b46-c339-4e57-ba4c-ae34f4c1e854", "sighting_of_ref": "indicator--ab2a0f5c-76eb-4296-af79-eae9be5b7063", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfed078-c49f-4a64-88ef-0769f99adcbf", "sighting_of_ref": "indicator--13eba955-c0fd-423f-a18b-25f9b520ce80", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2433c383-4c61-4dc8-9d4f-2146765bf2f2", "sighting_of_ref": "indicator--455e48b9-2819-4836-adb2-b000e0b64d1c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a8ea9a-d145-40c3-a825-6223ff205c05", "sighting_of_ref": "indicator--f5951992-9709-41d8-bc64-3eaf33be549d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ccef15f-55d1-43f0-a920-3547260c21dc", "sighting_of_ref": "indicator--2fcb8a5d-def2-40f3-9904-8e49f466768e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a65c750-df37-41e7-9458-69624ac5da12", "sighting_of_ref": "indicator--6f8c31ab-add1-4971-a81a-e4bfb644a1ed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5cb9d0-fac9-4a63-b80e-88a03da06185", "sighting_of_ref": "indicator--94604bb3-ef67-4415-8c48-31122991c1ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d77aeb4-5275-4d0a-a1ec-ef4b1398b058", "sighting_of_ref": "indicator--85aa330c-dea1-4610-886e-5f2de00811a7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843151ea-ef8e-4ec3-b308-dbb231cf1143", "sighting_of_ref": "indicator--b9dba2e8-a9a2-4dd1-ac39-bbd532ab8c3c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3c748a-83bf-48f7-a085-88319f20abe2", "sighting_of_ref": "indicator--0d56f040-2367-4a2b-8f87-af38e1cf5f68", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f85f25-7668-4ecc-aeeb-65832f481a85", "sighting_of_ref": "indicator--2946aa28-362c-4e7f-a729-545bd134c993", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a10a77b-13b8-43d2-948b-be8e2b2177c4", "sighting_of_ref": "indicator--82806408-611d-4c7a-8bd5-8ae6be606685", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3327d4b-965f-4008-8757-a78f25cb68d1", "sighting_of_ref": "indicator--76d822b0-209d-430c-9e08-e48e087f7f8f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75456989-2ad5-4492-8512-2af3e019a94e", "sighting_of_ref": "indicator--14db25f3-41d2-41e1-b0b9-28a40d855495", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c6c660-baef-43a9-85cf-3e0952c39b8e", "sighting_of_ref": "indicator--33cfd08b-ef6f-4222-8791-c03095780957", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28e5be6-7a1d-4d53-9dd2-292dae46a7fa", "sighting_of_ref": "indicator--f1d257a1-814c-440e-9c95-5a4079a90948", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb22ce70-8e5a-4898-b2bf-4286f3c4473f", "sighting_of_ref": "indicator--b9bb859a-16a4-4b47-a615-b1e8e690ffd2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8621a93c-09ed-464b-aba0-b1f4ce1f017a", "sighting_of_ref": "indicator--d59bda6d-5315-46d4-bf64-776cc71fa75e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba394850-1bca-439f-94db-70abdc61fcfc", "sighting_of_ref": "indicator--942cfb55-c582-477f-96b6-f646343078d1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bb20e3-3180-4125-a93b-11f685635a21", "sighting_of_ref": "indicator--50a9a0bc-735e-4325-9325-35d478ab4b91", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a9cdaf-ce94-48db-8e24-9e58e87af525", "sighting_of_ref": "indicator--50a9a0bc-735e-4325-9325-35d478ab4b91", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48756dea-1756-40e0-96e0-6a1d27433b73", "sighting_of_ref": "indicator--df7b596a-ea4a-421d-b766-6370303cb662", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ddede0-cc25-4484-b5db-c7d036b4aeaa", "sighting_of_ref": "indicator--ecd51f1d-493f-4908-a17f-768965a10312", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae2dbe2-1ed3-4922-99ad-67a01a73f225", "sighting_of_ref": "indicator--ecd51f1d-493f-4908-a17f-768965a10312", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4a84c1-060d-457f-aa90-c51fb77b9987", "sighting_of_ref": "indicator--10697234-23b1-4258-9fa1-5427b10f2c42", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e83df6-81e6-425d-a720-f28be2cb602e", "sighting_of_ref": "indicator--70c5918a-2856-4080-8019-39d32da777bc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac88d1b-80d2-422a-8e88-093fc89ec728", "sighting_of_ref": "indicator--c56465ff-ced2-4938-bbb3-af1a7cd458eb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab49dfa7-2cb3-466a-88c0-59ed8af2f44b", "sighting_of_ref": "indicator--079580a5-5fe4-45a7-9084-b7f7a0ab343e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb47d4d2-877f-45e1-ab89-59cfc8356975", "sighting_of_ref": "indicator--76f83ae6-2dfb-4041-8074-790d6993160b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae0962b-9a66-4328-a9a2-57c08c7a0a1f", "sighting_of_ref": "indicator--38c518c0-6142-40f8-a9bb-499ac8c0c416", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3232b0ac-f612-43e7-be9e-fe59347fed02", "sighting_of_ref": "indicator--60ffc112-b292-4127-863f-212fc281fef9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8abe77-7ef4-4038-a3b1-99d8e71cd95e", "sighting_of_ref": "indicator--1593911f-64fe-4b82-9eb9-a01a74f03d87", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ecf3cc-f5ea-4771-894e-2e02184ebe34", "sighting_of_ref": "indicator--7b16c5a8-e00c-4f33-b1b2-61dbfa41fc7a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5c5fff-22a1-49cd-9f8f-6741e9036258", "sighting_of_ref": "indicator--7b16c5a8-e00c-4f33-b1b2-61dbfa41fc7a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa782ac6-e458-4a1c-8ff9-c9847da00d46", "sighting_of_ref": "indicator--82e694da-686f-47c6-8dd4-4bf0f1d43990", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e9bad7-2bea-4972-85e6-3c6009ca5f77", "sighting_of_ref": "indicator--90d89cb0-0fca-412e-a6aa-248beb1188e6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464b219a-e158-461c-acbb-c92631423beb", "sighting_of_ref": "indicator--f3cf2a7d-ab12-4ba1-baf7-31a74b1bba86", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668796e3-4dca-4dbd-9277-dd5b2f93d2d1", "sighting_of_ref": "indicator--d7c6a4f9-5dec-4606-9981-f8175d53bd57", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca2a9a7-bc73-4b19-82fc-745297b70a21", "sighting_of_ref": "indicator--ae427e34-1787-48ce-b391-f99013cc1af8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ab9229-3f6e-478f-aa64-8301e5e1380a", "sighting_of_ref": "indicator--8c410cc2-e591-4725-9f33-bf7cb9cabe2c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82733acd-533c-4e33-b8ff-8f692285908e", "sighting_of_ref": "indicator--0bb3cd59-dfef-43a7-b509-b3cff66fcc8e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e991007-d43d-45a2-9233-c4d39d0c37ee", "sighting_of_ref": "indicator--5941c007-b46f-4987-8f37-bf0b7aa52efb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b26cd9-bd8e-408c-bbfb-69235d6c3595", "sighting_of_ref": "indicator--81d027bd-b28e-42ec-b9be-ce7cfaf303ce", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af209b2-8292-434a-bbd0-ad790e5b0839", "sighting_of_ref": "indicator--d4f87e34-3212-4fbd-8021-b2db6c9e69de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263b993b-a1c5-4635-9b31-4ab639f3b2b7", "sighting_of_ref": "indicator--d4f87e34-3212-4fbd-8021-b2db6c9e69de", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea7b994-a2ad-44ed-aa45-fbcb0575676f", "sighting_of_ref": "indicator--e6af3e28-6e66-4925-8207-64c87fee64d0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abc35e7-803d-4570-8b7a-50390eb317fb", "sighting_of_ref": "indicator--ddb6f26c-bb4f-40d6-8e25-695535c3c6ab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e6eba8-f186-4233-ace2-035ad3343b45", "sighting_of_ref": "indicator--6a267dbd-a365-4e5f-b59e-5a02cdbc28f9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb71cc7-a24d-438c-9064-f20a291e8711", "sighting_of_ref": "indicator--6a267dbd-a365-4e5f-b59e-5a02cdbc28f9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96d7d07-d49b-49d7-9f8c-eb224876d5e3", "sighting_of_ref": "indicator--9a27e0c7-0209-4835-a310-0ac82851d9c4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da051a5b-a9ea-4812-8713-402c75219562", "sighting_of_ref": "indicator--fffa8468-741d-4151-9ebf-3fb6602caf6a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42470b75-ec05-4c9b-9b02-562d89f74896", "sighting_of_ref": "indicator--c102c684-6966-4725-843e-1ad3f8e12dff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ecdd264-8c21-4ac5-96de-c80fbbbbc2ce", "sighting_of_ref": "indicator--53130fa8-a84c-4d85-816b-7071bb564884", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b99c81-7604-4c47-8276-747e0df668c9", "sighting_of_ref": "indicator--6d783b08-747f-4d1d-9c3f-eb226219cfab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8f8712-808e-46fb-a63a-c55bd3159575", "sighting_of_ref": "indicator--6d783b08-747f-4d1d-9c3f-eb226219cfab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3e2fb4-e711-44f4-bf72-204d2eb5aa66", "sighting_of_ref": "indicator--ee9a2c46-4443-4c18-83fa-feda92b5d0a0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10524f4-fad2-4de4-a1cd-5b092946f8ee", "sighting_of_ref": "indicator--15741b62-1183-4784-b8b4-3e0889301e10", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ebba60-5ac5-4764-aafa-b91842c684a6", "sighting_of_ref": "indicator--4d6f69d9-f975-42d0-a190-8e942a41b02b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d76a7d8-f54f-44d2-bf4a-900a32e3ba33", "sighting_of_ref": "indicator--9a30f965-190f-4a63-abdc-d0469b8f0281", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb48778-c1ed-4458-a33a-e81b66500398", "sighting_of_ref": "indicator--5e251800-1c32-4ebc-95e7-2813ac79a199", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75842e07-e911-4eab-8390-f88b096bea3d", "sighting_of_ref": "indicator--80c3afc8-b8a6-4204-9d8b-5fdcb10aade3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7880b811-5749-4394-84d2-c33161d91b4e", "sighting_of_ref": "indicator--a60e27e0-0e5e-4bd4-b1be-5891964696c9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569af882-0b9a-4cbe-b22d-6b157ce6a17b", "sighting_of_ref": "indicator--751d4c5f-a5a9-4c22-84a1-8fa466096a04", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e13fde-0dcc-4218-a882-6c35aa00f829", "sighting_of_ref": "indicator--fc35f8d1-328f-433a-8d64-4dbbffdc588b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0a0ec0-4bd8-49cb-a851-c7b4f98bab91", "sighting_of_ref": "indicator--bc6d7c4d-0d5b-4c4c-b6eb-0dc460257798", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ad8cac-f5bf-468d-8b12-676d47dd415e", "sighting_of_ref": "indicator--ee1bbf8a-2282-46cc-9f9c-d376793d35c3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e289c13-3015-410f-b05f-6221821fae96", "sighting_of_ref": "indicator--dad7bcc4-6a59-4ea4-878b-66bb527f71e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeed851a-e0ea-4957-b27a-54e190f3f386", "sighting_of_ref": "indicator--4819e5bd-c8e9-4347-9fdc-6b11611b88d4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756652f8-041c-429d-bfa7-45bb4d52232b", "sighting_of_ref": "indicator--4819e5bd-c8e9-4347-9fdc-6b11611b88d4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3824db2-fe5e-41ec-980c-d2ce074c30e9", "sighting_of_ref": "indicator--af275f7a-64e1-4e24-b269-de7f17fc6dce", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e6156d-c97b-4923-8d2f-1132e58908d6", "sighting_of_ref": "indicator--af275f7a-64e1-4e24-b269-de7f17fc6dce", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f143a48-e935-4c8e-b105-9b6519867bd7", "sighting_of_ref": "indicator--59532a99-824c-47e6-9b96-5a26b851eddb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b0e5f8-3e43-49be-8097-7b482509c5bb", "sighting_of_ref": "indicator--689ca4ca-9d7d-49a6-9a37-87768e2dfb85", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c234ec-50d8-4707-aa38-708dae8bd991", "sighting_of_ref": "indicator--9e39f312-1fc8-4cdd-bc76-2d125dd22615", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36f2a08-13ea-4c1b-b654-8851c47778bf", "sighting_of_ref": "indicator--fe3c9c89-723f-4cf7-9f35-e48571a1fd5c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f780404a-519c-4dd6-9e72-542f75eb3934", "sighting_of_ref": "indicator--9457ceda-25fe-470e-9be7-a70f488a6d86", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a9ebc3-fd71-49e2-a292-bc23e276de10", "sighting_of_ref": "indicator--9457ceda-25fe-470e-9be7-a70f488a6d86", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4287fce2-45dd-4ef4-bf45-6b5259c5db6d", "sighting_of_ref": "indicator--873f3d12-d2c5-4896-af28-497752357308", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deaab16b-d794-472f-9863-4ea48e27b200", "sighting_of_ref": "indicator--88eb691d-82d2-4a9c-b052-a4b68f96c775", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7770dbc-3b23-45fc-a6e3-bd366513c440", "sighting_of_ref": "indicator--f1a04eb6-fc52-48c9-88f9-add317e81c73", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d57ff2-0544-40e0-ae4e-7ec59eef5b4e", "sighting_of_ref": "indicator--3851b5b4-078b-4093-b36c-dd7ad338a28b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6978d318-da2e-407c-8f96-1508bf223266", "sighting_of_ref": "indicator--da83dbff-2f72-4e76-ab94-e3b7212c3cf6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a9e9d0-fe5c-43dd-99ba-bc303888de9c", "sighting_of_ref": "indicator--1ac28d11-cb02-48dd-b301-47e7c8e36f3d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96ded8f-d1c9-4cea-9d50-e75a37ff2a1d", "sighting_of_ref": "indicator--e9b3a696-5f39-497b-8ff8-0ff654fa197b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9d9d81-6ba8-4a83-9f5a-51f9d43178e4", "sighting_of_ref": "indicator--0a205552-1ad4-4526-9ad4-ef6f85f768e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b354e3-2956-473b-8444-7bcaa87d3057", "sighting_of_ref": "indicator--ceec36c8-b36c-480c-a81b-910f3f7bd563", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76719d43-c816-4b14-8a76-36223144b4a2", "sighting_of_ref": "indicator--acceed19-bc40-4e6a-862d-54fcc807f9cf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53e8665-5563-4aae-b189-360f38484e1b", "sighting_of_ref": "indicator--28ee0087-d610-4cf2-b782-c0a1360517aa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea182b4a-4506-4538-b956-c38ca0c0a708", "sighting_of_ref": "indicator--991d1566-b2ae-4ba0-8e36-a8c9cbc48807", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662ad778-bf8f-4e0c-b016-dae4ab044893", "sighting_of_ref": "indicator--3ff8d405-15e7-4623-a8bd-7b1b669abb43", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8691df9a-b519-4fa2-b7f7-ff13e1a4c0ea", "sighting_of_ref": "indicator--ec555e4d-a91b-4921-98e7-16e1b2f2aa35", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc006612-7ddd-457f-8543-47d0d2420dbc", "sighting_of_ref": "indicator--d39853e5-29f3-4d66-88b0-afd9edc0e14a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b069137-4503-4c15-b379-4f8a2460c811", "sighting_of_ref": "indicator--1ab0991c-ecae-4eef-b0db-08af1df5dcda", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2722316c-e6e5-4d6d-b53f-d0d00990c561", "sighting_of_ref": "indicator--1ab0991c-ecae-4eef-b0db-08af1df5dcda", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a54a098-deaf-4e6c-9aca-453057314a6c", "sighting_of_ref": "indicator--39025630-5831-480c-ae65-d3c5ae73111d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ccce3f-3ab8-4920-b34f-ff0ce22131a8", "sighting_of_ref": "indicator--1590c680-e07b-4098-b0eb-60c59936612c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579db4e4-561d-49b7-a490-92e4e55b0f6e", "sighting_of_ref": "indicator--adc9febc-cdca-4699-9510-23ffa580824d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f29831-22be-4064-96a8-c85135ce3d30", "sighting_of_ref": "indicator--c60161f3-4b8b-471e-9466-dcea546de30e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7491e25-2a15-4bc8-b2ee-a7629c723239", "sighting_of_ref": "indicator--5f15e9a5-54ae-4e5c-ba24-b53f9df6330a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c20a079-446c-4fe3-a138-00444cb0e442", "sighting_of_ref": "indicator--5f15e9a5-54ae-4e5c-ba24-b53f9df6330a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a61fd0-d136-4872-ab16-83fd8e27dc15", "sighting_of_ref": "indicator--095ee270-6962-4ef8-b780-5450f305f441", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9161eb45-d66a-48df-8250-517f7a5a2688", "sighting_of_ref": "indicator--a896b0b9-26c4-4e30-9dd3-35208b69d088", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f161bf4d-7c57-4e84-a531-a6f51470ed7b", "sighting_of_ref": "indicator--a67351db-5ebb-41a4-95fb-1e01d553695a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d759d937-9bab-4edb-a478-e6bd0209de41", "sighting_of_ref": "indicator--18d2a181-dd0a-40c4-b97f-f8a626173c8a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9510f62-0a0a-47dc-a9da-343946c2c453", "sighting_of_ref": "indicator--4f383577-6ae2-4865-97de-75127037aaa5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701613c7-fb55-4bdc-b9bd-b6f1aa2ff22b", "sighting_of_ref": "indicator--667dcfb9-1678-4736-8781-6ab5625c8159", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04efbcce-dbda-4f92-bf46-c00fee564604", "sighting_of_ref": "indicator--667dcfb9-1678-4736-8781-6ab5625c8159", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff0f9e3-c45d-4172-bccf-e3d563879383", "sighting_of_ref": "indicator--da66fecf-476f-4f05-9c4a-3a4f91eae78c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8ccac9-148a-48e6-aa6a-09e8b2ca638e", "sighting_of_ref": "indicator--d2840276-0743-4aea-867c-c193b37f60b7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a4b9d2-3ee3-43b2-9dc4-be2af82340b8", "sighting_of_ref": "indicator--dcdb7a5c-2078-479f-8d09-21e48a71643c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492c2088-826e-4205-a6f8-d6df5a50af9a", "sighting_of_ref": "indicator--dcdb7a5c-2078-479f-8d09-21e48a71643c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc2d989-0a2a-4520-82cb-188640136036", "sighting_of_ref": "indicator--9837bc1c-4700-4727-9af3-94ee06d47bbc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b50c96-3ed4-4d9d-807b-e7cc6aa3e683", "sighting_of_ref": "indicator--9837bc1c-4700-4727-9af3-94ee06d47bbc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436ad016-3f3f-4f7d-9aaa-f88add34563c", "sighting_of_ref": "indicator--4ce77ee6-f850-438d-a717-5054b399c63e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23707b9-8990-423b-b9c3-52bf200660ea", "sighting_of_ref": "indicator--bd39bd8b-6a1b-45ad-aa2e-f157839d4f72", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069e340c-76cc-4457-9746-027a77966103", "sighting_of_ref": "indicator--bd39bd8b-6a1b-45ad-aa2e-f157839d4f72", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650a01df-d0dc-42d8-b212-48f8f36f3d40", "sighting_of_ref": "indicator--bd39bd8b-6a1b-45ad-aa2e-f157839d4f72", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befed235-9798-460b-96ef-0bf413c9bce0", "sighting_of_ref": "indicator--d788e228-11e6-43ce-9323-9961c3832c6f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93a07c1-5581-4a62-a83d-45e81912e601", "sighting_of_ref": "indicator--d788e228-11e6-43ce-9323-9961c3832c6f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8396072-de87-4468-bd72-011e1f3255a6", "sighting_of_ref": "indicator--6ca5489d-7ceb-4a5a-a85d-de9c2aaf81fa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd126af-651c-4ac5-a281-7796722c9bc2", "sighting_of_ref": "indicator--6ca5489d-7ceb-4a5a-a85d-de9c2aaf81fa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38fec69-2c28-474b-89c0-f92bffe171c3", "sighting_of_ref": "indicator--6ca5489d-7ceb-4a5a-a85d-de9c2aaf81fa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c4f31b-4f43-416d-a16c-40a6eee5b3b6", "sighting_of_ref": "indicator--21d3866c-ae55-42d2-a229-2bb911212f70", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea7f67e-120f-414b-bbf6-c436900d1a37", "sighting_of_ref": "indicator--707ce1d0-a168-4eef-95d9-5fa53e3cf1e0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e0a59f-3cb8-4530-8e72-f621b478b7c9", "sighting_of_ref": "indicator--707ce1d0-a168-4eef-95d9-5fa53e3cf1e0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e9a64b-277e-496f-a51c-5a9918b42421", "sighting_of_ref": "indicator--1c7abe22-e0f8-45d0-8e04-ef00bb667824", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb490ad-6318-4568-af16-0f9745cf2ba4", "sighting_of_ref": "indicator--1c7abe22-e0f8-45d0-8e04-ef00bb667824", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3791abc-31f9-4094-9a5b-960d81db5c46", "sighting_of_ref": "indicator--a93cc747-a0f1-483e-9b32-a05e7cf7fa7b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af663a17-81bd-4d6f-ae2d-c317b3484e65", "sighting_of_ref": "indicator--a93cc747-a0f1-483e-9b32-a05e7cf7fa7b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc49dffe-8a2b-43b3-98bb-50f49c0c5a74", "sighting_of_ref": "indicator--f66567da-7c67-4f06-8320-e001f029d7ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5960b18c-c054-4061-ade5-21116b3fec06", "sighting_of_ref": "indicator--f66567da-7c67-4f06-8320-e001f029d7ab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b8c70d-ccc8-49eb-be8c-e3ae00f379db", "sighting_of_ref": "indicator--0e42f5c0-76a0-49d7-8844-d08fbf8c9713", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa78335-e235-4e47-84af-c7a1a31ae247", "sighting_of_ref": "indicator--bc96dcba-ca01-4fd8-8fa1-eb8e3aaa9265", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3214cfce-714e-4b13-a48f-27d970b108a7", "sighting_of_ref": "indicator--71fc91a4-df32-4f49-b98b-f0553e0e54d6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb1b05f-aeda-4b76-921c-85a72f38d1f9", "sighting_of_ref": "indicator--f3458aa4-929f-4299-a019-175398ce4e6c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76e533f-66d2-4d5a-bf6f-1a2cfca2529d", "sighting_of_ref": "indicator--a0bbc7e1-2e78-43ff-9579-7e2c3d1be30f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd96fde9-9df2-40a4-a898-a1eca9014013", "sighting_of_ref": "indicator--a0bbc7e1-2e78-43ff-9579-7e2c3d1be30f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5380892-3e71-4e2f-888e-0c62ef177df8", "sighting_of_ref": "indicator--e1304832-c66a-48de-ae4a-61858ba78da0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3719b34c-3136-4e75-a69b-4169932f3ce9", "sighting_of_ref": "indicator--52511bb9-cc35-4b97-98ce-65e88a661ef8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1997be-4049-4d82-aeb9-30faa5becdad", "sighting_of_ref": "indicator--b470c56f-2147-49bd-adf5-fcdbec7fb074", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c393a815-ac64-4156-b10f-cd739ae6c5e2", "sighting_of_ref": "indicator--6e872aca-016a-4fcd-9f1b-29752a50da74", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f328ecb4-6605-441b-9691-99c3a96780e2", "sighting_of_ref": "indicator--4e39cb31-8d6a-441f-ad47-6b41eff7245b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139d9646-efa7-4098-bf50-cf7ddad3abf1", "sighting_of_ref": "indicator--eff1b5d5-434d-43f6-b445-1ca7d6415998", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b898d3-b3b4-488f-a682-fcfdf44f9d3d", "sighting_of_ref": "indicator--554130a4-89ba-495f-a4a0-6d7bb504d8bd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98fd5b0-185c-4224-bb4d-9dcc245c0de7", "sighting_of_ref": "indicator--554130a4-89ba-495f-a4a0-6d7bb504d8bd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3c9266-32a1-4030-bc42-89da49af8c73", "sighting_of_ref": "indicator--f6e3fe27-e27b-4444-adb2-fa783de9705b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb253b32-704e-4ae7-8ace-6118a62caefc", "sighting_of_ref": "indicator--cab3abe6-c6e6-4a1d-a897-f68746598c32", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef96b91-e0fd-4c88-990a-68a764da3085", "sighting_of_ref": "indicator--f02a0a92-a6c5-4cbb-b754-30bf8765f717", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a64745-f3ff-411f-9ee8-324f875eb726", "sighting_of_ref": "indicator--7fd0648b-584a-4020-a6f7-505263d1d3e2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa49ed08-d6ba-46eb-aad5-b984e4bcd002", "sighting_of_ref": "indicator--7fd0648b-584a-4020-a6f7-505263d1d3e2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9d32ca-d095-43ab-ac56-1f1cbc5181b8", "sighting_of_ref": "indicator--ad4d1d12-4bd1-4e98-b334-518df99f27a8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ee6d08-bcf8-44a3-931b-0ab48816ed07", "sighting_of_ref": "indicator--88ba84ca-c92d-45ad-b288-4b4f0382478c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cb4467-2698-426e-9fdb-571bece8e28d", "sighting_of_ref": "indicator--237f07a3-76df-4b64-9754-a49e8e611773", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d0087e-e49b-4f19-9655-90e0e9c74876", "sighting_of_ref": "indicator--970c5bf4-b084-404b-9969-241e773ae492", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe603573-b6fb-4213-a52e-fb22fedb88d1", "sighting_of_ref": "indicator--e2e6b0a1-f2ba-4fcc-b7b4-0245470879ea", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5547dc15-4de0-4f56-ae00-45ce524c6362", "sighting_of_ref": "indicator--696f3970-4262-4723-b980-f9f6f9bf2c4f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4f6fe0-8163-435f-b3f5-7b28cf93e2a0", "sighting_of_ref": "indicator--1e90aec8-57dc-43e5-ada6-47bfb31f122a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb54358-6a3f-4219-8652-c5f523046173", "sighting_of_ref": "indicator--1e90aec8-57dc-43e5-ada6-47bfb31f122a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb28ad8-4297-4c50-bd2f-6b85068c5ade", "sighting_of_ref": "indicator--1dae6285-37f3-4c4b-8f74-a52bff1fdcab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c98805-d444-4941-9ea5-f76118d6cb5b", "sighting_of_ref": "indicator--1dae6285-37f3-4c4b-8f74-a52bff1fdcab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3400e762-dfa8-487c-aa65-d9540cf66f14", "sighting_of_ref": "indicator--e16f77b1-9bff-49dd-9c3b-c6f7ae0a6296", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3cdb99-ff0e-4cd1-bcf0-f8426de71995", "sighting_of_ref": "indicator--e8486165-7973-4d44-ba5c-bc5c9364d285", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1639487-27c8-4b49-9164-edc5b492587f", "sighting_of_ref": "indicator--4862582c-e483-4922-af5f-62719a70e3e9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf0daed-d627-4fcd-83ac-b8d048906d18", "sighting_of_ref": "indicator--67251d36-eb22-41ff-b2b0-1ddfb673e762", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc275a4d-f085-48e0-8810-90b5de72514f", "sighting_of_ref": "indicator--3af5f1f5-721c-4610-8782-62b0169a98e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea155223-057f-4797-8f3c-b39d92a90bad", "sighting_of_ref": "indicator--333df2e9-3bd3-4289-bd18-a55269ca4260", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796e72fe-fef1-440d-895b-139614a44ede", "sighting_of_ref": "indicator--0087174e-7b06-495e-9152-b621f954d02a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20613a6f-9da4-4591-a0c2-bbed70eb2352", "sighting_of_ref": "indicator--9f44a240-8beb-4821-8c8a-fa28d118b4ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7b9a5c-944f-461b-a6f5-2cc08edc4f00", "sighting_of_ref": "indicator--f4182236-532b-4284-8d71-b70f0f0230c1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acdc3e5-8326-4a1c-851e-023ee4697c1c", "sighting_of_ref": "indicator--c0b50812-99ec-4a02-9ac1-e72c1415e488", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da3975f-adbb-45e4-b9fb-8e518cfee280", "sighting_of_ref": "indicator--c0b50812-99ec-4a02-9ac1-e72c1415e488", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78290cd8-613b-4b96-a388-0ffff8556dd8", "sighting_of_ref": "indicator--72823ebc-4821-481a-9d42-5582c2055fd5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa332e2c-384a-4cde-9390-cdad364d2137", "sighting_of_ref": "indicator--2f229e12-c63f-470a-b529-c0841fe0d6d4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9b63b2-1977-4e27-90e0-3fab0541f90f", "sighting_of_ref": "indicator--630e24b6-7e55-4d2e-9855-177b3b1ea8d0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828678f2-1e65-418c-bc8f-503089c9f4e4", "sighting_of_ref": "indicator--2b7086f5-c21c-430c-b7ec-1cd387eb10f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb0be94-e517-4152-a1d6-e7a4605a7c4b", "sighting_of_ref": "indicator--ac91bf46-a745-429a-adce-7e677fba97a0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc1efb8-d111-48e1-8f85-38b1a1a0e460", "sighting_of_ref": "indicator--3a9c15a3-48d6-4bf0-b997-86cadd8120ba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aebb001-75d4-49a0-9b79-b2f4a18d02a1", "sighting_of_ref": "indicator--ae3a81ed-abda-4ee8-87cc-e4c745377a9b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc84bbf7-f52a-4a4c-96f2-4e2a2b230ff5", "sighting_of_ref": "indicator--dcdadb38-54bd-4cf3-a8ac-7eac288c8380", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af93da01-43a5-4951-9d5f-449dc64857ba", "sighting_of_ref": "indicator--b772d8f9-4e13-427c-a8c7-b4d040688472", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cb97cd-bbdf-48a6-ba13-2717da376686", "sighting_of_ref": "indicator--b772d8f9-4e13-427c-a8c7-b4d040688472", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c93ed58-1b3b-446a-8fa8-7ed3da09167d", "sighting_of_ref": "indicator--e9582e38-7bf6-422a-822c-73f18227315e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beec97df-23e3-48e1-b826-1641dd5916ba", "sighting_of_ref": "indicator--b7b5a65f-a73e-4ea2-a305-b3a7034027ad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5bdaa0-380d-414b-b979-b50100a4aae7", "sighting_of_ref": "indicator--141de925-1d0e-4b2e-bd98-a9a98616c3ed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ea9e8a-f948-48e0-8a02-c8c5306143e2", "sighting_of_ref": "indicator--141de925-1d0e-4b2e-bd98-a9a98616c3ed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e883abf-37b7-400f-af2a-f9acdd52a492", "sighting_of_ref": "indicator--9d7026ca-1056-4068-9885-f5c2258f7dbc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a97d42a-8f3b-43bb-9845-fbb4b520ce91", "sighting_of_ref": "indicator--9d7026ca-1056-4068-9885-f5c2258f7dbc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5596b5f1-0719-4fd1-9c22-eb4b923278f1", "sighting_of_ref": "indicator--36035c1c-20e3-49c9-824f-72979e8e3fcd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb1c0f4-0fea-4753-87cb-52e595dbc0d7", "sighting_of_ref": "indicator--8eb54f54-1a19-4abe-9686-addd4ca22406", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4583817-45bd-40be-a91e-0f823d806fab", "sighting_of_ref": "indicator--747e6200-792c-4be9-81c6-7a02fef01f4c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4283cb9-b013-4211-8684-66ec2b171aa4", "sighting_of_ref": "indicator--6fb05252-47a1-4e38-98d2-6baecf28d32c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ae9ae0-06ce-4315-84f1-f8f153f9cc06", "sighting_of_ref": "indicator--6fb05252-47a1-4e38-98d2-6baecf28d32c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c7a257-d98d-48ce-8c33-9664b8860fae", "sighting_of_ref": "indicator--9b8c1c8d-514a-4bb2-a43e-c3a3c44aeb64", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbade7f2-8818-4de8-bf4b-ccf8a27a7ec9", "sighting_of_ref": "indicator--780e851f-dfa8-49cd-9279-16d8af28864a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8d108b-35b2-4422-9c9b-bd8fab2e6e7c", "sighting_of_ref": "indicator--7b60feb3-7fa6-4036-b402-e31cdccddf7c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2fe3912-85d9-4f31-844e-9e746ea48b98", "sighting_of_ref": "indicator--8ec5993e-1342-4340-9acc-7a8c3236ea37", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f048f768-a21a-4647-b5fc-b6b81861e5f8", "sighting_of_ref": "indicator--9f5dcfb0-6a88-4e11-ad97-df78299813b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3860625-27e9-4f14-b566-fe5d0e0178e9", "sighting_of_ref": "indicator--4316d744-ad6d-4916-a619-cdaeca122bb4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95c9c7c-3e58-4315-bdd8-9090ca6a5111", "sighting_of_ref": "indicator--a878a797-7782-4848-8eae-0da4417b60b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2e1e35-a2fa-403b-9544-b92a8282bd5d", "sighting_of_ref": "indicator--a878a797-7782-4848-8eae-0da4417b60b3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f170d0b9-f623-4089-a31d-ab2b3dba9e63", "sighting_of_ref": "indicator--c05609c3-e79e-4262-8a68-c10e1c68cbbc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb79cca7-a141-4587-a27c-6567cb509abd", "sighting_of_ref": "indicator--c05609c3-e79e-4262-8a68-c10e1c68cbbc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6299db84-d3ff-4a74-87b5-baf65df73ecd", "sighting_of_ref": "indicator--6b5f7cef-e5f2-4994-80e0-ee6d863f2a1a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d058a7d5-bb0e-47e2-922c-cb3dc8abccac", "sighting_of_ref": "indicator--6b5f7cef-e5f2-4994-80e0-ee6d863f2a1a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0876bd5-9f88-4206-b8c3-95d8f1af2c05", "sighting_of_ref": "indicator--fb482039-29f2-4d66-9823-47667c500b19", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2bcedb-4252-448e-a516-6ec799fcc722", "sighting_of_ref": "indicator--053f5924-b0e5-4d22-af55-49b449919b17", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad02da5-7d17-4609-8fa8-2be71bb80e1c", "sighting_of_ref": "indicator--a65a717c-c66a-42c6-be52-cbf6220a4307", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8dba65-687b-439b-a4e7-51ce3fc09a88", "sighting_of_ref": "indicator--ad93a4c7-6fba-4a54-962b-974f60db1ca2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd874f5c-de4b-4297-8912-33d1242cacaa", "sighting_of_ref": "indicator--ad93a4c7-6fba-4a54-962b-974f60db1ca2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfeb750-ff4a-4274-b67a-9bf84f719cff", "sighting_of_ref": "indicator--805f49cb-0fa2-4c10-90de-1880de29129b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9e9bbf-4822-457c-ade0-ed327d08f59c", "sighting_of_ref": "indicator--805f49cb-0fa2-4c10-90de-1880de29129b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb063e34-88eb-41dc-add8-556838fc1895", "sighting_of_ref": "indicator--1825e183-ced2-46e0-9403-fd6ed9e81aa1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce221e57-5c26-4f10-8e4d-057c8879b090", "sighting_of_ref": "indicator--54f1b1b4-e429-4511-ab89-5f09d9bab6e9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e978a47-484d-447c-907f-94fff27f8d17", "sighting_of_ref": "indicator--0a58a831-ebde-41d6-8ead-08187a741c05", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e1243b-3de0-4d33-9912-31de6cd4292b", "sighting_of_ref": "indicator--0a58a831-ebde-41d6-8ead-08187a741c05", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316aa20c-bd09-480e-91ab-5907e0b31109", "sighting_of_ref": "indicator--36e01c72-043f-4743-975b-8e54479f6c41", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2973f542-80e4-4909-9869-37f8dd74f0f5", "sighting_of_ref": "indicator--898476e2-e37e-4329-a86a-74029f4dbdd2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7096c48f-027c-489a-b45b-60b5c3782382", "sighting_of_ref": "indicator--b5688a30-488d-46d0-89ea-d16c24017007", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bcc2faa-4865-4fbc-b7b1-f4fc7136eda6", "sighting_of_ref": "indicator--c4d0bf2a-af1f-4c53-8b71-5b8541d7fe99", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f46a9d-fca8-4371-857d-e1af74e7ef8b", "sighting_of_ref": "indicator--8efd0987-6c23-4ba1-a420-5138f7203cd2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a8c2ec-7eb9-452d-b9ff-762ac01e82fe", "sighting_of_ref": "indicator--0c543474-52a7-4cc5-93ee-26f9b4bec852", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6385d4-cee2-4ece-a396-e63f15e2883c", "sighting_of_ref": "indicator--0c543474-52a7-4cc5-93ee-26f9b4bec852", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7f70e0-d8bf-4f69-aded-f019682bcd8f", "sighting_of_ref": "indicator--f0ccd384-5c89-485e-91ba-29cfb23dcae5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19094d58-6b03-4c5c-a72f-8c29d045da95", "sighting_of_ref": "indicator--f0ccd384-5c89-485e-91ba-29cfb23dcae5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1677d4a3-ad6e-4556-932c-be4de5149eb8", "sighting_of_ref": "indicator--f0ccd384-5c89-485e-91ba-29cfb23dcae5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087b65b4-b9da-48b0-b358-46a84ca9b8d7", "sighting_of_ref": "indicator--eac92dbb-6ec4-4936-b019-6db95aa52f2d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e7505a-fb4f-4067-a72c-01ea7428550e", "sighting_of_ref": "indicator--10cfa3d2-cf05-4dad-bd2a-620afb9ba7b2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9093283d-c0d4-48cc-b9a1-abfc772fd49b", "sighting_of_ref": "indicator--10cfa3d2-cf05-4dad-bd2a-620afb9ba7b2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9eda38-7539-41a3-aab3-8850bbf6ade9", "sighting_of_ref": "indicator--6f0be054-637a-4396-9829-05cd79ab770e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52399a45-6313-4fe0-9cc4-6ba5773f281b", "sighting_of_ref": "indicator--6f0be054-637a-4396-9829-05cd79ab770e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31eb43ae-6581-4f9f-b798-1a3aba0d319d", "sighting_of_ref": "indicator--afb6236d-9440-4731-b61d-2a7db636da0e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9244216-e70a-43ed-a06f-097d1a65546d", "sighting_of_ref": "indicator--afb6236d-9440-4731-b61d-2a7db636da0e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90949993-d73d-4c44-833e-575a7fb83fc5", "sighting_of_ref": "indicator--bdb3055e-58db-45eb-9a3d-13b99d65f1d3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e838540-31b1-4d42-9975-b3d76ed43a92", "sighting_of_ref": "indicator--2aba6fd6-7b77-4c68-87a0-13322d44506b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca2a025-1004-4079-941f-13b0d8a81c09", "sighting_of_ref": "indicator--cedba65d-01b3-4391-8aac-f51ee172ae2f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ac4be0-0dd2-404d-a09b-0e0abfa1560c", "sighting_of_ref": "indicator--97504a2e-8e5e-42df-a376-c82ceca5689f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae9cb56-1ffc-4d7b-913a-2fc2de54fc9c", "sighting_of_ref": "indicator--395ae790-1b5e-4b01-8ab7-c71a3e554bdc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba6796f-8f0b-44e1-b07c-671c48a27609", "sighting_of_ref": "indicator--25df8b5a-077a-4753-bcec-44c00dd54093", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739702ef-f0d8-46c7-b9bd-aebb27e0e948", "sighting_of_ref": "indicator--25df8b5a-077a-4753-bcec-44c00dd54093", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19816728-0ca6-4cfe-999c-9b343d5786aa", "sighting_of_ref": "indicator--7e4309c9-e1d5-497f-b5bd-68d4ddb70ead", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10ce7a5-ee10-48a9-a6f7-6a7a981790fa", "sighting_of_ref": "indicator--2133ae1a-b627-4deb-b6cb-9402ad68458f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446ca623-6bed-4991-a86a-73c6862e1fde", "sighting_of_ref": "indicator--2133ae1a-b627-4deb-b6cb-9402ad68458f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f46936-50c5-40c7-89ea-e1d7a882fdc6", "sighting_of_ref": "indicator--d848ea97-977a-4cc2-a2d5-0db752cd435c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afed00d-9f4c-4ae7-861a-efa343bd5f70", "sighting_of_ref": "indicator--d848ea97-977a-4cc2-a2d5-0db752cd435c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f980f5c7-2c91-4107-9371-d1c1b3255f3f", "sighting_of_ref": "indicator--82d143e8-174f-451e-bfae-257695aa62cd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374b3a6a-9f81-42ca-812c-953f1bcadbfa", "sighting_of_ref": "indicator--a770f2e2-7961-4d31-bf1e-94cab8ba1d3b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9f53e0-35d4-44ec-8cb2-5fe4cfa74796", "sighting_of_ref": "indicator--e52a93c7-a7e9-47f8-b9df-0def11f110be", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1a9fc4-6516-4591-85d8-73c697f4680e", "sighting_of_ref": "indicator--e52a93c7-a7e9-47f8-b9df-0def11f110be", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d5922d-157d-4dc5-b278-9abb007a38f2", "sighting_of_ref": "indicator--72119a35-6909-47c4-ad39-246f38361ce7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b305a48d-75e7-4b31-8f82-4b54c3775475", "sighting_of_ref": "indicator--72119a35-6909-47c4-ad39-246f38361ce7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdd0ab3-d455-40ab-9a41-6aa6fa744b7f", "sighting_of_ref": "indicator--4e189b1f-8ff8-41e7-bd79-5a3e72af23ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2302be8d-3a21-41d2-9051-d79e65861649", "sighting_of_ref": "indicator--4e189b1f-8ff8-41e7-bd79-5a3e72af23ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59797d4f-4748-42e5-8727-c908562e7fd8", "sighting_of_ref": "indicator--fd34d7d5-b1d2-4834-a017-99760930a803", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603d0cb7-e96c-4e88-9e7f-9fc756f62a65", "sighting_of_ref": "indicator--fd34d7d5-b1d2-4834-a017-99760930a803", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a1d930-1f60-43a4-8e21-fda018ed765a", "sighting_of_ref": "indicator--e43ac939-7bcd-4874-832a-b589173c7d53", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ed2303-8dc0-41ba-91cd-a611cf6ee3c9", "sighting_of_ref": "indicator--47e0259a-206e-4fb1-931d-86d4a393f906", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3572b7c4-9a7b-4e35-aeab-6ea1839c2e9c", "sighting_of_ref": "indicator--31b139f5-61d8-414a-afb7-9eee52c16aff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a833dea3-f0b0-466e-b2bb-2cf89bf4d09e", "sighting_of_ref": "indicator--3f705767-c6e5-429b-92dc-30b55755fb3c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47747704-41da-4272-85fa-86bb029b6a3a", "sighting_of_ref": "indicator--337c723a-922d-43c7-87d6-7556d460c964", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddaaf53c-36b9-4163-ad49-fdfe3aae255d", "sighting_of_ref": "indicator--337c723a-922d-43c7-87d6-7556d460c964", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5144e119-910e-4d74-afd3-6c185c7ea885", "sighting_of_ref": "indicator--bbdd7613-db98-4b91-bcbe-faac9442fc59", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ef9194-67d2-4d6a-b993-7ba487555fb9", "sighting_of_ref": "indicator--bbdd7613-db98-4b91-bcbe-faac9442fc59", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c530bb5a-4db6-4676-83ff-590ad6e687a7", "sighting_of_ref": "indicator--f1ccbc41-4e3f-48b3-88b6-fbda55051786", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be78a698-437a-4875-b6ea-f40fae1c530c", "sighting_of_ref": "indicator--f1ccbc41-4e3f-48b3-88b6-fbda55051786", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a44acb7-f01c-4945-8454-53ebf9aeaab8", "sighting_of_ref": "indicator--de79c3ab-de7e-4560-8d35-58f4c9f9b370", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15be73e4-5f0d-4f40-8aa2-0ecdfa6106e4", "sighting_of_ref": "indicator--de79c3ab-de7e-4560-8d35-58f4c9f9b370", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e308879-788d-4292-8f6d-8af32e871a3f", "sighting_of_ref": "indicator--c7eba6aa-a7a3-4417-928d-ea15ac58d75e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678191ef-ebd9-4b62-88c1-bf18ff3ce219", "sighting_of_ref": "indicator--c7eba6aa-a7a3-4417-928d-ea15ac58d75e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c01606-8535-43c3-8456-cec477128c4a", "sighting_of_ref": "indicator--c7eba6aa-a7a3-4417-928d-ea15ac58d75e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10729b8b-6e23-4197-8a7e-72be5a887162", "sighting_of_ref": "indicator--e13ac9bd-fa72-4398-bfed-af4266338855", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102a8a67-0d57-4a16-9fd7-a666ed7e0061", "sighting_of_ref": "indicator--ac9735c2-0569-456f-add9-509c87289045", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0ac76e-975e-4a5f-9ae2-a896e0d83bce", "sighting_of_ref": "indicator--f3ea0958-6048-4d42-8e68-7e694c9eb8b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdf4c8d-536b-4c3a-97c9-2b66b45f92fd", "sighting_of_ref": "indicator--fba5e6a5-338c-4f19-bcf1-943f3a7160ba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e82e2a9-718f-42d2-b275-74b77f3b6d3a", "sighting_of_ref": "indicator--5ca1cf1f-cbdd-4352-8453-de8ec3f988b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320e8d43-bfa0-4c06-a747-01ddb6af028b", "sighting_of_ref": "indicator--5ca1cf1f-cbdd-4352-8453-de8ec3f988b3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e597cc2d-d53e-4fc0-b1a7-11f2f8c81587", "sighting_of_ref": "indicator--f6d62fb6-71c2-4798-89c2-824fa6f232ee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33798bb-0e7f-4528-86b0-8d9cededd507", "sighting_of_ref": "indicator--f6d62fb6-71c2-4798-89c2-824fa6f232ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c83080-a720-45ae-b059-3f01c1749502", "sighting_of_ref": "indicator--72c782ff-31a4-46ff-aa0f-d08694b9036e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6849d5-4100-4441-8ca1-880e12879cd1", "sighting_of_ref": "indicator--72c782ff-31a4-46ff-aa0f-d08694b9036e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19e1f5c-de49-4678-88de-757bdfc52585", "sighting_of_ref": "indicator--480e6ac6-e01c-4dc4-a543-c7a1cc602e86", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0335d9f-9d8d-4bb1-922f-6d15c71a7389", "sighting_of_ref": "indicator--480e6ac6-e01c-4dc4-a543-c7a1cc602e86", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8a4643-885f-4b7c-a1bf-924bb51b55de", "sighting_of_ref": "indicator--a62ef1ce-a6d3-46f9-b689-d108319bfc10", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd631891-347f-41b7-91be-65ebcecb7e4e", "sighting_of_ref": "indicator--14feaea2-7538-41fe-9332-f01c2b0b3de2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a48a77-ba3d-4e9d-b711-1a63b5133a07", "sighting_of_ref": "indicator--14feaea2-7538-41fe-9332-f01c2b0b3de2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e0be95-7f80-41ba-ba5f-4fa5c57f7471", "sighting_of_ref": "indicator--a2148f97-0999-4b8a-93ca-f294c25cddcf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f233bd-fdca-4281-ae07-ad33c8c0db35", "sighting_of_ref": "indicator--eb653ef8-fd05-4804-afe0-a91b25547857", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6038e2-e1c4-4174-bda7-7c5d351542bd", "sighting_of_ref": "indicator--32333746-f79d-48c3-9e8b-3ef5a4a4c35a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f068085-1955-4565-a250-09e2840f376a", "sighting_of_ref": "indicator--862fe6de-b644-4e44-ad44-1444880ce16c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29aa2ef0-fb72-4062-b363-4c81e0cafbb6", "sighting_of_ref": "indicator--862fe6de-b644-4e44-ad44-1444880ce16c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036fdb46-e3fd-4c30-9de0-6e25e7fe14ad", "sighting_of_ref": "indicator--6bbe7668-bd12-4845-84d5-8807b354f3af", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739c2d7d-189b-4965-b302-d4047bff6c3d", "sighting_of_ref": "indicator--dcb5ebc8-cfdf-4d1b-ba6b-c024863037ed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7f9ccd-ad76-4d8b-a0a4-e74700cf9bf2", "sighting_of_ref": "indicator--dcb5ebc8-cfdf-4d1b-ba6b-c024863037ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54c3910-12a8-4e29-ad71-cf301ea37eb0", "sighting_of_ref": "indicator--9bb3d296-b651-4467-8df7-3f2620a2aafc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647da6ab-ac64-4cf1-b1e2-9d743c6daf5b", "sighting_of_ref": "indicator--db166965-3ad5-403c-b694-f3fe9b09594c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e678850c-2b94-481e-bd1b-b1f92036109e", "sighting_of_ref": "indicator--2e81c465-1be2-466d-aba8-337e7a900358", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e7771a-35d4-44d7-937c-ca1b09595962", "sighting_of_ref": "indicator--0fa26b09-a764-4a49-8f3c-0907e744bee3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab6bd15-0ca6-4bac-a6ec-d461e2c270d4", "sighting_of_ref": "indicator--a42f455d-3209-4177-9b9f-e403824331f5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786ec95d-039e-4e70-9bb2-79d2de1dbe09", "sighting_of_ref": "indicator--4165bd65-c6c0-4155-b2ac-c6f64a569fef", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1871638d-a0bd-4750-9c0f-ba9b3b9e8972", "sighting_of_ref": "indicator--4165bd65-c6c0-4155-b2ac-c6f64a569fef", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1161bb-37a7-42f0-931b-834a186149dc", "sighting_of_ref": "indicator--722e03ea-c1c5-4293-9fdb-9be8dd49d21c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf12eed-8468-4c08-8353-cc27253ff3e2", "sighting_of_ref": "indicator--9df45694-c69f-40ab-ad15-52dbdde762ef", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97b3f5f-b583-49f6-9092-c1dfaea9ce81", "sighting_of_ref": "indicator--c792f35f-498f-4222-a58c-b4d6beadf65c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78e4a10-7fff-43a7-b54e-2486635b7ba0", "sighting_of_ref": "indicator--c792f35f-498f-4222-a58c-b4d6beadf65c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49802ba8-b85d-445f-8411-fe1b74d3c04b", "sighting_of_ref": "indicator--73734c2e-5ac7-48fa-bfb3-7fc16d8e3863", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca8b2cb-99ba-48d1-a4db-bb450c121b87", "sighting_of_ref": "indicator--1e5f6044-92e7-49b0-897f-f2785f44f2f5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bffe6d9-213f-4f2e-9e86-dfc5fef7dece", "sighting_of_ref": "indicator--125907b1-c045-476a-9f7a-3f1cc8ffe504", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ae6e47-fed6-4553-b5da-310ef8a4cb99", "sighting_of_ref": "indicator--0fd36345-7978-4a5b-811b-32173405eaab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b04121-5dd5-4b28-b287-58b590b65a50", "sighting_of_ref": "indicator--8ab8c68d-9a1a-432e-98ec-78e230dbc341", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc4d5f9-4f0c-42ae-91f1-237a371dd01e", "sighting_of_ref": "indicator--e807c55a-0da1-4aab-98b0-4583996df9af", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213160e5-d93b-4940-afa0-d1473db8db1f", "sighting_of_ref": "indicator--7984eb52-6107-484a-93ba-3f969c3c10b0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20ced7e-3837-4d97-b29b-dfea1e95395b", "sighting_of_ref": "indicator--5159cded-ccaa-47d7-b31b-89d0776af81c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6663a2-c9e0-4657-a8c8-ebdfae9c9ab4", "sighting_of_ref": "indicator--08e973b3-705f-4281-8c90-6abf5743199e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbd3e21-9e2a-435e-a9b8-b1c0575a3595", "sighting_of_ref": "indicator--06083f06-30b8-4359-a32c-eeb91937e82c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e577ecc7-da44-41f2-969d-302476ab53f4", "sighting_of_ref": "indicator--f4b46a30-ce8b-4120-92b2-c30d3644e151", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a72814b-5a07-41fb-ad0e-534b23a9663a", "sighting_of_ref": "indicator--f4b46a30-ce8b-4120-92b2-c30d3644e151", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ffc589-4ec7-4984-881a-b3446d6559b4", "sighting_of_ref": "indicator--ecf46685-c50e-4f7c-8f8e-a60adedd5708", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa88ecb-b2c2-4044-8880-4f4ab668bbf7", "sighting_of_ref": "indicator--ec370491-061d-4bed-a420-721c46267eae", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9769959-6092-47e7-869d-4e8882ad61d9", "sighting_of_ref": "indicator--7990e6c6-6977-4d2a-8c45-a244c685a9f0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b03f1d-7fd1-40df-aedf-f8f6ca07a42a", "sighting_of_ref": "indicator--7990e6c6-6977-4d2a-8c45-a244c685a9f0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634cf397-2718-4222-a1a3-33e05a13ebba", "sighting_of_ref": "indicator--0b4c504f-7f71-4321-861e-1541e2de0fd6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa77ed24-2f1d-4391-bec1-28b892a7b7a8", "sighting_of_ref": "indicator--e4d474a7-0a56-4c6b-8312-d3d6eca3ec04", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e43296d-353c-4ecd-9aca-b0c4c2411161", "sighting_of_ref": "indicator--e4d474a7-0a56-4c6b-8312-d3d6eca3ec04", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5d4dd7-48aa-4297-943e-30e3e3419bc9", "sighting_of_ref": "indicator--ada45ebb-064a-445e-91c8-c71641ca736e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd0f123-8a50-4003-a96e-8128d9443fdf", "sighting_of_ref": "indicator--ada45ebb-064a-445e-91c8-c71641ca736e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11cdee2-84a6-4c0a-bd82-9e83eaef045a", "sighting_of_ref": "indicator--a2c638c1-4d8c-418c-8890-d05da6691175", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9772ef66-7d78-4454-987c-3afb821b2620", "sighting_of_ref": "indicator--c04237d9-6fdf-463c-a7f4-034530af3047", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26518541-7b8f-4540-b6a7-e1a9a7c4e98f", "sighting_of_ref": "indicator--749f3005-f088-42bb-a438-8759cf2f0637", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f66b3d-6483-4cfe-a103-fa4978628486", "sighting_of_ref": "indicator--749f3005-f088-42bb-a438-8759cf2f0637", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdc959c-0c69-4b16-98ea-9d5bcca7bf27", "sighting_of_ref": "indicator--9e244081-4dd6-4a9e-84cb-da418be47194", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7342f79-ea31-4aa4-92d8-18991e8630b5", "sighting_of_ref": "indicator--9e244081-4dd6-4a9e-84cb-da418be47194", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094e421d-f993-4287-a12c-320a01058c6e", "sighting_of_ref": "indicator--5f89cc81-f1fe-494f-9c6b-04968f000d73", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc1bf96-6746-49dc-a5e5-1d99a2f2df28", "sighting_of_ref": "indicator--ee847720-a46b-4e87-b0d6-df521343fadb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ca6e0d-7199-4527-bbee-9a22d6053341", "sighting_of_ref": "indicator--4ba639d4-f1fd-41b9-8460-7cad80922842", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d02fdca-a27c-47f7-a307-38392b1dfa1a", "sighting_of_ref": "indicator--4ba639d4-f1fd-41b9-8460-7cad80922842", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e6b4a9-6916-4ffd-aec0-e651ca3325a7", "sighting_of_ref": "indicator--5380f66c-d1d7-43a9-be65-4f8880d31bea", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf900e1-c539-4f49-9197-f485f1dfdf11", "sighting_of_ref": "indicator--4b22d374-8fb9-4f94-b465-517ce108e5cb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8aa700-8f0f-43fa-aa89-24b037c10c62", "sighting_of_ref": "indicator--4b22d374-8fb9-4f94-b465-517ce108e5cb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fbdef7-bccc-420c-9c89-d96c7a885561", "sighting_of_ref": "indicator--5b01302b-3780-42cf-9ce4-48fedaacefdd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb02bb4-8b30-4ceb-a17e-178e580bffc7", "sighting_of_ref": "indicator--fc044491-ea7c-4b37-ad76-397c9ce5c11b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972de530-29e3-46fd-be18-7c7bc1759d40", "sighting_of_ref": "indicator--8b1e9190-bfb1-409a-8d5a-c40c65a9e295", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48cfd4f-bd34-4bee-a77e-59593df3f5ad", "sighting_of_ref": "indicator--8b1e9190-bfb1-409a-8d5a-c40c65a9e295", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa7881c-6dfd-4e02-98e6-4539628f100d", "sighting_of_ref": "indicator--39d57f3d-ba3a-4150-be7c-29e2008ca426", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6e1590-2132-47e8-a82a-c2cadfb02855", "sighting_of_ref": "indicator--39d57f3d-ba3a-4150-be7c-29e2008ca426", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0120fe-007a-4ac3-a107-ab5423e42f80", "sighting_of_ref": "indicator--4bd44c7c-53f8-46cd-80f5-e92f1ea7f6c2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a8780a-af80-4897-bc33-a7677948eaa5", "sighting_of_ref": "indicator--6642a507-03cd-4f82-a14d-97baf2f2a84f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bf190c-8dbd-4cd6-972d-e59449927d9e", "sighting_of_ref": "indicator--6642a507-03cd-4f82-a14d-97baf2f2a84f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02240978-8932-435c-b682-f4db72ecaf38", "sighting_of_ref": "indicator--a209b4ee-29b7-41b6-848d-53030ea8e774", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775411d7-5806-4732-8afd-4bca3c4e8da4", "sighting_of_ref": "indicator--7314ce92-b19d-441a-9eb2-8fb2f8fba226", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51000e6-9ce4-49cb-88fa-decbca30747f", "sighting_of_ref": "indicator--caa18c1e-3702-43d1-beac-f2cb4942a32f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ec146f-3b97-4405-b57e-632b9e42941b", "sighting_of_ref": "indicator--d28363ab-a006-4940-a9c6-71346643b963", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc66e27-9f37-42fc-8589-5c4ec7c5fa99", "sighting_of_ref": "indicator--42be8849-5de3-4700-b478-e5d1ca154b8f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e725e4a-e479-4170-a7ac-8e3d08d43727", "sighting_of_ref": "indicator--f3a35f7e-c0c6-40ab-8bab-fee0041b8179", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e444e7-91af-4eef-a97e-1f373ed1ec0f", "sighting_of_ref": "indicator--30093940-490a-428d-9df0-7aeaeb8b0734", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ce7f9e-f63e-4f56-88b6-4f01c56b7a5a", "sighting_of_ref": "indicator--30093940-490a-428d-9df0-7aeaeb8b0734", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85cb6bd-9bc2-4b48-be02-63d41b62f503", "sighting_of_ref": "indicator--30093940-490a-428d-9df0-7aeaeb8b0734", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370750ea-b73c-4f35-8b8b-070b4077ae59", "sighting_of_ref": "indicator--218f290e-dc66-49e3-ad11-bd009d64da89", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e618866-aaa5-4750-a9f8-4c35adbeb08e", "sighting_of_ref": "indicator--218f290e-dc66-49e3-ad11-bd009d64da89", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84218ffe-8d1f-4fbf-9dd4-c4736e25d0e6", "sighting_of_ref": "indicator--e35c735d-ad1b-49ef-8f2b-585be083cd1a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a2a023-dbe4-4ba3-a566-586ffdf8eed7", "sighting_of_ref": "indicator--e35c735d-ad1b-49ef-8f2b-585be083cd1a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e8aa20-e43d-4ab8-bc90-5a564916c997", "sighting_of_ref": "indicator--d56b3cca-8079-4755-8a7d-b856ba8e67e2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f15b9ec-5463-4ae0-8f87-8a5957a2edc0", "sighting_of_ref": "indicator--d56b3cca-8079-4755-8a7d-b856ba8e67e2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51f4afe-1c39-4731-a115-bc3f02114f5b", "sighting_of_ref": "indicator--7910a8f2-10f1-4863-911e-b2ae7f2b8d4c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283fb472-8679-4823-8687-ee895dc93c11", "sighting_of_ref": "indicator--67d83e82-8f51-4859-8ed8-862e08a0dde5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8830aae-ea3f-4ad0-ac9a-b63be8913517", "sighting_of_ref": "indicator--9d3f3a6d-5ae5-44c3-a40e-c986899493f5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb222e31-69ae-4cb7-bacd-856a24f31c8d", "sighting_of_ref": "indicator--12d1dce6-ab80-4d8c-b5a8-894015140430", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e304feb-b0ec-4ca1-8fbb-41501150e102", "sighting_of_ref": "indicator--12d1dce6-ab80-4d8c-b5a8-894015140430", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc92e614-4079-4f8d-9b27-8cadca1fa64e", "sighting_of_ref": "indicator--208ffa5e-b5cc-4493-8fc6-a58717517618", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a31b0cf-ddad-4415-b8b9-ebcef436381c", "sighting_of_ref": "indicator--dad8204e-111f-419f-ab3b-1062be9e18bf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcac325-5214-4cf1-ae43-ce811c50026a", "sighting_of_ref": "indicator--dad8204e-111f-419f-ab3b-1062be9e18bf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a821ad-ba97-4fb2-b497-82cabf274c6c", "sighting_of_ref": "indicator--b98250f4-3488-48f3-85cc-4aae8747389d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14cf72a-4ad0-46b8-ae6e-9b1f7032dfc1", "sighting_of_ref": "indicator--ef385bcc-9bf0-4ea6-b973-ce77a7330230", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a43e0c9-ab9c-49b2-bd74-5bf03f960d0b", "sighting_of_ref": "indicator--cf2070af-5958-419c-b5bd-1e3b8910be09", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82b57ef-2ace-4e78-95e3-67f155182099", "sighting_of_ref": "indicator--cf2070af-5958-419c-b5bd-1e3b8910be09", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cd9d6f-704d-4a4a-8027-c01214755a92", "sighting_of_ref": "indicator--cf2070af-5958-419c-b5bd-1e3b8910be09", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a9e6df-61a4-410a-a242-0f412639a3a6", "sighting_of_ref": "indicator--57e33e7b-0d22-40ba-9298-2d160a5cf066", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5e15f8-7f34-4dcd-b81c-ce653408c546", "sighting_of_ref": "indicator--374f2a3e-3e58-42ac-9c6b-b730d2503822", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2aaccb-26d2-461c-801a-b16df273f3ea", "sighting_of_ref": "indicator--374f2a3e-3e58-42ac-9c6b-b730d2503822", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99131426-e09c-4365-8801-4b616ffcb759", "sighting_of_ref": "indicator--374f2a3e-3e58-42ac-9c6b-b730d2503822", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7126ec75-18f7-4c5f-9802-f6f6e6150638", "sighting_of_ref": "indicator--5b011618-a418-450a-b8fa-7a50f74caefe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370ac892-63c8-41f5-92d1-66f101c662f0", "sighting_of_ref": "indicator--60510969-e1b4-40b1-a877-1dd73df3b497", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7683ac-234a-455e-bf2d-50d5fc3a8e0d", "sighting_of_ref": "indicator--ffcd87bf-61c5-4093-b203-5de63df5c73b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03c4dea-271e-4b6f-803f-737c1a313426", "sighting_of_ref": "indicator--d470f948-8931-47da-a44f-b34a5dfa911e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2fe179-32ab-4c52-9e41-4b347e9d4f87", "sighting_of_ref": "indicator--d470f948-8931-47da-a44f-b34a5dfa911e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef4a52a-f476-4694-8f4b-03c87ea87ae3", "sighting_of_ref": "indicator--b44eba7f-17f3-471a-ad0b-e2496cbcb210", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fec8778-b506-4469-8ef6-506d73d271e7", "sighting_of_ref": "indicator--ba1306ec-5a7a-4062-b99b-de677dba7eab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757977e2-5856-44a2-84ed-0bfe7f99f164", "sighting_of_ref": "indicator--ea0865f1-1dc3-4511-ac27-7e884b205eca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972411cd-9f30-4897-8b8a-412f2fbc655b", "sighting_of_ref": "indicator--ea0865f1-1dc3-4511-ac27-7e884b205eca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25d0009-966f-4344-8147-9f6491c31fbd", "sighting_of_ref": "indicator--2e20eb71-c571-4c7b-9ffb-8721c8bd6b8d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c8f402-7676-4e3e-bf16-c5c56e2fa48d", "sighting_of_ref": "indicator--2e20eb71-c571-4c7b-9ffb-8721c8bd6b8d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2cf78f-4aff-4d21-a5ed-3ff48b85c2ff", "sighting_of_ref": "indicator--74b8d5e2-21ea-4944-83f3-163f952364a0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0396ce30-ef53-4ca5-9500-abb9c6a3897b", "sighting_of_ref": "indicator--8cb62b6d-66d0-4591-a220-2f26e0388129", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0600deb-9b3c-4e6b-a7c1-5cabc298fd88", "sighting_of_ref": "indicator--8cb62b6d-66d0-4591-a220-2f26e0388129", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a86ba1-21df-43e2-9125-e7b4bf069ff2", "sighting_of_ref": "indicator--57d2bb5c-fb8f-4a9a-a565-fc25877dc6f8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98536d5d-e4f5-40b9-8760-c9f0852ea292", "sighting_of_ref": "indicator--28884af4-c638-4f75-ac8a-c3d710999a86", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604b2774-4b99-4a17-8f7f-966c70ccd197", "sighting_of_ref": "indicator--a46d5bf5-212c-413a-b585-73d9812b971b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4a412f-3614-4b9f-9212-f27b718e649f", "sighting_of_ref": "indicator--2bf0f7e4-d79a-455a-b276-9c6a9d44ee8c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1030ff82-1dcb-4477-9e9c-f9f4d0ba2cf7", "sighting_of_ref": "indicator--fa54a552-e452-42e2-888a-e40651c2142f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dafc576-320b-4412-9a51-a743d3380fe0", "sighting_of_ref": "indicator--ca911b30-68d4-4814-af19-32feb132dd52", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd47151-fece-4744-ac61-0bb5b532e88c", "sighting_of_ref": "indicator--ca911b30-68d4-4814-af19-32feb132dd52", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be219f92-9343-4ef0-9829-fd33e7bf41cd", "sighting_of_ref": "indicator--2b96db7b-57f9-4a37-ae39-ea281f51f835", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5682f4-c10a-4e51-a8bd-edac111afd1d", "sighting_of_ref": "indicator--bdb8c6e8-c44b-487c-b46c-882c0ec2b038", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc2bff5-1379-41c1-8bd8-6f651ba4406b", "sighting_of_ref": "indicator--bdb8c6e8-c44b-487c-b46c-882c0ec2b038", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bc55af-d0ed-4146-8e26-7b44024e5dbe", "sighting_of_ref": "indicator--d80f496e-738f-4a04-a7ec-0beb6ca69180", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe7a072-ca5d-4a76-9663-683efc0f866d", "sighting_of_ref": "indicator--2bd0d59e-d05e-4286-9dee-a6812a1e8a03", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5ed6e3-f0c1-48de-9672-185112987688", "sighting_of_ref": "indicator--2bd0d59e-d05e-4286-9dee-a6812a1e8a03", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53502245-8048-455c-a903-8aa3d012d707", "sighting_of_ref": "indicator--c1913676-c994-43ea-9a89-c20735159f98", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc7ca79-0aa5-4f5e-b3f1-002201f53391", "sighting_of_ref": "indicator--09987869-8fb7-48e0-be9a-e3c58d3d9a98", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a4a5c0-c59e-4833-8f6e-f396c86f1997", "sighting_of_ref": "indicator--c13826fc-ac92-4b09-96a7-f5014fc74f84", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae178add-6ee5-4b5b-b038-d7ba721ee17c", "sighting_of_ref": "indicator--c13826fc-ac92-4b09-96a7-f5014fc74f84", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44ad50f-385f-4a60-a566-4d476170be64", "sighting_of_ref": "indicator--cd6069c0-e29d-498b-9e7a-8ad284b186c7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc81ed0b-b789-4789-87a0-e27ae51799dc", "sighting_of_ref": "indicator--5d21295f-d886-48d8-a5f6-94d248fbabc9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbce0fc-4664-4c65-822c-07c25db21688", "sighting_of_ref": "indicator--5d21295f-d886-48d8-a5f6-94d248fbabc9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65eafb2-34d2-4648-838f-fe73620d452c", "sighting_of_ref": "indicator--e509df92-60c8-406a-8b32-2c44abcd38f8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e40ade-3de8-46fe-9e18-56547fedd520", "sighting_of_ref": "indicator--1802cac6-883b-49e2-aae9-4362a840b98d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8cd0a0-1ce7-4f2b-9766-f09e70916d02", "sighting_of_ref": "indicator--c7bd7b07-efbc-4960-95b7-1197317f3b65", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcd0719-31ff-48bf-82a5-dab7dad0c93a", "sighting_of_ref": "indicator--71604a89-cbdb-4f09-b855-09fa75e779e1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f2919e-e505-4b60-8a3f-e5691a73f1ab", "sighting_of_ref": "indicator--71604a89-cbdb-4f09-b855-09fa75e779e1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61eefcc6-9bca-4e68-8731-baa014182161", "sighting_of_ref": "indicator--8ef7798d-2e18-4fd5-9bba-8f23d87b0bda", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d59105-cb71-4573-9058-9e42e749ece5", "sighting_of_ref": "indicator--8ef7798d-2e18-4fd5-9bba-8f23d87b0bda", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e042cc7-b66f-415c-a073-0a896144850c", "sighting_of_ref": "indicator--8ef7798d-2e18-4fd5-9bba-8f23d87b0bda", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f0c846-64b7-448f-baf9-dadb203300ca", "sighting_of_ref": "indicator--417fe994-2e2e-4b4e-8e4f-8e7c0890e46e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7882cba4-4a49-4e5c-b9de-9781f076f3e9", "sighting_of_ref": "indicator--02c2731f-e52f-47a1-b246-f6e200c80be8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8acfb14-48c9-4641-ac47-5cb3897446ae", "sighting_of_ref": "indicator--02c2731f-e52f-47a1-b246-f6e200c80be8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0737738-cf5d-461f-904b-d57641a2b6a7", "sighting_of_ref": "indicator--02c2731f-e52f-47a1-b246-f6e200c80be8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cd93e9-ef9c-4aad-9ec7-0475e02b5738", "sighting_of_ref": "indicator--88c80bd6-786b-4c91-8898-9ae27f3537f6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69cb956-7776-46bd-a1ec-398447fba665", "sighting_of_ref": "indicator--88c80bd6-786b-4c91-8898-9ae27f3537f6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c32ad8-3440-4395-b55d-517116138d70", "sighting_of_ref": "indicator--30598c43-c931-4977-995c-8f8f45b4f692", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27f5b2d-3f28-451d-a7d1-88bb4c94bbf0", "sighting_of_ref": "indicator--7774f00f-0a4c-4c8c-8c2f-f8ef1667c02c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6580684d-62eb-4e22-b977-2658126a6051", "sighting_of_ref": "indicator--7774f00f-0a4c-4c8c-8c2f-f8ef1667c02c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b483e2-99cd-43e5-b0da-b5cb6c32570c", "sighting_of_ref": "indicator--3a44ccf2-3a8e-4af4-956a-84cec5f527ea", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef09c96-bedd-4064-b51e-05754edabc9f", "sighting_of_ref": "indicator--3a44ccf2-3a8e-4af4-956a-84cec5f527ea", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e9cfcd-6db2-46ad-b512-9d6d4fa8002a", "sighting_of_ref": "indicator--5ea9a064-227e-4e1e-a683-63e72cadd197", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1381f7-afe8-4716-9c3b-a78cb0d8b70b", "sighting_of_ref": "indicator--5ea9a064-227e-4e1e-a683-63e72cadd197", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfaaa1ce-e0df-4c94-b1a3-5ac9e5b175b7", "sighting_of_ref": "indicator--6fbcb9dd-fdfc-4419-a2fb-6ebe9be70f74", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07af086-8ee8-4365-b7e6-888ff7ef691b", "sighting_of_ref": "indicator--c05a4178-b77e-45b0-8037-944f584dcf1d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1c80e2-ceda-423b-8d6f-5facbcccb566", "sighting_of_ref": "indicator--1b75fdaa-5a14-4395-87f3-504ec348ef0d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3159f347-4750-476f-86ab-26cacb100781", "sighting_of_ref": "indicator--b4408224-f44b-442d-b83b-5b22c312d7c9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1750bd51-bdf9-42a8-953e-809e67066df5", "sighting_of_ref": "indicator--649180a7-64f0-456e-b2f9-db8b7c76206c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa039120-8a1d-45f3-940e-a7052798ab81", "sighting_of_ref": "indicator--64540f85-678b-4297-a61f-1b819eaeaef8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e89880d-c579-4b01-b0f7-0117b4e23d58", "sighting_of_ref": "indicator--28910e00-cd37-4a9e-b51c-59e624cfdbd7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ec776a-67d2-4d14-9c85-357a8d1b42b2", "sighting_of_ref": "indicator--d7fe48e6-87e1-44a5-a46e-63986e9753f6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9fdca8f-2a5b-459d-a18c-1314499ecd6d", "sighting_of_ref": "indicator--d7fe48e6-87e1-44a5-a46e-63986e9753f6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588ae67f-aea9-43a2-a7f2-d15d3653fc2f", "sighting_of_ref": "indicator--80494d9e-6ab9-45be-9f8d-0229b90d2e74", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5035b1-4499-445d-8d8e-929f497b8491", "sighting_of_ref": "indicator--80494d9e-6ab9-45be-9f8d-0229b90d2e74", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff4a419-cdf5-4bbe-ad00-f8c8a1797966", "sighting_of_ref": "indicator--b1c74346-6986-4761-8ea3-34b53aca2277", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a3a318-6d8f-4b80-adc5-b4d11fca95c3", "sighting_of_ref": "indicator--b1c74346-6986-4761-8ea3-34b53aca2277", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1217e2b9-0c50-4aad-af86-f8e04160e359", "sighting_of_ref": "indicator--b1c74346-6986-4761-8ea3-34b53aca2277", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa5aaff-f738-48ba-9163-164c03c95aff", "sighting_of_ref": "indicator--818a216d-7307-4b2f-b5b1-0e2fb86f83e1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a800b9-ccec-4a2c-9b10-f2dee0857d66", "sighting_of_ref": "indicator--818a216d-7307-4b2f-b5b1-0e2fb86f83e1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a07e2d-b1c4-489c-9222-3d8b1bd64d69", "sighting_of_ref": "indicator--818a216d-7307-4b2f-b5b1-0e2fb86f83e1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd870c8-0122-461d-ba08-3a3d4c630631", "sighting_of_ref": "indicator--761b80ce-5a12-467e-a82f-81e1a22fdb2c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6e6c77-98a6-44e5-9d31-9a01214ed1e9", "sighting_of_ref": "indicator--761b80ce-5a12-467e-a82f-81e1a22fdb2c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35661e45-4e4e-48fd-8572-c5f2b53a1752", "sighting_of_ref": "indicator--761b80ce-5a12-467e-a82f-81e1a22fdb2c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6dd588-a72c-4bc0-b9bc-450c9265f819", "sighting_of_ref": "indicator--3ab7d2ee-5e6e-4c79-a891-ac03c5ffdd27", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0a6e7e-b48e-49bd-8308-4e8b1a07798a", "sighting_of_ref": "indicator--3ab7d2ee-5e6e-4c79-a891-ac03c5ffdd27", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db35b23f-55b5-4c70-a760-f04b7497072c", "sighting_of_ref": "indicator--d71cb12b-f384-4a46-b340-3affc1f201d2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee5f222-7971-40d1-9d3d-1c9a36dabd94", "sighting_of_ref": "indicator--d71cb12b-f384-4a46-b340-3affc1f201d2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05a2e5b-7877-4ee7-be78-9f63274590ad", "sighting_of_ref": "indicator--d71cb12b-f384-4a46-b340-3affc1f201d2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0aea8e-e666-44b1-898d-f78436cbe0d2", "sighting_of_ref": "indicator--a0bd8a77-9898-4bb9-90fe-b21f3be58026", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a23bd6-0285-4b43-8ec3-6853eda72ff6", "sighting_of_ref": "indicator--a0bd8a77-9898-4bb9-90fe-b21f3be58026", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d67cbc-f892-473f-bedb-ef63ec5ec7d4", "sighting_of_ref": "indicator--a0bd8a77-9898-4bb9-90fe-b21f3be58026", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb41765-d087-4759-b22c-82cde3610058", "sighting_of_ref": "indicator--a483c79d-826e-43b6-87e6-62d68055a959", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8eb031-72a8-4d26-85a6-9187cac7ef23", "sighting_of_ref": "indicator--a483c79d-826e-43b6-87e6-62d68055a959", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007d17e3-0df0-4b6c-9156-58a9861ffb6c", "sighting_of_ref": "indicator--52368489-63ab-480c-86ba-831cf67bff9c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcddbe0-6d15-4f98-9213-94ba472e4853", "sighting_of_ref": "indicator--52368489-63ab-480c-86ba-831cf67bff9c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b765610-7c95-4d64-8080-bc93f1855596", "sighting_of_ref": "indicator--52368489-63ab-480c-86ba-831cf67bff9c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dac6ac0-7858-4a8e-934c-bd152cfb21d7", "sighting_of_ref": "indicator--a81456c3-2e3f-4e07-989d-2e897f14ef76", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5e00ce-05d8-47fa-aaa0-c9e281c84073", "sighting_of_ref": "indicator--a81456c3-2e3f-4e07-989d-2e897f14ef76", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d936450-8578-4966-b5ed-103eee253976", "sighting_of_ref": "indicator--7823614e-cca5-47a7-b0e4-dc80f92b6e1d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4774f70d-5553-4e1c-85ad-679a184b19b1", "sighting_of_ref": "indicator--7823614e-cca5-47a7-b0e4-dc80f92b6e1d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7515b0c2-b4db-434e-b04f-d50bd50b16fc", "sighting_of_ref": "indicator--7823614e-cca5-47a7-b0e4-dc80f92b6e1d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625e0f3b-c93a-4ab5-987e-835a8a0f80ff", "sighting_of_ref": "indicator--1231b646-640d-437d-bc54-52f1a687af4b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740aa3d7-acb1-41a8-90f2-89b33ce14c6f", "sighting_of_ref": "indicator--1231b646-640d-437d-bc54-52f1a687af4b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1b32a0-d74d-462e-8ea6-03ae9c5f148a", "sighting_of_ref": "indicator--222c4866-9b78-4979-b031-072076cd3aca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ba0ac0-5012-4b75-9dc6-7e8e3d4fe959", "sighting_of_ref": "indicator--222c4866-9b78-4979-b031-072076cd3aca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05ca2b9-201e-441c-ada2-313163f3c6ae", "sighting_of_ref": "indicator--222c4866-9b78-4979-b031-072076cd3aca", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c847455b-e994-4c72-9226-6feb51b90a31", "sighting_of_ref": "indicator--1f0a65f6-643c-4437-ac6a-9ff4df85a9f9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6570a2-70e6-4041-b71c-4eb51aa8ab6d", "sighting_of_ref": "indicator--1f0a65f6-643c-4437-ac6a-9ff4df85a9f9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c30f6f-7be4-479a-aafc-7f31f1bd313d", "sighting_of_ref": "indicator--1f0a65f6-643c-4437-ac6a-9ff4df85a9f9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f81cdb-383e-4665-9ab1-50ba15b59805", "sighting_of_ref": "indicator--2fcadc3d-2876-4da1-852a-5830b43f4768", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f5a6b7-d632-4bca-a075-3d953b131bb2", "sighting_of_ref": "indicator--2fcadc3d-2876-4da1-852a-5830b43f4768", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c40679-fa5d-431d-ae51-7c337c6e4f28", "sighting_of_ref": "indicator--2fcadc3d-2876-4da1-852a-5830b43f4768", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ec1f8c-abe7-409a-bfc6-c8d897e29e30", "sighting_of_ref": "indicator--fffc3ec2-61e2-4ef3-9e73-d1f170573686", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b3597d-10a1-4b55-86fc-425e5ef6f7ec", "sighting_of_ref": "indicator--fffc3ec2-61e2-4ef3-9e73-d1f170573686", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e26cebc-02db-43ed-953e-a9cfa77fe95c", "sighting_of_ref": "indicator--088482b9-c986-492c-ae47-cb2ba337ca04", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7693f1-0f8c-453e-bb17-6b5ed58f4029", "sighting_of_ref": "indicator--68363699-fb19-4e5e-ac91-c7aefa1b0dab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af7d324-04da-4f14-bdb1-04e1dcb92179", "sighting_of_ref": "indicator--68363699-fb19-4e5e-ac91-c7aefa1b0dab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3253744-cbf6-46aa-87fe-e84c48a9ada3", "sighting_of_ref": "indicator--56e48c92-ba5a-4d26-9482-305c1da27898", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda188e9-e3ec-4863-b571-6c7f8bef045d", "sighting_of_ref": "indicator--56e48c92-ba5a-4d26-9482-305c1da27898", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc85037b-90c1-4b8c-80c2-ee9fb504f6a8", "sighting_of_ref": "indicator--8ba4afc8-911c-4cc3-94d6-1be164b3ca99", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563fe349-1f6e-41b2-bd39-dcb842ccea61", "sighting_of_ref": "indicator--8ba4afc8-911c-4cc3-94d6-1be164b3ca99", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517c38c9-5483-4ac5-b566-c63334c3ed59", "sighting_of_ref": "indicator--7c18a10d-767e-4f53-8953-e4a7a3f78c5c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324c2fc6-43eb-4973-9de3-3fcff832d163", "sighting_of_ref": "indicator--c9a57e33-b4d4-4554-a258-3d7ec5f2c2d8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1d3956-7440-41dc-94d0-be1e1860d8a6", "sighting_of_ref": "indicator--c9a57e33-b4d4-4554-a258-3d7ec5f2c2d8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd55289-71d6-47fb-8cea-b398c4193be5", "sighting_of_ref": "indicator--3bc0b18c-042e-43fb-a582-989075405401", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d7c88a-9785-4acd-9b09-fd79ec0e66f9", "sighting_of_ref": "indicator--c528ad52-1491-4aae-b9b7-74c742c8ea66", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d809c780-68d1-49e3-87de-208723203b72", "sighting_of_ref": "indicator--c528ad52-1491-4aae-b9b7-74c742c8ea66", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5e1e45-4350-474a-9aca-b44dd1dc38b8", "sighting_of_ref": "indicator--08b174bc-93b3-491c-af14-5216c62efcc2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bfe874-755d-482e-b98e-8afcf306105d", "sighting_of_ref": "indicator--f233690c-c34b-4e2f-b8b3-2794e652f1cc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ee67ab-4d6a-40cd-bbe1-f37bc9ecd834", "sighting_of_ref": "indicator--9bd52d0f-36f4-4832-a6e9-bd2adeb4f37a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cdd503-c89c-445a-98de-9de1c9009936", "sighting_of_ref": "indicator--becd7809-bcad-489a-bfdd-33086cf6fe57", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0687155-ef7f-436d-a600-10eecea32f2a", "sighting_of_ref": "indicator--becd7809-bcad-489a-bfdd-33086cf6fe57", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0971ec5-6268-4280-a4b7-2e19126dd79c", "sighting_of_ref": "indicator--c6d427d8-78d7-47cc-a671-9dd9cc6157ac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e09255-63b3-4550-9f8f-49510cad6859", "sighting_of_ref": "indicator--c6d427d8-78d7-47cc-a671-9dd9cc6157ac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e327f7f5-d04e-4243-9b7d-7e781247d27a", "sighting_of_ref": "indicator--4bbb9bf7-d830-4940-b99b-74355de8b8ee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0431dac2-38bc-4cfc-a988-9a911fb281e9", "sighting_of_ref": "indicator--4bbb9bf7-d830-4940-b99b-74355de8b8ee", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce00f1a4-7d07-4e26-984c-24ab80e7dd59", "sighting_of_ref": "indicator--4bbb9bf7-d830-4940-b99b-74355de8b8ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f897080c-5ea2-4367-b336-c90b234a2264", "sighting_of_ref": "indicator--3e030646-248c-45fa-b246-295fe4cb6a9f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f465a76a-8940-4c24-87b8-61e9bbad649e", "sighting_of_ref": "indicator--3e030646-248c-45fa-b246-295fe4cb6a9f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd47bac-a77e-4f59-81f0-673800ee5c8a", "sighting_of_ref": "indicator--2d0fcbe7-18b0-4f93-b87d-3654c8e3ecfa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b365e67c-6f84-46e6-836f-bc96250d1ffc", "sighting_of_ref": "indicator--2d0fcbe7-18b0-4f93-b87d-3654c8e3ecfa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1abfbd-48d6-4b72-850c-98d172bee85a", "sighting_of_ref": "indicator--c5735b8b-c5c7-4326-97b0-2be9c8c6064a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b14595-a6e7-4e95-95ed-76d2639ff9d7", "sighting_of_ref": "indicator--3f134cd6-04b1-4a11-ab3b-001468a0deed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8645eb-5429-4b3a-9942-b3b999616790", "sighting_of_ref": "indicator--3f134cd6-04b1-4a11-ab3b-001468a0deed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a07a0a-d39a-4f1d-b459-d33cd4ea09cb", "sighting_of_ref": "indicator--3f134cd6-04b1-4a11-ab3b-001468a0deed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a6a4ad-03f4-419b-9760-0b0f7e095184", "sighting_of_ref": "indicator--972e7f00-7b01-4e01-a6f7-6fdca04c799e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2acc0a5-683f-4196-8435-0d94acc026ef", "sighting_of_ref": "indicator--972e7f00-7b01-4e01-a6f7-6fdca04c799e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7e3117-767a-448f-ad96-d760400154e1", "sighting_of_ref": "indicator--bab3da0c-85c4-4fe2-afee-644596de0f9f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90df25fa-df9e-44ca-bb19-77ebc5e54dff", "sighting_of_ref": "indicator--bab3da0c-85c4-4fe2-afee-644596de0f9f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d3f7d0-3a2e-4682-bb53-14670d21f31f", "sighting_of_ref": "indicator--bab3da0c-85c4-4fe2-afee-644596de0f9f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf2af1d-7f7a-4071-abf9-c616a4793153", "sighting_of_ref": "indicator--5bd9f609-b115-4b82-9e44-5682af590c34", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4c869f-db8c-466c-9595-c3e5d53c0eff", "sighting_of_ref": "indicator--5bd9f609-b115-4b82-9e44-5682af590c34", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31aa63fc-a534-402f-a30c-8cfe0d18eed4", "sighting_of_ref": "indicator--26e59624-1dab-4a0b-9644-236fccd2ebfb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247b24ee-0506-4436-ab52-58f7822b3fe5", "sighting_of_ref": "indicator--26e59624-1dab-4a0b-9644-236fccd2ebfb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7acefff-e90a-43b5-b2b5-2e23544e8dcb", "sighting_of_ref": "indicator--3dcb7d71-7342-448e-a1bb-9adc36ed9672", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67767eec-0caf-40a1-ab59-59cd938b5ca1", "sighting_of_ref": "indicator--3dcb7d71-7342-448e-a1bb-9adc36ed9672", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e828842-b899-40da-851b-1d4115b8c1ee", "sighting_of_ref": "indicator--64553c99-7330-418e-ac24-e261c2b77ffb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77255b95-8d83-430b-b2dd-821658031566", "sighting_of_ref": "indicator--dc0393d1-f3a8-4911-9898-434ab1639992", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c2176c-958a-4842-a242-11cb443a71e8", "sighting_of_ref": "indicator--dc0393d1-f3a8-4911-9898-434ab1639992", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06352e81-22a8-4d1a-b2df-bd45bbb600a8", "sighting_of_ref": "indicator--2fc7bd91-83de-427d-8ee6-8411bd7f77f9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54f4be7-93fa-43a8-b0a1-12cc96abdf91", "sighting_of_ref": "indicator--2fc7bd91-83de-427d-8ee6-8411bd7f77f9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857b3919-9449-4590-b110-54cd15272e61", "sighting_of_ref": "indicator--c793a1fb-d7e2-43b9-a321-e392d26e3eeb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b284146-43db-476d-9e3f-462d5801778e", "sighting_of_ref": "indicator--c793a1fb-d7e2-43b9-a321-e392d26e3eeb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb688496-562e-4c0d-b851-329cff2ce3e9", "sighting_of_ref": "indicator--c793a1fb-d7e2-43b9-a321-e392d26e3eeb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e292765e-2226-45e9-97b9-81ba2dfa8f3a", "sighting_of_ref": "indicator--9a710724-0569-400e-9b26-f7275203554d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f36cd13-9172-4e85-bc74-0070d7a9b3dc", "sighting_of_ref": "indicator--9a710724-0569-400e-9b26-f7275203554d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94556b4-a4fe-408a-9c4d-fa37444abbcf", "sighting_of_ref": "indicator--5ac7cda2-7bd6-43fa-99a6-bc689bce0625", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739399eb-534a-4f68-902d-de8b6f5575fa", "sighting_of_ref": "indicator--917c5fef-adcb-434f-bcac-db5cb8fcd65d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ca2a1c-7655-4445-a629-bcab507b2d28", "sighting_of_ref": "indicator--917c5fef-adcb-434f-bcac-db5cb8fcd65d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2183f28-26c5-448c-aeea-d3c1b7cfbdab", "sighting_of_ref": "indicator--917c5fef-adcb-434f-bcac-db5cb8fcd65d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6300fce2-9b48-4e61-9048-bb2523c121c3", "sighting_of_ref": "indicator--84d97706-6f8d-456f-b7b2-21a41361bcbd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c369ac-38ee-4e1e-b1f9-354fe09bc433", "sighting_of_ref": "indicator--84d97706-6f8d-456f-b7b2-21a41361bcbd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11353952-2841-4ccc-a97c-bbff952968bb", "sighting_of_ref": "indicator--84d97706-6f8d-456f-b7b2-21a41361bcbd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe33070-ee35-48bf-bdec-c43699f44f27", "sighting_of_ref": "indicator--5de4d416-f4f1-4622-8c6a-d7bdda17d391", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aecc982-2802-41c5-b44d-d35cdc3364ff", "sighting_of_ref": "indicator--5de4d416-f4f1-4622-8c6a-d7bdda17d391", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38238c3-e628-442c-8815-0fc345cdd3db", "sighting_of_ref": "indicator--f1d5641a-f58c-439f-9b86-a00d26da39c9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fec2ec5-b1bf-4892-b68e-0e7b9e385154", "sighting_of_ref": "indicator--68e2fcc5-71e4-4787-88fb-54208987cd52", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ca198f-fe82-4ac5-b807-e658997630b5", "sighting_of_ref": "indicator--03f27891-7e5f-4adb-a8bb-25dde36721cb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b235810-0343-42cd-b278-c184ad458b95", "sighting_of_ref": "indicator--2eac4dc7-4aae-4e25-a3ae-40fa40680ca2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c153ee3-f038-430a-ac50-f542a4a76411", "sighting_of_ref": "indicator--a81e3caa-cdb5-455e-8b3f-399e050c926a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0f45be-3122-45c6-b3cd-e28598090d64", "sighting_of_ref": "indicator--e1246c45-0db4-48f3-a5a0-e680e83278e7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae6bb83-c2c3-4782-bac7-c38dc1a52cdb", "sighting_of_ref": "indicator--e1246c45-0db4-48f3-a5a0-e680e83278e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435517a5-8a42-436d-a5c4-9db17d4dbaad", "sighting_of_ref": "indicator--68f55035-e521-4fbf-ba45-ac2400832872", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0deb4085-bddc-40b6-b47a-5408dcfd4259", "sighting_of_ref": "indicator--6122d52f-6a87-412f-8e6a-296910ae36e7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c82d88-d3c8-4724-b6a3-ba866a36b83a", "sighting_of_ref": "indicator--68b892b1-d6d9-4032-a747-aa88e96d30c9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97c4397-12c9-46a7-b5be-b751460743e2", "sighting_of_ref": "indicator--185e13e9-f3d4-45b8-91b0-1770a4fda96b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd43de3f-3829-4ce0-a67e-487f1d58e696", "sighting_of_ref": "indicator--b78893c8-83a0-48d6-be03-f56c3eb68739", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332949ad-af1a-45d5-a972-cf11c70834f8", "sighting_of_ref": "indicator--b78893c8-83a0-48d6-be03-f56c3eb68739", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30bce16-19f4-428c-88c9-d75ec293c210", "sighting_of_ref": "indicator--72981e8f-482a-4a1d-b18f-a761806495dd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7ca7b3-e912-4785-bcbe-a3d89f747281", "sighting_of_ref": "indicator--536c5fe3-2e9b-4117-9b28-8f5e02a4df95", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdccfa6-3901-4c2c-a40e-221c2e71b8fa", "sighting_of_ref": "indicator--8c84b2ee-c3a5-4a3e-aff2-4f203cb8a004", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1879786-530e-45f7-8539-2be2bcc5ae07", "sighting_of_ref": "indicator--76b3d87f-47cd-4a2f-aab9-8d1d2cea6de7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9421cc4-ef24-45a0-ac38-d0a4fde43569", "sighting_of_ref": "indicator--5312bad4-23b6-48ce-b90f-5f5761a02339", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44b2d23-4c3c-4274-8752-2821d9ba338a", "sighting_of_ref": "indicator--611c8fe6-15f9-40aa-bc72-1aa299e4b552", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa48c1b-12db-4cd0-8bc1-92604c8aca19", "sighting_of_ref": "indicator--df3dd1b1-c640-4ef1-9d32-49cfee7eafd5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb16554-fc4d-4039-8c1a-25e6118dce70", "sighting_of_ref": "indicator--21fba818-f258-409a-a619-430f500cbc77", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac55603c-a6ed-4aba-adec-0986ab29b54e", "sighting_of_ref": "indicator--076dda53-74ba-41b7-adf6-d074e8adb781", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbf40ef-1882-460a-bdfb-f042355fe3ea", "sighting_of_ref": "indicator--113c1bba-547c-4bee-adeb-511a0e1986b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de7d01f-69fe-409a-b118-714f019760b0", "sighting_of_ref": "indicator--113c1bba-547c-4bee-adeb-511a0e1986b7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03814e4-fdcf-48db-a320-14b10a1c1eaa", "sighting_of_ref": "indicator--4b1b27d1-6902-4356-bdf5-1df13f426ba3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08c4b68-5972-470e-9fe7-f9e5945b2b7c", "sighting_of_ref": "indicator--da6c83f0-99b5-4316-bf53-203cb00971c1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962961ac-fa96-432f-b269-5b0db7626c75", "sighting_of_ref": "indicator--4664afb6-defa-40cd-a44c-4f811f51dc52", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7192d68-4aa8-44c9-9142-bd64945859b6", "sighting_of_ref": "indicator--c0d05070-9d12-428e-9ac3-bdd705d2c5b7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdefa414-7879-4174-9297-9377b353014b", "sighting_of_ref": "indicator--c0d05070-9d12-428e-9ac3-bdd705d2c5b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9013093b-6f92-4024-9c47-718af3907f09", "sighting_of_ref": "indicator--c0d05070-9d12-428e-9ac3-bdd705d2c5b7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1cfb829-04be-4028-b2c0-f93e0a55b434", "sighting_of_ref": "indicator--c0343ce0-f948-4b6f-96c3-a84426d390fc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e51fd0-8a66-469d-8ec0-b9af3eef52db", "sighting_of_ref": "indicator--c0343ce0-f948-4b6f-96c3-a84426d390fc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedda94c-d166-42c7-ada5-3834e024d773", "sighting_of_ref": "indicator--c0343ce0-f948-4b6f-96c3-a84426d390fc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65a329f-7f8b-451f-845c-bcb2de7505d0", "sighting_of_ref": "indicator--65c15c13-d43e-4e20-ace6-fc0c4385b814", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b1ddc9-c214-4eec-8b56-2d3c24a72d49", "sighting_of_ref": "indicator--65c15c13-d43e-4e20-ace6-fc0c4385b814", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c72eb0-0952-474f-87b6-9b6c48f82451", "sighting_of_ref": "indicator--65c15c13-d43e-4e20-ace6-fc0c4385b814", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006b2da4-5eba-4816-99ea-e36611cf24f4", "sighting_of_ref": "indicator--f3f95946-09fb-41fb-b31c-571da8b58563", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526bbeff-9d11-4945-b101-24b74af9b0d7", "sighting_of_ref": "indicator--f3f95946-09fb-41fb-b31c-571da8b58563", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48bd351-26c1-49dc-b515-7414f5981706", "sighting_of_ref": "indicator--826dcde4-6aed-4c9f-aee0-2ca005cc3485", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2706c6-9944-4e19-93b8-853dcafaab5e", "sighting_of_ref": "indicator--826dcde4-6aed-4c9f-aee0-2ca005cc3485", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828ddfda-2fa9-4202-83dc-5e9bae53d7d2", "sighting_of_ref": "indicator--826dcde4-6aed-4c9f-aee0-2ca005cc3485", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406f3f11-61f1-49bb-9bb2-702e1311940b", "sighting_of_ref": "indicator--b6aa6313-e842-45fe-825d-f0d2b645f8de", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f691d69-fd12-455f-abc8-c186ff9a1388", "sighting_of_ref": "indicator--b6aa6313-e842-45fe-825d-f0d2b645f8de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3a7668-574e-4add-95c1-8657e3d0610c", "sighting_of_ref": "indicator--b6aa6313-e842-45fe-825d-f0d2b645f8de", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b600cc-e53b-4947-b2d8-61099f2f3cd5", "sighting_of_ref": "indicator--5f7de98f-c0d1-4dc8-9992-cc4ecf74f76a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693ce0f6-ba0a-4eb2-987b-16759483c33a", "sighting_of_ref": "indicator--5f7de98f-c0d1-4dc8-9992-cc4ecf74f76a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718007a9-5a4c-4756-923d-26b489324415", "sighting_of_ref": "indicator--5f7de98f-c0d1-4dc8-9992-cc4ecf74f76a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda5727c-44a7-41b7-9a11-27b27ff81231", "sighting_of_ref": "indicator--76a27852-e221-4e73-a638-234d51b98ddd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b44523-3049-44e1-b8b0-fc16af07b6f7", "sighting_of_ref": "indicator--76a27852-e221-4e73-a638-234d51b98ddd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab87de6f-b9b1-4c84-90eb-73f3d694a4d8", "sighting_of_ref": "indicator--c24bea93-17cb-488b-b06c-d5389f4ceb15", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a87371d-b23c-436f-b82e-e0fa65ccbf61", "sighting_of_ref": "indicator--c24bea93-17cb-488b-b06c-d5389f4ceb15", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5573d2-f9b2-42da-9443-c1d383402f89", "sighting_of_ref": "indicator--3338511f-b869-4aee-9cb5-da30247bc7f2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743db8e3-cf42-44b9-ad7b-df8de61593cc", "sighting_of_ref": "indicator--b564de15-b805-4df4-8773-13ff07ef6d15", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a33c5d-ac55-4f1d-b42d-d22914631681", "sighting_of_ref": "indicator--b564de15-b805-4df4-8773-13ff07ef6d15", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37aa8830-f029-4e19-874b-88e71dcc7c1b", "sighting_of_ref": "indicator--cabf4545-7315-4a9f-ae81-8216b96a7d37", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22ba68c-a83f-43c6-a204-6a5e4801e1cc", "sighting_of_ref": "indicator--9d58b803-ab0e-48b0-8379-9071f6b8ff1a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4368f2be-1885-4f33-8b39-33d7d08b8b62", "sighting_of_ref": "indicator--9d58b803-ab0e-48b0-8379-9071f6b8ff1a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872919ec-f1c0-47f7-82b9-06f056ffecdc", "sighting_of_ref": "indicator--0a67baa5-a3da-4630-8e2a-8ac95a373755", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756e89cc-f408-40f6-90c5-060fa88057e2", "sighting_of_ref": "indicator--0a67baa5-a3da-4630-8e2a-8ac95a373755", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f289dae5-3c25-4826-8837-a5d38606d8b3", "sighting_of_ref": "indicator--0a67baa5-a3da-4630-8e2a-8ac95a373755", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bdd05e8-01b2-4cad-ae99-41cf6d047285", "sighting_of_ref": "indicator--13ca2ed0-cd81-4104-8d4c-f9e9833a4fe1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4deaa107-ae0d-41a9-9f80-08f7203292d0", "sighting_of_ref": "indicator--13ca2ed0-cd81-4104-8d4c-f9e9833a4fe1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f854899b-9f3c-4caf-807e-748d909cbbee", "sighting_of_ref": "indicator--92aabb91-93aa-473b-ad24-08c62e13e690", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac99341-7590-43c5-a12a-ca0bf06a3796", "sighting_of_ref": "indicator--92aabb91-93aa-473b-ad24-08c62e13e690", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815c7cf5-63bf-4d96-b340-1e55af0d51ff", "sighting_of_ref": "indicator--25b35b64-b243-445b-a235-04f22b3682ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f223427-7cc5-45d6-bbf3-d7c0f1a20cb6", "sighting_of_ref": "indicator--62e1c48f-a01f-4cd1-bbbc-f58fcce9145b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95811fff-074d-411d-b64d-fafdc82da085", "sighting_of_ref": "indicator--62e1c48f-a01f-4cd1-bbbc-f58fcce9145b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311d274c-a852-42c7-8979-50d42cbb032b", "sighting_of_ref": "indicator--1913341a-1bb2-4fdc-be38-24b3c2ce6f6c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8748929b-a56c-4d32-8222-72778298f3a4", "sighting_of_ref": "indicator--0aa8a97e-4ae7-4a79-aaa9-e3724f40ee86", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349b6120-d140-4889-87b1-de03421eb6cd", "sighting_of_ref": "indicator--7b080901-bbd2-490c-99c1-3419186d04ec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2ce4a0-d5b4-4854-8e70-bde856f5956e", "sighting_of_ref": "indicator--ecd8292f-8388-492e-bcb2-bbd6f256c66f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c04020-e955-4648-b873-50433d0bff36", "sighting_of_ref": "indicator--ecd8292f-8388-492e-bcb2-bbd6f256c66f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc8ea6a-7512-47cf-adaa-8c4875cd56ab", "sighting_of_ref": "indicator--ecd8292f-8388-492e-bcb2-bbd6f256c66f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71023cc7-0c54-4c04-b101-6aea549f1ad8", "sighting_of_ref": "indicator--9a435826-58da-4e7b-bfe5-ccf3e4f568b2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f924e3d-0e45-4387-b9ee-6d8fb79a8945", "sighting_of_ref": "indicator--9a435826-58da-4e7b-bfe5-ccf3e4f568b2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb22370-059e-4b12-99b7-8115957cda2d", "sighting_of_ref": "indicator--9a435826-58da-4e7b-bfe5-ccf3e4f568b2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78f3724-f521-408a-be9d-1d7caf3e3820", "sighting_of_ref": "indicator--b843e087-6c4c-45d9-97d6-3307e5bcb60d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e35919-740d-4459-bdc4-39f79c0cdd64", "sighting_of_ref": "indicator--b843e087-6c4c-45d9-97d6-3307e5bcb60d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591431da-caff-4272-b74f-90d83a58b0ce", "sighting_of_ref": "indicator--b843e087-6c4c-45d9-97d6-3307e5bcb60d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60276a25-8e61-4629-988a-5de35c87170f", "sighting_of_ref": "indicator--f29d56a9-56c1-4003-aed7-ed92d0a1590c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f5913e-6faf-4ec7-b960-4a01c94b11c0", "sighting_of_ref": "indicator--f29d56a9-56c1-4003-aed7-ed92d0a1590c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c67424-12c1-426b-b51f-1eb32b94751c", "sighting_of_ref": "indicator--f29d56a9-56c1-4003-aed7-ed92d0a1590c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b88552a-1fd3-4d97-a848-7edbbbd1a876", "sighting_of_ref": "indicator--24de467a-16c4-4bb1-b41c-34e7f78bb2a8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43b6278-c1b3-4aba-9ed0-54fdac4e4804", "sighting_of_ref": "indicator--24de467a-16c4-4bb1-b41c-34e7f78bb2a8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2682387b-0d6a-4aab-8568-2c6d31688c02", "sighting_of_ref": "indicator--4ee3148e-25d9-40f7-8b8f-b39509ac96a9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6513521c-c80f-433a-92ec-3c3fc5694a87", "sighting_of_ref": "indicator--4ee3148e-25d9-40f7-8b8f-b39509ac96a9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b879adb0-f4dc-4d85-a2ef-584af89189cb", "sighting_of_ref": "indicator--fc0dad3b-44ad-4834-875b-eb1a3ec60eec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4450dca6-0759-401d-bac8-632d62300ce1", "sighting_of_ref": "indicator--fc0dad3b-44ad-4834-875b-eb1a3ec60eec", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de41073e-7a67-459b-8e24-50bf0ee4b0ea", "sighting_of_ref": "indicator--fc0dad3b-44ad-4834-875b-eb1a3ec60eec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05af423-75f3-4500-82e5-52bdf7d81073", "sighting_of_ref": "indicator--86e377fa-8c77-4b82-97b9-11845c3cc581", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268717d5-b542-4d90-92c7-700f1984f199", "sighting_of_ref": "indicator--86e377fa-8c77-4b82-97b9-11845c3cc581", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b244da3-256e-42ab-8102-672e7d120cb6", "sighting_of_ref": "indicator--430bd99f-19dd-4e16-b374-1f26279c0494", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d619ebc-7099-481a-ba6b-1358141e02a1", "sighting_of_ref": "indicator--430bd99f-19dd-4e16-b374-1f26279c0494", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b84da4-b322-4aca-9e68-f2cd05a3c088", "sighting_of_ref": "indicator--430bd99f-19dd-4e16-b374-1f26279c0494", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dcd6460-f3d9-43e6-a34a-817bfdd96af0", "sighting_of_ref": "indicator--b7bc45e4-fa29-4787-b408-7f6a271145b5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cfaff5-3014-4504-81a4-8e559675f645", "sighting_of_ref": "indicator--b7bc45e4-fa29-4787-b408-7f6a271145b5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383b7161-d226-4f99-8b5c-c9b5670f64a7", "sighting_of_ref": "indicator--b7bc45e4-fa29-4787-b408-7f6a271145b5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924496b6-aab4-4100-83f9-b441314a7a8e", "sighting_of_ref": "indicator--b9eafab0-aaaf-4383-ad35-6c9a36f90e74", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44183c56-5b58-4499-a7b6-34b2e9b60cd4", "sighting_of_ref": "indicator--b9eafab0-aaaf-4383-ad35-6c9a36f90e74", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397213c0-6087-43e5-b51c-ab410f1f1a86", "sighting_of_ref": "indicator--b9eafab0-aaaf-4383-ad35-6c9a36f90e74", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6121e57c-83e1-45e2-8015-6d594108e921", "sighting_of_ref": "indicator--c8baf84a-591f-4e7e-a583-0762e0d07106", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac401a97-85c0-440b-8a06-c82d10e8b354", "sighting_of_ref": "indicator--c8baf84a-591f-4e7e-a583-0762e0d07106", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c921616-8488-4d4e-9737-faa78152759b", "sighting_of_ref": "indicator--c8baf84a-591f-4e7e-a583-0762e0d07106", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ef3578-e287-4243-b255-e329615c78bb", "sighting_of_ref": "indicator--48fe4e00-304c-4f9e-a9fa-9a6734430e74", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a6e6fe-9bcc-4084-8644-803e6757d3a6", "sighting_of_ref": "indicator--48fe4e00-304c-4f9e-a9fa-9a6734430e74", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5caddd92-5ff0-4c3a-8c82-7c57d95c4a8d", "sighting_of_ref": "indicator--bb3fd52a-54a9-4065-8114-e2f02ce5a63e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30b7e01-d465-49a0-bb72-ce72ac1b9a75", "sighting_of_ref": "indicator--bb3fd52a-54a9-4065-8114-e2f02ce5a63e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cd8ec9-d8e3-46ae-af40-299a92afa900", "sighting_of_ref": "indicator--bb3fd52a-54a9-4065-8114-e2f02ce5a63e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6342cfd9-2b1b-459b-b572-12676ac1fd69", "sighting_of_ref": "indicator--b590e948-5587-4254-8e4b-1311fc29d15a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75569d86-95c6-47cd-bc88-6bc4234f0f1b", "sighting_of_ref": "indicator--b590e948-5587-4254-8e4b-1311fc29d15a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ffcc840-b365-4b8b-98d0-8b9617e7235b", "sighting_of_ref": "indicator--f04ed3f0-1196-47f1-88ff-2bf894eeaceb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8541b54f-0dd6-448b-bbbf-ce3610c5b1b1", "sighting_of_ref": "indicator--f04ed3f0-1196-47f1-88ff-2bf894eeaceb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfdf20c-809f-4a0f-8042-dbc912071b2b", "sighting_of_ref": "indicator--f04ed3f0-1196-47f1-88ff-2bf894eeaceb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5783e6de-8adf-4d74-a459-34c0d1d0a0f4", "sighting_of_ref": "indicator--209d9207-af8c-40b6-95d8-361b94f185cc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bbc5679-4eba-4e62-ae11-e86bdfdd5eb2", "sighting_of_ref": "indicator--cb086330-44dc-49ef-8f87-1a761a8f5da0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d189f2f-d73e-4e93-aee8-c776fca627d7", "sighting_of_ref": "indicator--48c1e1b2-5029-473d-814d-936bcd8e5042", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea2e531-200f-4762-ac0a-157186c57e3a", "sighting_of_ref": "indicator--48c1e1b2-5029-473d-814d-936bcd8e5042", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05a618c-2166-4b13-86b5-9f49464e1972", "sighting_of_ref": "indicator--5fafc93e-a880-4898-8df3-4779f207ff29", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51f4433-6412-4ef5-a6fb-4bd9bbbddc65", "sighting_of_ref": "indicator--5fafc93e-a880-4898-8df3-4779f207ff29", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31aca1eb-ae8f-44e5-8f8a-fdfc810acb5f", "sighting_of_ref": "indicator--5fafc93e-a880-4898-8df3-4779f207ff29", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795088f3-742c-46bd-b0b0-b0cf2bc36cdb", "sighting_of_ref": "indicator--a0c44164-3683-47d5-9569-1d6f86d4ed9f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2db5fcb-391d-4935-87f7-8b920e604d39", "sighting_of_ref": "indicator--a0c44164-3683-47d5-9569-1d6f86d4ed9f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a700cce5-2905-49e1-93e8-cdbfe95d945c", "sighting_of_ref": "indicator--fcd22552-026b-4488-88a2-abe57f928038", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d543a23-f80a-414a-bd46-6a9a94b21438", "sighting_of_ref": "indicator--fcd22552-026b-4488-88a2-abe57f928038", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ba205e-675d-4ff3-9afe-365b7fbc1641", "sighting_of_ref": "indicator--fcd22552-026b-4488-88a2-abe57f928038", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0615af-a43f-452f-b97b-f6c9d2c86081", "sighting_of_ref": "indicator--b006f19c-ebd5-4aa8-94d3-ee64d9f14b90", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce5d8f3-7ea7-406c-9139-323087ee57d9", "sighting_of_ref": "indicator--b006f19c-ebd5-4aa8-94d3-ee64d9f14b90", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2caa5e81-ded1-4bf0-9aff-2e51adab23ce", "sighting_of_ref": "indicator--8be15f4b-f267-4b69-a823-a4db803e8578", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06cfd21-f2cb-4311-9d37-689672a4c05f", "sighting_of_ref": "indicator--8be15f4b-f267-4b69-a823-a4db803e8578", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2af461a-d081-42b8-8099-2f611ee31e77", "sighting_of_ref": "indicator--8be15f4b-f267-4b69-a823-a4db803e8578", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ec4ce4-19c4-4341-99aa-b63f5a0876b8", "sighting_of_ref": "indicator--614b0312-f2f1-4c08-a728-f330ebc2fb81", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a88a97-1054-44bc-8139-9f6381e353dd", "sighting_of_ref": "indicator--614b0312-f2f1-4c08-a728-f330ebc2fb81", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7b0a4a-9278-4838-9559-42c5c1a04099", "sighting_of_ref": "indicator--614b0312-f2f1-4c08-a728-f330ebc2fb81", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b88489a-ad44-4961-85af-edd7aa9410c5", "sighting_of_ref": "indicator--4c125fe4-3472-428d-80f8-4e17a2808fb7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfa26cc-a193-4e27-b4b8-d6e949e173f5", "sighting_of_ref": "indicator--4c125fe4-3472-428d-80f8-4e17a2808fb7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de01886-ccad-407a-b07f-7502acf828fe", "sighting_of_ref": "indicator--4c125fe4-3472-428d-80f8-4e17a2808fb7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b6d123-a456-414d-ac73-86a7f103cb4b", "sighting_of_ref": "indicator--645d9d5a-98b4-4706-8f2c-2aecf3629aff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4023e536-d76f-4de6-9333-22165c43ed9e", "sighting_of_ref": "indicator--645d9d5a-98b4-4706-8f2c-2aecf3629aff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20609b20-ec19-4901-aca4-2ac26a5b78ba", "sighting_of_ref": "indicator--d7367f80-c44b-465d-86a2-e28b016590dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af37c91-07b3-4996-888c-a9f89aa42766", "sighting_of_ref": "indicator--d7367f80-c44b-465d-86a2-e28b016590dc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb93f45-6346-48dc-8912-278db54aa7b5", "sighting_of_ref": "indicator--19179ae5-db00-4227-92b8-4027ace97552", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d0566e-0143-4900-a06d-c46bcd1d4cf9", "sighting_of_ref": "indicator--19179ae5-db00-4227-92b8-4027ace97552", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6339c84-2571-4387-93bd-d9766dbd6e6e", "sighting_of_ref": "indicator--15296c06-5790-453e-81b7-616a864b6456", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280d4cbf-8a1b-4d08-99d0-635a883c5233", "sighting_of_ref": "indicator--15296c06-5790-453e-81b7-616a864b6456", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4373922-b867-4600-9afe-853422bd223d", "sighting_of_ref": "indicator--64707bcc-dfb9-4433-a207-fddf4993a753", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a54f54f-83b0-4292-8dce-f4f79582d281", "sighting_of_ref": "indicator--725b7a0f-0360-4ebb-b489-cddadb30ba2b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10aa2b64-7e31-45fe-b266-2b034420be90", "sighting_of_ref": "indicator--725b7a0f-0360-4ebb-b489-cddadb30ba2b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4e8b91-e003-4927-8fb6-20e80525a79c", "sighting_of_ref": "indicator--725b7a0f-0360-4ebb-b489-cddadb30ba2b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca946e18-8c29-4ad9-87a6-2967da17344e", "sighting_of_ref": "indicator--fcdd0616-bcad-4b39-bd6b-cb6cc51290e4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8df5fec-b305-4882-b54b-3cca817ec796", "sighting_of_ref": "indicator--fcdd0616-bcad-4b39-bd6b-cb6cc51290e4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9b03f0-0615-473b-bf72-6771f6f07fc3", "sighting_of_ref": "indicator--4e4f20d0-fe6f-4a28-9a29-eb1dac42f4f7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febe290c-8d18-4dda-93a0-4ae476a3bc15", "sighting_of_ref": "indicator--4e4f20d0-fe6f-4a28-9a29-eb1dac42f4f7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1ed08d-27a5-4d1f-a9c3-7532d6de1abc", "sighting_of_ref": "indicator--4e4f20d0-fe6f-4a28-9a29-eb1dac42f4f7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37615610-19cb-49f7-8239-5abb035112f4", "sighting_of_ref": "indicator--e26af066-425e-4be7-815e-399ab6db6bcd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa407d2-d3cf-4306-9be2-8bcf57d89d51", "sighting_of_ref": "indicator--294f21fa-16f1-45e8-bfa8-37de8bdee51d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860ec6b0-72f6-41e1-9456-03621357f7db", "sighting_of_ref": "indicator--301a4166-46db-40e7-8829-d7a88ae68262", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0696ee-ca40-465c-a011-8ce1556cd9ff", "sighting_of_ref": "indicator--7e62bb4d-06ce-4fb4-b305-96db7e68a2b4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441d65d3-b0a5-4abd-bc29-00037ea1bfae", "sighting_of_ref": "indicator--a40a4d24-d5f6-4cef-b8b6-7e0938422094", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1bc10a-6a01-4938-92e4-9ada899ba6f4", "sighting_of_ref": "indicator--ae4cfd5a-f9a8-4e08-929a-85f6a8121ab5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36cbbda-908e-48e4-998b-ab0e62432dd2", "sighting_of_ref": "indicator--f0eebcab-0d56-4620-a201-e655da8ef8f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9113cf-cef0-4288-b1e0-89b045830ee1", "sighting_of_ref": "indicator--bfa7676d-e93a-4d27-88fc-f1773b88004c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b122645f-edc9-408a-a47c-f4a93c7fdfd6", "sighting_of_ref": "indicator--6bbfda7e-4c6e-47e7-8d20-0c9fc1e242c0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74803303-645a-4d0d-9796-3118d7fbc437", "sighting_of_ref": "indicator--60172db6-1df5-4ac8-b410-9de343980266", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390be8ee-8f81-4795-9c2d-5674fe1ebb86", "sighting_of_ref": "indicator--d3d2cfee-0ce4-489d-9024-9036aebbbdb9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008bd9b0-e6c1-42e5-8b9c-f08ae7e66927", "sighting_of_ref": "indicator--1a808b89-0d8e-4fd2-9315-1adc073403ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ec96b4-fc2a-4acd-9f28-d2fea6056f6f", "sighting_of_ref": "indicator--e39fe129-9cc6-4917-9686-cbd9407f6c80", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7542b315-dc8f-42ed-8298-78136543d1d7", "sighting_of_ref": "indicator--ffe7a383-156a-40b9-bd7a-ec017f00d145", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3dfe05-e61b-44aa-b1b7-b0c06b7ce461", "sighting_of_ref": "indicator--4215ff20-bc37-4d95-b3dc-aa86d54b0e04", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ea3204-14fd-4894-9ee0-17321643957e", "sighting_of_ref": "indicator--4215ff20-bc37-4d95-b3dc-aa86d54b0e04", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c7bfd6-a39c-446e-a6be-5a33552d9dcf", "sighting_of_ref": "indicator--d4d62489-52de-4d8b-b516-f167eb1dec48", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe07c12-64f7-41c8-8f6a-bc0a2ca71746", "sighting_of_ref": "indicator--d4d62489-52de-4d8b-b516-f167eb1dec48", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c10c32-c4e4-49db-a03b-cceac97371f5", "sighting_of_ref": "indicator--d22dd938-e5d6-48ff-90a9-2c6f76084544", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2b798a-54ee-409b-8685-02616d16fae2", "sighting_of_ref": "indicator--d22dd938-e5d6-48ff-90a9-2c6f76084544", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00bf041-53a6-4e6c-a451-21812ebdfdb3", "sighting_of_ref": "indicator--508a7e1a-210f-4b2f-8515-2ada58f47ce3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c4969d-61ba-4008-839c-a35524a4180f", "sighting_of_ref": "indicator--508a7e1a-210f-4b2f-8515-2ada58f47ce3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4992b1f9-bae8-4d99-a67f-5fc2e1030af6", "sighting_of_ref": "indicator--508a7e1a-210f-4b2f-8515-2ada58f47ce3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54073081-88cb-47e3-8a1f-a79ae6601767", "sighting_of_ref": "indicator--a5d4b6d9-f0f0-4646-8927-6abc200aa094", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5656bca-f716-40d3-862f-454c1d24759b", "sighting_of_ref": "indicator--a5d4b6d9-f0f0-4646-8927-6abc200aa094", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec32baf7-da7d-404c-ad51-27affe376c0b", "sighting_of_ref": "indicator--a5d4b6d9-f0f0-4646-8927-6abc200aa094", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d20a3f5-056e-4591-a703-d9984d6c653f", "sighting_of_ref": "indicator--57d1253f-e8e2-49e9-ab16-98a7ed7ba458", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfeee463-e1c3-46dc-a9b6-f4456cab4540", "sighting_of_ref": "indicator--57d1253f-e8e2-49e9-ab16-98a7ed7ba458", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b927dde0-94f3-469d-99a9-a108639d4388", "sighting_of_ref": "indicator--57d1253f-e8e2-49e9-ab16-98a7ed7ba458", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9d11f4-1120-415a-9231-c7b3551ba6a2", "sighting_of_ref": "indicator--5266730d-d624-4a14-8411-a2863c9b6249", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f285cfa3-fa74-4c6e-827a-044f6489eece", "sighting_of_ref": "indicator--5266730d-d624-4a14-8411-a2863c9b6249", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ea7e42-1cc6-4cdb-b8bb-40743bf9d080", "sighting_of_ref": "indicator--c30245f7-2568-409f-90c2-d035d586c9a3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15905dd7-4b27-44c0-9006-ee25c5ed1112", "sighting_of_ref": "indicator--c30245f7-2568-409f-90c2-d035d586c9a3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a61829-d095-4937-aae0-f1f0e8eda735", "sighting_of_ref": "indicator--c30245f7-2568-409f-90c2-d035d586c9a3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7566ce-7c97-4484-8f95-8173b183891b", "sighting_of_ref": "indicator--a69c5761-9314-40b2-92ae-ad9a467d2cfc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175b8955-ef86-4577-a9ce-238cfcbda826", "sighting_of_ref": "indicator--a69c5761-9314-40b2-92ae-ad9a467d2cfc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c8c7ab-9adb-4ce0-86da-7e8c229d510c", "sighting_of_ref": "indicator--a69c5761-9314-40b2-92ae-ad9a467d2cfc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48584e2-3d05-455b-9164-cb4c38599af7", "sighting_of_ref": "indicator--606b5c2f-577e-4d13-a601-a6961c294d03", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bf727e-cc69-4de9-b184-3de2d4c66453", "sighting_of_ref": "indicator--606b5c2f-577e-4d13-a601-a6961c294d03", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9d169a-8636-4352-a8cd-011816f03fdf", "sighting_of_ref": "indicator--606b5c2f-577e-4d13-a601-a6961c294d03", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a6f0fb-dd2b-4e5c-a445-83cd555c2fb3", "sighting_of_ref": "indicator--1081dd43-a79f-4b48-90dd-45cdbd70cd83", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f2c0e9-1bc6-48b7-9cfd-af70bababc83", "sighting_of_ref": "indicator--1081dd43-a79f-4b48-90dd-45cdbd70cd83", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfba5b28-17ab-46db-92fe-5b0f58a40c35", "sighting_of_ref": "indicator--1081dd43-a79f-4b48-90dd-45cdbd70cd83", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1674c03b-5b61-4791-9224-f4a56b37cb56", "sighting_of_ref": "indicator--7aaf782f-436d-4eee-8cc9-fad2cc056e91", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ba5052-353c-4536-8ecf-ed59ca3d4358", "sighting_of_ref": "indicator--7aaf782f-436d-4eee-8cc9-fad2cc056e91", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7dc31b0-4408-4d08-9884-bca2a90cb096", "sighting_of_ref": "indicator--7aaf782f-436d-4eee-8cc9-fad2cc056e91", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6785b772-5211-410c-8aca-c53bb74730f7", "sighting_of_ref": "indicator--ea419f63-ebac-4388-9fd4-c734665022a5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f84a61-86bf-4730-9e3b-3b295938dd80", "sighting_of_ref": "indicator--ea419f63-ebac-4388-9fd4-c734665022a5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4690b8-1f9b-4439-abb6-173686db177a", "sighting_of_ref": "indicator--ea419f63-ebac-4388-9fd4-c734665022a5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395b2c30-f6c3-4658-8781-5125ed476ead", "sighting_of_ref": "indicator--96cbfa62-749c-4c05-8b73-b5d870ab2bce", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c42f9d-f8bf-440e-bc81-3c7c865e9f96", "sighting_of_ref": "indicator--96cbfa62-749c-4c05-8b73-b5d870ab2bce", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc93ff9b-d9f7-4071-aa46-dc38010c7a32", "sighting_of_ref": "indicator--36a87599-6f76-4d5c-9398-83691ca7f841", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14c267c-f138-4434-9b76-4efb80f5fb41", "sighting_of_ref": "indicator--36a87599-6f76-4d5c-9398-83691ca7f841", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbb4a9d-60d6-4ef8-9f95-e0db6aa9acd1", "sighting_of_ref": "indicator--36a87599-6f76-4d5c-9398-83691ca7f841", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96af8eda-3b4c-4f40-ba15-4f1fde5fe0ab", "sighting_of_ref": "indicator--96bb005f-12f2-4bde-9a26-fcdf1f213dee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec950307-42bf-4371-82a4-3ca022e9711c", "sighting_of_ref": "indicator--94d1cb90-a077-4774-905a-21727e1ca2f0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f1249e-c515-48c7-8cba-b67f5a1c745e", "sighting_of_ref": "indicator--996eac2c-3894-4362-98e3-38ee5089e2b9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5d9ed2-b5cb-4be1-9db7-0e9b7afa8e4d", "sighting_of_ref": "indicator--996eac2c-3894-4362-98e3-38ee5089e2b9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737382f5-ea0e-481a-b6f9-aed5b5e33777", "sighting_of_ref": "indicator--996eac2c-3894-4362-98e3-38ee5089e2b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d168191b-8e43-44a0-9660-3ea38c53e95d", "sighting_of_ref": "indicator--362abb95-fda3-47ac-9b68-9deebd6465d5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3399f25a-1dfe-4d60-a8d4-5999f411bebe", "sighting_of_ref": "indicator--362abb95-fda3-47ac-9b68-9deebd6465d5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be685a23-3840-493a-b083-60874d3dc167", "sighting_of_ref": "indicator--362abb95-fda3-47ac-9b68-9deebd6465d5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332b84a2-046a-4861-828b-de2c77ed1010", "sighting_of_ref": "indicator--2f0ad06b-97fb-49a9-b7db-9091a8a3f7d2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd284139-0aa2-4de5-947d-f28d98c69604", "sighting_of_ref": "indicator--2f0ad06b-97fb-49a9-b7db-9091a8a3f7d2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff46d08-1d16-42e2-9a23-886b4bb931db", "sighting_of_ref": "indicator--f9d538f1-7fc0-4082-bade-6bd9d88d7c45", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc15b81-040b-44d5-baeb-18ad8b1bb141", "sighting_of_ref": "indicator--f9d538f1-7fc0-4082-bade-6bd9d88d7c45", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d55044-f4b0-4c9f-b150-780ee585f903", "sighting_of_ref": "indicator--f9d538f1-7fc0-4082-bade-6bd9d88d7c45", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b446de13-f7c0-4156-b68c-f59ec484acd4", "sighting_of_ref": "indicator--4eac56ca-5c27-4894-901f-88af0d446288", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c1b713-c81a-47f5-882c-7409736831b7", "sighting_of_ref": "indicator--4eac56ca-5c27-4894-901f-88af0d446288", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814f7188-71da-4d3b-b93d-efc2bb3f15a6", "sighting_of_ref": "indicator--b549a408-c471-49c9-ac85-b22c2fb7a687", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0c5062-4e61-45af-83d7-c6806ff64c8c", "sighting_of_ref": "indicator--b549a408-c471-49c9-ac85-b22c2fb7a687", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375248f6-2692-4875-9f71-5a4e5709a954", "sighting_of_ref": "indicator--b549a408-c471-49c9-ac85-b22c2fb7a687", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ed7d7d-15ad-4130-be24-bf7a3831104a", "sighting_of_ref": "indicator--6a7f139b-cb75-4c53-95f2-e17c7cc2d3bd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eee8200-cdde-49a1-85c2-1051bbbd3b1f", "sighting_of_ref": "indicator--6a7f139b-cb75-4c53-95f2-e17c7cc2d3bd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a22072d-202c-41e2-8661-b4cf5e64bb81", "sighting_of_ref": "indicator--6a7f139b-cb75-4c53-95f2-e17c7cc2d3bd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0eed50a-7eb8-4755-9d12-460e886bea0d", "sighting_of_ref": "indicator--c04ce0b1-3c39-453e-b308-a696a029bac0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c7dfd5-3731-41df-92f7-b3179c0528dd", "sighting_of_ref": "indicator--c04ce0b1-3c39-453e-b308-a696a029bac0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd2dea8-310d-42be-a609-817f892c4462", "sighting_of_ref": "indicator--c04ce0b1-3c39-453e-b308-a696a029bac0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af13cdee-02b7-49cf-8c49-204ce8936df6", "sighting_of_ref": "indicator--3585c247-d0c6-4a1e-ac9d-484b2007edaa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0de778e-e9f4-4ece-a357-65bfbb954671", "sighting_of_ref": "indicator--3585c247-d0c6-4a1e-ac9d-484b2007edaa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa4f926-6980-4150-96d5-5e48f9004df0", "sighting_of_ref": "indicator--d761a6e7-4491-4330-8f7d-dec8df5d8fcb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944086fd-4257-4f6f-8234-8202570f9550", "sighting_of_ref": "indicator--d761a6e7-4491-4330-8f7d-dec8df5d8fcb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96aa59b3-1143-4c5a-85c4-293eb19ca887", "sighting_of_ref": "indicator--a2c6a967-8c15-417b-b850-c1408f9594d6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c4c69c-b107-4618-8b2c-07b7111f1404", "sighting_of_ref": "indicator--a2c6a967-8c15-417b-b850-c1408f9594d6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b339ba-a796-4382-bb22-0bcce63c791d", "sighting_of_ref": "indicator--a2c6a967-8c15-417b-b850-c1408f9594d6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fc9fe2-7b9a-4cd2-949f-cec990a9b804", "sighting_of_ref": "indicator--be833497-116d-456c-b1c9-5f1c0b5b0603", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2834f950-713e-42af-97ce-77d8fce58537", "sighting_of_ref": "indicator--be833497-116d-456c-b1c9-5f1c0b5b0603", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f213e3-ce7d-4e2e-8a5c-f0376d2e14d0", "sighting_of_ref": "indicator--c2509097-cb54-4114-89d4-6828e0140275", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e387eccb-ea00-4731-86ca-5bf51d12d6ea", "sighting_of_ref": "indicator--c2509097-cb54-4114-89d4-6828e0140275", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d656308-e353-42dd-8f5a-74ec9b669ae3", "sighting_of_ref": "indicator--c2509097-cb54-4114-89d4-6828e0140275", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e52294-9d6a-4b10-90ce-ecb3ae97ba09", "sighting_of_ref": "indicator--33f4da94-35a3-4683-a2c3-b93744c06dd0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762eb7e9-f372-414f-9f31-886e6c850de3", "sighting_of_ref": "indicator--33f4da94-35a3-4683-a2c3-b93744c06dd0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c905a096-bea3-4cc0-b4cc-751e8698609c", "sighting_of_ref": "indicator--33f4da94-35a3-4683-a2c3-b93744c06dd0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f990d46f-c6b7-4b9c-a954-194e3eb12729", "sighting_of_ref": "indicator--f02f0cb0-456f-454e-af98-be7e85c611ed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07acf0e-751a-4d5b-ad43-19e2cc7f849c", "sighting_of_ref": "indicator--f02f0cb0-456f-454e-af98-be7e85c611ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb43b000-10a7-46d9-876f-6e7c4824b039", "sighting_of_ref": "indicator--384767da-aaac-4df0-9f5f-7167cc97cd2a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b788dce5-f6d9-4ff3-a290-ff1371058e37", "sighting_of_ref": "indicator--a78b2538-39ab-4dbb-8452-e582bcd14d5a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22f6245-1e66-4527-9d98-163798e236fb", "sighting_of_ref": "indicator--a78b2538-39ab-4dbb-8452-e582bcd14d5a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e05252-1182-43cd-97c6-57bc5c4a1aa9", "sighting_of_ref": "indicator--a8b742ff-22d1-40a7-9850-fac3286df010", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f50ad1-6aa7-42fa-9a49-c41bd6194d03", "sighting_of_ref": "indicator--a8b742ff-22d1-40a7-9850-fac3286df010", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7a10c3-e32f-46a0-ba6a-24067b78c098", "sighting_of_ref": "indicator--a8b742ff-22d1-40a7-9850-fac3286df010", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce105119-ebd1-4ebd-a479-631200f01149", "sighting_of_ref": "indicator--a93769f8-5f36-4923-bed3-44b3d1d5b6cf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca160f5-ddf4-4590-81d6-77d3486e3019", "sighting_of_ref": "indicator--a93769f8-5f36-4923-bed3-44b3d1d5b6cf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd73591e-2cfc-4e05-983b-998690fb8384", "sighting_of_ref": "indicator--a93769f8-5f36-4923-bed3-44b3d1d5b6cf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8dbe28e-72da-4451-ad4f-41ffe8c54887", "sighting_of_ref": "indicator--a39c5608-96be-4938-b21e-a11e54ec034f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ed0551-ab2e-4966-ae90-91dae52154de", "sighting_of_ref": "indicator--a39c5608-96be-4938-b21e-a11e54ec034f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7659ddd7-b0a2-4e45-9f6b-88442a3374f1", "sighting_of_ref": "indicator--a39c5608-96be-4938-b21e-a11e54ec034f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71af2816-633b-4183-8c8b-1a5a169cb53f", "sighting_of_ref": "indicator--c46d7e9b-6b1d-40ea-b0ef-a7b6a885053a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205e5f31-7cdd-4102-8d21-94a3ff6b52fb", "sighting_of_ref": "indicator--c46d7e9b-6b1d-40ea-b0ef-a7b6a885053a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7685d5-abb3-4790-a594-2d0a3c94293e", "sighting_of_ref": "indicator--c46d7e9b-6b1d-40ea-b0ef-a7b6a885053a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58fd233-5390-43d2-8711-36f9db585253", "sighting_of_ref": "indicator--862ca2d7-1cb1-442f-808b-8cfeba958edb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0540885-622c-465f-88a0-b3a5bc28f230", "sighting_of_ref": "indicator--862ca2d7-1cb1-442f-808b-8cfeba958edb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af97bcf-b0ab-475e-89c0-6d1164514107", "sighting_of_ref": "indicator--d0436ffe-a375-4a43-aaea-e748d254dfd1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aad3d2d-495f-4866-8a77-5adbbc57b074", "sighting_of_ref": "indicator--d0436ffe-a375-4a43-aaea-e748d254dfd1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385a9759-b626-4586-bbf8-b16d00f86c10", "sighting_of_ref": "indicator--f360f0d8-347e-43a4-9a83-d67e8d32eb93", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4666a0b-c76a-4c92-8a08-38ea9ee7e875", "sighting_of_ref": "indicator--f360f0d8-347e-43a4-9a83-d67e8d32eb93", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa342e32-7db6-4740-9b70-41b55e1b106f", "sighting_of_ref": "indicator--6977cd18-64ae-4e5e-a0b8-9b5fe3e7a5ce", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6240450e-aff0-4da0-9589-93e713cc24f6", "sighting_of_ref": "indicator--6977cd18-64ae-4e5e-a0b8-9b5fe3e7a5ce", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefc5334-f2a7-47dd-8882-fe2e543389d4", "sighting_of_ref": "indicator--6977cd18-64ae-4e5e-a0b8-9b5fe3e7a5ce", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a89b42-8096-4d69-a303-3d307bb0a19d", "sighting_of_ref": "indicator--5ceb4e07-cfca-48d3-b3f0-98bfd4fec459", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6684b28f-5a6e-4f1a-9ebf-3beba71bfd9d", "sighting_of_ref": "indicator--5ceb4e07-cfca-48d3-b3f0-98bfd4fec459", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09961235-35eb-4622-97d0-ac23bbdb33f3", "sighting_of_ref": "indicator--5ceb4e07-cfca-48d3-b3f0-98bfd4fec459", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6a672b-cee8-4c4f-94f5-58df5c05aa59", "sighting_of_ref": "indicator--41fa94a8-6d96-441c-b410-cb70eb36d9b9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bd18ad-faee-452f-b4a0-82704bb3a070", "sighting_of_ref": "indicator--41fa94a8-6d96-441c-b410-cb70eb36d9b9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416c3892-e3d7-4588-8327-a0b489e88247", "sighting_of_ref": "indicator--41fa94a8-6d96-441c-b410-cb70eb36d9b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79072055-826d-47a8-a1de-9a2b67c156cc", "sighting_of_ref": "indicator--62cfa4b4-b226-4617-90d8-5ace3e6acfa6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2a87a1-1753-4a8f-8f38-6e3a871d10c9", "sighting_of_ref": "indicator--62cfa4b4-b226-4617-90d8-5ace3e6acfa6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bc57da-8909-40ab-bb1b-824ab4cebdce", "sighting_of_ref": "indicator--62cfa4b4-b226-4617-90d8-5ace3e6acfa6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079b6e8e-3b2b-4618-b51e-8f0c91ca7b4d", "sighting_of_ref": "indicator--39e3a43f-ffee-4a64-ba15-2782fed2e3b1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb389b3e-a51d-4c49-a8e2-98164d0ed08b", "sighting_of_ref": "indicator--39e3a43f-ffee-4a64-ba15-2782fed2e3b1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef822029-e365-4ea8-b1c6-1cee6739e8bc", "sighting_of_ref": "indicator--39e3a43f-ffee-4a64-ba15-2782fed2e3b1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053c5806-f2dd-4187-a11c-22023c769243", "sighting_of_ref": "indicator--b8f1c466-20a0-42e2-96cd-b4399d619cb7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411cf010-c6bb-4e48-a48e-77ca995a09cd", "sighting_of_ref": "indicator--b8f1c466-20a0-42e2-96cd-b4399d619cb7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5744fb2a-8a34-4fd7-81e4-7a1a354d2f7b", "sighting_of_ref": "indicator--b8f1c466-20a0-42e2-96cd-b4399d619cb7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23369fe9-3bc6-497b-b697-3582b78ce743", "sighting_of_ref": "indicator--d73bdf6e-28cc-4cd4-9c0b-e83aa39d7825", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839a56e1-314e-4504-a7fd-db28281ce532", "sighting_of_ref": "indicator--d73bdf6e-28cc-4cd4-9c0b-e83aa39d7825", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca395ce-79dd-4fb6-a989-684ad660fd77", "sighting_of_ref": "indicator--368fa137-010d-4a76-9366-02c14d29f28f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5465d6a-2113-478d-a2eb-35f5b6e44b6e", "sighting_of_ref": "indicator--368fa137-010d-4a76-9366-02c14d29f28f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38579305-e577-442c-99f9-eb6a10288f7e", "sighting_of_ref": "indicator--250bb53c-2ba2-4ac0-82d2-6bfcd71f7618", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57669fd1-230a-4f60-9fa2-861e055c60d4", "sighting_of_ref": "indicator--250bb53c-2ba2-4ac0-82d2-6bfcd71f7618", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a912bda6-02cb-4eda-9252-fe15f36028ee", "sighting_of_ref": "indicator--e683d65e-c6ad-474f-98f9-1c77b7acb677", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b363c3-7601-4313-a69c-4015a6073ed2", "sighting_of_ref": "indicator--38b2e10e-1b6b-4159-8c65-5c2d9af23201", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0c869b-b0c0-4716-b72c-fb0d077821e2", "sighting_of_ref": "indicator--2164a3b3-0ae0-4d7e-b896-296f2f7020c0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6355d7a4-6c3d-4fb9-92fa-5dbef96c6960", "sighting_of_ref": "indicator--2f5bdc00-0674-41e9-8b1c-181f9676047e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e91adb-2f90-423b-ad50-beb8a7cf837c", "sighting_of_ref": "indicator--6e2f2a27-566c-4b2e-9002-f9a1501fa260", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f030786f-0a3a-45a3-8e70-93522d9aa698", "sighting_of_ref": "indicator--821f4c8d-31e7-446e-81a2-d132145055b4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8422b4cb-6c2d-4c6b-94f6-a80378411def", "sighting_of_ref": "indicator--fbefe03f-ef10-4106-8510-4a0b60e222cd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60465754-6717-4587-b9cf-7eb2d7cac60f", "sighting_of_ref": "indicator--fc4129b0-477f-4b56-9d15-01bdaff0479a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31df3789-5347-4afd-b14a-d8431f2b23ef", "sighting_of_ref": "indicator--93aedd0a-539c-4c31-acea-03ee3d7aded0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2680de5-b831-4d01-95ec-017cea4b04e4", "sighting_of_ref": "indicator--f34dc087-f303-4e99-9a97-1e7da85583c7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3233bce7-c705-4434-998a-6bcf39cd8487", "sighting_of_ref": "indicator--776fd232-5715-4abe-84b2-c614f4e62891", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9362a6f-55a7-43e8-b38e-23b3a1e8a0d7", "sighting_of_ref": "indicator--26f6749b-2df7-440f-946f-ed9387da77aa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08fcd5c-eab4-45c4-8619-a13a0e0d9f2b", "sighting_of_ref": "indicator--9ab88c14-31ca-490f-b8b4-bd77a4b668fb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3ac828-bfa9-4901-bd87-f0a5a39f2360", "sighting_of_ref": "indicator--9ab88c14-31ca-490f-b8b4-bd77a4b668fb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a6ed12-6d4c-45d8-a7a5-bfa462f92c87", "sighting_of_ref": "indicator--01873184-6c7a-410e-b03c-a8ac74a8e627", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce46885-7f3e-452a-8526-89131380347e", "sighting_of_ref": "indicator--8a7e22d4-3618-4de1-83d6-46aef3f0aa89", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a62422-507b-401a-a30c-76ea73d845ee", "sighting_of_ref": "indicator--3e4e356c-d4ec-4d99-9066-09a52fbf9164", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc3196a-1a5d-4283-9d5a-97e0d8a8c7d7", "sighting_of_ref": "indicator--956a82c7-a047-43d6-9cda-2025a05152bb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95afd95e-5b37-4209-84bd-bd953c9cc239", "sighting_of_ref": "indicator--e7cc0fd4-5fe1-4eac-a459-74fb8e34fb44", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db4861a-d79e-4a2e-9573-67de6362f89e", "sighting_of_ref": "indicator--27a28a6f-b4f7-47be-92f8-d1d3421b30dd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174bf37b-98e5-4eb1-b1b3-da91615d75a1", "sighting_of_ref": "indicator--1927f64e-9006-47dc-ae18-fb1a5d070376", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b593d972-0f72-4f57-84c8-107973e5aeeb", "sighting_of_ref": "indicator--1927f64e-9006-47dc-ae18-fb1a5d070376", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59b3983-87e2-4264-a894-ff63b7970476", "sighting_of_ref": "indicator--1927f64e-9006-47dc-ae18-fb1a5d070376", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61abbe8-e6e3-4d2c-8877-130feb67e32b", "sighting_of_ref": "indicator--55163347-54a5-42db-9083-92d66dd3dc37", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53309255-942c-4daf-94a2-e42930a4c6f4", "sighting_of_ref": "indicator--55163347-54a5-42db-9083-92d66dd3dc37", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3bc922-0e5b-4721-9065-a0392d7e8198", "sighting_of_ref": "indicator--f3147d28-bae3-4439-b5fb-a3e0ba8906cf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4092e00-8cf7-4fa7-b0a7-495174b6fad7", "sighting_of_ref": "indicator--f3147d28-bae3-4439-b5fb-a3e0ba8906cf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45ba483-75c6-4240-8a0b-4191546ef901", "sighting_of_ref": "indicator--f3147d28-bae3-4439-b5fb-a3e0ba8906cf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3013bd0a-3615-482e-b313-25e27a3a37a2", "sighting_of_ref": "indicator--273282bc-17af-47a2-a0a8-2514a9cb1d22", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542b5433-2d45-4af0-b4e5-a60a83113900", "sighting_of_ref": "indicator--273282bc-17af-47a2-a0a8-2514a9cb1d22", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c902ec8a-0502-40ea-a911-051bae28a873", "sighting_of_ref": "indicator--815f4e4a-f188-47b2-9e15-97308ed17077", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be60be8-6139-4d25-a78a-79d3dbfade0c", "sighting_of_ref": "indicator--815f4e4a-f188-47b2-9e15-97308ed17077", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd96c325-0d92-4438-8eb7-e00160de753d", "sighting_of_ref": "indicator--815f4e4a-f188-47b2-9e15-97308ed17077", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef0591c-84e8-4aed-8622-97ec9d56294d", "sighting_of_ref": "indicator--8b5a2165-2ef1-4183-a464-4f276ad658b0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7045d457-1cc1-47d8-87d3-36ce85ad780a", "sighting_of_ref": "indicator--8b5a2165-2ef1-4183-a464-4f276ad658b0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ea43e6-dc44-4009-a895-4060e24ce329", "sighting_of_ref": "indicator--8b5a2165-2ef1-4183-a464-4f276ad658b0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c9d4ea-1c9d-4472-beb8-8b5256ca9c02", "sighting_of_ref": "indicator--0a8e7294-d00f-41b5-9874-9c2184df1935", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf09b57-99ae-4f4c-9110-773b8e303f7a", "sighting_of_ref": "indicator--0a8e7294-d00f-41b5-9874-9c2184df1935", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b224c08-d0c9-4236-a17b-1d05ee4f080e", "sighting_of_ref": "indicator--0a8e7294-d00f-41b5-9874-9c2184df1935", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2950479-4653-44aa-bed1-3e0a20dcc9ad", "sighting_of_ref": "indicator--65969de6-13cb-4971-8cb1-c75685f4df7c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd4a5c9-be84-4324-b696-32cc518cce9f", "sighting_of_ref": "indicator--65969de6-13cb-4971-8cb1-c75685f4df7c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70e3c5a-09a9-46f2-abb6-d4ab1e35c3a1", "sighting_of_ref": "indicator--65969de6-13cb-4971-8cb1-c75685f4df7c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dffecafa-4816-464d-94ff-901507c18172", "sighting_of_ref": "indicator--7ec11a58-c615-4a45-b7a1-81b2dabafefc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c8ca94-3292-4d40-964b-29ec7a2327f0", "sighting_of_ref": "indicator--7ec11a58-c615-4a45-b7a1-81b2dabafefc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c868b2c-4029-4046-bc42-86593da3cef5", "sighting_of_ref": "indicator--7ec11a58-c615-4a45-b7a1-81b2dabafefc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147ad8d6-a251-486e-8a90-efa910eea17e", "sighting_of_ref": "indicator--130dca98-c55e-4f09-83a4-97f4a9ae22da", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6827cc-0296-4d15-a9ff-1e936a0c13f6", "sighting_of_ref": "indicator--130dca98-c55e-4f09-83a4-97f4a9ae22da", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f45679-36dc-4473-a5bb-c491a8cabcf5", "sighting_of_ref": "indicator--130dca98-c55e-4f09-83a4-97f4a9ae22da", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c009c615-5236-4e0f-ba83-76ed45d3d622", "sighting_of_ref": "indicator--c96eb0e7-7d0c-457c-b633-e4a0cc1600d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91233f2a-276a-4267-bad0-f2c7bd73fd06", "sighting_of_ref": "indicator--c96eb0e7-7d0c-457c-b633-e4a0cc1600d0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa4fe8b-22dc-4209-8992-6db7825a18ca", "sighting_of_ref": "indicator--c96eb0e7-7d0c-457c-b633-e4a0cc1600d0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2558d443-8dd1-4028-a344-c44ab4d7d9cd", "sighting_of_ref": "indicator--c0f7c18e-d66a-4f4f-9bc3-5b3589c81d77", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a02752-64a6-4f17-8244-c9a2d72863c7", "sighting_of_ref": "indicator--c0f7c18e-d66a-4f4f-9bc3-5b3589c81d77", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8dde2d-489e-43d5-86af-929e03de3d0c", "sighting_of_ref": "indicator--c0f7c18e-d66a-4f4f-9bc3-5b3589c81d77", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f456151-df83-4913-9632-bbdeef36268b", "sighting_of_ref": "indicator--01b0a3a1-0ccb-42d3-9ac6-080173f54129", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389ebcd2-9aaa-4888-9e49-4cde2544d6d6", "sighting_of_ref": "indicator--01b0a3a1-0ccb-42d3-9ac6-080173f54129", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb20d51a-c0ab-4360-bd1c-46d0cac7c2ab", "sighting_of_ref": "indicator--01b0a3a1-0ccb-42d3-9ac6-080173f54129", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c7a241-0e8c-4dcf-8519-c84773993158", "sighting_of_ref": "indicator--85ac77b1-277c-4f1d-899d-18efcb3c475a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e79eb99-7403-4d32-aa24-4fdec25d3749", "sighting_of_ref": "indicator--85ac77b1-277c-4f1d-899d-18efcb3c475a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d52bc1-ca78-42ad-9aff-1a373b4c1763", "sighting_of_ref": "indicator--85ac77b1-277c-4f1d-899d-18efcb3c475a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405c9a3d-ef3c-4b71-9746-835c458051ce", "sighting_of_ref": "indicator--e18947d6-b16b-4145-b35e-7d29b87c3940", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9553b655-68b3-432a-9edf-458f5c0aaf2a", "sighting_of_ref": "indicator--e18947d6-b16b-4145-b35e-7d29b87c3940", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ddbe8b-a3fc-4b8e-a5c1-eb9ea574e0ce", "sighting_of_ref": "indicator--e18947d6-b16b-4145-b35e-7d29b87c3940", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcb3f87-5ee1-4a9b-b876-7f5c85268393", "sighting_of_ref": "indicator--1a9c3488-3b39-4556-9641-12d2f8556aeb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cd89e9-8476-4cbf-9303-a89c3d04b53d", "sighting_of_ref": "indicator--29d9c845-9f09-428e-9619-acc850fbb656", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ecd850-a582-4c48-839a-dcd9a9c036ee", "sighting_of_ref": "indicator--6acf6b15-d3fa-4ae9-811c-225ac5c4aa24", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eaea212-a074-4bb8-9825-acfbcf7065aa", "sighting_of_ref": "indicator--3514103e-6501-4f41-aa8e-f3d3fc16d578", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7fffaa-48c3-4994-a83a-412158198842", "sighting_of_ref": "indicator--3514103e-6501-4f41-aa8e-f3d3fc16d578", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3af8f27-b5bb-4263-b96a-63dc7b786120", "sighting_of_ref": "indicator--23e29bf3-9ec8-4d8a-8cf7-1b80d6f69d6c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a451be-9917-4e25-b803-71321efbbad7", "sighting_of_ref": "indicator--0c9e23af-4175-498a-9d5f-ad5309e041e2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0f3ae3-6184-4703-8256-a0bcbd3b73a1", "sighting_of_ref": "indicator--d5985082-59ff-4bde-a3ba-2cd6b830be08", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63212792-b6e9-4efd-a4ae-8ff863bba16c", "sighting_of_ref": "indicator--c3c0b3c5-4762-4038-af8a-6b882060b590", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf87063-d4fd-4ec8-99ec-14cdca04a1c8", "sighting_of_ref": "indicator--9d10d41c-7859-4bfa-a38c-18e8345438ab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17feab6d-51c9-4b32-832e-3b0c8f0b90b3", "sighting_of_ref": "indicator--af777798-ba9f-4d12-a0ff-a261ba1a848d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab293d46-486d-48e7-b230-b74609b208ec", "sighting_of_ref": "indicator--65c79345-27a9-4baa-a51b-020029107e2d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353bb390-eb2c-499b-ab88-b0100c3f29e9", "sighting_of_ref": "indicator--65c79345-27a9-4baa-a51b-020029107e2d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140241e7-93cf-4f09-b0ef-4a76d3863697", "sighting_of_ref": "indicator--2bb7fa1c-901d-4c0c-af1a-a7f93c352bcc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632d09a5-03f5-48e1-a471-bd114716b483", "sighting_of_ref": "indicator--311d879e-8786-4fb1-acde-fa66395bf540", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a49673-3be5-4b87-a58e-f90fea5dd8a8", "sighting_of_ref": "indicator--dc615321-01d4-4494-aba0-0a937f7c8fb2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3a2290-84e4-4ebb-b78c-5542ccdf46b3", "sighting_of_ref": "indicator--ddc104b7-957f-46df-9afd-56bf767b2b70", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874492fd-48aa-408f-aa0f-7c54b28d4d3c", "sighting_of_ref": "indicator--7c1a6903-901d-4422-adae-f7c6cac107d6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cfce25-8bbb-448d-be04-fa4ff6d97ee0", "sighting_of_ref": "indicator--38d15c10-262b-4bf5-bb9a-fc55e06c6267", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978e2427-ffa3-4efd-ac83-a578df987a77", "sighting_of_ref": "indicator--6d7ad19b-fac9-4365-8739-4b03006641be", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52d50f3-1755-422a-9cd7-728cb7c0fba6", "sighting_of_ref": "indicator--0a74ab3b-55bb-4797-bcad-0548bbf1e4c6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e1791e-08b2-492b-a5fb-b3f3f7b34348", "sighting_of_ref": "indicator--e5db9386-cd72-43bc-a947-5c1b3740b1ab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2235f0-8dd7-4796-8ea2-67a5099a0824", "sighting_of_ref": "indicator--e5db9386-cd72-43bc-a947-5c1b3740b1ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6dc2166-6cac-4cc1-88c5-ba742efe9eb4", "sighting_of_ref": "indicator--ca99717a-d486-4181-8b6f-d81cbe63e5ac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032015e8-9e3f-46a9-83b8-2f9b389b9d54", "sighting_of_ref": "indicator--60ad97b4-15f5-4ae8-89d4-e377d5445583", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ec7fc1-3cdc-4bed-9a2f-9a2a5ea62197", "sighting_of_ref": "indicator--b9498aa0-1239-4199-8d2f-45d5a1bf2be5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c78f762-a010-4ec9-a91f-5a44242eb072", "sighting_of_ref": "indicator--8e1b3ab3-4d99-4f56-a322-359130fa2bdb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0844a787-e42f-42f8-b162-606011e89af7", "sighting_of_ref": "indicator--ba9b5ec9-ea5a-4f84-b427-18a254b50af3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5114870f-42af-4371-889b-a51ec19db6eb", "sighting_of_ref": "indicator--ba9b5ec9-ea5a-4f84-b427-18a254b50af3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defa7b49-7c04-42aa-a7aa-ff553d9e98af", "sighting_of_ref": "indicator--59c28f58-f7e0-44c5-a39c-9e4cc8af3549", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d011f22-20c7-45d8-ab8c-7a2d56ae81af", "sighting_of_ref": "indicator--d242d8d1-4783-4cc2-a0dc-70f3eeb27e1a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f95eab8-7931-41a3-bb4a-26cc35530770", "sighting_of_ref": "indicator--cb2416de-b857-4a4c-a331-50f7a269f1c4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690ee076-a60a-4aa3-9e9a-e99c17352ee3", "sighting_of_ref": "indicator--f637c44e-71f0-4eb9-b9b7-916f414ef0af", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5b7073-93fc-47db-91f1-5aedf0e938d9", "sighting_of_ref": "indicator--f637c44e-71f0-4eb9-b9b7-916f414ef0af", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6f15a7-54c7-46fd-a9d0-270eb4deacaf", "sighting_of_ref": "indicator--f637c44e-71f0-4eb9-b9b7-916f414ef0af", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16338d6-ca74-4e2c-93a9-1ca17243c92a", "sighting_of_ref": "indicator--22cdc259-1a77-45b4-a172-1b99a91dafbd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a3eb7f-51d4-4ea3-a583-8b41034e1112", "sighting_of_ref": "indicator--22cdc259-1a77-45b4-a172-1b99a91dafbd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e51d65-e19f-48f2-b275-8c2f9012a11c", "sighting_of_ref": "indicator--82674425-d63b-46f0-9296-03833004af03", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10e4a7c-4cd2-445a-b417-b8b975b9b4a5", "sighting_of_ref": "indicator--8f669e3a-0c92-4175-a624-34509e8dcf49", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cce0c5-6feb-49b4-a917-58805c0f065c", "sighting_of_ref": "indicator--8f669e3a-0c92-4175-a624-34509e8dcf49", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5513097-8df5-47e2-a648-e932ab8c64ab", "sighting_of_ref": "indicator--8f669e3a-0c92-4175-a624-34509e8dcf49", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d79edb2-8fb0-4dfa-ae70-18d461fbf54d", "sighting_of_ref": "indicator--9e2ba9de-e1f4-4a8f-be4d-499be2a169bb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ac54e0-e03e-4bfb-8faf-0958af4ec3ed", "sighting_of_ref": "indicator--9e2ba9de-e1f4-4a8f-be4d-499be2a169bb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acac2f5e-5aa1-461c-b031-72e3a7f8447a", "sighting_of_ref": "indicator--9e2ba9de-e1f4-4a8f-be4d-499be2a169bb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7a72d2-e9c0-42e7-889a-cb7ba004b772", "sighting_of_ref": "indicator--1728e166-b954-4b11-b878-a1f42e0fd966", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d735660-dd83-4854-a92f-cbbd56561687", "sighting_of_ref": "indicator--1728e166-b954-4b11-b878-a1f42e0fd966", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723c72d1-fa82-42c3-a89d-a2938e319294", "sighting_of_ref": "indicator--1728e166-b954-4b11-b878-a1f42e0fd966", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c605f4-8527-4f13-86fb-5b9d8aa63ab1", "sighting_of_ref": "indicator--2b82abf0-13ee-4e8f-a85c-a3884851ef3a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9995e5d-25cf-499e-a8d3-21a656cf1510", "sighting_of_ref": "indicator--2b82abf0-13ee-4e8f-a85c-a3884851ef3a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a62c8f3-3aca-4da5-b862-3ee7d398fe87", "sighting_of_ref": "indicator--9a4b91f6-562f-4519-bffb-44831e98aa85", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5975ae6a-ca42-42b1-9836-5c29d36793c4", "sighting_of_ref": "indicator--9a4b91f6-562f-4519-bffb-44831e98aa85", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe6f327-c489-4522-80b9-707f9ffbd137", "sighting_of_ref": "indicator--9a4b91f6-562f-4519-bffb-44831e98aa85", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e7af5f-f3ab-4862-99b9-038a473f180a", "sighting_of_ref": "indicator--7b24051c-f1ea-4b1c-ba61-e7cb40495256", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582fcddb-db1a-454b-9d8d-08d064d82b00", "sighting_of_ref": "indicator--31ebc2b9-6a0a-443e-b48e-7d32d758e390", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949437fe-7aa8-486f-8d91-e07dc9916d96", "sighting_of_ref": "indicator--31ebc2b9-6a0a-443e-b48e-7d32d758e390", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f4073e-031b-4e3a-aabe-6c2a9891b655", "sighting_of_ref": "indicator--4a6c04c3-5f03-451c-93ac-443b90dbb89f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc19011d-f8b8-494d-ace1-699e1777eef8", "sighting_of_ref": "indicator--4a6c04c3-5f03-451c-93ac-443b90dbb89f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f4028e-ea52-4d80-92ee-50aec472a847", "sighting_of_ref": "indicator--97d67f3e-1715-4e46-9006-7f383fa2684c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151b19de-7731-45be-b691-35467ae14280", "sighting_of_ref": "indicator--97d67f3e-1715-4e46-9006-7f383fa2684c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64677eb1-b151-403b-8f71-fd349459231b", "sighting_of_ref": "indicator--97d67f3e-1715-4e46-9006-7f383fa2684c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ca8e1a-eadd-4ed4-b486-afdfb64e77f1", "sighting_of_ref": "indicator--0c3a4270-e800-421f-8726-ac0cb784551f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6abdeed-1daf-4eb6-95e9-7ebdb6dfbe25", "sighting_of_ref": "indicator--ad82a246-c15c-4140-bc91-ca949e065e30", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b5b702-65af-47f0-9dac-efa4700077a5", "sighting_of_ref": "indicator--a7e06ff1-13d3-4bf0-8a78-e3a72b999219", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e71cc5-d140-46a9-b0e4-31d936627bb2", "sighting_of_ref": "indicator--8e1459f7-67b2-4c77-ac76-280f0d312f67", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1dc422a-23e9-47ae-a5ae-8b991da02665", "sighting_of_ref": "indicator--8e1459f7-67b2-4c77-ac76-280f0d312f67", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ac90e5-e0a0-4b86-b343-27f08e7ba9da", "sighting_of_ref": "indicator--b161d319-3c7a-48c3-99d8-4b09cd79fcc9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc90f1d-f254-4427-b5de-c3812d31b2c0", "sighting_of_ref": "indicator--b161d319-3c7a-48c3-99d8-4b09cd79fcc9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f66faf-1731-471c-885a-5f941b94226d", "sighting_of_ref": "indicator--9bb540c0-979f-4d32-a422-17ce649333b9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df35723-2372-4c1d-bce5-374745774ae4", "sighting_of_ref": "indicator--9bb540c0-979f-4d32-a422-17ce649333b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31db4b7f-8e1c-4fda-bb1a-0f9a184d2457", "sighting_of_ref": "indicator--81001b74-7227-4291-a574-d511ddc3202a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2794fcd-7bb8-4d52-a0d8-3b4f4aab6267", "sighting_of_ref": "indicator--81001b74-7227-4291-a574-d511ddc3202a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d112363-1ee9-4527-ae6d-bbedba499ab5", "sighting_of_ref": "indicator--b489b773-d660-4e17-a8a8-722cd6ad078e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43952a2-5f37-40c9-9c40-e8683d4b6639", "sighting_of_ref": "indicator--b489b773-d660-4e17-a8a8-722cd6ad078e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eece671-e868-4063-b2af-1cca1c18a78b", "sighting_of_ref": "indicator--5070c215-79da-4338-882e-ec652ba45df6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5590d1-35f4-42a8-ba21-ced36d3a5120", "sighting_of_ref": "indicator--5070c215-79da-4338-882e-ec652ba45df6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c41e396-38ad-4b7c-9224-f150987ecbdc", "sighting_of_ref": "indicator--c6ab3ace-8fbe-4e0d-baed-296a169493d8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0688f55-1e13-4490-bf96-165990f34304", "sighting_of_ref": "indicator--c6ab3ace-8fbe-4e0d-baed-296a169493d8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c00189-4db5-4396-818b-b2237e3495ed", "sighting_of_ref": "indicator--c6ab3ace-8fbe-4e0d-baed-296a169493d8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52f6462-24b3-4a55-853f-4948aeca7657", "sighting_of_ref": "indicator--8f2cf796-a688-43e2-b87e-94c99924248d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6197832e-0097-4879-9853-554ad8e68eb9", "sighting_of_ref": "indicator--8f2cf796-a688-43e2-b87e-94c99924248d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb69557-8bc2-459a-b212-cdfe81d42b27", "sighting_of_ref": "indicator--1b575226-0ab3-41e2-8dd3-312542e4d50a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a841ce-c3db-43ec-bb34-75a8f00dabf7", "sighting_of_ref": "indicator--1b575226-0ab3-41e2-8dd3-312542e4d50a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cf82f4-7c8f-438d-9dc4-d8987fc086fd", "sighting_of_ref": "indicator--4bdd1650-a5e6-40b2-b503-7ee1c8145525", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f0f1c8-d38a-41ac-aa13-f0b7671feba1", "sighting_of_ref": "indicator--60b43e82-19cb-48cd-8209-68d855233ba6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d1bb91-8c47-459f-91ca-5fa4a99319b2", "sighting_of_ref": "indicator--bdf4ad0a-e90d-4135-8865-193b37fb6349", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6946dab2-84e2-40be-b847-4437dc0606a1", "sighting_of_ref": "indicator--ebc9d6ec-67e6-44cf-b3c8-f771f97111e3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e9b1a7-7b5c-4161-90ce-bf7f5523d344", "sighting_of_ref": "indicator--06a08ef1-bae2-4419-82b8-d618b6677463", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e85b5b67-e59e-4a0d-8673-7e83cb7f5376", "sighting_of_ref": "indicator--91046b71-8f30-4a2f-b52d-ad582f9f9036", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22dee42-e8ed-481b-bea1-26a691d8207a", "sighting_of_ref": "indicator--2cb0a07b-b68f-4ffe-8631-4a7ff781bcdf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12555d9-3377-4ad1-b3d5-8ffe7dc3df05", "sighting_of_ref": "indicator--2cb0a07b-b68f-4ffe-8631-4a7ff781bcdf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4654f5-27d9-46ac-9896-7b0fcd7e7524", "sighting_of_ref": "indicator--5eeb95a2-80f9-4ded-97ba-91902b592724", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5e0bbd-a08e-42af-8833-7cf1595ac269", "sighting_of_ref": "indicator--02dd03d9-c2ad-46df-9e56-e304fb9a98bb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4989d1-9011-4536-8dbe-0e11eefd1149", "sighting_of_ref": "indicator--a7ef22f4-a812-4115-bcd7-f1088afa1b05", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ef986f-8cc6-4b1c-86db-3f26a210aafe", "sighting_of_ref": "indicator--a7ef22f4-a812-4115-bcd7-f1088afa1b05", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16117647-54ac-476c-9123-5195f1cadd8d", "sighting_of_ref": "indicator--2118d399-df6a-4cf0-9b4a-f1ffc2207e98", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065851a1-e8a0-4cb6-9a16-aedc2e567a5a", "sighting_of_ref": "indicator--cb16695b-9ab6-469e-a3d1-81e295bcbcd5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9150ef2f-8a7e-41cb-8710-ed450c1072f0", "sighting_of_ref": "indicator--e2686909-87e6-4901-a733-e0ee97b1d82d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d01e09-139f-45f5-93c8-9e3dc950b8cc", "sighting_of_ref": "indicator--43920156-0d02-43e2-a0ff-0543fa0595b8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8fbb44-05c4-4e1e-b67b-bf552ffcf715", "sighting_of_ref": "indicator--43920156-0d02-43e2-a0ff-0543fa0595b8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a470283b-f821-4991-83a0-eb566b5ab528", "sighting_of_ref": "indicator--43920156-0d02-43e2-a0ff-0543fa0595b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d6733a-620f-440e-9437-414e58ab2889", "sighting_of_ref": "indicator--42866a7f-1735-4919-a3ce-cfd37a6a6cdd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ec77e5-3b2f-459d-830d-6ed08fd4df17", "sighting_of_ref": "indicator--4d0f2fe5-b247-454c-b800-1c4a4a5f344c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c42f1c-4566-4633-9e3b-abe94514bac3", "sighting_of_ref": "indicator--a2911a77-d7e4-4413-90e2-d8fdc98c17f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25f3284-3242-42ef-bbd2-4f876864b71e", "sighting_of_ref": "indicator--a2911a77-d7e4-4413-90e2-d8fdc98c17f2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90214a87-8968-4938-be6d-e0bd129c0a13", "sighting_of_ref": "indicator--a2911a77-d7e4-4413-90e2-d8fdc98c17f2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f2be52-0d3f-41ab-b9bf-957ec45748f6", "sighting_of_ref": "indicator--86dbac19-b83f-42ea-b383-5a17d5224c11", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb0960a-7c21-462d-8935-d045190a092c", "sighting_of_ref": "indicator--86dbac19-b83f-42ea-b383-5a17d5224c11", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eea4a68-9059-4fff-a2a9-fa0c740a2edf", "sighting_of_ref": "indicator--c424da28-7d77-4785-a755-132acce8c92c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc746d1-5008-4b0c-9cd1-e449bd1fe21c", "sighting_of_ref": "indicator--e7cf321d-dd1d-4e8b-b0c5-c54dfee6a48e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dde8789-e73e-408b-9703-6222e276e991", "sighting_of_ref": "indicator--98c6ffbf-a754-421e-85ff-d6c5ad5885ea", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68681d5-659c-472d-97fc-4618269836a2", "sighting_of_ref": "indicator--091951c9-38d0-44b9-8fdb-9d777c58a211", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b84c1f7-2c6c-4aaa-a6d0-39700cd6a78b", "sighting_of_ref": "indicator--091951c9-38d0-44b9-8fdb-9d777c58a211", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea75d170-5179-4e24-82d0-fdda1134da25", "sighting_of_ref": "indicator--b349d0bc-4571-4d53-b69d-fcd48bb55be0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83ae175-37f8-4e15-9ec7-34667f56d98f", "sighting_of_ref": "indicator--6d01cd60-c770-4aa2-ab89-f72459679f0b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d8e352-5c05-4885-aa48-6e70efbf959b", "sighting_of_ref": "indicator--6fe3446d-981f-4a80-9d72-2ab1f8e591e3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3402b0ec-ff01-46b4-8cd1-0c35e7ca9fd0", "sighting_of_ref": "indicator--f8db0b6d-6a25-494a-9694-2c893646a319", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dad3299-3137-431d-82b5-1e2ee5c1563e", "sighting_of_ref": "indicator--7f50a049-32e9-4323-bdfb-77e27f66f08c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e3427e-a215-4bf6-ad0b-41e4186f4022", "sighting_of_ref": "indicator--d87f7aff-fd42-433c-bf37-422f9b0d25ca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51cb96d-7b47-4ee4-8717-43d825c16228", "sighting_of_ref": "indicator--d87f7aff-fd42-433c-bf37-422f9b0d25ca", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc32504-156c-43cc-b730-14a5ee280ba0", "sighting_of_ref": "indicator--dc32dbc6-8ff1-45b8-b4a9-175e62190d1d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bbed01f-ade5-429b-8fbd-091aee491520", "sighting_of_ref": "indicator--35d15836-b192-4ac9-b5d8-adfd6caf099a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3318656-a105-4f9c-ba35-d3b754a8efa9", "sighting_of_ref": "indicator--35d15836-b192-4ac9-b5d8-adfd6caf099a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff74b81-0122-4014-8bbe-2e6252ecd264", "sighting_of_ref": "indicator--a26a4df7-56d6-494c-9de1-3dd0e660beda", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d6b831-ba60-4568-bfc7-190a5c085b9f", "sighting_of_ref": "indicator--db500a9c-d9fa-415c-b2df-27061e99b1a6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8cd3ae-4e6f-4b49-a54a-01c88489500d", "sighting_of_ref": "indicator--735fd252-2f94-4308-8eff-52ddd9cb85c0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d886b73-7a4c-440d-9dce-f4d64b865cc7", "sighting_of_ref": "indicator--03a97ff7-d4ad-45fe-b58d-c09a64f7fc83", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b168a33-9821-44e0-8861-697964210d1b", "sighting_of_ref": "indicator--03a97ff7-d4ad-45fe-b58d-c09a64f7fc83", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2369fd-ca63-44ec-bc7a-8adbeb2d6d73", "sighting_of_ref": "indicator--cc7b0e72-a5c6-4eb8-a8f8-b6e45c601d5d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917ade46-818e-40a8-b76f-accc278971a3", "sighting_of_ref": "indicator--3d3cb3e5-84c2-458d-80df-7c7ddcc88afc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734eadb8-84ed-4a02-8def-09c853e9b888", "sighting_of_ref": "indicator--5026b0a6-1157-4895-b33e-0d89441ef195", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b392961c-240e-4c8e-9b01-86b8d73084d0", "sighting_of_ref": "indicator--5026b0a6-1157-4895-b33e-0d89441ef195", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d761003-4c3b-4778-b503-3a7a0ca38cb1", "sighting_of_ref": "indicator--5026b0a6-1157-4895-b33e-0d89441ef195", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf80f33-def5-4b39-baa3-8747b07cc390", "sighting_of_ref": "indicator--96bfc394-58d5-4e13-9db5-872b7f6b8234", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c0104a-e3f6-4081-9079-3611f35d7f63", "sighting_of_ref": "indicator--85426e4e-d014-4651-985e-5ba18c1a74e1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b956d97-9326-4088-ba76-6feaa5a13324", "sighting_of_ref": "indicator--85426e4e-d014-4651-985e-5ba18c1a74e1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d922a9c-6781-4ed3-800d-381e3ed04991", "sighting_of_ref": "indicator--85426e4e-d014-4651-985e-5ba18c1a74e1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2fe6d8-89c0-4641-aa01-56903ed4b362", "sighting_of_ref": "indicator--b4ee964e-7f03-4d57-b812-9084531e4625", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627a42e7-a749-4a7d-8ca8-ed25f190e3df", "sighting_of_ref": "indicator--b4ee964e-7f03-4d57-b812-9084531e4625", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e114a478-c373-4336-8dcd-a96020690bb7", "sighting_of_ref": "indicator--03c11aef-50c9-4bf6-b469-44446c2c5d12", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471593f1-8545-438f-aa22-52cf68beda79", "sighting_of_ref": "indicator--c92b90f1-8a77-41cb-9672-1982bee23d3e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cdacf8-d5f6-4766-b120-fc6506a99f15", "sighting_of_ref": "indicator--e4ce601b-bdb8-4922-91ae-d76afbc17239", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f382d3-e6d5-4f5e-9fa7-235ab0f70277", "sighting_of_ref": "indicator--2ec6124f-14d7-4abc-b9fd-1d2665e70773", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fa485a-724f-4588-ac1f-c26e23b0d236", "sighting_of_ref": "indicator--38f9d31d-0fee-461c-acbd-21035995c6f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64a94b3-3381-410b-a5a0-0bf6f1e9d174", "sighting_of_ref": "indicator--38f9d31d-0fee-461c-acbd-21035995c6f2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6f838a-fabb-4414-87b6-152c2e7c1479", "sighting_of_ref": "indicator--aec4b9bc-7031-4b7f-88f4-95e43945d061", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6f96cb-7be9-473d-921d-f856f5b22e65", "sighting_of_ref": "indicator--aec4b9bc-7031-4b7f-88f4-95e43945d061", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7310bbef-8f18-48ca-ae40-81545ef6a9f2", "sighting_of_ref": "indicator--addda44e-7c38-4aed-9cda-627402bd88a0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a46689-b0aa-40a2-87e1-c04d768f5330", "sighting_of_ref": "indicator--addda44e-7c38-4aed-9cda-627402bd88a0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8c95b2-ed1f-42d5-8ff5-bdd3765a4f3b", "sighting_of_ref": "indicator--b7fc2aac-c8dc-49f2-9ffa-5fd286b392bf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b32c0c-7863-4fd7-9059-0a1cb41e7c2f", "sighting_of_ref": "indicator--b7fc2aac-c8dc-49f2-9ffa-5fd286b392bf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40a9ea6-c315-4cc8-b587-15d8d5ace826", "sighting_of_ref": "indicator--b7fc2aac-c8dc-49f2-9ffa-5fd286b392bf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b733df33-5fe0-4928-8684-0182295b8be6", "sighting_of_ref": "indicator--b206a642-d339-4226-86eb-39759d132bc7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7b7daa-718b-4708-b86e-bcb71bb56ff7", "sighting_of_ref": "indicator--b206a642-d339-4226-86eb-39759d132bc7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df98567-aca8-4a56-a60a-f815e8a9d210", "sighting_of_ref": "indicator--81e5092b-cc7d-421c-86b8-9d388997b0fe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7530bd-7653-4d83-b8f8-7c2b65edff19", "sighting_of_ref": "indicator--5499e85b-c6c4-4dcb-87ad-07533c18343c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ed25ba-5611-44e3-9fd5-434067090b06", "sighting_of_ref": "indicator--5499e85b-c6c4-4dcb-87ad-07533c18343c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbc4e4a-b999-48e5-91bf-d326e2780bad", "sighting_of_ref": "indicator--5499e85b-c6c4-4dcb-87ad-07533c18343c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e353545-68fb-4680-b7be-902f3e714c07", "sighting_of_ref": "indicator--5d7177e8-9298-451f-accd-dc7a6b35b09a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44ca04d-0e66-4774-aa7e-2351786c1721", "sighting_of_ref": "indicator--1f8e6604-28f7-4f94-95ba-975164c83e3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0025473-abd0-42d1-afe9-87025adeae2a", "sighting_of_ref": "indicator--4c990365-d8a2-47e8-9848-339339332c8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a030aa-ffdc-4e4d-9aa2-7ce0a2076715", "sighting_of_ref": "indicator--ad0bb24f-a4db-43b5-9f05-453f33982a4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a59d36-1f6c-416c-9a61-e0f92fafb0ae", "sighting_of_ref": "indicator--56e02171-afa9-4165-b836-1bb329053cf9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c4c78a-2926-4bfa-aa6d-a943d4e8b3f0", "sighting_of_ref": "indicator--4d15b67b-df4f-468d-869f-93326ea519f9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c6fe5e-4198-4bbd-9f4e-8d64fc6a1f70", "sighting_of_ref": "indicator--29d25647-32bf-4c5d-b52e-43bf4d93c33a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1650e4-9254-411f-9f5f-20433f5cd17c", "sighting_of_ref": "indicator--29d25647-32bf-4c5d-b52e-43bf4d93c33a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0beb8f3b-c0ab-4e6e-85ac-3bbdf27e12ee", "sighting_of_ref": "indicator--c145cbfb-7d3e-40a1-b291-cbd9e2f8551b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1133b094-e1ac-4617-bda1-ddbc84fe5c92", "sighting_of_ref": "indicator--a04247f6-d806-492d-bd56-8346976a21ea", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ede77e0-42a6-4ee5-ab68-8d3800f8a194", "sighting_of_ref": "indicator--d0833415-4706-4417-bc26-bace4d69c498", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a1ea19-0af1-45f1-a309-ecdf93868c36", "sighting_of_ref": "indicator--d0833415-4706-4417-bc26-bace4d69c498", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d34204-6d2d-4db7-a281-58fb75140504", "sighting_of_ref": "indicator--d0833415-4706-4417-bc26-bace4d69c498", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b44484-a8e6-41eb-ad67-ffc6c478f3b4", "sighting_of_ref": "indicator--5f34ac52-2804-4f30-a24b-335e0f908500", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a9d9bc-1909-436e-8f11-22e0d2d387d3", "sighting_of_ref": "indicator--99bd083c-83b9-4e07-8f98-613b72deb16d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a28d81-ca13-43b8-91bf-5cc61d137a11", "sighting_of_ref": "indicator--c3ae3e0c-0e31-47a3-9bf8-a65a3cc72a54", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5072159d-058a-42fa-8167-e22a238f4cc0", "sighting_of_ref": "indicator--aa8162c4-6e07-449e-a844-4516ca703fb2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272f070b-0709-47c1-8454-c7b98d145143", "sighting_of_ref": "indicator--aa8162c4-6e07-449e-a844-4516ca703fb2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39204c0a-bae1-49d2-bb6c-e94e3c2fe7e3", "sighting_of_ref": "indicator--aa8162c4-6e07-449e-a844-4516ca703fb2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e28d6e4-4780-40a4-9c3e-a6b06bdfe5a9", "sighting_of_ref": "indicator--5f239b1f-7210-4b0e-8639-c6a8d09abf07", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e234ee-7543-4247-bdf4-56d051a8fa72", "sighting_of_ref": "indicator--5f239b1f-7210-4b0e-8639-c6a8d09abf07", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4803cb8-784f-415f-8ca9-08c0bca2c0fe", "sighting_of_ref": "indicator--4f3c1fcd-27bc-4cc5-a4e4-e49a84e48d42", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247d9bfc-8966-4740-98aa-461513cc4f24", "sighting_of_ref": "indicator--4e025407-3947-4c6b-a564-1989016a0cf7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008152b2-0c24-4010-bc0b-97a2519bc12b", "sighting_of_ref": "indicator--c3043b0d-b528-49e7-bf2b-db47ce054fed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27756eaa-dee1-44fe-a815-152b619fd9c8", "sighting_of_ref": "indicator--fa84589f-7d12-4855-a2a2-208f90be97ac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a6768e-e429-47ed-a723-f566f715d39b", "sighting_of_ref": "indicator--f0dc2db6-ad08-4968-95f3-27ba00b71334", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a748eb-8c46-44c6-aa70-77a190f56003", "sighting_of_ref": "indicator--564e0fa0-05da-46f2-b4ce-3ead42743169", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ee5d3c-8816-4e5b-8584-286a326bf352", "sighting_of_ref": "indicator--d17b503e-a3ad-4c7e-a082-06f760d3a0fb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc924adb-87c1-4cbc-8bef-505801fc325c", "sighting_of_ref": "indicator--d17b503e-a3ad-4c7e-a082-06f760d3a0fb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ad8540-bee3-4f92-a58a-1921353c1201", "sighting_of_ref": "indicator--5ac63dba-a207-4c53-9935-bd3f028d3954", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b708fb-5d6b-42fc-b9b9-88ba9b649563", "sighting_of_ref": "indicator--1870b9f1-933f-40b9-aebc-1c08fc89cd1a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efa51c5-4c58-41f9-8578-c319c3e22650", "sighting_of_ref": "indicator--f5858689-28d6-4f93-a36d-2d10bbb92ac0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c99a016-46b0-4b17-8488-d1f5ae9eb374", "sighting_of_ref": "indicator--f5858689-28d6-4f93-a36d-2d10bbb92ac0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f305a55e-564b-430a-b6b8-8f9bf8695973", "sighting_of_ref": "indicator--f5858689-28d6-4f93-a36d-2d10bbb92ac0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91c931a-553e-48be-986f-f3d52657ea1b", "sighting_of_ref": "indicator--4cb087d5-653e-4a73-a129-b01c227c6c2a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb5b948-d25b-4d5f-b3d4-9e60ab5520b7", "sighting_of_ref": "indicator--4a3940b4-ec13-477a-9b11-93ba09650a2b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e97475f-eb1b-44ce-bb70-36d352f9c8ff", "sighting_of_ref": "indicator--4a3940b4-ec13-477a-9b11-93ba09650a2b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d955c62-7c9c-4a52-82c4-796eaf134d33", "sighting_of_ref": "indicator--e5492944-0352-4929-89ef-1b8f5d2c9cc4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96627d76-9d0b-4fdc-ada0-419ab2a6c7ff", "sighting_of_ref": "indicator--a4a7fd39-3bbf-4870-869c-94a5a4c5ad30", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4e7aa4-93aa-416c-ae97-0565585f1265", "sighting_of_ref": "indicator--74b372e4-8751-4a2e-adec-02f0e95ac103", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7263875-07a0-4280-ab9d-743aab751b3a", "sighting_of_ref": "indicator--023dc1d7-e7fa-4214-8a01-6cc3fa1b54c4", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c1bbc3-2e2a-40e5-a60f-e91f4ae57390", "sighting_of_ref": "indicator--f6865431-fd28-4ced-8e90-1b4235984cb8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a56df36-ef05-405a-9dd8-e9d16adc8a49", "sighting_of_ref": "indicator--f6865431-fd28-4ced-8e90-1b4235984cb8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb4a4c5-42ee-4614-be05-fe7c6600b410", "sighting_of_ref": "indicator--f6865431-fd28-4ced-8e90-1b4235984cb8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edfadd4-4eff-4786-8ff5-ac15f4006719", "sighting_of_ref": "indicator--fa514a49-5f75-4756-bdb5-03c85d64210b", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6b488e-8995-4cb2-9a69-3dd69b6d6c8a", "sighting_of_ref": "indicator--6ab97461-9fc2-4ff6-bc70-c2353dbfc1c9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f768cd08-48a1-45a2-869f-83d308f0c62a", "sighting_of_ref": "indicator--6ab97461-9fc2-4ff6-bc70-c2353dbfc1c9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6734d0-f334-4822-8bc1-d394a50e3d3b", "sighting_of_ref": "indicator--ae0346ae-6b02-4863-9ed4-0b7b930ff1fd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2517970-8298-4a08-be76-a78603f7cc4b", "sighting_of_ref": "indicator--6c70c443-b6a7-48f7-808d-e90d551c79ee", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa68432a-b74d-408d-b84d-d300dd56f45a", "sighting_of_ref": "indicator--87a1e57a-1496-48b5-ae4c-ace51b310332", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2595837a-f681-489b-bdaf-1debab94f39f", "sighting_of_ref": "indicator--b2c06046-9ae0-48dd-b3ca-cb9356186240", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a4cb3b-b08c-4132-b691-b41cb34ebee2", "sighting_of_ref": "indicator--b2c06046-9ae0-48dd-b3ca-cb9356186240", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811a2a9f-2c93-4bec-944c-9d704ab3fc46", "sighting_of_ref": "indicator--b2c06046-9ae0-48dd-b3ca-cb9356186240", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66880f81-03d3-41cc-a63c-ce8818a8fc88", "sighting_of_ref": "indicator--2067cb69-9fbc-4017-a9cf-c28aad562cfc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08039961-5673-4a10-98fa-a37c2ed1e099", "sighting_of_ref": "indicator--2067cb69-9fbc-4017-a9cf-c28aad562cfc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b7cc3b-2c85-4762-ae56-1e3460416748", "sighting_of_ref": "indicator--9fec6940-0177-4cff-aff2-e581913d0c4c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93bd41e-3cac-482f-84d5-b58f9bef3243", "sighting_of_ref": "indicator--9fec6940-0177-4cff-aff2-e581913d0c4c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec82bf06-bf71-4517-b0e3-81763164d6b3", "sighting_of_ref": "indicator--70804c59-34a3-4950-9dd4-849942a0c4fb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e835be2c-7d3e-4619-ae5e-c9bbf36a518f", "sighting_of_ref": "indicator--70804c59-34a3-4950-9dd4-849942a0c4fb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf2143e-02d3-4e18-b37e-d3b748dfb7d8", "sighting_of_ref": "indicator--ac09145e-f5c1-4678-af02-3a65fc39489d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e363b0-bed5-44ee-9ed8-d1681caab5ee", "sighting_of_ref": "indicator--ac09145e-f5c1-4678-af02-3a65fc39489d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f141ddb1-3f81-455f-9c3a-d807181be29d", "sighting_of_ref": "indicator--973c6fec-3a20-4d2e-aa95-9498f64556fa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921da9f9-c5b7-418a-8610-8b60e5867093", "sighting_of_ref": "indicator--973c6fec-3a20-4d2e-aa95-9498f64556fa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46085664-43da-49bf-96ce-c355c70515b9", "sighting_of_ref": "indicator--b1277547-5946-4413-ae24-b8bc15a9eb7f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5f0fd3-a626-4ab7-b9f6-aefb20ed3d72", "sighting_of_ref": "indicator--b1277547-5946-4413-ae24-b8bc15a9eb7f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca901610-dfe9-447a-adde-00df1e8646d7", "sighting_of_ref": "indicator--d8b8ad04-d376-4a0f-a4a5-f052dff723d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9bb98c9-2200-40a7-886a-9990376ce897", "sighting_of_ref": "indicator--9df3feca-0fe9-44f4-9755-e41302205f77", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b323e98f-3ae8-488f-a572-b07bbb96d298", "sighting_of_ref": "indicator--9df3feca-0fe9-44f4-9755-e41302205f77", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c17bfa-f94c-4453-a5ff-7c99262983bf", "sighting_of_ref": "indicator--9df3feca-0fe9-44f4-9755-e41302205f77", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501c5b74-6d56-413f-9cc4-7f3e5d18d274", "sighting_of_ref": "indicator--9f9c5b8f-53ac-4055-bfa1-6f37e81c12b2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e5752a-339f-4490-bd9a-decd69a36949", "sighting_of_ref": "indicator--f38636e5-d183-4814-b384-bb8a68639692", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07906738-3c96-42ff-886e-a2acbb56be77", "sighting_of_ref": "indicator--f38636e5-d183-4814-b384-bb8a68639692", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d811a857-9017-4104-828e-1c6194da081a", "sighting_of_ref": "indicator--f38636e5-d183-4814-b384-bb8a68639692", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8240d78-c240-4136-bcfe-62e7f0fbeb96", "sighting_of_ref": "indicator--77aef39f-f722-4f5d-98cf-576c6bc0350e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7ca42d-9951-45a9-9fda-b3f1adad45d3", "sighting_of_ref": "indicator--53c0b6d9-3a05-4718-95d3-8a6cde77a1cb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b004e693-90c6-4221-9472-5c01eb4434aa", "sighting_of_ref": "indicator--fe850891-4da2-460d-bd9b-c7a3c1976963", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247de033-01bf-4e1b-b3c6-b6170d3b30fb", "sighting_of_ref": "indicator--bf3bfd4d-0d2f-410c-9929-772dfc0eb10f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265f60d0-f2ad-4f99-a4d6-b3593513098b", "sighting_of_ref": "indicator--db5b17d3-7419-4db9-a405-9d13f6820702", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3d7d19-e4f0-42c0-87ac-635ab3faefd0", "sighting_of_ref": "indicator--f25a6951-8310-4597-89c6-9d97e3ce69cd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1690a65-9571-4818-b9c8-360da46e529f", "sighting_of_ref": "indicator--55073050-2a00-4160-96f6-a7d7cc47a30a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78dac2d-1303-494e-b09e-8e559d695d52", "sighting_of_ref": "indicator--55073050-2a00-4160-96f6-a7d7cc47a30a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4876500-1035-4b8a-ad95-0b25454b128a", "sighting_of_ref": "indicator--55073050-2a00-4160-96f6-a7d7cc47a30a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f92cc82-00ee-469e-8d19-097cc8e1f231", "sighting_of_ref": "indicator--e6115214-3faa-4f53-bbcb-a7d8d1d41419", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830cbbea-2f0d-49cb-b0d2-62d3664640e1", "sighting_of_ref": "indicator--d685b580-4b79-4891-870e-e77acec1a251", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44d907c-df47-4e68-ae45-4af8e2791297", "sighting_of_ref": "indicator--d13d449e-5835-428e-8949-78a976b07517", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c414f1-b346-46e1-95f4-a3e0ac49739c", "sighting_of_ref": "indicator--1028f1a5-62a3-4ea5-a3b5-21639ca7ac75", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbf2479-5188-4084-8428-056283928493", "sighting_of_ref": "indicator--9fc26942-1863-41d3-a0c3-f3050ef8b079", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3cc68f-abec-4c1f-9c48-bdb6ff1f1cd2", "sighting_of_ref": "indicator--555b903c-df70-4dfd-9f7d-aa73037f4958", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abf39cf-15f4-4c1b-ae34-c3c599e1d14e", "sighting_of_ref": "indicator--555b903c-df70-4dfd-9f7d-aa73037f4958", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb732d9b-21d5-4239-826a-cc647668ca9d", "sighting_of_ref": "indicator--fa13f107-ae72-4280-b44f-bb943658a945", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cc5634-0081-43db-9f78-3e4229c5070f", "sighting_of_ref": "indicator--4e325e57-1c63-4cd7-9be7-79832a2826b3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f27fc6-cd9b-4429-a54b-cbb884ab4fd4", "sighting_of_ref": "indicator--4e325e57-1c63-4cd7-9be7-79832a2826b3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4552996-885d-4eaa-a635-ef0e037ee0ac", "sighting_of_ref": "indicator--4e325e57-1c63-4cd7-9be7-79832a2826b3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06376e5b-69b7-4d95-a202-16216a8606e9", "sighting_of_ref": "indicator--19985d67-fe6b-42d7-b79b-3de31081a16b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234761a4-18e2-4a42-a2fe-a113e08d2eef", "sighting_of_ref": "indicator--dcc8a5d8-d457-4e88-aa14-24fb49a29106", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7aa8502-6213-4150-a869-fee6e7354f0a", "sighting_of_ref": "indicator--6efaccbb-b31b-45b9-a22f-9754e86b79a3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9c9081-424c-43fb-83f2-d663165d3e92", "sighting_of_ref": "indicator--d9279ed9-2bd0-42f3-9a1e-7f7bab57e7d7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01eeda29-e608-4f10-90af-e4f98d049a6c", "sighting_of_ref": "indicator--d9279ed9-2bd0-42f3-9a1e-7f7bab57e7d7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce661e2a-5c72-40fc-a9bc-be548aeef63f", "sighting_of_ref": "indicator--c5ee6672-47e5-45cc-a2da-52f3b3d127fd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b53dd0-3a15-44e7-a864-b568b0d8718b", "sighting_of_ref": "indicator--42cf1109-7689-4d81-9812-bee91d25f788", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8d512e-5117-4225-bb08-370d19ff3fc9", "sighting_of_ref": "indicator--9537e5ce-aaf6-4696-82a9-30a7b27530e7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca369d94-d98e-4a23-a0f1-56415a48977f", "sighting_of_ref": "indicator--0eea3441-8f27-426a-9c76-c1922d1462f8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35bc627d-c8b2-46ae-a311-48a4f11c1b2b", "sighting_of_ref": "indicator--0eea3441-8f27-426a-9c76-c1922d1462f8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092b22ca-da5a-4131-a0bb-85338591e62f", "sighting_of_ref": "indicator--0eea3441-8f27-426a-9c76-c1922d1462f8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cc3743-4001-44bd-bc47-8bf27c23d285", "sighting_of_ref": "indicator--38e4b488-f91f-4250-8cf4-acfa587675ba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8eece43-e497-4ea2-b54c-0083c7239768", "sighting_of_ref": "indicator--38e4b488-f91f-4250-8cf4-acfa587675ba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f128da-4542-4d80-9fae-7b9607dee4fd", "sighting_of_ref": "indicator--38e4b488-f91f-4250-8cf4-acfa587675ba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc76438-a477-4b85-b653-6e27c861e4ad", "sighting_of_ref": "indicator--0f70d547-cd64-4992-af13-330e7b5a3036", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ea7a95-85ba-4e68-9c60-1274a8d66c22", "sighting_of_ref": "indicator--68470118-8a7c-49a7-bced-fdc05b73e1ab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9154c9a0-8664-408c-9f83-d31325c2be59", "sighting_of_ref": "indicator--3fa803ed-1b38-47dd-807a-c41da34c612f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b1e803-5470-40ea-823b-c924dc22f26e", "sighting_of_ref": "indicator--3fa803ed-1b38-47dd-807a-c41da34c612f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e147784e-337d-4182-8afe-2e32dd663379", "sighting_of_ref": "indicator--44863d6c-6171-4977-85c7-3631e7da44af", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9068f13e-c5a5-422c-be04-88ec02f24882", "sighting_of_ref": "indicator--82d9b666-3908-41d6-9a6e-1745b7298aad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e9001a-0a30-4a1c-9bd7-c18023fa7d02", "sighting_of_ref": "indicator--82d9b666-3908-41d6-9a6e-1745b7298aad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352cb3b9-bf12-4d4f-a1c0-841413e12df6", "sighting_of_ref": "indicator--325564db-977b-409f-b276-8ae6d0b56724", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7fb332-111a-435a-a221-567ae297e69c", "sighting_of_ref": "indicator--4f377cfa-6b0e-4fe2-8f5e-5df6d9354377", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e5bd12-4294-4f1f-a735-639cf920f0b7", "sighting_of_ref": "indicator--57d5795d-9c1f-4b2a-90cd-ddc026f7c26f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556e92ea-d48f-4ae9-b00d-ac03d9a5f306", "sighting_of_ref": "indicator--540b3562-ee86-4bb9-9b9f-c12218e442fe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dbe13c-5d7b-47aa-863d-018f43e3e448", "sighting_of_ref": "indicator--8112b106-06c8-4af1-b81f-2d2ad790a4a4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6870b1-152c-4423-b07a-67964c9a1845", "sighting_of_ref": "indicator--e0ab61bf-3352-496e-b9ca-d89e4e3dcff0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db9a078-3e39-4f77-8e3c-d46d01ee230e", "sighting_of_ref": "indicator--0b666853-9ed0-4718-8bf5-6f8cb4a7cf7b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e96fa7-6852-4c9c-891c-8dbba2aabbdf", "sighting_of_ref": "indicator--449fe2de-7d5c-4bdc-8a7f-2783d4e2a8ef", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccf1ebe-38fc-4b5c-92e5-41891e6d48f4", "sighting_of_ref": "indicator--8f736c38-9b78-4966-a320-7acbb633e2a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e87157-e341-4385-aef2-5ca877550b89", "sighting_of_ref": "indicator--f116a8c2-0f2f-447c-beeb-405862b33312", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387da5fb-e8be-4086-afaa-d904a68c22f3", "sighting_of_ref": "indicator--f116a8c2-0f2f-447c-beeb-405862b33312", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5694ef43-f786-42a3-a66b-994fcfd41e01", "sighting_of_ref": "indicator--f116a8c2-0f2f-447c-beeb-405862b33312", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d38a1a-ca58-4ea4-8743-0368c5d878a8", "sighting_of_ref": "indicator--78caafe8-f839-462d-83d2-13ccfc95a54c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943db04e-7e31-4375-98e1-59f3ff4211c3", "sighting_of_ref": "indicator--e98e1971-2695-4d81-8e64-8bc338dc1176", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78975edb-9873-42f1-9f44-c2b76d9fa867", "sighting_of_ref": "indicator--3e657146-6b8c-4796-856c-9f0d3b038744", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feaad4c5-e5ab-4b01-bb5d-8e72b2b3f5e0", "sighting_of_ref": "indicator--d8b654e3-d3d0-43a7-8162-8d7e85fdfd49", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4c71b9-ad46-497b-acd7-f06578f47b80", "sighting_of_ref": "indicator--a0b98b36-4933-4f31-8372-a0a201f99b7b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d9abdc-81c4-44c4-9f85-6d319e25a252", "sighting_of_ref": "indicator--a0b98b36-4933-4f31-8372-a0a201f99b7b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6eb1037-6a1d-49ed-82ad-fd212782b967", "sighting_of_ref": "indicator--a2d928a4-d68e-47ff-9347-3dc3f95c53d5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6ed00e-af71-44c9-aacb-bda65ce0981f", "sighting_of_ref": "indicator--7563d0a1-7d54-4821-bc23-873d9469ee89", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cade4dce-59be-4609-be5c-0e24616e5449", "sighting_of_ref": "indicator--d87816cf-849d-497d-a259-632d1af46563", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86b0be4-ddbf-4b9a-b579-1eeb21ec717e", "sighting_of_ref": "indicator--c99369c8-7bcd-42bf-927e-f25132113b23", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bdff8e-a6de-4b95-82c1-956383000347", "sighting_of_ref": "indicator--c99369c8-7bcd-42bf-927e-f25132113b23", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac255af9-bd67-4117-b98b-45dd6f069a46", "sighting_of_ref": "indicator--9600ea2c-a27e-4fee-b803-ee1723e2fc5c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0bd3559-a917-494e-806f-5521191bf12f", "sighting_of_ref": "indicator--9600ea2c-a27e-4fee-b803-ee1723e2fc5c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0743122a-3cb8-4474-95ed-9d496c56e9a2", "sighting_of_ref": "indicator--6ffc479b-5035-4bfe-84ec-f71f9f92efed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b008da73-7033-4629-8f69-d9bb2ac4615e", "sighting_of_ref": "indicator--e5474f12-33b5-4855-8ffc-94f50d9856d3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042f3ac0-c897-4c72-91fd-a6b8b0fbbeca", "sighting_of_ref": "indicator--e5474f12-33b5-4855-8ffc-94f50d9856d3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1107bf14-8b9e-419f-8511-c8f3cff77c16", "sighting_of_ref": "indicator--58cf5e6d-8959-41d6-b109-d12233b55fe2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adb80e8-9b4f-485b-85ae-e976e3a34300", "sighting_of_ref": "indicator--8d402187-348d-48dd-8426-6796ec83a15f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338fac4e-82a6-4c29-8e51-ee52445a3288", "sighting_of_ref": "indicator--4648155d-7f18-46a1-8f61-c6b431e25397", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c369b1-e88a-4efa-938e-bdb08a0f7075", "sighting_of_ref": "indicator--b96c7ab2-967c-4b3e-ab3e-0b4371dd482c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef18768-702e-4944-a4de-bff55318de31", "sighting_of_ref": "indicator--a9aa0b7c-378a-41cf-b743-69029eed82d8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ed98ce-f131-4dcc-9c09-76506a2fc952", "sighting_of_ref": "indicator--a6e086af-dcfd-496e-bd47-ace623707a2e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da28ae3-7765-42a9-908f-ab79e5132599", "sighting_of_ref": "indicator--0492cdba-18a3-4c78-b19e-62516268ea54", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3545d790-0268-4850-b227-ba9cf41c8fc6", "sighting_of_ref": "indicator--b1fa36f4-1e2a-495e-9adc-a7374071586c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e303dd5f-43a2-4b93-8891-5aed408ee91e", "sighting_of_ref": "indicator--7959065a-4cd9-482c-9992-1286858315ba", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43dbe089-7d9f-47b5-99ec-3fcd3cb0f9ec", "sighting_of_ref": "indicator--7aa2d785-3be8-477d-8f98-603a60edabe8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a347f3-8b89-4db9-8968-f21e3e0a327c", "sighting_of_ref": "indicator--ff3f17e1-590f-415b-bc19-77e00a906512", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d1006d-9662-409b-a964-966f239b6c71", "sighting_of_ref": "indicator--90357686-972d-4217-8f36-9313b49234bb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c595d53-86e2-4b46-897f-7b967580d911", "sighting_of_ref": "indicator--4a40eb02-f98e-4bd6-857c-3b0edccc87c8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac7b951-a472-4a37-81e8-f8dde990ab81", "sighting_of_ref": "indicator--4a40eb02-f98e-4bd6-857c-3b0edccc87c8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e7d662-d77a-4f8e-8a82-1027a5827a84", "sighting_of_ref": "indicator--11bbd4b5-e65e-44ae-a0cd-17347aaf607d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fd1a42-7818-4664-9ae1-712ca5e7cc69", "sighting_of_ref": "indicator--8373fa85-4cd8-42f4-b7c8-8ac03647cc20", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be746c2-b228-4ba2-8041-52f5985876d7", "sighting_of_ref": "indicator--8373fa85-4cd8-42f4-b7c8-8ac03647cc20", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c1e4af-3ecd-4f11-a5fe-e70708dc9aff", "sighting_of_ref": "indicator--f63016f1-5227-464f-819b-f60d3c3142ad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4129a95a-646f-44ef-b2b4-6ff32bbd9cc5", "sighting_of_ref": "indicator--76a567af-ee22-48df-a733-3e0273246495", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f82401-810d-41fa-9098-49c7fba43da8", "sighting_of_ref": "indicator--a5d333a7-6423-40d9-984a-bc86aaeae32b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52eac2ce-a955-4a2e-a3e0-7888bdeacdfe", "sighting_of_ref": "indicator--868fc515-5fb9-437c-885c-bb37804221b3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e0e77e-3eed-4fc2-9f31-23014af1dd06", "sighting_of_ref": "indicator--8058b57c-b651-4ec4-bfe0-00ee4e4df219", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6016fac-d042-4252-8e60-0f73a8ab8016", "sighting_of_ref": "indicator--61cdfb21-fc51-4c39-a3e3-cd42b459c381", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32835da5-f388-4798-a441-d584262d0bea", "sighting_of_ref": "indicator--61cdfb21-fc51-4c39-a3e3-cd42b459c381", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167c25d9-fe95-4838-9317-7fe73907422a", "sighting_of_ref": "indicator--e9c33a87-dca9-409a-8509-d1507b69aeaf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41a5ac8-2b16-468b-8a70-19cf423bc715", "sighting_of_ref": "indicator--69c0aa07-9f4d-425d-91d3-1e5f47a5e474", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4331cfd-9e77-4a3a-bc3e-de9d3cba40b4", "sighting_of_ref": "indicator--69c0aa07-9f4d-425d-91d3-1e5f47a5e474", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d714ef71-aa2b-475a-9ab1-ccd89a789ff4", "sighting_of_ref": "indicator--041958be-9cf9-4063-b2e8-8bcd41ae9972", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da91f098-4d49-4c22-9ec4-744f58ae181c", "sighting_of_ref": "indicator--408cb091-27e6-4a93-940b-6c7a6e45a000", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517d6459-9bed-491e-b8fc-fb6dcc85da18", "sighting_of_ref": "indicator--73295dd8-c804-4cac-b1c3-0f6a6f85b3e8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c809b297-6511-4d1e-9d5a-3b7f744f301f", "sighting_of_ref": "indicator--f9f387e9-f1f2-4b32-9779-eacccc5d025c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4dce05-c141-4aa8-8608-b862bbe6af84", "sighting_of_ref": "indicator--159b482f-9c8c-43a6-8335-d7164fadc778", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769a56f6-b886-4586-a84a-42f3adf57beb", "sighting_of_ref": "indicator--159b482f-9c8c-43a6-8335-d7164fadc778", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221cbd9a-4936-4895-84f6-1d69e163a888", "sighting_of_ref": "indicator--302ef587-7d0b-4fe1-80c0-8e65b4ce1ab3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573fbb65-adc8-47d0-b700-7a02efc4f111", "sighting_of_ref": "indicator--303ab585-a74a-4aae-bf82-d296121d4876", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71a2a64-da64-4b05-9e8f-e903a67993b8", "sighting_of_ref": "indicator--b58ce9ee-b374-4c20-bec2-c0cddf88755a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664ea8d2-2f9b-4c08-b86b-4f10fe2b1663", "sighting_of_ref": "indicator--0ed68796-2707-442d-8b68-8ed8c32805e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6ef6ea-0b03-4e75-b4a9-57d0fd062322", "sighting_of_ref": "indicator--7d996038-cc95-413f-a9e3-8d298bd2d0fb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ce67ed-8ef9-40e0-b891-4fa5427f171e", "sighting_of_ref": "indicator--b80febc6-df99-443d-b080-8421bf0d612e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f5fe7b-1fc4-47ff-8d24-3450ec5df1f7", "sighting_of_ref": "indicator--b62af153-d556-42a0-949e-e542e5d5484c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a55b8d7-02f7-4ff6-bc41-de98032f450a", "sighting_of_ref": "indicator--d7a3d61d-c4f4-43d3-98c8-1f78b4ca7d84", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7983a0-5963-4ef2-b03a-90e3679b2b21", "sighting_of_ref": "indicator--9417e18e-ff92-42ee-8d7d-3cbe6a81416d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2fe6b7-0d25-4891-b23b-c63b7cdba43b", "sighting_of_ref": "indicator--62789fea-fef6-4c2a-8997-528733024576", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bdbaf5-bf0a-4b66-b529-e14517931c4c", "sighting_of_ref": "indicator--62789fea-fef6-4c2a-8997-528733024576", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9db04ef-a7bb-4529-a357-0c443f8559db", "sighting_of_ref": "indicator--62789fea-fef6-4c2a-8997-528733024576", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d824ab18-17aa-4b8e-9922-595e2213be22", "sighting_of_ref": "indicator--edd30d56-a958-45f5-9673-2b7b46218d46", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92086cc6-6b5e-48de-858d-8fc374e02f2b", "sighting_of_ref": "indicator--edd30d56-a958-45f5-9673-2b7b46218d46", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fb0c97-4cb5-4638-9531-44aebb33c3ea", "sighting_of_ref": "indicator--edd30d56-a958-45f5-9673-2b7b46218d46", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7772cd7-01e7-44d9-8e3b-d8b1f3d0efab", "sighting_of_ref": "indicator--77f17114-329d-461d-b3bc-4ccc2b7646fb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7342cb43-fd05-49b7-a7bb-c36f72aff201", "sighting_of_ref": "indicator--70aee231-6c42-4edb-b0c7-784505501422", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdc9b15-09ea-45a2-a4b9-93ac5fe7776b", "sighting_of_ref": "indicator--7843ab92-dcda-4886-9521-370021ca7d92", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b61a40-0c0c-4055-bef6-4c9037dc5493", "sighting_of_ref": "indicator--408a6e93-b60c-4c8c-9428-0d4c75008a39", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db57f6d-83df-451c-b1a7-3a300b14cef9", "sighting_of_ref": "indicator--408a6e93-b60c-4c8c-9428-0d4c75008a39", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba16470-0014-4958-9cb1-40eece57edfd", "sighting_of_ref": "indicator--408a6e93-b60c-4c8c-9428-0d4c75008a39", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35258e9a-651e-476d-951d-922552533e51", "sighting_of_ref": "indicator--60d2323a-0a93-4b0c-8471-1ad2b2e9f5e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a110e3c1-5cf5-4fcd-a442-a36488edbff0", "sighting_of_ref": "indicator--60d2323a-0a93-4b0c-8471-1ad2b2e9f5e5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9481c4db-8a1d-4191-8b2b-f43e4201400a", "sighting_of_ref": "indicator--60d2323a-0a93-4b0c-8471-1ad2b2e9f5e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee493ecf-7567-4eb9-9e18-500572624103", "sighting_of_ref": "indicator--bebd2036-2e20-4349-8198-44c540d08f30", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95f5e8b-420f-4058-a095-515c3e7903f9", "sighting_of_ref": "indicator--ff5d9122-ff5d-424d-ab22-7904fabf3241", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dde5e03-80c7-4173-85d7-efe71d3eb473", "sighting_of_ref": "indicator--ff5d9122-ff5d-424d-ab22-7904fabf3241", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991e6902-ca46-4f27-9207-dba4f98961be", "sighting_of_ref": "indicator--ff5d9122-ff5d-424d-ab22-7904fabf3241", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8603edd0-6402-4885-8606-e86a51a3741d", "sighting_of_ref": "indicator--e477a509-d1b5-4944-8f79-19a6a78256bd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ffc3ae-cc82-482d-b7ba-ee73c7f10bce", "sighting_of_ref": "indicator--e477a509-d1b5-4944-8f79-19a6a78256bd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae698cb6-dc02-40fe-add7-6f4cda62609d", "sighting_of_ref": "indicator--e477a509-d1b5-4944-8f79-19a6a78256bd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913f928d-2daa-4032-9193-476ce185e5f5", "sighting_of_ref": "indicator--78ccd054-c7e4-41e1-bfd6-ce429ca85b86", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbd70ed-fb06-4167-9823-dc7a20b896d3", "sighting_of_ref": "indicator--78ccd054-c7e4-41e1-bfd6-ce429ca85b86", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1d5faa-60b5-42c5-be55-2eadd8687151", "sighting_of_ref": "indicator--78ccd054-c7e4-41e1-bfd6-ce429ca85b86", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c99cf9-1848-4314-b18a-41f7295fea75", "sighting_of_ref": "indicator--9eae58c9-f93c-4886-82a6-b1d733136483", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f221c20d-74a7-4ad5-af51-78a7b2aa93a0", "sighting_of_ref": "indicator--9eae58c9-f93c-4886-82a6-b1d733136483", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3857f32-1a19-4628-97da-ad74653725e5", "sighting_of_ref": "indicator--9eae58c9-f93c-4886-82a6-b1d733136483", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b72216e-3e1a-442b-92d0-dca55b14316b", "sighting_of_ref": "indicator--92c54953-288f-4f09-a441-6aedb860c7ee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93e80c3-6cbb-4fd2-b98d-5c150419967b", "sighting_of_ref": "indicator--92c54953-288f-4f09-a441-6aedb860c7ee", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbf8904-7da3-4727-b801-4d10d95cd406", "sighting_of_ref": "indicator--92c54953-288f-4f09-a441-6aedb860c7ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5d5476-2abc-4d19-895a-e36392ce735b", "sighting_of_ref": "indicator--bb866ddb-91ca-44c7-ac97-62b77536523f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2375153f-7c73-476b-8d50-414e5714bb52", "sighting_of_ref": "indicator--afdf1d5a-399b-47f1-96a3-713f69191898", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae15fff-3401-4f83-8d7e-a84f5a042bca", "sighting_of_ref": "indicator--20071b7e-5b17-43d1-a317-a75316867abb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750b05bb-dc70-4b59-87aa-230897bca800", "sighting_of_ref": "indicator--20071b7e-5b17-43d1-a317-a75316867abb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7011b53f-bdf9-4a72-ae7a-593b2eee408f", "sighting_of_ref": "indicator--20071b7e-5b17-43d1-a317-a75316867abb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59f7c9f-a6f2-4574-941c-fed6845769ae", "sighting_of_ref": "indicator--057c4368-867f-43a6-99e2-ddc87612a44d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2391ad6d-036f-441e-945a-67d9fdd2792b", "sighting_of_ref": "indicator--057c4368-867f-43a6-99e2-ddc87612a44d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8dbb470-d3c5-4561-aff3-e7ade61c1f00", "sighting_of_ref": "indicator--057c4368-867f-43a6-99e2-ddc87612a44d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f697283-472d-42d4-98e1-a0d07158e222", "sighting_of_ref": "indicator--1fddd314-6624-45da-8ca1-ef31d589ab45", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0981b46-f7d1-439f-bb32-4bb414938c46", "sighting_of_ref": "indicator--1fddd314-6624-45da-8ca1-ef31d589ab45", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e7b480-dec3-41f1-b3e2-c35bce016e15", "sighting_of_ref": "indicator--1fddd314-6624-45da-8ca1-ef31d589ab45", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b88794-f772-4822-a9ba-51769d4ea7a2", "sighting_of_ref": "indicator--66f650c1-266b-4593-940e-f30892760465", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fca913-28f8-4570-8723-e3e489e566d9", "sighting_of_ref": "indicator--66f650c1-266b-4593-940e-f30892760465", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed162bf5-a9f4-409c-b262-45f481e09e24", "sighting_of_ref": "indicator--2055a443-2151-4fb1-be69-587ff23cfd58", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6fd4f6-e34a-4311-a2e3-569f9bf88536", "sighting_of_ref": "indicator--2055a443-2151-4fb1-be69-587ff23cfd58", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb25d814-0d6b-4083-9d62-22d1ac35d12a", "sighting_of_ref": "indicator--2055a443-2151-4fb1-be69-587ff23cfd58", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc547ec-0387-45c9-bd56-be3d7bcd32bd", "sighting_of_ref": "indicator--e44814f5-e285-4e23-b03c-0a3b38fb09bc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8c1963-301e-474f-8a96-0d8715f09b2a", "sighting_of_ref": "indicator--2a626260-b69e-4ed0-a523-923a637abfe5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cec341f-a5a2-4c97-84aa-99d30eaabafe", "sighting_of_ref": "indicator--2a626260-b69e-4ed0-a523-923a637abfe5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f623939-ec17-4e6a-a4af-56db5820dd32", "sighting_of_ref": "indicator--bd4a71bd-70be-425a-8a43-51c28848b0ee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df602e3-251b-4cd8-a541-48165a4955a4", "sighting_of_ref": "indicator--bd4a71bd-70be-425a-8a43-51c28848b0ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e209fa8c-adac-4d91-9b1b-cf398f16cd41", "sighting_of_ref": "indicator--4ed70eed-6c31-45c9-a3da-ca79c485c14c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da825f38-36da-455c-b096-38270515b42e", "sighting_of_ref": "indicator--5ba0b27f-7e86-4052-b587-c7536d67899b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5d2532-8d27-4cf4-b688-d07d0c0cfe47", "sighting_of_ref": "indicator--5ba0b27f-7e86-4052-b587-c7536d67899b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e113f0cf-1905-43f4-84f4-b413bea0c1cd", "sighting_of_ref": "indicator--5ba0b27f-7e86-4052-b587-c7536d67899b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800c80c8-3f43-45aa-8553-c229b8ba9d0b", "sighting_of_ref": "indicator--ad00a288-dd2a-4545-84cf-037c864f4f9d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d7ba7c-101f-484a-97f2-e53bdd1ede0f", "sighting_of_ref": "indicator--ad00a288-dd2a-4545-84cf-037c864f4f9d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd396414-3dab-4692-9ac7-9c2492f365d1", "sighting_of_ref": "indicator--ad00a288-dd2a-4545-84cf-037c864f4f9d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9e0f86-61f7-4bb3-882f-ceb60db5fdd8", "sighting_of_ref": "indicator--257ea3da-14ed-4594-acd4-8d35521bd54b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2765a4-27e0-450c-be55-f835a831d366", "sighting_of_ref": "indicator--257ea3da-14ed-4594-acd4-8d35521bd54b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7090fcf-3c11-478f-a42f-f8959553e08f", "sighting_of_ref": "indicator--257ea3da-14ed-4594-acd4-8d35521bd54b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf86419-b6d7-4d70-bdb7-aa7cb6b1e3d9", "sighting_of_ref": "indicator--b7817adf-0ef7-41ca-ac66-aab51548edb2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935faeda-7aa1-41a1-99ff-c8e57c6ae1ca", "sighting_of_ref": "indicator--b7817adf-0ef7-41ca-ac66-aab51548edb2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efa7dbd-0951-41df-8cc7-e452cd79a75b", "sighting_of_ref": "indicator--b7817adf-0ef7-41ca-ac66-aab51548edb2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1ba49c-ac18-4536-a2ec-4ccfbe29a6dc", "sighting_of_ref": "indicator--286f6369-d6be-41b2-98b5-a95034c4d4d5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c86f779-20c4-4c36-ac4e-f566e50da4c8", "sighting_of_ref": "indicator--286f6369-d6be-41b2-98b5-a95034c4d4d5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fc5847-9b4e-4159-9976-f41008a185fe", "sighting_of_ref": "indicator--286f6369-d6be-41b2-98b5-a95034c4d4d5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5b8701-1e91-411e-b850-7cb313ec4564", "sighting_of_ref": "indicator--54c2fcdf-15f1-4852-a6b0-0709a18a6c47", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7576f6-d059-4f4c-8767-e7142b573b5b", "sighting_of_ref": "indicator--54c2fcdf-15f1-4852-a6b0-0709a18a6c47", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afce8de-8e48-49e5-b865-950f3f6b3ecc", "sighting_of_ref": "indicator--54c2fcdf-15f1-4852-a6b0-0709a18a6c47", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feaa8834-f135-4117-84e4-67ea8f471bc4", "sighting_of_ref": "indicator--8f954fc4-5c13-4f2a-b4d6-bd183d061272", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c93347f-712c-4e64-9cd4-f077df426946", "sighting_of_ref": "indicator--8f954fc4-5c13-4f2a-b4d6-bd183d061272", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87016104-d32e-433e-b0c2-11511c30234b", "sighting_of_ref": "indicator--8f954fc4-5c13-4f2a-b4d6-bd183d061272", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b40029f-3bed-4351-aee8-10c21ba2aff9", "sighting_of_ref": "indicator--d857d9d6-e20c-4f3a-9400-304937ced604", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb3e776-9607-4eff-8c33-82faad4b6b01", "sighting_of_ref": "indicator--d857d9d6-e20c-4f3a-9400-304937ced604", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9bc69a-8cd0-437e-b04a-24fef9a5656c", "sighting_of_ref": "indicator--d857d9d6-e20c-4f3a-9400-304937ced604", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b680d1b8-d961-4d7b-9731-de9cfc331e90", "sighting_of_ref": "indicator--2521b374-08bd-420e-9c0e-65df4f447b88", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef84869a-c6a8-440a-aca6-6d602173d845", "sighting_of_ref": "indicator--2521b374-08bd-420e-9c0e-65df4f447b88", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbb90c9-021a-459c-9e4b-ba0e0ff7662f", "sighting_of_ref": "indicator--2521b374-08bd-420e-9c0e-65df4f447b88", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40d74c5-6cdc-40c8-97de-b762cdf5ccbf", "sighting_of_ref": "indicator--5cea3c2c-1be2-411f-88a3-1e9a90ab51ff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934a2585-d1d6-4889-adf9-a1e362116a7a", "sighting_of_ref": "indicator--5cea3c2c-1be2-411f-88a3-1e9a90ab51ff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6163d1cb-59d3-4e1d-b30a-47bc4a465cfa", "sighting_of_ref": "indicator--5cea3c2c-1be2-411f-88a3-1e9a90ab51ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ef46d3-8e0b-4bfb-87cf-2f59b8403108", "sighting_of_ref": "indicator--77296503-39dc-4875-8aca-7b02a893a85c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbdbd24-ddbd-4a52-b78b-3e55b75a8426", "sighting_of_ref": "indicator--77296503-39dc-4875-8aca-7b02a893a85c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10068367-5f03-4456-9fe7-18a713955b86", "sighting_of_ref": "indicator--77296503-39dc-4875-8aca-7b02a893a85c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6cc6bd4-a6e0-4436-8b17-dc6177d35067", "sighting_of_ref": "indicator--e17bb2c0-faad-4e1c-b6a1-492facf22e5c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5804a533-fd5a-4e26-b8a0-83f47c569dd7", "sighting_of_ref": "indicator--e17bb2c0-faad-4e1c-b6a1-492facf22e5c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7abf2be-ac00-4b01-8bd3-e5494fbb65c0", "sighting_of_ref": "indicator--e17bb2c0-faad-4e1c-b6a1-492facf22e5c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de199e5-87fc-4724-887e-342078a58f42", "sighting_of_ref": "indicator--f43db9e7-ad7d-4d2a-84d3-ca9f54efbca4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefb7aa0-2f66-42b5-9033-b56e7341ca89", "sighting_of_ref": "indicator--f43db9e7-ad7d-4d2a-84d3-ca9f54efbca4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e5a133-06aa-4216-9a22-e367de41cbb9", "sighting_of_ref": "indicator--28d9e5b5-af9b-4eae-b404-09199509fa5a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe3108e-81d2-483f-a86a-eeeb135d1e04", "sighting_of_ref": "indicator--02a12c6e-1c2f-4e0c-80e2-100c937b5877", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304564c2-595c-4404-83ec-227f914550af", "sighting_of_ref": "indicator--02a12c6e-1c2f-4e0c-80e2-100c937b5877", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79553cfd-e566-440f-a3be-72d9616b5b66", "sighting_of_ref": "indicator--3ca5206e-30e2-4df3-a2ed-d27d31fc1daa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f66c4f-ed2f-4ca1-b1bb-828994aea4b2", "sighting_of_ref": "indicator--c08eac1c-f900-4d5a-9ad5-081aa3891360", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac28309-d0c2-413a-9ed7-046e34f45ada", "sighting_of_ref": "indicator--0c2295bb-d5bc-41a3-9cec-f1b6c351f9b6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c33b0e-cb1d-4250-9fa9-41200c7f421d", "sighting_of_ref": "indicator--56999f12-8fa2-4614-b610-c6afb4a69813", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adacc624-a579-4c1e-9c47-eab12a963ad1", "sighting_of_ref": "indicator--c0186ae8-2da0-4b50-af50-824aae77afe8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e32a9f-554e-4af5-9be2-7f25d4b72395", "sighting_of_ref": "indicator--4df34867-73bb-4393-8186-6d7cc89f2838", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085db125-3fab-4ab6-839a-47169b32fff7", "sighting_of_ref": "indicator--3818f96d-38dd-4eb1-898d-900cc5744cd9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ceb216-9987-4ed8-bcbe-dbbfe88a7400", "sighting_of_ref": "indicator--3818f96d-38dd-4eb1-898d-900cc5744cd9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e57a27a-4bb9-40f0-94c7-b3841c53d5fc", "sighting_of_ref": "indicator--3818f96d-38dd-4eb1-898d-900cc5744cd9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56fdb55-7bf7-4e2e-b64c-d93a124cb867", "sighting_of_ref": "indicator--e0ef10c0-610f-4802-b11c-57fff88cd459", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6de44a-3bac-4a49-adbe-924336092058", "sighting_of_ref": "indicator--4d75fd25-97af-40fa-a6d1-a119ecd95768", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96466c1-6db8-4d46-8805-5ed16e92c8cc", "sighting_of_ref": "indicator--4d75fd25-97af-40fa-a6d1-a119ecd95768", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626d2731-b0fa-4d85-bb8d-4c5c6f11114e", "sighting_of_ref": "indicator--4d75fd25-97af-40fa-a6d1-a119ecd95768", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1ae9f8-65e7-4d8f-8673-f90840930361", "sighting_of_ref": "indicator--ebda44f6-3bc1-490e-ad5f-37ccdf519388", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82ea0d8-a34d-4c86-97f9-970a199daa44", "sighting_of_ref": "indicator--d36f7f3b-e8bb-41db-9871-52244ac43adb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16153cee-4824-41a8-8af5-1036bb7100bd", "sighting_of_ref": "indicator--579f16fd-24f6-4069-880d-fc5f80479a89", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc78b877-6bf6-4970-ad65-86d0e4481f7b", "sighting_of_ref": "indicator--579f16fd-24f6-4069-880d-fc5f80479a89", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a943d5ca-3c4c-4110-91fe-c8e3dc22411b", "sighting_of_ref": "indicator--579f16fd-24f6-4069-880d-fc5f80479a89", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6c285d-5d64-4e9f-8378-9db9996889c7", "sighting_of_ref": "indicator--aa92dbdb-87a2-4de3-bbf0-0bbd530c6a3c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3707419-1178-4451-a30e-ad5ee8139327", "sighting_of_ref": "indicator--aa92dbdb-87a2-4de3-bbf0-0bbd530c6a3c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5e285f-1f5a-48cc-92a6-421fc473bc1f", "sighting_of_ref": "indicator--aa92dbdb-87a2-4de3-bbf0-0bbd530c6a3c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65e9c3a-89cb-4e65-abbd-fbe7f643469a", "sighting_of_ref": "indicator--c3c2d638-2d89-4344-b476-979f8370c4d6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead5e1a1-766e-4045-a819-47d6c04b143f", "sighting_of_ref": "indicator--c3c2d638-2d89-4344-b476-979f8370c4d6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d8b5b0-7a58-4644-bc41-77570bf9d71d", "sighting_of_ref": "indicator--c3c2d638-2d89-4344-b476-979f8370c4d6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e261dd0b-e0ba-4205-91e7-eb09435f8f68", "sighting_of_ref": "indicator--4a3bf702-678a-48c9-b4d4-0ee155e99c77", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbffe8c-f2dd-42c0-ab6a-4dd4ce2e48c0", "sighting_of_ref": "indicator--4a3bf702-678a-48c9-b4d4-0ee155e99c77", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42969493-61f2-4ba6-a902-b83122fa285f", "sighting_of_ref": "indicator--4a3bf702-678a-48c9-b4d4-0ee155e99c77", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68114146-4815-4e06-81cd-ec088390bfc1", "sighting_of_ref": "indicator--d0d0e1ff-3d96-4db3-ac0b-2e63f056aa06", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c4740a-ff51-4069-ab52-92549f540ac2", "sighting_of_ref": "indicator--d0d0e1ff-3d96-4db3-ac0b-2e63f056aa06", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea1cb2f-08eb-44d3-9a1f-f02ba3a06b31", "sighting_of_ref": "indicator--d0d0e1ff-3d96-4db3-ac0b-2e63f056aa06", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac8b404-8646-4343-b7d2-f5e801bd8979", "sighting_of_ref": "indicator--fdcc0a70-b1a3-407d-9220-426f3cd8a574", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5d5fa1-85f2-40e6-814a-4d36fe0cc38b", "sighting_of_ref": "indicator--fdcc0a70-b1a3-407d-9220-426f3cd8a574", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f305ef3a-4915-4fcb-80e5-fe92f10dde19", "sighting_of_ref": "indicator--fdcc0a70-b1a3-407d-9220-426f3cd8a574", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b4c95b-1262-428b-b7d4-f54defda5331", "sighting_of_ref": "indicator--f9bf7b49-fac2-41a4-8e6d-1bdc3760548a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a167d37-956d-49ad-99ac-cf10de2c327c", "sighting_of_ref": "indicator--f9bf7b49-fac2-41a4-8e6d-1bdc3760548a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d530d529-e454-4e08-8810-3f1256d64c0c", "sighting_of_ref": "indicator--f9bf7b49-fac2-41a4-8e6d-1bdc3760548a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1f8f03-417e-4fe2-8dba-0e3601feab05", "sighting_of_ref": "indicator--1d2e1b96-2af9-4bf9-9427-9e9699385fce", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb69dec-5c1d-4a64-82ae-2595a770c6ad", "sighting_of_ref": "indicator--1d2e1b96-2af9-4bf9-9427-9e9699385fce", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7332dcd-a23f-41dd-b98e-04e420901ac7", "sighting_of_ref": "indicator--1d2e1b96-2af9-4bf9-9427-9e9699385fce", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e337d5d0-4821-475e-87ce-69b2b26a0fac", "sighting_of_ref": "indicator--df762daa-c950-438d-82e0-12948c14ac7c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6eeaae-0609-4a31-82bf-7d657dfee0e6", "sighting_of_ref": "indicator--7d24895c-3832-4451-8c66-6e37ef122188", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e97cf09-bc3a-4116-999e-9ded186c6025", "sighting_of_ref": "indicator--7d24895c-3832-4451-8c66-6e37ef122188", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb4efa3-d9d8-4c8d-960c-9f8368c92cc4", "sighting_of_ref": "indicator--7d24895c-3832-4451-8c66-6e37ef122188", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d253aaa-e13e-4fe6-875d-1dbbe5e7e153", "sighting_of_ref": "indicator--b1619049-665c-4f27-be73-7052d0a9caab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd19e229-0280-4bb9-8b56-8501c6e52eb7", "sighting_of_ref": "indicator--b1619049-665c-4f27-be73-7052d0a9caab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff4a7c2-6c97-4a9a-803c-591e0bad2efd", "sighting_of_ref": "indicator--b1619049-665c-4f27-be73-7052d0a9caab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34cbeb6-af08-464e-a377-147b21470122", "sighting_of_ref": "indicator--15ebac60-e4ab-4cf1-b95e-3f2930bba4c3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d14da4-5d69-4061-9fcd-5393b1c7bc19", "sighting_of_ref": "indicator--15ebac60-e4ab-4cf1-b95e-3f2930bba4c3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511465e4-f6ae-417e-a467-2fcc5010ff93", "sighting_of_ref": "indicator--15ebac60-e4ab-4cf1-b95e-3f2930bba4c3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fda2c4-9c1e-4873-83a6-b6febb17f8e4", "sighting_of_ref": "indicator--306338da-6bd6-429e-94f2-32c78025d8ed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3696cd-8c08-40f3-94c2-874ad84491bf", "sighting_of_ref": "indicator--306338da-6bd6-429e-94f2-32c78025d8ed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfebcb7-b841-4428-8535-ae9d33a0ddfd", "sighting_of_ref": "indicator--306338da-6bd6-429e-94f2-32c78025d8ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81436cc-bb31-4dfc-ae8b-7d7165093617", "sighting_of_ref": "indicator--dfc168d2-f8c3-49c4-9a88-795d7e81b881", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2ea845-ae2f-4c95-b3b3-6486e7355181", "sighting_of_ref": "indicator--dfc168d2-f8c3-49c4-9a88-795d7e81b881", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07429cea-b030-4367-b635-aa32e0e3035d", "sighting_of_ref": "indicator--a47cf92b-416c-4de8-a984-92a0ab9c01df", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28269b42-4671-46e8-9435-9a9eed2f1174", "sighting_of_ref": "indicator--a47cf92b-416c-4de8-a984-92a0ab9c01df", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcbeec9-a231-4b4f-8644-bde0b066541f", "sighting_of_ref": "indicator--1d0f37cb-95de-406a-b4de-b05077dbe540", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b99c78c-7cc5-4333-bde8-d45b68fae426", "sighting_of_ref": "indicator--1d0f37cb-95de-406a-b4de-b05077dbe540", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cdf93a3-f6c9-4fd3-ae14-9168d917571a", "sighting_of_ref": "indicator--1d0f37cb-95de-406a-b4de-b05077dbe540", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e808929-ed79-489a-9472-7133fa310426", "sighting_of_ref": "indicator--f8c2a6a3-533c-410b-ba5f-81121b562b45", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24db2ee4-3190-430d-94b0-0d2f57090178", "sighting_of_ref": "indicator--f8c2a6a3-533c-410b-ba5f-81121b562b45", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc17dfd-f001-441e-a8c9-2c42f8ecadb3", "sighting_of_ref": "indicator--bce44922-4fd0-4da0-92c8-0cb49d17b7d9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cc56aa-0846-43b3-ae97-c5be08209ba2", "sighting_of_ref": "indicator--05d688ad-6db1-4349-9738-4934b631af01", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723318bd-5c4f-424a-8281-cc6bf7eb19fb", "sighting_of_ref": "indicator--2ad3f453-fa8d-452d-bda8-84c6e0676bd4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c6b6dc-d476-4969-853b-8be6cc424797", "sighting_of_ref": "indicator--a7d654af-17e5-472a-bb17-ee4ec421627e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbea614-27a2-4205-bc4e-da671f9b659a", "sighting_of_ref": "indicator--a79456d0-6a7e-4806-bfbf-346ba0b118c4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2931fb49-2a79-4d0b-93b4-ab89635a898b", "sighting_of_ref": "indicator--9c79dbaf-4f9d-4e67-9de6-249a69ec189f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceccc315-0eaf-4f20-a992-8af654200d59", "sighting_of_ref": "indicator--cc8aaa0a-bfee-41b0-b22d-aea2ecc42e0c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecde1c0e-6f5a-419a-a118-e658c55161a6", "sighting_of_ref": "indicator--8c93b3e5-495c-47ac-a8f6-5fbe28bf5d13", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfeeabe-8d4a-4c51-9d13-1ebbdca009c9", "sighting_of_ref": "indicator--b30e1fee-4111-4e3a-98ce-9daecc6a4d49", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e380bec-d998-4720-9d72-387d8fc5645f", "sighting_of_ref": "indicator--dffa901b-64eb-44c1-b8f3-282c9e7d3ef8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5e5978-be22-4cb2-96e6-79a621746830", "sighting_of_ref": "indicator--e00938cf-e5ef-4b54-a95a-7ea96e095f64", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14dde8e5-ebd2-4dc9-8d1e-c8817f3f4505", "sighting_of_ref": "indicator--ec4300ef-a649-4f8a-9f7e-edd1ce2cf2cf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca3bbb7-5368-4a4f-8f29-2571d067a13b", "sighting_of_ref": "indicator--6342b90a-5002-464f-9231-52d1fe726382", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014ee5cf-260c-44e4-bb60-b06de58d5cec", "sighting_of_ref": "indicator--96b36272-264d-4011-8e26-ffcf59291da5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16bfaf2-6a35-42a0-b0fd-c51e030fe006", "sighting_of_ref": "indicator--f2ae6549-ddcf-4464-be07-b5b88c6e14e2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48928ec-3d5b-446d-b08f-3f43280e0f9a", "sighting_of_ref": "indicator--96d6e3e3-ad4e-4aef-a1da-ee347f7aeaa4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919eab80-f86f-4b4b-bfba-053c773ad87e", "sighting_of_ref": "indicator--ecd2640f-e138-4a1f-80ce-67c2b6d6aabd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7bb238f-3d57-4dae-8f2e-8dc5eb8c18de", "sighting_of_ref": "indicator--22ef6718-f94d-44a4-9a40-137f925388e7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9b7fe0-9325-4982-85da-3d00e5d5080e", "sighting_of_ref": "indicator--e4d420cb-838d-4d54-8f5d-7080dbfaf800", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25af3e00-e77e-4917-b21d-3897a7699530", "sighting_of_ref": "indicator--3022655f-1ada-48eb-9988-41d1e60974f1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4193f4-694e-4857-99bd-00f7633a56e1", "sighting_of_ref": "indicator--20beb0d9-f1fd-45e6-ae67-036555e6a808", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e146dba-5545-4559-a06e-8a2c77c09b55", "sighting_of_ref": "indicator--968fcd1d-1f22-4033-8a63-0c70d6c51017", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bc8228-ccc5-4090-8efa-326eb273ba2e", "sighting_of_ref": "indicator--bebf2961-436c-49d6-9232-eba1fe0ae602", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649f077b-6ccc-4eef-a88e-0c5e2b689c1a", "sighting_of_ref": "indicator--e778b29d-e9eb-47dd-a7c3-5f9484937a2b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441b3532-cf1d-4a85-8f2f-2fc321b03503", "sighting_of_ref": "indicator--aae00600-ca99-4470-b9f9-89525667d95c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76f8d93-cac6-4577-8292-6db0566f791c", "sighting_of_ref": "indicator--5a47764e-afdf-4dca-8939-97abdd2e852f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5b72d6-7e81-49cb-b176-aafb25d09962", "sighting_of_ref": "indicator--5a47764e-afdf-4dca-8939-97abdd2e852f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bee476c-1685-4dbe-8a69-a1e5af4c6e7a", "sighting_of_ref": "indicator--cafe0665-089d-4dfc-875c-3ce4f5797739", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21a04f5-4173-473b-8f13-7cd5eba86565", "sighting_of_ref": "indicator--51374765-cdfd-4eab-aa0a-4a32a34513e1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df90b76-ec62-420c-8923-80f141cff305", "sighting_of_ref": "indicator--b647ab28-0f15-4b1d-8c9a-43e996514cd2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b72103-21d3-4c0b-b06c-2cc8c67bdc3a", "sighting_of_ref": "indicator--f8ba86ee-4a32-4678-8d9e-4347867674be", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7231b0d8-fc6a-4f61-af29-578a1408b55c", "sighting_of_ref": "indicator--b2cf58a4-2e26-4a08-a5d3-699fcd84e44e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0cdea1-6a41-413a-a776-07772a94bb57", "sighting_of_ref": "indicator--fa17c77b-24a3-4762-8b06-98d8f3cd9d33", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344f9b47-c066-44f3-bec5-1e6c2c549a90", "sighting_of_ref": "indicator--fa17c77b-24a3-4762-8b06-98d8f3cd9d33", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b141632f-5599-4df2-8be3-920a3432dbcb", "sighting_of_ref": "indicator--67eef342-1fe2-4ab0-8edc-1ff1580e2f75", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02905b01-39f9-4efb-8882-2f7d95ae74b3", "sighting_of_ref": "indicator--6735a37d-86df-4a67-9702-c98ef076d063", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f40b551-1308-44ae-9f06-3c92ce0d7569", "sighting_of_ref": "indicator--4124d398-620a-432a-8a70-a2c3bee27ec7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5d628a-17ce-4d08-8749-2e9581f9650e", "sighting_of_ref": "indicator--1ce6c28f-6e76-4495-b816-86371edf69dd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4775a6c3-e164-47e4-8372-cf61c9a28785", "sighting_of_ref": "indicator--640de68f-b390-4806-820d-576811a14fcf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a0b1bc-3567-4207-b589-5e64c3d4e27e", "sighting_of_ref": "indicator--a17fa891-a17e-40b9-9d4d-b69913cb3098", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15896a9-7809-411b-a6e8-eed627725b7c", "sighting_of_ref": "indicator--94c87f7e-b927-40f9-8780-647ca33a3c95", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83bee2d6-8503-4740-abd9-d356d2a93016", "sighting_of_ref": "indicator--e4798d80-4a50-4fd8-b404-2526fe7845cf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63903e0c-f136-4ab5-80a6-bf7a4c3f5443", "sighting_of_ref": "indicator--0921d81c-34ac-4492-9f04-c811c0e6ee2d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff7f4e6-91cf-4a72-a8f4-843d4e69d7a4", "sighting_of_ref": "indicator--b857c3b7-9740-48d5-80ef-614c7e6ce502", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7df50dd-616f-4094-b398-20acc119be93", "sighting_of_ref": "indicator--a1f67bde-d5a4-47e7-8bff-5b836087702f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2245f3-56c0-4a76-b4aa-6aef85b7fe81", "sighting_of_ref": "indicator--a1f67bde-d5a4-47e7-8bff-5b836087702f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b38b5b3-878b-4e0f-a0e1-53bca00c3b4f", "sighting_of_ref": "indicator--42d6546a-0bf7-4509-8764-9310f9545c96", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8a9d3f-533f-4525-a959-bcd484c92934", "sighting_of_ref": "indicator--80f7fd7f-de96-42fe-bcd4-1359955552b4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6280498a-4796-470b-91e6-4794730e7876", "sighting_of_ref": "indicator--0debd781-dd65-4ef2-944b-74c99a632bd7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073e83c4-d391-4f01-a3ec-ae8bac50a8cd", "sighting_of_ref": "indicator--c7595028-d56c-4579-b7e9-2a64067b315e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ea027f-2c8f-421a-9dff-9d83d1f207de", "sighting_of_ref": "indicator--8538e063-ed04-4ddd-a59b-3c039addb2b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb6f84a-a4c2-4993-8cfa-f46fe23bdb14", "sighting_of_ref": "indicator--a668d082-3204-4f21-88ba-7f319d71f4c9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3443f22e-b067-4770-9947-dad12e40e8d5", "sighting_of_ref": "indicator--da40a234-7c6a-4d86-847b-3f5f1f15cf84", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75de35a-b424-4850-b869-2090b026cc15", "sighting_of_ref": "indicator--40243dc0-47e2-472d-8df4-894dc48c78c1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51eca2cc-de6d-4f94-8fa3-c39348a2d161", "sighting_of_ref": "indicator--2ee0a32c-4e28-4b44-985e-3a988aec3d0c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce3432a-4352-40d8-92d8-e468f1822660", "sighting_of_ref": "indicator--372af996-07fe-42d1-a2a2-5c445cc1a1a2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da17ede-aabd-4f3d-a94f-94ae1126a570", "sighting_of_ref": "indicator--9697273e-7cb2-4efa-8413-ebb0591c791e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc680ef-2b6f-461b-878f-167bc917df5d", "sighting_of_ref": "indicator--45345ad6-f2ab-4123-8462-2a2b96b16666", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a417185-d196-4ff9-8d30-c8aa7ed9e43b", "sighting_of_ref": "indicator--541f70d2-3eaf-4916-a0f9-80c0a373a198", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201538ba-f50d-49b4-bb9b-9ce47f95ab08", "sighting_of_ref": "indicator--4b9316ff-50e4-4190-ac3b-eaee25708791", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--183de843-7c05-4c17-812b-e1b3f45879fa", "sighting_of_ref": "indicator--88ac4ef4-3b26-4826-ab24-41ea32d4c4d1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac4177d-e4f7-4abc-9d2c-386ff9986004", "sighting_of_ref": "indicator--4aaa0ae2-36bb-4252-81ce-74ea1eea7907", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e319e042-3802-4ab7-8e93-0b271e6bd8cf", "sighting_of_ref": "indicator--e0709a19-b52a-4cbe-aec5-452537e148b2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40a8554-3d65-4abc-990b-b6edf4f46f33", "sighting_of_ref": "indicator--c620202a-14eb-46d0-9e8d-464345e4f092", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec97295e-959a-4fde-8d5b-2830b5806092", "sighting_of_ref": "indicator--4be79a68-dd73-414f-8491-a21ce00db3c6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6b2b07-8c90-4d5f-9a38-c26c4942ad6e", "sighting_of_ref": "indicator--6c9d2f0d-5181-426a-8efa-03d8a3b65ef4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99a5a1d-7367-4b5f-adc2-12e0d399facf", "sighting_of_ref": "indicator--39c0d430-9148-4c5e-8562-6a8f54826fef", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb8e06b-36c2-41df-ad22-c3a43151888c", "sighting_of_ref": "indicator--d9f9518a-993d-4cdf-8445-77fd3499ca49", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8102c854-4d2d-4774-a333-7e00160b59a9", "sighting_of_ref": "indicator--c783bd96-6427-434d-984a-f48dbd38fe6e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928a396f-82c2-4c85-be08-45bbce94a927", "sighting_of_ref": "indicator--4e7c03ca-5b72-4a54-bbb8-d5217d8284f6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06884bc-98ab-4f51-af1e-657115519c0e", "sighting_of_ref": "indicator--a6bf6bcb-6ae2-4bfe-87b7-e02a8c45c364", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e12aff-9406-456d-94d9-2ec331d8bc38", "sighting_of_ref": "indicator--adfa22dd-2d8c-401d-ad18-8461568c3167", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becb19f4-d259-44fe-893d-edc31d656849", "sighting_of_ref": "indicator--4c466c1d-4fa3-4e8d-86ce-895a6c6baccb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fbfe44-7ba8-4624-805b-d8dcc3e439e5", "sighting_of_ref": "indicator--141040d0-f8e1-4d4f-95e0-800aaf7cef5e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8dadac-eb88-4d46-9a1b-6b710edb64fe", "sighting_of_ref": "indicator--b3858e71-7775-414b-9a2d-57554113662e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469c9ab7-6910-4a31-9971-a975d15aaead", "sighting_of_ref": "indicator--8dad2b85-e552-4f24-8aab-bcd9f5d49578", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5944826-30d1-41aa-82a3-a6278900b8a8", "sighting_of_ref": "indicator--203e08fd-f398-4d83-be86-5f15a459d8a1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0417c2-235d-4815-905b-cb09601b6526", "sighting_of_ref": "indicator--e07a1ac5-6295-456d-ad06-cf3418254f31", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60815ed2-0ef6-4986-bbd0-706b79e7d735", "sighting_of_ref": "indicator--c77039da-b82f-4513-8658-fc3d9d26b5ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37e8034-d127-4ff7-ae6b-a5540a8d940e", "sighting_of_ref": "indicator--587fb66a-6609-4b3b-80a6-62d48df32872", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ad4ea5-f806-4c62-be26-179456f64615", "sighting_of_ref": "indicator--846d825a-add4-4c86-a5b0-42eabf6446f2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceafd927-babd-48d7-be82-61e25f3520f7", "sighting_of_ref": "indicator--4e85cbb0-b709-4d0b-9259-2e4222314b86", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15092766-8265-41a8-b98f-508cab3084a8", "sighting_of_ref": "indicator--b5b44651-9c8c-45bf-8c96-e76f84dd92f0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb2eb79-f446-4072-8b55-44c0138e3366", "sighting_of_ref": "indicator--b92990f0-6647-4a4f-bcd8-1ab2d373d036", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9a9574-3286-4919-bba3-72f8f1808118", "sighting_of_ref": "indicator--e8f31c97-3691-4350-9b2b-7e1decdb68ea", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6d0e61-1543-416b-a072-c436b2453006", "sighting_of_ref": "indicator--02ac6b4a-c956-4e89-9a71-c1f60a908c24", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6161cc03-385d-4df4-a151-2ac5f7f0bc01", "sighting_of_ref": "indicator--1d2bd901-8b7f-4a94-a853-605b557c926f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afd0f4a-a313-4c76-a97d-e6a9fbe964db", "sighting_of_ref": "indicator--4617b771-fb92-48e4-af99-901cd9c76aaa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2d4631-08e7-47d7-9ddd-4155de134c5d", "sighting_of_ref": "indicator--3fe89642-c15c-407d-a35d-083cf7c959e8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fe44a7-83f8-4dc0-a0d6-7e7febcef3c5", "sighting_of_ref": "indicator--660b1e09-2037-42cd-80b6-0b6ccd2efc51", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9d7183-13f2-4f70-b781-f57be7bd207b", "sighting_of_ref": "indicator--495de675-ab9c-4a21-8aad-9030687dca4c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd02a0a-5a25-4aba-84ba-ab671d030b30", "sighting_of_ref": "indicator--cd6c9cdf-4fb4-4ce4-aa98-2b8b47ef7299", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a88366-7b37-4a8b-b05b-791c11974a63", "sighting_of_ref": "indicator--74e5102e-0fd9-4285-b15c-c40f0e86b158", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00830388-bd21-4a75-bc5b-eb3281866c7f", "sighting_of_ref": "indicator--7ecfb817-4e63-464f-92a8-ceb5d1c2e17e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cebdc196-d146-4dd0-aab4-aa782303f8b5", "sighting_of_ref": "indicator--8ca93f93-4e66-41a1-bf12-e928af692da8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5fd352-7b97-40f1-b90e-a58c2c6ef3df", "sighting_of_ref": "indicator--eb7674c1-6493-45dd-a1d0-62aa533070e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179ecde9-ee6a-42a0-b197-24dff4dfb4d4", "sighting_of_ref": "indicator--4bfc8abc-7101-41f4-8147-2439ba5826b8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230d6382-59bb-493f-8d26-0354d6c4d544", "sighting_of_ref": "indicator--4bfc8abc-7101-41f4-8147-2439ba5826b8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea31bbb9-5600-4355-9b48-cc87ad178152", "sighting_of_ref": "indicator--4bfc8abc-7101-41f4-8147-2439ba5826b8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55cc8d2-1d7d-4e64-87f6-97afbb9c3d6e", "sighting_of_ref": "indicator--23535343-09e0-4e16-85ad-6451482aa1b0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b875aa-80ac-456d-818d-ccbb761dfa03", "sighting_of_ref": "indicator--466ff950-8d53-4bcc-b2c9-d8449f29f037", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a686c29-c0be-4c97-8ce3-bbd30b69f138", "sighting_of_ref": "indicator--8744a7f5-e0fb-4741-bb71-657acab35711", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5cc9e8-83aa-44c0-86d8-679c326d4277", "sighting_of_ref": "indicator--8744a7f5-e0fb-4741-bb71-657acab35711", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f674062-1e40-4075-a0f3-1ef5692d70ea", "sighting_of_ref": "indicator--3be5d67d-70c4-42e6-adad-9213dbe2f33b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417898ad-c800-4fa3-a6ac-5a47648856dc", "sighting_of_ref": "indicator--3be5d67d-70c4-42e6-adad-9213dbe2f33b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75593b35-0756-4465-af89-ab9c87105af9", "sighting_of_ref": "indicator--e4d0d635-f943-4d9a-bc1d-0046a9a0f95c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82903619-b74f-4008-b210-e6001157fb35", "sighting_of_ref": "indicator--1347e518-97bc-488d-92a3-281e2a1461c6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cf4caa-52f9-4c11-8d2b-af3f57919257", "sighting_of_ref": "indicator--20070038-4b74-43f1-8859-bdc10b8a28bc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e8d24f-f1a2-456e-92bf-97f4a426333d", "sighting_of_ref": "indicator--cb8ff751-0ab1-4d4f-bbc6-d657a09e2e56", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecb53c0-bfc3-44bc-a7c3-a470bccc9d86", "sighting_of_ref": "indicator--c000df9a-66cb-4127-8e63-13722e71d631", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce3b782-6c29-433a-9984-b14b6e62ff79", "sighting_of_ref": "indicator--63f32b2c-c51f-4582-bd98-a610f4edba2d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e51d980-244a-4d6c-88cf-ae28fa050883", "sighting_of_ref": "indicator--728de72b-10b8-406e-b9e0-dfa310c228b5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aece07cd-9a95-4f9a-a3e9-a56ef41735ed", "sighting_of_ref": "indicator--e07805a1-3391-4281-bde9-3a57e30fc6b1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8e9966-0240-41f6-8738-80e7837268d7", "sighting_of_ref": "indicator--e07805a1-3391-4281-bde9-3a57e30fc6b1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49903e03-3061-4d8e-8698-be92fc1beb41", "sighting_of_ref": "indicator--d3c028e5-609e-4c01-8e2a-f287c073ec58", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8767d334-b846-4f2b-8e94-c7e565434395", "sighting_of_ref": "indicator--e29f2e62-a4de-4d3b-9628-6ffae3bca880", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386c4e2b-ebfc-446c-8f23-a445677092b9", "sighting_of_ref": "indicator--76490f34-d9f2-4065-95d4-6d95d6128c8e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe55e81c-b958-443e-98bf-888a7568aaf2", "sighting_of_ref": "indicator--504cd38f-f44e-4875-b468-21c57c978c44", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2e2dd8-0bb3-434d-933e-8ef8d74e0b6d", "sighting_of_ref": "indicator--dcbbbf0f-dede-4d71-aa3e-4e576886e7ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fdb2aa-1788-4fb5-be25-4526d7d71424", "sighting_of_ref": "indicator--8e5f97f8-e435-4583-ae8f-88657c6a6d7b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a64927d-2ed2-4dfc-bf1d-57da5af14ecb", "sighting_of_ref": "indicator--d33c8f4e-bad5-4eda-83f7-288282a148d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3de543-ac64-4463-851e-80f0d31df95b", "sighting_of_ref": "indicator--d33c8f4e-bad5-4eda-83f7-288282a148d0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6cf03d8-f3db-41c5-ad01-bbb0d7e171d5", "sighting_of_ref": "indicator--a1b4741b-47f6-4af0-8e9d-3ce03cb3accc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c6b459-15c6-4efd-bde4-3919ab1f9d6b", "sighting_of_ref": "indicator--1b474c47-0f15-48e8-a824-8c628a55f1ef", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a466530-0d35-4fc9-8135-47ff14e0ad3d", "sighting_of_ref": "indicator--5e27565c-da77-4f51-842e-8ae9e6939406", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a54fdd8-f215-4a08-8492-41960cec6503", "sighting_of_ref": "indicator--e7bfa678-5cd7-40e7-9f0e-51e922ed5a0e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072e853b-2b38-4a88-ad19-bbc2e94d8ab6", "sighting_of_ref": "indicator--2a65ac10-436e-4c28-b743-5fecc1e616bd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493514e6-352d-4b5c-b35e-3f3e770f013e", "sighting_of_ref": "indicator--c92c50a0-2a51-4808-81d5-42b672c863ab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04617d6-a925-4c0d-a1a0-746c1f0f2796", "sighting_of_ref": "indicator--bbdfbff5-aab8-4024-9ae1-bf64e08bf204", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83231c77-4257-46e2-81b5-392862cf369e", "sighting_of_ref": "indicator--9bf61bb9-7a5a-49f0-848c-0d172d7dcc39", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b05420-fe53-4c0d-b5f5-fb442dfbf62b", "sighting_of_ref": "indicator--66d9b0fd-691c-4158-81d7-2a2a2608a611", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62f1747-40b9-4873-b86e-05e17e264210", "sighting_of_ref": "indicator--d3ca82f2-7402-4fa4-9e42-594259511c8f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777860bd-0e0b-4960-9f2d-6564faa7a800", "sighting_of_ref": "indicator--5eeb36c7-969b-409a-82e8-a5befed733aa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0caed31c-9927-4391-b29e-3dbb23ba59f8", "sighting_of_ref": "indicator--8e3d9353-1295-42cb-8260-ca916528c045", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598a4ce2-4cdc-41a2-be49-24a9f0beb68f", "sighting_of_ref": "indicator--e538f5c9-d349-45a3-ba8f-feb5bef31b99", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5738c810-09e4-4de0-b3b7-74bd02740a78", "sighting_of_ref": "indicator--e50c347d-3f5c-4976-9ed8-2e34be30faf0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39203019-addd-45e0-9aa3-8654eb1bea09", "sighting_of_ref": "indicator--55f88781-8a7f-48f3-a49c-47b40988dc4f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ea2e8e-0212-45d7-aabc-6dc0e12b40db", "sighting_of_ref": "indicator--8da9b799-1c24-4b64-9ae0-fa48b2a67207", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a52f1d-66ed-4a02-9b36-16009af3da77", "sighting_of_ref": "indicator--9dbed78f-1f25-4c22-8c28-d74fdea81a32", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5fb970-b962-49c3-ac7d-a3ee9093a969", "sighting_of_ref": "indicator--429f2ddf-97c4-4da9-8073-452b52eac828", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27edc102-ff4e-4230-b4a6-52550e329d00", "sighting_of_ref": "indicator--0e30f90d-5c61-4d6e-b93b-5c1e62dd04d3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b44e7a3-3005-43e0-b32f-362ce4821913", "sighting_of_ref": "indicator--de344aa5-a385-4efe-8fb9-217be2cfb247", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5ecf80-53fc-489a-ae85-8fd3bae13d39", "sighting_of_ref": "indicator--3463a1db-1d2c-4179-88de-45ed17908b58", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a71416-eb1b-4b72-8631-fdbd24a31280", "sighting_of_ref": "indicator--1906eaa3-8779-4317-866f-879767e05b88", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b74d5f-e724-43a8-b561-ceaa3034f05b", "sighting_of_ref": "indicator--5e7eda8c-177c-410d-b1f3-5591789f4a3a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216abd8f-55e6-4cbd-889c-c71f960d62ac", "sighting_of_ref": "indicator--5e7eda8c-177c-410d-b1f3-5591789f4a3a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1596d4-e4fc-4b22-8a66-9def127a4479", "sighting_of_ref": "indicator--01669b7d-3aa2-4aa8-bd25-9bf14698c9b6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a33909e-f8a3-4e73-a721-48136e1b7808", "sighting_of_ref": "indicator--d6b48cc0-54a3-4d6f-8c6a-1fb08b138f80", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e039892-fdd9-493f-99aa-d10f72035d47", "sighting_of_ref": "indicator--b7b295d0-2b8b-4a8c-965e-5935626e25fb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29da04bc-9dbe-4957-88cc-1ea222598607", "sighting_of_ref": "indicator--93a06384-38c3-4cbc-9404-b0f95ca33ae3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a38cb5a-92fe-4380-b9c5-61bc8858ffbc", "sighting_of_ref": "indicator--3315a886-cd5c-4c7b-b829-b94c4ea0b0b4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04db7bf2-8452-43d9-9a8c-eae2d6f21928", "sighting_of_ref": "indicator--74f6134d-af53-4dfd-9c69-5aa479af3ed7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab2d638-a970-406d-b0c0-4c78359af262", "sighting_of_ref": "indicator--8e9decc9-649f-4987-8220-1c8aae98587e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25f460f-538b-48ef-a1f3-792800501d71", "sighting_of_ref": "indicator--8e9decc9-649f-4987-8220-1c8aae98587e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c683b0f-3eb3-433f-8154-d7940df8b6a3", "sighting_of_ref": "indicator--8e9decc9-649f-4987-8220-1c8aae98587e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c33d0df-a89a-4a40-b860-72f5539d858b", "sighting_of_ref": "indicator--b3c150cf-b521-4b60-9d5b-13f34a0107ed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130ff5f7-2c62-4ccd-8e79-bbdc7fd45877", "sighting_of_ref": "indicator--44741539-40f1-466f-9f26-5807c9788135", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace16e47-3c56-456f-b0d6-fb8f6ead2758", "sighting_of_ref": "indicator--d676aaa0-e408-411f-af62-c77a21a575d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a780b66-7292-491a-89e9-f17425105402", "sighting_of_ref": "indicator--8ed62d53-ecbc-4748-8686-5d3fa2bc14ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84932afd-37eb-465e-a34c-869d09d25976", "sighting_of_ref": "indicator--6d428c02-f89e-494b-869c-4dad9cebba1f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e40623-d3a3-44cd-9f7c-f1cf13e0a8b8", "sighting_of_ref": "indicator--6d428c02-f89e-494b-869c-4dad9cebba1f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72f5266-9702-40d7-ad54-0abc66e3cb8f", "sighting_of_ref": "indicator--6d428c02-f89e-494b-869c-4dad9cebba1f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9325ef0-f9a4-432d-a51b-11eb8496aee6", "sighting_of_ref": "indicator--9795a185-c287-4633-9042-52f6972914ac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a0f15d-f541-4104-9b63-f91d5eec44c6", "sighting_of_ref": "indicator--9795a185-c287-4633-9042-52f6972914ac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636abbfd-5b5c-4fe1-8045-1c9083904e15", "sighting_of_ref": "indicator--9795a185-c287-4633-9042-52f6972914ac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67f26bc-c868-4ff0-b177-c3ff670fff40", "sighting_of_ref": "indicator--10213363-c9c9-4f68-bd12-b98f29c68d64", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ba3471-8540-4275-8c4c-1bd5de3f9c13", "sighting_of_ref": "indicator--10213363-c9c9-4f68-bd12-b98f29c68d64", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6380435c-02ae-4f0c-a651-39122182600c", "sighting_of_ref": "indicator--10213363-c9c9-4f68-bd12-b98f29c68d64", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bab7f32-f252-4f73-9983-4ca93c97d266", "sighting_of_ref": "indicator--b4e897cd-8a10-4372-a3d7-b2c0059a16a6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf3e5b6-3c5c-4ae7-9c91-18f803c63b39", "sighting_of_ref": "indicator--b4e897cd-8a10-4372-a3d7-b2c0059a16a6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc71d97c-8bf0-43b4-baff-fb2b03a424c7", "sighting_of_ref": "indicator--b4e897cd-8a10-4372-a3d7-b2c0059a16a6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa530711-bf0a-46ec-91a1-1068d48e9f26", "sighting_of_ref": "indicator--f6305fe0-1bcf-4d90-b7fa-85947bc243b4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6b709e-bd01-42f9-ae20-428aac58afe0", "sighting_of_ref": "indicator--f6305fe0-1bcf-4d90-b7fa-85947bc243b4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e553e90-e06d-4db8-b683-16f662f894a9", "sighting_of_ref": "indicator--afe2cd49-6c64-4963-8107-ecfa44a871d5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d678c7b3-73a1-432b-be28-b90993d64fda", "sighting_of_ref": "indicator--321fb32e-42a8-4646-ba15-9af401361d60", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb41cd4b-e254-4fad-adfe-8c78a4fef77c", "sighting_of_ref": "indicator--0abb51e9-723b-4289-b99c-c77de53143f8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72128e7-26e1-405c-9ff8-881829508fc7", "sighting_of_ref": "indicator--e69a6874-63d4-4761-bc68-ec46f279e04b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7daa45d-ad8f-43a4-ba7d-62060bd8c867", "sighting_of_ref": "indicator--f806e07c-821b-4231-a826-59a4a66055d3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0eafbcf-8ac1-4737-bbdc-9d13c38c6106", "sighting_of_ref": "indicator--f806e07c-821b-4231-a826-59a4a66055d3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724db0a6-412b-4f4f-9c7d-c30bb2fd66d4", "sighting_of_ref": "indicator--f806e07c-821b-4231-a826-59a4a66055d3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d33fef3-2fc1-4e21-9e25-3732f56ce40a", "sighting_of_ref": "indicator--0ed0b89f-b6ce-4737-b23f-4fa86b0f1385", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6444446b-1d3e-4912-9868-604956bade96", "sighting_of_ref": "indicator--0ed0b89f-b6ce-4737-b23f-4fa86b0f1385", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9dc258-bc2b-4829-b26f-33640304713a", "sighting_of_ref": "indicator--0ed0b89f-b6ce-4737-b23f-4fa86b0f1385", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a771a481-4142-43a6-a2df-aaeaa58cea0e", "sighting_of_ref": "indicator--588a86c6-a629-4797-b12f-e1f7828dccb3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d40578b-0c9d-400a-b9a3-5ffae9f7b7c2", "sighting_of_ref": "indicator--588a86c6-a629-4797-b12f-e1f7828dccb3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75940c7a-aa01-40eb-97da-6cf45f12260a", "sighting_of_ref": "indicator--548eb53e-4495-4f7c-b342-f501caef5acf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3693babc-891a-47b5-91da-95c4328d190f", "sighting_of_ref": "indicator--548eb53e-4495-4f7c-b342-f501caef5acf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3335da-1445-4509-b63f-65b6f8cf2c2c", "sighting_of_ref": "indicator--548eb53e-4495-4f7c-b342-f501caef5acf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe43c486-f3c5-4bcf-9325-4c9dafa126da", "sighting_of_ref": "indicator--ae90cf52-c399-4da7-aaf9-27dd6bfa7938", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5423699-9c2a-4531-993a-a58412c6036d", "sighting_of_ref": "indicator--a8cba91a-9d17-4407-91d6-cefded0e8f0d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02821cff-71f8-452c-8a7e-7de4a450e833", "sighting_of_ref": "indicator--9d065aa3-8131-4684-85e8-258f2f04a631", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cb0ea1-bbf7-4709-997b-99c41a7a2f4f", "sighting_of_ref": "indicator--e80a89fd-f87b-4a44-a2a7-52fa611557c8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57e8471-d965-4880-bae5-e881aa93bcb8", "sighting_of_ref": "indicator--e80a89fd-f87b-4a44-a2a7-52fa611557c8", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fe044c-1b4b-4233-a679-da9bd52dbf63", "sighting_of_ref": "indicator--7ee00b78-239f-4859-987d-6505cd93200c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56eb987a-b25f-4bbd-b731-a8bdeadbe67d", "sighting_of_ref": "indicator--7ee00b78-239f-4859-987d-6505cd93200c", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf449b0-6361-4fb0-ac83-aa5341db62e2", "sighting_of_ref": "indicator--5b404b6f-2a8b-424c-935e-f729ac18c90c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d90291-0181-4eb1-b2ee-8d02e105da25", "sighting_of_ref": "indicator--5b404b6f-2a8b-424c-935e-f729ac18c90c", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bd93d8-1f66-4079-b38a-2564a7efbf69", "sighting_of_ref": "indicator--9068fbc6-a8dd-45c7-b098-387b7e9efcad", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa884dd-8acd-4849-ace5-af79467a93ff", "sighting_of_ref": "indicator--9068fbc6-a8dd-45c7-b098-387b7e9efcad", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b210b282-1259-4507-97d0-732b16f9f0b4", "sighting_of_ref": "indicator--9068fbc6-a8dd-45c7-b098-387b7e9efcad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d8bdad-3ce8-4893-a0e4-d75a2579ec1f", "sighting_of_ref": "indicator--9068fbc6-a8dd-45c7-b098-387b7e9efcad", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa6571d-c185-4b24-b40d-b2fe29aebc38", "sighting_of_ref": "indicator--c5a8a8ac-64c6-4d78-974d-ab1b0eddadcd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01697ec5-e0a1-4e3a-958c-335e325221cd", "sighting_of_ref": "indicator--0153def9-b180-48bf-a4a0-758eece6dc4a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bbceae-827d-40cf-b6ba-8f067e514499", "sighting_of_ref": "indicator--dc324a39-5136-42e5-97ed-0974cb0de511", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78f47f0-6a43-4923-8c6d-ceedd13965ec", "sighting_of_ref": "indicator--dc324a39-5136-42e5-97ed-0974cb0de511", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4965f888-618e-4a66-a0cb-025c177f4340", "sighting_of_ref": "indicator--e4d3b469-01c5-4055-9cd3-7a637bf0e577", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05c1fc9-4d0f-440a-8ae3-4fc9c5386b05", "sighting_of_ref": "indicator--e4d3b469-01c5-4055-9cd3-7a637bf0e577", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dce3469-08ad-4a97-85ec-7b13e3c252b8", "sighting_of_ref": "indicator--e6d3a183-96b8-47cc-8a18-a25e3b57c5d5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b767baa1-db27-4d9e-8d56-8d4fa9ae7633", "sighting_of_ref": "indicator--1d74088f-13bf-4eb9-97bb-539629656424", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bab814-8e9d-40a0-89b9-f72e8aa92066", "sighting_of_ref": "indicator--1d74088f-13bf-4eb9-97bb-539629656424", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b62cd0-47e9-4570-bb41-93d6c86afa6d", "sighting_of_ref": "indicator--1d74088f-13bf-4eb9-97bb-539629656424", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97dc35c0-fe05-4456-8f87-6c6e084af8dd", "sighting_of_ref": "indicator--7eeb0d4f-1b72-4264-893a-fba5fc7f0361", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c0515f-74fc-4b0e-9eca-6017aa6de0bf", "sighting_of_ref": "indicator--00c3848f-bdbc-45d8-970a-c64e1d97c215", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ede23e-ac67-4dfe-975b-0bbcb37cc872", "sighting_of_ref": "indicator--00c3848f-bdbc-45d8-970a-c64e1d97c215", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24dc8d44-bce3-4804-b5b9-907424f5592c", "sighting_of_ref": "indicator--00c3848f-bdbc-45d8-970a-c64e1d97c215", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da59cb3-0a78-4635-a06d-6d8229241e2d", "sighting_of_ref": "indicator--751f1d92-1994-43a6-a515-c623b944f7f7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7665db67-0f5b-43b3-adc5-dcdfeb36527d", "sighting_of_ref": "indicator--751f1d92-1994-43a6-a515-c623b944f7f7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e0877d-2263-473c-8ddf-1b2de7e235f2", "sighting_of_ref": "indicator--751f1d92-1994-43a6-a515-c623b944f7f7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0930e0af-d51a-4532-a8b3-474e20b00de8", "sighting_of_ref": "indicator--2f459b98-70e8-4bfe-8a57-25d9a913b1e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95391714-3c51-49d7-b2aa-c700c4bfaaeb", "sighting_of_ref": "indicator--47008558-1421-430d-821a-bbc58f6ed7dd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dab59eb-218f-4176-90c8-027d680b4a62", "sighting_of_ref": "indicator--7bf1df29-0bcd-487c-b616-69c75ef7b9ed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ef46df-6ae7-4ff6-9b1e-239e844fd95b", "sighting_of_ref": "indicator--bbcbdf77-f1bd-4b2a-b382-e94f3e3ea8b3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ca9cc0-433a-45ef-b141-7d9448a44266", "sighting_of_ref": "indicator--097c4d86-2f93-4192-a442-6dd434724a1d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f254d372-ed08-4200-ac12-2300629ebc33", "sighting_of_ref": "indicator--7bee79c4-bd04-4e9a-aaf0-a17fa0394092", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c519c78-2657-4ac6-9b4d-68658499af31", "sighting_of_ref": "indicator--f1162d37-17a1-491c-93c7-b7b5cf46dbbf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53821813-5383-494f-9aac-bef1ebf828a8", "sighting_of_ref": "indicator--96358761-f20a-413e-9206-7c11e51e68f6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9f754e-271a-472e-b78d-39781a212107", "sighting_of_ref": "indicator--fcc00776-ac21-43cd-a6b8-6c630aef40c3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d01f8c-9023-4714-ad01-d634f3816145", "sighting_of_ref": "indicator--5c3f3ae0-7189-4865-821e-cf60e1dad55a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6d7244-d324-4a49-b915-abe842adcdb1", "sighting_of_ref": "indicator--135f8102-78f4-474e-9d30-f647fd22e67d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0853842-72d0-440a-b80b-d12b0feeb6bd", "sighting_of_ref": "indicator--135f8102-78f4-474e-9d30-f647fd22e67d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7464493-d344-4a31-b111-2596df0d8f72", "sighting_of_ref": "indicator--135f8102-78f4-474e-9d30-f647fd22e67d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66541b8e-610b-4887-8b2a-f957b455754f", "sighting_of_ref": "indicator--f5db96a5-8904-4d47-969f-06850daf352b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d921f971-cd1d-485b-b447-1d51b48b71ef", "sighting_of_ref": "indicator--0ab73a6e-5cba-4793-b68e-b98eca50737a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0524d0a6-4616-4636-ad49-7f064f9d339b", "sighting_of_ref": "indicator--fc68a6d9-7c04-47cf-be6b-d3036776ad14", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095ff26f-060f-4be6-84d5-944dd495586f", "sighting_of_ref": "indicator--4879f5ab-2cf7-42de-a0e6-1d8be111ce50", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e186cfa9-7f14-45f7-a694-e3007b926769", "sighting_of_ref": "indicator--4128b201-b8fb-4bae-9876-9cede373d10a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac403582-1eb7-426c-a9bd-ee1530cbcd7e", "sighting_of_ref": "indicator--2363aa8a-f146-41a8-9e4f-ef96c8bf25d9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7ec9d4-acd0-4e16-a083-9420570862f2", "sighting_of_ref": "indicator--6d1b3cb7-0542-4e25-b47a-2e3f0d0ea42c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4bf8ce-0a17-44f4-80f0-ca8d5b26ab6d", "sighting_of_ref": "indicator--7501cbe0-833a-4076-b9ac-1cce08645ccc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249aeef1-a068-47fc-b55f-5b212172b1e8", "sighting_of_ref": "indicator--01763189-e610-4a18-9244-7ed71cd7acd7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6519d882-bb7c-47c8-818a-c5c8d31d530c", "sighting_of_ref": "indicator--32f4e40b-9ecf-4a71-b0e8-f91aff049d55", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fff932b-0efe-44f7-ba0b-ce9b359ca7cb", "sighting_of_ref": "indicator--499ff6ff-f54d-4eef-ae2c-2e35bac1c814", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a3408d-93cd-41ca-b20c-940136a41f72", "sighting_of_ref": "indicator--e6a94594-703d-491e-86f0-626233ac5196", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900b0d01-d6e7-4099-a760-83609468bc33", "sighting_of_ref": "indicator--e6a94594-703d-491e-86f0-626233ac5196", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf5ac62-ece3-4db4-b6c1-23f85dd1dc7c", "sighting_of_ref": "indicator--cfb772e4-91cb-4fcf-b5f4-7ea028df41bd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd76a3ae-b811-4092-8741-28bf19b5d0ba", "sighting_of_ref": "indicator--d5781084-914d-443d-8679-3c9d9f8263e5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10103b42-6f10-4316-a0b3-5eb9ee832b0e", "sighting_of_ref": "indicator--d5781084-914d-443d-8679-3c9d9f8263e5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43b870b-da92-474a-8195-a336d23677fc", "sighting_of_ref": "indicator--d5781084-914d-443d-8679-3c9d9f8263e5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622c8410-c936-45f2-a588-986496068cb0", "sighting_of_ref": "indicator--9d9b9b8d-c452-4dc8-9a3d-3024b707ec92", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496bcfa6-49dc-46ae-9072-54080deb3ab0", "sighting_of_ref": "indicator--2f1c84e3-164c-425a-967e-01222a9608ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ccd449f-c49c-4531-8cf1-4cf28b544713", "sighting_of_ref": "indicator--3d1faf13-c698-4a82-8567-4bb38e4ceff2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad2ea0d-16b8-4900-ade2-634f3f329eff", "sighting_of_ref": "indicator--3d1faf13-c698-4a82-8567-4bb38e4ceff2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9fece7-a32d-4c45-a16f-a4fb9b652c1d", "sighting_of_ref": "indicator--6124f3c6-1582-4178-8466-77c8d80235a2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6077cb9-8af5-4762-9dc6-4db12af8b88c", "sighting_of_ref": "indicator--b362a21d-62f9-412d-bf52-89f1867b8514", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce97d301-3532-4145-abf5-e785e8098632", "sighting_of_ref": "indicator--b362a21d-62f9-412d-bf52-89f1867b8514", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d9fb47-b6a2-4c37-ae75-6425ba0d69b5", "sighting_of_ref": "indicator--b362a21d-62f9-412d-bf52-89f1867b8514", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01df0163-fdf7-4add-99cd-363a19a4496e", "sighting_of_ref": "indicator--23cee885-c6fb-437f-996f-e1814b5648ec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec51036-e7b5-4094-b175-edeedac23d42", "sighting_of_ref": "indicator--23cee885-c6fb-437f-996f-e1814b5648ec", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3adb9a-efd3-4c93-8119-4f3b924ab779", "sighting_of_ref": "indicator--23cee885-c6fb-437f-996f-e1814b5648ec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2dad425-6b17-46c1-8b6b-11c1696a9276", "sighting_of_ref": "indicator--22b38666-c214-4bc9-907a-b64d4cc46a4e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827825be-30a7-47ec-a3d4-cb6ccce5e14d", "sighting_of_ref": "indicator--22b38666-c214-4bc9-907a-b64d4cc46a4e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14979e1-8545-4fe4-af7a-ace736fd1180", "sighting_of_ref": "indicator--e43fd8dd-3de4-4141-b1b9-a83d291ce112", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642a0c93-45f3-4daf-b287-31d1bb099809", "sighting_of_ref": "indicator--e43fd8dd-3de4-4141-b1b9-a83d291ce112", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d7c35f-5929-4c10-8dd5-7f2d965db535", "sighting_of_ref": "indicator--7cbdd8ea-0781-461a-8820-3d14124da1fd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6e6c42-bd7b-4070-86ad-112b862c2ab4", "sighting_of_ref": "indicator--7cbdd8ea-0781-461a-8820-3d14124da1fd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b34a71f-e4ca-4d9c-8088-0da3d280a35f", "sighting_of_ref": "indicator--7cbdd8ea-0781-461a-8820-3d14124da1fd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95ffcaf-ff07-4b2a-a6eb-1ae4272ddf35", "sighting_of_ref": "indicator--894b7dd5-5623-4514-891d-c03aca675b14", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2ca164-1805-4edf-9f01-ca32088d852f", "sighting_of_ref": "indicator--752437a8-1cb6-4ad5-8251-45834ece2d7b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2486ac7e-89b0-420d-8ca8-421d5cd60e45", "sighting_of_ref": "indicator--66a56d15-fbf7-408d-91ee-805649cc1242", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d714e86e-738a-4c06-af9d-e677c4cf834c", "sighting_of_ref": "indicator--66a56d15-fbf7-408d-91ee-805649cc1242", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1bfd8c-d670-40af-a359-09c09d034d4e", "sighting_of_ref": "indicator--66a56d15-fbf7-408d-91ee-805649cc1242", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d479d0c5-f2e4-401d-8e28-ebe099c44206", "sighting_of_ref": "indicator--cdd0c38b-9a1a-4f9f-8570-b8a14ad4eded", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9f7cdc-a2e8-48eb-ba9b-186b70614a22", "sighting_of_ref": "indicator--a3c729e7-f27c-4d1e-ba79-b0d13933da23", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e924a92-ca14-461a-8fe5-837af1f393c6", "sighting_of_ref": "indicator--ea9a0c83-8e1c-4612-a8e0-4dbeb5005342", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efbb4f1-974b-4338-997a-c05fa2e20fe7", "sighting_of_ref": "indicator--7f2707bd-513a-4a31-9b8f-6761d19fe425", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a9bc72-0fa6-41be-a9ce-71c157f37a07", "sighting_of_ref": "indicator--f3a6d5d1-5dc0-4329-984c-c17b7e47848d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d933411-a25b-4a1e-a942-043636f3ff7c", "sighting_of_ref": "indicator--094477ef-34d7-4525-81f6-11ce90e12e92", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309880a7-d6e1-47af-b85b-3a8b441a85ae", "sighting_of_ref": "indicator--dc30cf30-cbf5-445e-b771-ed2a79c7a170", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7e5b9b-28a6-4594-b029-154423b81c0a", "sighting_of_ref": "indicator--34083029-c19b-4058-a0aa-54dc7aa27203", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--decd49c6-dda6-4a67-8775-c51b2b5811ad", "sighting_of_ref": "indicator--34d63f02-dae7-4880-a975-75f6f9287f21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91af7ecf-bd2b-40b3-a3bd-8e760193ddaf", "sighting_of_ref": "indicator--960eebe5-ca70-419c-8066-982f38efe396", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95a1ba0-6ecd-4d09-b59d-823f10015a91", "sighting_of_ref": "indicator--4eac9521-ff4e-4630-a556-9fe3b8044e09", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a7aa26-996c-4364-bcff-bfb2f3045148", "sighting_of_ref": "indicator--32f4adaa-c5d9-476d-a246-eb185399e395", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a35f9a-4832-4694-884d-d32189b295ca", "sighting_of_ref": "indicator--68853dd1-6adb-4e77-8607-189759611324", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b27c6a-4486-4604-af65-8ae52f9b93ca", "sighting_of_ref": "indicator--9ebe835b-5fdc-48c3-a1be-99f58c8c4849", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3d7ccd-43d1-4cc3-a6a4-a167e6d4beb8", "sighting_of_ref": "indicator--39ab38c7-a6ab-4f59-9716-50118f54a879", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779ee302-2338-43df-9718-38c1f6eb45f5", "sighting_of_ref": "indicator--5931c1a0-a86f-41e7-88a5-2919d511100c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bf6269-b358-4e52-9f98-fcac7f7c664f", "sighting_of_ref": "indicator--08bb0a7b-7522-4897-9854-15c24fdee9ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf4969c-8f4d-414b-9f28-d680f669f7c5", "sighting_of_ref": "indicator--7401fbea-4f2d-4e5f-bd9d-7832eb20681d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24918371-10f8-49c2-95bc-0703d5a5b534", "sighting_of_ref": "indicator--da7498e5-d010-4be0-b5df-062ca5f2810e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723aff32-547a-4533-91a5-cfd6fc9ad83b", "sighting_of_ref": "indicator--a7704eaa-3923-424e-b8ec-35844f3f0fde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3533a20d-d223-425e-866b-a39fb69d9f4a", "sighting_of_ref": "indicator--39f74523-1849-405e-a020-a5a80e039879", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a28a1f2-93f2-48d6-9a51-41bd89328271", "sighting_of_ref": "indicator--9c8dd781-a0c9-4ce0-bb7d-27faad04efa0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2494f132-973a-4650-9b18-21f16d9db074", "sighting_of_ref": "indicator--5cee498e-f701-4565-b11d-e098a1183d62", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae7bab1-3f5a-4219-a465-f4172a49f04f", "sighting_of_ref": "indicator--96436c9a-b7ee-40e0-baec-6a2b4ef47087", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1b262e-f52a-4d7e-aae1-85f63c27ecea", "sighting_of_ref": "indicator--96436c9a-b7ee-40e0-baec-6a2b4ef47087", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfd0780-8977-4690-bb89-d209351ea4b4", "sighting_of_ref": "indicator--7f3cc81a-5770-41a1-a012-452028307fb7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8487b7ef-6ae2-49e5-9348-1b0d46a870e3", "sighting_of_ref": "indicator--e8ccfbf8-f7e2-4915-9920-751160c3434a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043e5cb7-1c14-44f6-a7f5-959f750838c2", "sighting_of_ref": "indicator--15d1161b-a307-4c9f-bb7a-2c287eacf3dc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b2f980-3858-4ef1-b3f0-bf908a9f3180", "sighting_of_ref": "indicator--1b4765a3-ba2c-470a-84ff-853af1dbe207", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104a78ea-4b65-40b1-8313-af22a6506b9d", "sighting_of_ref": "indicator--ac0acd33-3742-403e-8c32-408c4f1dfd67", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad157efe-7dfa-43b7-9887-44121c4c6465", "sighting_of_ref": "indicator--00c0e8be-70e8-48e2-873f-9725ffc3b92f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0872898-1f3c-449e-a049-0c9ee29860e6", "sighting_of_ref": "indicator--64a48e6c-5092-4e19-9d5c-165dcd5c297f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a486994-95d0-4125-a396-bad4ed6e5785", "sighting_of_ref": "indicator--d0e4e916-9739-473c-a4d0-a7a8da47fe83", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848bf087-2a97-4fcd-b76c-4d51862dd406", "sighting_of_ref": "indicator--4048047f-a4e9-41d2-b6d8-bf9c538891e6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8eb0b43-1f6d-4ea9-b9d8-7536bfa1c9a2", "sighting_of_ref": "indicator--1274ef25-1948-4f6f-bfcd-c486379c40cf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7458a4-3c80-41d0-8bab-098658abe575", "sighting_of_ref": "indicator--2f1b8c70-f6cc-438d-a977-9fd6f92e39f6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fbce4b-1fe7-4ace-bd7b-7594cf429b20", "sighting_of_ref": "indicator--f1d1597a-7d2e-488f-928f-957f81c12662", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be851e54-32c3-4226-af24-6bcbf331529a", "sighting_of_ref": "indicator--827d11ab-1d30-46d5-9f6e-983907a44083", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd74d0f-966c-408d-b5c2-c813f524901a", "sighting_of_ref": "indicator--ca1d15d3-76d3-446c-b2c8-0a25aa2a953e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf387784-6d4f-45b2-b2b8-90fb6a30de08", "sighting_of_ref": "indicator--5d5767ff-8579-487a-990f-6769d57afa9e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc563f5-9529-4216-8c7b-086a66b8c0f3", "sighting_of_ref": "indicator--c84d29f7-abb7-4477-a5ca-320ab6411415", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab13746-eb8d-462b-a0b6-332bfa118d1e", "sighting_of_ref": "indicator--3b89e519-2f96-4ca6-add6-992197dc894e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ad93eb-3eed-4e2e-97bf-8851ae17b7bf", "sighting_of_ref": "indicator--bb497f08-91a7-4ed8-9bd6-40c367a5fcb4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6a0cb8-6423-4a08-96ed-38fd3f018e44", "sighting_of_ref": "indicator--33451ddd-da5a-49eb-bc69-885ea3893a5a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbd8cb3-3b09-4db2-91fc-5d5894d74457", "sighting_of_ref": "indicator--418a1a24-ddd5-4f9c-8db8-b9936b7da3f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d55714f-4833-40d7-9bb3-262899393173", "sighting_of_ref": "indicator--60c5401e-8c2f-4cf0-99e9-da5892c170b6", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c501eb98-0b49-4f75-bc08-d348afafe16e", "sighting_of_ref": "indicator--c6927fd3-0e4d-4c69-a70a-5aeb7d28ca30", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76990d8-dcb8-4482-b55f-9f38afb3228e", "sighting_of_ref": "indicator--2bb58ce8-7204-4f6d-857b-db0b7cb307dd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc03429-8ae4-495b-876f-c2f51786aeb5", "sighting_of_ref": "indicator--c9f51b53-af8e-460f-a564-5c72f5deb470", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b932b3-f7e7-4668-b2cc-7b4f5bbe44bf", "sighting_of_ref": "indicator--3851a00f-d421-4881-9485-9a8e5494e1ee", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4682efe6-473d-45e9-bac7-51c1653de462", "sighting_of_ref": "indicator--1d5953ca-6e2f-4d39-8bad-f08dc7f45475", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc03d116-7b54-4752-86fe-8badc0e57863", "sighting_of_ref": "indicator--87c9dede-7589-4394-8126-31d824a9d2fe", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385c1703-7945-48a4-8d61-fc8c0da1c61f", "sighting_of_ref": "indicator--ca3a86af-8d9e-4aa2-aaa6-dcce4bf43ec2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf6f4f5-493e-4d21-b74f-d055b70a8956", "sighting_of_ref": "indicator--83d7c414-77b0-4bd6-96cb-89204c57c424", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5040ecc2-5408-4bf3-81bf-ced777c6e410", "sighting_of_ref": "indicator--5902559a-f83d-46f6-987f-a8dcedc88eed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7343ae74-5d5f-4ae2-ab4b-d78a78dc5421", "sighting_of_ref": "indicator--f8538704-975b-45ab-bf8e-8ef845c69e1b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d092a23-c7f1-43f0-9eb3-05af7f3e727a", "sighting_of_ref": "indicator--49c767ef-cddc-4459-8abf-a69675857e0c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b252e07b-5ce6-493d-8ff7-d3dbcd05f4ca", "sighting_of_ref": "indicator--ade394d4-c141-47f9-bf71-240483ca3542", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e6920b-5b89-4202-914a-30e25a8d4de5", "sighting_of_ref": "indicator--043c25f2-cd95-4d76-bd0e-c27f4f131e2b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b6c5f7-e222-4128-ae96-29ecf2ddd1b1", "sighting_of_ref": "indicator--a2527d11-0e5f-49e5-b4c5-937beaba348b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7981d1c2-60c4-4455-8c8a-b6d72e71beac", "sighting_of_ref": "indicator--5a7bed36-8dc7-4ce0-af43-c24f43a6f895", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da1726f-98e5-4c58-88ba-c4afffc649be", "sighting_of_ref": "indicator--ba9aee2c-bcbc-4ad4-b5f1-f86c576b9f8e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20744b96-3249-4e63-91d8-0327a6711c31", "sighting_of_ref": "indicator--11c1eb43-053b-4f42-a03a-6ac8d15621ac", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23310b1d-6432-4879-9451-58b6b0829e3b", "sighting_of_ref": "indicator--aa1fdc93-c67b-40df-a992-fa99bc13372d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a38710-ee79-4555-be9a-f7a7a73c77f1", "sighting_of_ref": "indicator--8a22ec7e-59bb-42c7-9685-395f415bf8eb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f6b6ce-ae38-4ee9-9411-653f9bb583a3", "sighting_of_ref": "indicator--c86b98fd-9af4-4791-9408-78369de0f8d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cfecba-7521-41bc-969d-d1c255820561", "sighting_of_ref": "indicator--5394af17-db35-43f2-95a3-6b852068af86", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b047d2a-a3f3-40d3-a8b1-3af30f347342", "sighting_of_ref": "indicator--73d14829-40c0-4eb3-99b1-c87eb1eba932", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7b398a-7d29-42f9-9e49-7da07efdc88b", "sighting_of_ref": "indicator--fb33a1cd-259c-4e82-9012-6c3561d6026e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7532c5d6-d304-42eb-ba77-f9a83ca513f9", "sighting_of_ref": "indicator--cb1c8842-5bfb-46cf-a287-83d17b1de97d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e57b57-57ca-4ab7-9141-9996fc745aa4", "sighting_of_ref": "indicator--8276f515-af66-43fe-b0b2-bbc95f9ceffb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efcef2e-a772-4461-9ac8-eb9795897ace", "sighting_of_ref": "indicator--c46947af-67ad-4f65-ab18-0e4960a4f1ca", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547ed8b3-c99d-4ec4-9367-f25a5b27bd57", "sighting_of_ref": "indicator--b94364f6-9527-460b-9e3e-638ef5c3262d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a98e72e-b996-4e7a-be7b-70d0229853ce", "sighting_of_ref": "indicator--50b00495-ca39-4f3b-9c61-d98103968cf1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2ce81c-3dfa-487e-853d-fa0dfefc4c4c", "sighting_of_ref": "indicator--01ab7789-3f72-4738-ae8e-f681d3021814", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450b02e4-29d3-40c1-83e5-cff34a38a045", "sighting_of_ref": "indicator--01ab7789-3f72-4738-ae8e-f681d3021814", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a11980-0492-43e4-95b2-b072a77ce2e4", "sighting_of_ref": "indicator--638ba679-bda9-4f1b-90b5-bcbaa0d047ba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6230f5-3144-4233-9d0f-d0f7371fc433", "sighting_of_ref": "indicator--638ba679-bda9-4f1b-90b5-bcbaa0d047ba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18849e3a-91e2-4a09-80a7-2ade4438e6a3", "sighting_of_ref": "indicator--bbe49b45-ae46-49e4-bb57-bb16025e3fe8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f095fccf-1b47-4834-aed4-82636af77ed7", "sighting_of_ref": "indicator--bbe49b45-ae46-49e4-bb57-bb16025e3fe8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e36bcff-de87-4314-bdcb-d4ab1858b2f4", "sighting_of_ref": "indicator--c238a266-16c2-4ce8-808b-1f9125a978b1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f45d7c-1efb-4c20-b588-6b7e9ca9687a", "sighting_of_ref": "indicator--c238a266-16c2-4ce8-808b-1f9125a978b1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb863efa-22a9-4c78-b54c-6c819cd6c4fa", "sighting_of_ref": "indicator--68447d37-96b7-4ae1-8b81-3c7770c94934", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d6e7c0-b0d5-462d-9e1f-7c1b59a1c740", "sighting_of_ref": "indicator--68447d37-96b7-4ae1-8b81-3c7770c94934", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdade654-0932-4996-b1e2-52c951e64f0a", "sighting_of_ref": "indicator--a37b943f-5d1e-45ad-abdd-9e188ba1bc81", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ebe854-b3c3-4b61-898f-f93f8aa248ec", "sighting_of_ref": "indicator--a37b943f-5d1e-45ad-abdd-9e188ba1bc81", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854abd59-69e4-481a-8afd-560ecad43957", "sighting_of_ref": "indicator--8196eae7-a2d8-4054-a47d-0375cf304a55", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b653b6df-3f55-4aa5-99fb-9f9c6909e377", "sighting_of_ref": "indicator--8196eae7-a2d8-4054-a47d-0375cf304a55", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eefa162-a5f9-4dca-ad66-a537f9218124", "sighting_of_ref": "indicator--9eec0735-485c-45f4-a167-519fcda83b6b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aac02f2-904b-49ce-bb12-43c8b9ca6524", "sighting_of_ref": "indicator--9eec0735-485c-45f4-a167-519fcda83b6b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d07b85-58a4-44f0-a157-9998b8c50f23", "sighting_of_ref": "indicator--2d9f8028-1656-402a-9439-5fc7f53bca46", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5732f8d5-6676-49aa-ada9-7e2e91801861", "sighting_of_ref": "indicator--2d9f8028-1656-402a-9439-5fc7f53bca46", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd7ff1c-e62d-41e0-a347-4ee31c62102e", "sighting_of_ref": "indicator--571c0a8a-6d0e-41f5-9a1a-22a0a0a15d92", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d568260-453c-45f2-b263-c68b4d3231eb", "sighting_of_ref": "indicator--571c0a8a-6d0e-41f5-9a1a-22a0a0a15d92", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1283741f-1c0b-48ee-8bfd-3aadf624bd76", "sighting_of_ref": "indicator--874be406-9817-4326-8e2a-dd679702d421", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1574f0b8-68c6-41d1-a042-12ed2ca237be", "sighting_of_ref": "indicator--874be406-9817-4326-8e2a-dd679702d421", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6847d0-ec9e-413f-a12f-3a5204677278", "sighting_of_ref": "indicator--6b739e50-fb75-416b-8d8f-4bc84fb06f7f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d510aba3-6318-4183-813b-f64fa11ad8e7", "sighting_of_ref": "indicator--6b739e50-fb75-416b-8d8f-4bc84fb06f7f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c47bd1-43e5-46d4-a485-806621becaaa", "sighting_of_ref": "indicator--cbb32a6d-ab02-463b-8025-f8b5cd0371e6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b245244-ea03-47d6-903e-b1e82f839a82", "sighting_of_ref": "indicator--cbb32a6d-ab02-463b-8025-f8b5cd0371e6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96a8090-ed86-4a25-90a3-9aa87aafd7ff", "sighting_of_ref": "indicator--ab8d1179-5432-45f1-ab0e-fffe6f3033fe", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29693c5f-44dc-4ff0-8c11-aa8beeb7095d", "sighting_of_ref": "indicator--ab8d1179-5432-45f1-ab0e-fffe6f3033fe", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790b5dde-0ecf-4c14-b1e0-83664318ee4d", "sighting_of_ref": "indicator--57c4a983-dbde-45c4-9395-1b3dd057e800", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7378878f-1ebd-452a-a25c-0e9e201121e7", "sighting_of_ref": "indicator--57c4a983-dbde-45c4-9395-1b3dd057e800", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1be2f1-32fd-4dd4-bb39-e208ecc2a69c", "sighting_of_ref": "indicator--8efed5f0-9c3b-4f9e-b6d6-5ea9eaf32dd7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fb2511-53f9-4f1a-931a-e75e2e9ba67e", "sighting_of_ref": "indicator--8efed5f0-9c3b-4f9e-b6d6-5ea9eaf32dd7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fec6d34-8cd7-4f63-b1b0-a2040a973ed3", "sighting_of_ref": "indicator--1a41b1a4-ac6a-44ab-a503-83843200af48", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67461cb-cad7-4288-a066-a880b9be7618", "sighting_of_ref": "indicator--1a41b1a4-ac6a-44ab-a503-83843200af48", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a156c387-16a7-49ad-9f61-efccf501743c", "sighting_of_ref": "indicator--6c17579a-1d8a-40eb-ba2d-4f6053a14997", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91989bac-94bd-438a-ace7-ac9160e6598a", "sighting_of_ref": "indicator--6c17579a-1d8a-40eb-ba2d-4f6053a14997", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e2eaaf-ae25-4813-9ba7-c42588995f2b", "sighting_of_ref": "indicator--bd448b18-f4bb-465f-9240-01c77cb71f7c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8898bada-42ff-40dc-acd6-9d6fcd689ea0", "sighting_of_ref": "indicator--bd448b18-f4bb-465f-9240-01c77cb71f7c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3401399-f3d9-4057-9b1a-b8e77758d508", "sighting_of_ref": "indicator--5e47e968-2d5a-431b-9ed3-087c843e8532", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c12faec-785b-4cda-a74d-7340a3528ed7", "sighting_of_ref": "indicator--5e47e968-2d5a-431b-9ed3-087c843e8532", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d28f9e2-b39a-49a9-b50d-4d522b7e3efc", "sighting_of_ref": "indicator--b1119f61-992f-49ec-ab2e-5e8f74b94edd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5a67b7-9ede-45ee-af54-b8dc36e1d839", "sighting_of_ref": "indicator--b1119f61-992f-49ec-ab2e-5e8f74b94edd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca41984-3ecb-4d5f-9214-125d5e641af3", "sighting_of_ref": "indicator--95fa7cf2-e995-436d-ae29-e3abcd2584ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d5fec8-e77a-413d-9bc1-8daa2b277ae7", "sighting_of_ref": "indicator--95fa7cf2-e995-436d-ae29-e3abcd2584ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf2d0b3-e873-4f23-802a-9691d86382b0", "sighting_of_ref": "indicator--0ac7e24b-e9cd-4469-939c-650ae92eb84b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d678ec-8670-4e75-9f0f-f704eedcee82", "sighting_of_ref": "indicator--0ac7e24b-e9cd-4469-939c-650ae92eb84b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3f13cb-4be5-41c0-862c-c6e841d0ee17", "sighting_of_ref": "indicator--7d1a5e64-b949-478a-8558-c37417415e7e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e4484a-9851-4188-b8f0-6dbaa63db583", "sighting_of_ref": "indicator--7d1a5e64-b949-478a-8558-c37417415e7e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3d998b-a1f3-460d-b547-142054699501", "sighting_of_ref": "indicator--8acbe812-1c88-4db8-825b-6b34fd6723a8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a6491c-c38d-4cae-bc89-fcc3ddac768c", "sighting_of_ref": "indicator--8acbe812-1c88-4db8-825b-6b34fd6723a8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c90a2d-3fde-43f4-920e-7c9384976dd5", "sighting_of_ref": "indicator--9e9e98b8-2ae5-4744-b575-43ddd79d7695", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee73ce8-8c88-40ea-8eec-51c0b19c051f", "sighting_of_ref": "indicator--9e9e98b8-2ae5-4744-b575-43ddd79d7695", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebeef52-429d-4cd8-9248-302d0083937d", "sighting_of_ref": "indicator--5a5755d7-c0dc-49c2-a4cf-dc02b28a28b0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cc1183-cd1c-4647-9391-54a9980adec1", "sighting_of_ref": "indicator--5a5755d7-c0dc-49c2-a4cf-dc02b28a28b0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b2d4d3-d3d4-48df-b646-ac0d4311b1cc", "sighting_of_ref": "indicator--edd19d2c-ca39-4adc-bf57-2687b2171736", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc6b930-7ea0-4d9c-9718-b3c500709c61", "sighting_of_ref": "indicator--edd19d2c-ca39-4adc-bf57-2687b2171736", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21329ad-6e83-4aba-b742-62ef49984768", "sighting_of_ref": "indicator--0ec6cad0-7df1-4a9a-9825-ae205cdfaeb6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a927eff5-aed5-458d-8f81-1fe55d196452", "sighting_of_ref": "indicator--0ec6cad0-7df1-4a9a-9825-ae205cdfaeb6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2661e4a9-01b3-4f1b-9550-00debb1dc8cc", "sighting_of_ref": "indicator--3edf0b16-193e-4c80-9504-d63b98ce50bf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5dedf6-e60c-4953-82db-f98a774458d2", "sighting_of_ref": "indicator--3edf0b16-193e-4c80-9504-d63b98ce50bf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998de818-ffcf-4890-91a2-fa415060463d", "sighting_of_ref": "indicator--e4d16b28-edb9-455e-85aa-ac61d6cc7946", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de3283b-7087-474c-8cd9-0e2aae38a046", "sighting_of_ref": "indicator--e4d16b28-edb9-455e-85aa-ac61d6cc7946", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27f64b0-518c-4612-99d7-b672b14cd89e", "sighting_of_ref": "indicator--2c307c60-3244-40b6-b08b-a7e984de1cdd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a3f9b2-3815-4520-bc0a-fd5420d26687", "sighting_of_ref": "indicator--2c307c60-3244-40b6-b08b-a7e984de1cdd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c9a900-8c75-43f7-9e89-e9a6b02ea5af", "sighting_of_ref": "indicator--e2f900c1-ce68-4984-b320-bcf3dfbe21df", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f672229-705b-46a1-9cd0-709f1585e7e0", "sighting_of_ref": "indicator--e2f900c1-ce68-4984-b320-bcf3dfbe21df", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be082ea-7175-4bd8-98d0-885c9cf4dd56", "sighting_of_ref": "indicator--e62b3bd7-6b08-47c3-ad8b-b5fc65c48a56", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82eb356a-86ba-4de5-a1dc-82937091b453", "sighting_of_ref": "indicator--e62b3bd7-6b08-47c3-ad8b-b5fc65c48a56", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00099f6-e885-47c8-86a0-9e39289fd6e2", "sighting_of_ref": "indicator--c971190f-3e70-4f2a-ae5d-98ca91daa128", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d661711-f917-4a8b-96b4-46fc48374666", "sighting_of_ref": "indicator--c971190f-3e70-4f2a-ae5d-98ca91daa128", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cb6926-68e5-413a-8c06-8ebd59e6ad71", "sighting_of_ref": "indicator--d49a1aee-8d12-4265-933a-2c371a1c7bf2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6ea6e0-03b7-40e2-a959-8926ce29d7d5", "sighting_of_ref": "indicator--d49a1aee-8d12-4265-933a-2c371a1c7bf2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ba6adc-1c7f-43e7-bde9-f515f498b77e", "sighting_of_ref": "indicator--3e16eea8-e528-4a28-91a6-d5101195bf65", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39985d0-2c90-4310-bd90-21744dd2cbed", "sighting_of_ref": "indicator--3e16eea8-e528-4a28-91a6-d5101195bf65", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0f5481-fcd2-465b-a712-9d9c7910d9b1", "sighting_of_ref": "indicator--db7509bf-48f3-46c7-96b1-3c46f42f2cac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf85616-6422-4d21-944a-a944b05d3c01", "sighting_of_ref": "indicator--db7509bf-48f3-46c7-96b1-3c46f42f2cac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795bb696-a2d7-43ba-940b-cd936a98c294", "sighting_of_ref": "indicator--482618df-3f31-4d2c-8b4b-d161db7a348e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298f21f2-c87e-4206-9c5c-dfd0dec9f1be", "sighting_of_ref": "indicator--482618df-3f31-4d2c-8b4b-d161db7a348e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bab88ac-7c79-4555-ad55-0bb1a196d79f", "sighting_of_ref": "indicator--2801b3ea-716b-4d56-95a9-f23d8208db3c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f5715c-6744-438f-ae99-6a57bf785cca", "sighting_of_ref": "indicator--2801b3ea-716b-4d56-95a9-f23d8208db3c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35bfce64-bb24-4ca3-baad-fcd417c8d68e", "sighting_of_ref": "indicator--8bb94978-3222-4066-9be5-b64783a070cc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e871f5ac-cffc-4181-8649-4c2f5af51537", "sighting_of_ref": "indicator--8bb94978-3222-4066-9be5-b64783a070cc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad2ae47-c05b-4d93-9457-8dec179d7ff1", "sighting_of_ref": "indicator--e59620ec-9e30-4171-9ae9-cbaa61a9e460", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77414eaa-d5ce-4efb-aaef-9e89e70fcbab", "sighting_of_ref": "indicator--e59620ec-9e30-4171-9ae9-cbaa61a9e460", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7540092a-29a3-4916-b1f9-9ff8f04f1140", "sighting_of_ref": "indicator--8d4f45fd-149a-4ae3-87b7-1b02f18661d9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8013b3-aa94-4503-97b2-fb13d803fa5b", "sighting_of_ref": "indicator--8d4f45fd-149a-4ae3-87b7-1b02f18661d9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3044a22f-dac3-4519-aec1-a8b4f1adae53", "sighting_of_ref": "indicator--e172ee35-f6c7-4c2a-8b3f-f68fc13e5080", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b556bc-c754-4a54-82ed-c9d626127c97", "sighting_of_ref": "indicator--e172ee35-f6c7-4c2a-8b3f-f68fc13e5080", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e20ddd-1eec-4fbc-a7c3-c7110c480605", "sighting_of_ref": "indicator--7750c5e1-eccc-48fd-bb2b-13b141822666", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c627b1d3-da12-440f-acdf-2d2ac2a78d8c", "sighting_of_ref": "indicator--7750c5e1-eccc-48fd-bb2b-13b141822666", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a52927-8b80-4cca-9b51-c7b452d9e411", "sighting_of_ref": "indicator--5ec01b2e-d561-442d-9466-3522cca8c32e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a258ef-805a-42fb-8898-13957c732603", "sighting_of_ref": "indicator--5ec01b2e-d561-442d-9466-3522cca8c32e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c51b5f-74d3-404b-96d9-da21b1c582e8", "sighting_of_ref": "indicator--c0404413-530e-4b9f-a7fa-959f6f649a48", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931dd32f-6db1-42eb-958a-ddac24ff6a71", "sighting_of_ref": "indicator--c0404413-530e-4b9f-a7fa-959f6f649a48", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab06f0d1-a819-4875-8496-411812778490", "sighting_of_ref": "indicator--09104cb0-5121-4991-b02e-63d47e167ec5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37c8dd2-4ab8-4a6c-846a-3198e2200282", "sighting_of_ref": "indicator--09104cb0-5121-4991-b02e-63d47e167ec5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab228073-d29c-4ed1-89f6-b00d9ebc04ba", "sighting_of_ref": "indicator--0baa56ca-52b4-40f7-a1af-b8c0b3b725b9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b273e2-22be-4ebb-8f96-4d4a273df4f6", "sighting_of_ref": "indicator--0baa56ca-52b4-40f7-a1af-b8c0b3b725b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0aca64c-099c-4132-a14c-c389443089b4", "sighting_of_ref": "indicator--006bc123-00b7-4525-a916-8400164c10ed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b4f44d-9a4b-4352-83ec-f67440066e14", "sighting_of_ref": "indicator--006bc123-00b7-4525-a916-8400164c10ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e628768b-30d8-4f53-b2b9-6e26b216f2ec", "sighting_of_ref": "indicator--0a5c9030-4fb5-485e-9457-9ffd5904fefb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1fadf9-f860-47c5-bb17-c7a0c3a189a6", "sighting_of_ref": "indicator--0a5c9030-4fb5-485e-9457-9ffd5904fefb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aeb697e-9118-444d-894d-376b043ad0f0", "sighting_of_ref": "indicator--77c80bb3-dc38-414d-8486-20cfb60e1676", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46725573-7bbf-4966-9cc5-4cdda44a9750", "sighting_of_ref": "indicator--77c80bb3-dc38-414d-8486-20cfb60e1676", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919db88e-2a40-4fd8-9e52-c88dd18209d7", "sighting_of_ref": "indicator--91457e78-5227-4daa-9f14-2567e0b0c9f6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8033056-18a4-464c-bc17-75eb64e0effc", "sighting_of_ref": "indicator--91457e78-5227-4daa-9f14-2567e0b0c9f6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f132be-474b-4bd3-a9dd-33e2e9424244", "sighting_of_ref": "indicator--1c43aad7-2c7c-416d-a049-d953f474cd1e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69f8a4e-0ba0-462c-b0e5-c17dcc7c9924", "sighting_of_ref": "indicator--1c43aad7-2c7c-416d-a049-d953f474cd1e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2112e240-183a-4074-b566-71c8c1548ae6", "sighting_of_ref": "indicator--87cb8d26-189f-4cd0-8f3c-c0c95c85dbe2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe4b325-415a-455e-abdf-f69461d5aaa6", "sighting_of_ref": "indicator--87cb8d26-189f-4cd0-8f3c-c0c95c85dbe2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6a0ae0-791a-467b-9b88-7e6294db7891", "sighting_of_ref": "indicator--c7991afb-8b15-4995-aede-8899b2611a0d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7881505b-9230-4590-a148-1f1c91e682cd", "sighting_of_ref": "indicator--c7991afb-8b15-4995-aede-8899b2611a0d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a5e9e3-befc-47c8-a41c-e9a6e8de6153", "sighting_of_ref": "indicator--5bc89877-ea7c-4c1a-8135-28e01a11fe1f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50e1fba-246f-46ab-a4b9-10e6db8dde06", "sighting_of_ref": "indicator--5bc89877-ea7c-4c1a-8135-28e01a11fe1f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac8077e-72c3-4571-925a-901b2e2d1d57", "sighting_of_ref": "indicator--40e86424-b965-49ed-8eab-1a237ee11bb1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96dea8b-7fc7-44dd-bb0d-ab1082ff24af", "sighting_of_ref": "indicator--40e86424-b965-49ed-8eab-1a237ee11bb1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9439d934-660c-4f1c-ba19-11fb059927e0", "sighting_of_ref": "indicator--260e8e49-0c8a-407a-af35-7fdbf47804ef", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36366497-9efd-465b-9f98-3c61aec2028c", "sighting_of_ref": "indicator--260e8e49-0c8a-407a-af35-7fdbf47804ef", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c85520-addc-4e05-99be-e4514f315dc3", "sighting_of_ref": "indicator--929dd9b9-8890-4989-a6d1-5cd25242a881", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e4e1d9-e509-42b9-ad35-fc0edecabfb5", "sighting_of_ref": "indicator--929dd9b9-8890-4989-a6d1-5cd25242a881", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e211891-cbb5-4eb7-8b97-596015f5e9ee", "sighting_of_ref": "indicator--957c89f9-1577-4ea5-85ff-ce902da64a66", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622c7615-c76b-4e26-a54a-fa8b13efbc80", "sighting_of_ref": "indicator--957c89f9-1577-4ea5-85ff-ce902da64a66", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe901c1-976f-46a4-a88d-1f6d52939c6c", "sighting_of_ref": "indicator--dbe8b96e-f484-4acd-a891-2a874edd760a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd4ff6d-6f7a-4b11-8e9c-ab554d64a65f", "sighting_of_ref": "indicator--dbe8b96e-f484-4acd-a891-2a874edd760a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47b1a17-45b1-4c5e-9770-94821ef2890e", "sighting_of_ref": "indicator--ac13456a-3c10-4e90-b7ba-4118a9896fd7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85376a7e-7364-4524-9c2a-af506b89cb6d", "sighting_of_ref": "indicator--ac13456a-3c10-4e90-b7ba-4118a9896fd7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bc8593-0688-4f27-a76c-23b9733abc08", "sighting_of_ref": "indicator--b4a6be5c-8b72-4865-8b60-b4c3b6a29379", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639a670f-dd57-4cf9-8032-4490068c30ac", "sighting_of_ref": "indicator--b4a6be5c-8b72-4865-8b60-b4c3b6a29379", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847aec50-68d0-402c-9bfe-2965b2740aef", "sighting_of_ref": "indicator--635bb491-2993-4c89-a414-c079a442f8a8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31dc203d-aa18-4fea-95c4-09859bca248b", "sighting_of_ref": "indicator--635bb491-2993-4c89-a414-c079a442f8a8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2952d800-a239-4afc-90f1-d3b6061be92c", "sighting_of_ref": "indicator--32e0c2fb-7262-491b-be76-5492063e1551", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10534aa-23c5-4ba8-b476-31aadd12eaae", "sighting_of_ref": "indicator--32e0c2fb-7262-491b-be76-5492063e1551", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9fb4ac-abe5-4690-8c11-89a91609a0d1", "sighting_of_ref": "indicator--55e65a08-3638-455c-a6c4-79ab2b4ec1b5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93533d8a-9fd9-4fe9-a878-76f56844be89", "sighting_of_ref": "indicator--55e65a08-3638-455c-a6c4-79ab2b4ec1b5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed5a1a0-e957-49a8-9c1b-91c278069c76", "sighting_of_ref": "indicator--3c1f6f2d-2d99-4064-bc49-48f848392d9d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da73f2ec-a243-4614-ae20-e78fa035cc96", "sighting_of_ref": "indicator--3c1f6f2d-2d99-4064-bc49-48f848392d9d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15dc966c-338f-487b-adf4-e362342e0518", "sighting_of_ref": "indicator--d586c58f-2ae8-4816-a681-32aa942cb318", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02dad2f-f968-4a54-8d74-5b589c833179", "sighting_of_ref": "indicator--d586c58f-2ae8-4816-a681-32aa942cb318", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb5f9b4-6628-480c-b10e-6e2349278f60", "sighting_of_ref": "indicator--35a98c93-7dcf-45a4-81b1-7788f4fc5f7b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4880a987-d1f5-42a9-afa8-f71591d402ea", "sighting_of_ref": "indicator--35a98c93-7dcf-45a4-81b1-7788f4fc5f7b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a8bf28-cdae-4dd7-bf15-5404d4138881", "sighting_of_ref": "indicator--7ab29c84-afdb-4e9c-b46c-60b6ebed3315", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fe5bb3-96bd-466f-a07c-7c6243a9ba3c", "sighting_of_ref": "indicator--7ab29c84-afdb-4e9c-b46c-60b6ebed3315", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffbb9232-466a-4728-890f-f7e565a885ab", "sighting_of_ref": "indicator--e345d7ae-70c5-405c-a9f3-f6d9996c9719", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcee90e-b913-414c-9ff0-40cd0015f4d3", "sighting_of_ref": "indicator--e345d7ae-70c5-405c-a9f3-f6d9996c9719", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91fbcb4-1808-449a-92a4-7d42cbf86f18", "sighting_of_ref": "indicator--2102777c-5469-4d2d-887a-aaa55649052b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938b3efa-5175-4da1-ba43-a1a5f9426206", "sighting_of_ref": "indicator--2102777c-5469-4d2d-887a-aaa55649052b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971abe19-e5b2-4afa-b140-c5da917a8ad8", "sighting_of_ref": "indicator--9447aabb-5139-4763-9d68-e801daa2a8bc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3f4b3c-8259-4197-9e89-0e5e40abad9f", "sighting_of_ref": "indicator--9447aabb-5139-4763-9d68-e801daa2a8bc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a20af1-ffd0-42db-9f2f-3581e171271d", "sighting_of_ref": "indicator--3cfcd459-c23c-4d92-8d8d-5d5b63ad52af", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42591aa4-8763-4cca-8095-631a30d0de60", "sighting_of_ref": "indicator--65f26d85-d0e8-4152-8640-7bed01bb7a49", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2878862e-37ce-470d-8446-af8f4e655988", "sighting_of_ref": "indicator--65f26d85-d0e8-4152-8640-7bed01bb7a49", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bcfe27-e941-4c57-98aa-6ba93d7025db", "sighting_of_ref": "indicator--0059a6de-76af-44d6-9383-732aa07eea70", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af326c7-703c-41e0-bb2f-ba6fa4f0eea3", "sighting_of_ref": "indicator--e48b4ff9-c2a7-4249-81d6-cbf1f038d321", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a877bce0-546f-4516-8792-d046b4a9e6c6", "sighting_of_ref": "indicator--db213d44-6084-4ac9-854f-d9fd057ef916", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e54742-5eaa-48b6-b21e-a51c767a3912", "sighting_of_ref": "indicator--db213d44-6084-4ac9-854f-d9fd057ef916", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694730fb-52ce-4018-b25b-a6a760105dfb", "sighting_of_ref": "indicator--db213d44-6084-4ac9-854f-d9fd057ef916", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ef6e8e-876f-4fde-9d9c-7af4ac9f8334", "sighting_of_ref": "indicator--359fdf20-54e4-4401-a0a7-a17732295c40", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69bf7520-ae90-48f9-aaf7-43ec617ef5c7", "sighting_of_ref": "indicator--359fdf20-54e4-4401-a0a7-a17732295c40", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c26566-88ab-4f5e-a7c2-3414f57e63a3", "sighting_of_ref": "indicator--359fdf20-54e4-4401-a0a7-a17732295c40", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3c1d13-0d42-4413-b135-dc0c26280caf", "sighting_of_ref": "indicator--bf1f99e1-2345-4c54-b851-bc88edee0fba", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54427cf9-b5b5-4a28-8c8f-311dd1d1e88c", "sighting_of_ref": "indicator--11f2388a-957d-4230-a0b9-a182604ca1eb", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e9acca-6173-468d-bfaf-c34a755dfd30", "sighting_of_ref": "indicator--7c313f74-dafc-4692-8523-110afe61b8ff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ef7b9b-b0ec-49f7-95b8-9251a892d94e", "sighting_of_ref": "indicator--8c947805-7002-4ed2-b49a-1e3920f97a78", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfb4652-912b-4219-869b-cd32c96511f6", "sighting_of_ref": "indicator--dd1323b6-7732-4027-90c4-f3243eba9ab5", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e688f2-1c13-47e5-b52d-b7ca9bc66763", "sighting_of_ref": "indicator--72b56166-f49b-44f6-8c07-0bf86c4bd169", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970abf95-0fca-4807-aa77-38c7c8bb198e", "sighting_of_ref": "indicator--443713c6-a26b-40e9-8e95-a20f2a98af41", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a41d170-1177-4b89-95cc-8e56ec6c87f3", "sighting_of_ref": "indicator--a78e7783-f33f-4c5f-ac1c-3eb6727a0d10", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15652027-066f-4cf3-be79-65a4b2a56827", "sighting_of_ref": "indicator--43146995-a8b5-42b2-a58e-0f8b256e2696", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2334469-ef52-42b2-81d6-982d470db29c", "sighting_of_ref": "indicator--8caa9c4e-4a20-4a53-8b17-cde1116b9502", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b3587a-eb23-4349-b581-85436e80aa8b", "sighting_of_ref": "indicator--6335c381-df34-4543-91a3-98976ce86917", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f352168-b8c6-43e2-9480-e4ffa4001c79", "sighting_of_ref": "indicator--47f0c6b6-13d3-4ba5-9997-d5017ecd0146", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c7ca6f-a371-4f49-9781-2ddae5d0cf6b", "sighting_of_ref": "indicator--47f0c6b6-13d3-4ba5-9997-d5017ecd0146", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebdff0e5-65c9-4138-bf71-d8137036d246", "sighting_of_ref": "indicator--47f0c6b6-13d3-4ba5-9997-d5017ecd0146", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e7cf54-8064-4a3e-89c2-3472f2953e0d", "sighting_of_ref": "indicator--79160348-77d4-48c8-8ec7-e0a9d6678ae3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8552108-e346-4d01-b27b-cb938569a11d", "sighting_of_ref": "indicator--79160348-77d4-48c8-8ec7-e0a9d6678ae3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6648301-b7e5-4f1e-8713-1e7b641fbacc", "sighting_of_ref": "indicator--1bf3dac6-5043-4505-a5a8-8cf82a2e584e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c195f1c-ba35-44cb-93b0-bbaa8e93f1f4", "sighting_of_ref": "indicator--1bf3dac6-5043-4505-a5a8-8cf82a2e584e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcce2871-c25a-4e76-a2b3-5446f33e422e", "sighting_of_ref": "indicator--1bf3dac6-5043-4505-a5a8-8cf82a2e584e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c874dc3a-8033-4b0a-98de-03dd2cdb8380", "sighting_of_ref": "indicator--c0f6aa6e-7e9b-48ed-b708-8a0231c62cc4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce6413e-53c7-4704-8773-cfa7d7b05e89", "sighting_of_ref": "indicator--c0f6aa6e-7e9b-48ed-b708-8a0231c62cc4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31178d37-227a-4a96-bf73-afa0753b7bfb", "sighting_of_ref": "indicator--c0f6aa6e-7e9b-48ed-b708-8a0231c62cc4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94aa6a89-f6f3-401b-8998-7180af8354b8", "sighting_of_ref": "indicator--78beec73-82f6-4324-879d-8e3d82eee973", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d24cdc1-2a04-4a5b-803b-067b9b1d9943", "sighting_of_ref": "indicator--78beec73-82f6-4324-879d-8e3d82eee973", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a4b786-5530-4f9e-aea0-93ad8d710797", "sighting_of_ref": "indicator--78beec73-82f6-4324-879d-8e3d82eee973", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1506cf35-2d55-456d-b461-e4df616c8e0c", "sighting_of_ref": "indicator--b6890b7d-6a76-4081-b0dc-ff98fa5aba15", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0906eacc-7ef5-44f3-a367-20b6b11a1a0d", "sighting_of_ref": "indicator--b6890b7d-6a76-4081-b0dc-ff98fa5aba15", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb62395-296a-4047-9003-5b8d07909690", "sighting_of_ref": "indicator--b6890b7d-6a76-4081-b0dc-ff98fa5aba15", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07e6cee-8d8d-4b08-863d-6da53c104047", "sighting_of_ref": "indicator--a9047bbe-e951-4dd8-b8d0-cc89498fe392", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d948e00-4c26-47d8-8933-3155b42b9e86", "sighting_of_ref": "indicator--a9047bbe-e951-4dd8-b8d0-cc89498fe392", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15472691-e052-4ed6-9001-2d01a0802f22", "sighting_of_ref": "indicator--a9047bbe-e951-4dd8-b8d0-cc89498fe392", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8987f3a2-37cd-48b4-8e5c-c98d930b58be", "sighting_of_ref": "indicator--722afe71-1559-4e28-b904-19ac456ccaab", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7713bd3f-d222-4e88-b7c2-977618e0a4aa", "sighting_of_ref": "indicator--ab388f77-b4b1-45b4-b7f6-c726bc391b52", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602a0ae4-0f61-48d8-915d-0a57fb185533", "sighting_of_ref": "indicator--b16b6f48-4a5a-40f8-9579-4784a37c94df", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87e42ec-c850-4851-b60e-6922773d9a99", "sighting_of_ref": "indicator--d3a365ba-76c1-4b9b-b3f5-ea60269527c1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9b22e1-8da0-4716-bf38-893ae4693f31", "sighting_of_ref": "indicator--b2ebadfd-19ff-4975-b822-db3b1b9b3595", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0ee0e9-b04c-46e9-9579-337a15c3166b", "sighting_of_ref": "indicator--8f1bc628-218a-447f-ab1b-a5f950230d5e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e62f1e-ee06-4b8a-9b2d-3f3f0b5c1174", "sighting_of_ref": "indicator--76600a4e-e843-4e8a-af7d-8ddacb1c67c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05712b6-49fc-45a9-8301-57b5066e167e", "sighting_of_ref": "indicator--0cfe2c11-7cdc-44d3-916d-932bdaa84932", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95789b68-8bfd-423c-a86a-755610916c2f", "sighting_of_ref": "indicator--82a7e3a8-25e9-430d-96f0-cd9821881293", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401d75bd-0d09-4311-a021-fa23d59644e1", "sighting_of_ref": "indicator--45cc2a13-994c-436c-878f-2ee8da782e11", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec914f4f-cadb-49af-aea5-f9cefedf8ef6", "sighting_of_ref": "indicator--10d34224-bb29-4a98-8d9f-d0a7008e8bdc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90150f9-e67b-43e3-8a8c-40688103cd4a", "sighting_of_ref": "indicator--1ee1a7d6-3236-41dc-8de9-6a7a9f483090", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bba5b63-f889-45b2-be4d-0f97422fd091", "sighting_of_ref": "indicator--037f1ae0-c6c5-49c3-b307-8f051a8396da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9bc814-40b7-4fc5-bd7a-1433d83e5b42", "sighting_of_ref": "indicator--21fa180a-54dc-47e6-99ad-71a5aee58a53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0932df92-a207-4a72-8b55-10d719640408", "sighting_of_ref": "indicator--2d312e6d-a3b9-40dd-bee2-1a406b382582", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1fe8490-3c4e-4222-b098-94da6b6689fb", "sighting_of_ref": "indicator--65b0d6eb-70d2-4ba7-82d0-833bd3c93c99", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c398be61-c64c-4811-91a1-3befd3d1676a", "sighting_of_ref": "indicator--fb87ddf2-6604-4000-8e87-549bf121c629", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fbf77e-f071-4301-a2ab-ce511044d896", "sighting_of_ref": "indicator--494f496c-e40d-4bf9-8a29-7d66da83243b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcdb51c-5a44-4229-80b1-39c78d329fe5", "sighting_of_ref": "indicator--40db5e00-146e-4f05-ba38-03dbcb82d89b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154fb893-79fc-47d1-968d-7cfe62eec297", "sighting_of_ref": "indicator--16726c81-1c38-4db1-a79a-18d3276e68e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b0782c-017a-4443-9a77-99c4b1fb9f3d", "sighting_of_ref": "indicator--8a3609f2-adaf-4d8b-a95e-57dcd684ea25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c120394f-0cdc-4890-8a34-23e1002b3867", "sighting_of_ref": "indicator--7910c72b-5259-4ab1-8925-61c4ccedd199", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7fe1da-457e-40ca-822e-4c9511adf11f", "sighting_of_ref": "indicator--eeca2e1f-b2cb-4a2f-be45-9d8a77432b80", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e34319c-bc98-4dd3-98ad-be61435379f5", "sighting_of_ref": "indicator--b8c328de-32d2-4f0e-8d22-ba9ec9df5dd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a8cf4b-2a83-495d-8855-81dbb794ad4d", "sighting_of_ref": "indicator--590b91bd-0c1f-4d46-8c51-ad0a3e0b6441", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e236f7-f808-42c5-ae8e-212180981df5", "sighting_of_ref": "indicator--30ad4421-91c7-48ca-8013-66cfa464bb85", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12027e9f-ef92-43ee-81fb-b34df3c82651", "sighting_of_ref": "indicator--508600d4-5484-4852-b781-67bef4da85a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c3da08-f951-4bff-8d6a-beb25fa80596", "sighting_of_ref": "indicator--7cef5450-388f-4044-ad34-93cc0b33234b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea3dec1-d788-4db9-aedb-f957aabf8554", "sighting_of_ref": "indicator--31c0955f-da1c-4208-82d3-50c847a75c17", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e06fce9-9ef5-478e-8e03-58cc93f9dbaa", "sighting_of_ref": "indicator--92abbbd4-9383-4f10-842c-f483797bb64f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ce61c0-f95d-4187-81b7-909152524f8d", "sighting_of_ref": "indicator--4e3d2b1d-ab91-4f15-9e8e-9c71e79e49f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ab9158-36b3-4283-aed2-67159c153299", "sighting_of_ref": "indicator--02350688-b78e-47af-ad46-c50ff3513d4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ba116a-d259-4235-a4f4-ba16ca1e2c83", "sighting_of_ref": "indicator--35058433-e35e-4870-a659-4ffda16457e2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebe1095-8d74-4aab-ac9c-3cf931311ad5", "sighting_of_ref": "indicator--35058433-e35e-4870-a659-4ffda16457e2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be210b1b-e5a4-48ea-940e-1798978fede0", "sighting_of_ref": "indicator--35058433-e35e-4870-a659-4ffda16457e2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ee9b11-c7c7-4ef4-8b25-fb8b1472bf5c", "sighting_of_ref": "indicator--8d14d059-e119-4be3-af2a-b8ec1524c4ec", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0baf7cf-1df1-42d7-8e87-51c307cb5d8a", "sighting_of_ref": "indicator--8d14d059-e119-4be3-af2a-b8ec1524c4ec", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e0480b-3f68-4ae0-bf79-8de90b69414d", "sighting_of_ref": "indicator--8d14d059-e119-4be3-af2a-b8ec1524c4ec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f00ad3-3569-4018-8571-0be6dbee095e", "sighting_of_ref": "indicator--d4ec2567-b7ac-471b-b294-65ee72a50ce7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d3fbd5-6cf6-4e5c-b819-4e1fa4acb754", "sighting_of_ref": "indicator--d4ec2567-b7ac-471b-b294-65ee72a50ce7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecdbfd9a-6e35-4b41-b1c8-ce94c415f8b9", "sighting_of_ref": "indicator--d4ec2567-b7ac-471b-b294-65ee72a50ce7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0e8f98-2a5e-4ffc-8f5e-f63042740755", "sighting_of_ref": "indicator--5637dcce-3e0c-456c-aee0-fc66c1d9b14b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf796ff-5591-4a6c-80a0-0bc2e52ad775", "sighting_of_ref": "indicator--5637dcce-3e0c-456c-aee0-fc66c1d9b14b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c852086-b7f3-430d-9791-82d0ad3af720", "sighting_of_ref": "indicator--5637dcce-3e0c-456c-aee0-fc66c1d9b14b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91e9e38-33c6-4495-80dc-740a01aad040", "sighting_of_ref": "indicator--8430a759-afa1-414e-b020-998b15cb2d5d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7362e6-459c-46ed-91f0-b10a62fdb001", "sighting_of_ref": "indicator--8430a759-afa1-414e-b020-998b15cb2d5d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511896e7-e613-4cea-973c-b0e9677de604", "sighting_of_ref": "indicator--3c5451cf-da38-4620-9b7c-c813dea43a1e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add0362b-a48f-4ac1-865e-e194081d47f3", "sighting_of_ref": "indicator--45076732-40c0-4971-9e89-2f25b6e857b9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888b6a69-deb2-4802-9b5b-a993f02d2015", "sighting_of_ref": "indicator--45076732-40c0-4971-9e89-2f25b6e857b9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60a32c6-1742-4590-81ba-f88f7a819726", "sighting_of_ref": "indicator--45076732-40c0-4971-9e89-2f25b6e857b9", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3372c8b-fce8-4ab4-a844-3ce73c373883", "sighting_of_ref": "indicator--1190ee93-3315-4a1c-8e84-96b3e8e451ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd77f0e-8cde-43aa-8a7e-26d139812572", "sighting_of_ref": "indicator--1190ee93-3315-4a1c-8e84-96b3e8e451ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedca4f8-3e4f-49f6-8500-22a8dde0af3d", "sighting_of_ref": "indicator--4664d815-2610-4d14-a145-db18f0dbf073", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d1ffc0-86b7-4ab9-a448-d44afe8de9d4", "sighting_of_ref": "indicator--9515c763-487b-4b21-9c37-d0047116add1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e54be0-efef-48a6-931f-7066ab076425", "sighting_of_ref": "indicator--044054e6-45c9-433b-a365-f34acdeada54", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722689cc-bde5-4c82-b1aa-591a6da5c5ef", "sighting_of_ref": "indicator--044054e6-45c9-433b-a365-f34acdeada54", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d1b877-3ad7-4116-a420-0ac0b964b32e", "sighting_of_ref": "indicator--044054e6-45c9-433b-a365-f34acdeada54", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4f1b26-92b5-4f4a-b064-5ee00e432afc", "sighting_of_ref": "indicator--1244a6ad-24ec-4609-9600-2d6b100cceeb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d217171b-1ca0-4768-bece-6327287a31e5", "sighting_of_ref": "indicator--1f52a429-d9e9-4203-a0b2-68842aaadb5c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239633c3-bcbb-4d27-94d8-08de7fb8fd7b", "sighting_of_ref": "indicator--89ea5df3-34d8-48db-8217-ae3cbfbd2832", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2902f2-6a0f-4ee1-a686-e5a3ff74daf6", "sighting_of_ref": "indicator--4e04b42c-b24b-4e0c-8d55-02b085aeb39e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd57f04-3786-4388-8c60-f20718a9fd8d", "sighting_of_ref": "indicator--ed86828d-a8ef-466e-9859-756e96a33eed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2bcc28-9c3b-405d-bc0d-24f87815655f", "sighting_of_ref": "indicator--bbc6dc06-1fc8-4733-bac4-8f8ec48067e0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffc7561-1b03-464c-9a9f-229b73042093", "sighting_of_ref": "indicator--d7938a98-a81c-42b2-b605-894c8df05c6a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa977db3-0937-441d-b964-fdc99b4094c7", "sighting_of_ref": "indicator--13bcf41e-5826-4dce-9c64-12091e78b802", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdae45c-e628-4040-9ca5-0407f0c7371f", "sighting_of_ref": "indicator--ee564bac-2510-4468-be97-8598510c645a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af19834-3620-4c58-a10d-2f6dd732be81", "sighting_of_ref": "indicator--3d051b19-b4b7-4b1c-b0cd-cf6a78ef437c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31bff109-53fe-475c-9a3b-1196ba09c457", "sighting_of_ref": "indicator--3d051b19-b4b7-4b1c-b0cd-cf6a78ef437c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75449e5b-5896-4326-aec9-0895b8861c17", "sighting_of_ref": "indicator--ed03ba32-aeca-46ed-abde-3ec4b66f4bdb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308e0d23-2924-414f-8157-e06fc76aabf6", "sighting_of_ref": "indicator--ed03ba32-aeca-46ed-abde-3ec4b66f4bdb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da25a58d-aaf5-4db3-adbd-08097a29a528", "sighting_of_ref": "indicator--c293efd8-241c-4ff1-bb99-9a1254fdefa6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9245d6-652b-477b-a166-0788c68b6164", "sighting_of_ref": "indicator--c293efd8-241c-4ff1-bb99-9a1254fdefa6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e22acd-e277-4436-84db-74a319e15efa", "sighting_of_ref": "indicator--e6bbb9f8-5dda-4c3b-99d3-61e22c5e8242", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb48245a-802f-409b-8ceb-82251724b554", "sighting_of_ref": "indicator--04264a6f-a39b-46bf-9f64-0daf8c78c92b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e8639f-a29e-43bc-a7c5-2df4f9749476", "sighting_of_ref": "indicator--a9804b24-cd85-4603-998c-79f5a0cba338", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b79e9cb-76ec-4759-a5b1-3b98106c3d92", "sighting_of_ref": "indicator--a9804b24-cd85-4603-998c-79f5a0cba338", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661880ad-849a-4d72-8172-c958cb280724", "sighting_of_ref": "indicator--a9804b24-cd85-4603-998c-79f5a0cba338", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a88873-d81e-4e89-877f-f87eb8c3fff7", "sighting_of_ref": "indicator--c9a9cb1d-6d47-4f81-aa76-520e164b3032", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a312202-ef15-4630-8bb4-e9b5258b0fc5", "sighting_of_ref": "indicator--c9a9cb1d-6d47-4f81-aa76-520e164b3032", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0519a862-46dd-4e58-a3c1-aa06f4c6114f", "sighting_of_ref": "indicator--1201be50-758d-45ce-af64-3733e1e2c66d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5310137-e849-4f69-b878-6955d5420e42", "sighting_of_ref": "indicator--1201be50-758d-45ce-af64-3733e1e2c66d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed8bb33-b0ba-459e-a224-a741322beff2", "sighting_of_ref": "indicator--1437b6d9-5ab5-4d84-b193-79d4411409e7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce73daf-24c2-4134-becc-5832ec104636", "sighting_of_ref": "indicator--1437b6d9-5ab5-4d84-b193-79d4411409e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981117e3-eff3-4a09-b067-7b9c9cf2716b", "sighting_of_ref": "indicator--1437b6d9-5ab5-4d84-b193-79d4411409e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18087611-79f7-4d31-97b5-d17daa5123a0", "sighting_of_ref": "indicator--3634685a-5ae5-4f26-abba-cd9e94f8e299", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d179ad33-a196-44a1-9985-2e4e6cd826ad", "sighting_of_ref": "indicator--3634685a-5ae5-4f26-abba-cd9e94f8e299", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da2ebd3-7582-462d-b65b-d81c811f59e2", "sighting_of_ref": "indicator--3634685a-5ae5-4f26-abba-cd9e94f8e299", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c14616-268b-41e2-9759-dfc2e3a2b3ac", "sighting_of_ref": "indicator--bff18bd1-d245-42e0-991b-5775d3a52bce", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2718c419-1d4b-46a5-abd6-18e59696481d", "sighting_of_ref": "indicator--bff18bd1-d245-42e0-991b-5775d3a52bce", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e199c43-424f-4bf8-95cd-ebb7ea24111f", "sighting_of_ref": "indicator--bff18bd1-d245-42e0-991b-5775d3a52bce", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6113c0-4682-4fe3-92ab-0acc16a9405b", "sighting_of_ref": "indicator--a8c5e5be-28b6-4448-83e5-1afd71a92a86", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144eec9e-cd48-4202-a8c8-f1037649f705", "sighting_of_ref": "indicator--a8c5e5be-28b6-4448-83e5-1afd71a92a86", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e0cb9c-0083-4b50-9ab3-ca807ba52575", "sighting_of_ref": "indicator--a8c5e5be-28b6-4448-83e5-1afd71a92a86", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d340c9-80c8-4785-8b71-3ae0c758ce8a", "sighting_of_ref": "indicator--43e4c83e-9371-4f7a-a8fe-072354290419", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dbd2f0-6189-46a4-a652-ad8aac399aca", "sighting_of_ref": "indicator--f001fa0a-572c-462b-b96e-ddcbc221157f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c478f076-2302-407e-ac6e-5a056195e6c9", "sighting_of_ref": "indicator--a95fbddd-f549-4988-89d5-7756e95615d8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2efb0c-42d8-48c1-a21f-7137e5897817", "sighting_of_ref": "indicator--5e7911c7-df2e-40e1-8cba-d9615d86f8ce", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff72ce30-a9c6-4719-b8e8-e6c5d0e6e192", "sighting_of_ref": "indicator--5e7911c7-df2e-40e1-8cba-d9615d86f8ce", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03369a60-53d2-4e67-9e56-b353bef5c436", "sighting_of_ref": "indicator--0898f41a-8a5b-4039-9817-4aacda38c90c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ceec61-4020-42f0-81ff-96bf9c6e8457", "sighting_of_ref": "indicator--ac3f2b35-15d9-4787-9058-de33818de072", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684d6d31-6df9-4035-9c85-106eb3651671", "sighting_of_ref": "indicator--4d78b586-409b-43fc-8ec4-5c0f8c4a1bd3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3950397c-ae26-4716-a6a4-f965a74916cd", "sighting_of_ref": "indicator--4180efd9-b3e6-4c9f-9e6f-642d4fb58513", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d0fa78-e5e0-4a15-96e6-9883dcd8de3a", "sighting_of_ref": "indicator--074924f0-33cc-4f0c-b113-82bc614dde9f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96adca0-cc70-48b2-b72e-5214ba6988ae", "sighting_of_ref": "indicator--8d6595d7-dfc0-40ba-887d-202475578722", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef71f6ed-adba-46b0-aad9-85e991e21be0", "sighting_of_ref": "indicator--1dbfe810-ce09-44d0-9022-21909a69ac88", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac9d8ee-29b3-4f5b-aaf1-538c4b8ca048", "sighting_of_ref": "indicator--7224b651-3f0b-455e-9e7b-80449f27f938", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc5466a-587f-41c1-841f-7102e14cc88b", "sighting_of_ref": "indicator--8eeccb05-f4e8-424e-86c5-56536d8776a1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f182a003-45df-46ea-9996-89f1956be26e", "sighting_of_ref": "indicator--ecc12f25-824a-42e7-b97c-828636695852", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a22486-0e02-42b0-b36e-06b0e0a1193e", "sighting_of_ref": "indicator--4ba7900c-7c54-417d-a0db-6c901bc00cd2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e4022d-f733-466d-821e-1b6c17dc6363", "sighting_of_ref": "indicator--4ba7900c-7c54-417d-a0db-6c901bc00cd2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d1dc98-965f-4f28-a7dc-874c396ac74f", "sighting_of_ref": "indicator--4ba7900c-7c54-417d-a0db-6c901bc00cd2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f761e62-e2c8-4776-aaec-7c09c032eecf", "sighting_of_ref": "indicator--a56acd7f-b249-402a-af39-603471fcf0c8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1cc171-39ac-4d8e-9b41-33ad9d3fb8d9", "sighting_of_ref": "indicator--fab32d33-ec51-4cdd-9125-033d4cedeccd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22e2661-963f-47bd-881d-646283598887", "sighting_of_ref": "indicator--fab32d33-ec51-4cdd-9125-033d4cedeccd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecff070-2ed7-4920-b7e2-7c92386f612f", "sighting_of_ref": "indicator--fab32d33-ec51-4cdd-9125-033d4cedeccd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee44a736-d53f-4083-8f38-42e6af3a756a", "sighting_of_ref": "indicator--9cd04acf-956e-4a56-b470-a48bf7781d60", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fd536f-1786-4ce4-9479-94f8492fa3b0", "sighting_of_ref": "indicator--9cd04acf-956e-4a56-b470-a48bf7781d60", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab3ab84-3649-4f00-8aa5-b2632dc49438", "sighting_of_ref": "indicator--9cd04acf-956e-4a56-b470-a48bf7781d60", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972ace24-abb1-4c1a-bdf0-42e87d1241e1", "sighting_of_ref": "indicator--2d996793-e77a-4a9f-b1e7-8ef2a631c167", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818b3a6e-9e40-4522-a6e3-035d6f1ea46d", "sighting_of_ref": "indicator--2d996793-e77a-4a9f-b1e7-8ef2a631c167", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa12e67-c3c8-4c2c-a273-494955e97e6f", "sighting_of_ref": "indicator--2d996793-e77a-4a9f-b1e7-8ef2a631c167", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd5bc8b-bb2b-4f58-ba90-7f7822510396", "sighting_of_ref": "indicator--e47139b3-5bca-419a-b5f2-57bbdcdd1cfc", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316b7a32-f182-45d7-971e-546b821a128e", "sighting_of_ref": "indicator--05f906c2-8592-4fb1-97de-5ef90981c0ff", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4a0691-c55f-468f-ae71-dfe09d0516f1", "sighting_of_ref": "indicator--75056f9d-6e51-425b-b61a-b10adf0427ad", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aafa8ed-e8f8-407a-a411-ee4f3087447d", "sighting_of_ref": "indicator--fee812aa-f144-489c-bc5e-8d538c9fa296", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f34d4b3-89fb-425f-a395-1b1baaded302", "sighting_of_ref": "indicator--6101d9c0-9e31-4590-b62c-893025c81873", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dea5806-ad50-49b8-aecb-2bf481e4856b", "sighting_of_ref": "indicator--6101d9c0-9e31-4590-b62c-893025c81873", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8eb810a-ecef-46f7-9372-564c1ee07c4a", "sighting_of_ref": "indicator--43b4977d-3b1f-4967-bbf4-47bfd0d5f59a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd5e970-631c-4e4f-97ce-45e23863d5bd", "sighting_of_ref": "indicator--e35dcd81-1532-4f52-8d87-992d0f573784", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86567d92-d24a-44d8-86d2-d4eac1c2b392", "sighting_of_ref": "indicator--7b89ded0-2a19-430f-afac-83f1e442e1db", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67087065-94c0-41b9-9798-70e91c538477", "sighting_of_ref": "indicator--5a9937d0-6595-4710-9e99-7ed13dab4368", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6842dd48-9474-43c3-a049-c668fab534e0", "sighting_of_ref": "indicator--9f7b3cca-226d-45fb-92a4-2b828024b58d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa1c7d8-4cdc-490d-bdfb-087c149150f9", "sighting_of_ref": "indicator--15c92a38-a764-40a9-9b82-f9214d291188", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8d616c-7eaf-4bd1-8228-89273f6d4153", "sighting_of_ref": "indicator--4adb37ca-a0cc-40ae-b1f4-ad09b29e7020", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7d2c08-4aa0-472d-b51b-0c91c1fb23e0", "sighting_of_ref": "indicator--0a157486-734c-48c8-9a51-e4f6fb0f5646", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1c2c92-36d4-498f-af44-eb8e3754e36d", "sighting_of_ref": "indicator--d4bbac88-c42f-479f-814c-6ec603c225cb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb6a600-b7ca-488e-a3f7-4802f87c715a", "sighting_of_ref": "indicator--c451a8a7-5338-4f76-9bae-babbd4565805", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b621b9bf-1d68-428e-bf5e-29816f4034d4", "sighting_of_ref": "indicator--e1cbe923-4313-4bc7-aec8-d7fb90d1ff76", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442f63a5-6011-4c6c-b7d1-2d0ded4a49e5", "sighting_of_ref": "indicator--f260a485-bf66-4dc8-aeac-12470b5a2aa4", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae6e040-252c-4a82-852c-2ff91771be43", "sighting_of_ref": "indicator--4147299f-914c-4609-86bc-2b9be7b7431d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b8265f-e56c-4f76-b782-9fd750baf432", "sighting_of_ref": "indicator--4147299f-914c-4609-86bc-2b9be7b7431d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c586d2b-6794-4f01-89d7-be757f05cf2c", "sighting_of_ref": "indicator--cd7dd649-5288-4c05-8d3a-2203f34ae1e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7d2d7e-c9c4-47f5-baa4-1a5ecaf572b9", "sighting_of_ref": "indicator--dc1f2cbd-e27d-4484-ae97-5d3bfd6b5209", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb59e8bb-2066-4a4e-ae1a-f22ccb9a455a", "sighting_of_ref": "indicator--1253b2b5-edf6-48ed-867b-29ef791d4c56", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838e5fc0-e218-4754-b1b5-5f28d7e3eaea", "sighting_of_ref": "indicator--1253b2b5-edf6-48ed-867b-29ef791d4c56", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854f8804-79c7-410b-a695-7a2996e1a1ae", "sighting_of_ref": "indicator--472c6aae-73c5-4e24-bac4-919d6f3eb3f2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21308f0-ec73-4837-b405-877cf6744824", "sighting_of_ref": "indicator--ac91a65a-fa54-45ff-a6d6-85b194a53bfa", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3807a9ff-9fb5-4d2a-a854-483b3800682f", "sighting_of_ref": "indicator--ac91a65a-fa54-45ff-a6d6-85b194a53bfa", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60bf6bff-11ef-49d2-bc29-ac6fb8cf0530", "sighting_of_ref": "indicator--ac91a65a-fa54-45ff-a6d6-85b194a53bfa", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0559c9-85c6-4132-9cd9-6ea52b6849ad", "sighting_of_ref": "indicator--cc9f2449-4004-40f7-a527-c4439603a787", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bfb3949-0808-4be6-8179-8ee311022dc3", "sighting_of_ref": "indicator--51bc8db3-656c-4753-bcc4-aa8cbe858c1b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab89b94-80c6-4665-81d6-12bfd6a123f2", "sighting_of_ref": "indicator--51bc8db3-656c-4753-bcc4-aa8cbe858c1b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6aa5639-3f43-4c1f-99a6-f02affef7617", "sighting_of_ref": "indicator--51bc8db3-656c-4753-bcc4-aa8cbe858c1b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d208d05e-1cb6-49e8-8a65-47d3feed4970", "sighting_of_ref": "indicator--0da19280-2132-4016-97a2-6726a433ff54", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc3d694-272e-40f1-b0df-e5e5d4341542", "sighting_of_ref": "indicator--e7c8ca12-2cec-4872-842f-cd433a96da33", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac77ae7f-f770-450b-a7dc-2801624a7836", "sighting_of_ref": "indicator--94a14039-6322-4b79-9802-845455929ead", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ca4858-e623-4b4c-9abe-38c60a3df5de", "sighting_of_ref": "indicator--3059ea2a-a563-48c7-a8c4-9eb157522a3d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164f2f88-fca8-48a0-845c-a3cf47738110", "sighting_of_ref": "indicator--010f31b5-fadd-4eae-98fe-cf3991642667", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0149818c-9bf9-4a85-aeb2-037cc0e9bd82", "sighting_of_ref": "indicator--010f31b5-fadd-4eae-98fe-cf3991642667", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b10d3db-a4ed-46ce-b587-2a7487d6f2fd", "sighting_of_ref": "indicator--be319fec-8d57-4b66-ba20-ab1d5a6aa11f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f121f6-38ea-42ef-b4d7-2cb97dbac4f1", "sighting_of_ref": "indicator--be319fec-8d57-4b66-ba20-ab1d5a6aa11f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76fbff0-2d9f-4dae-bffd-7f55634197f3", "sighting_of_ref": "indicator--776ac657-af0f-4290-9f85-6f0cb4ae695a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7871445-0c8f-4e48-9ac1-2a5dca765e6e", "sighting_of_ref": "indicator--776ac657-af0f-4290-9f85-6f0cb4ae695a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1ecc62-f2df-499d-b336-f8bbc095ee02", "sighting_of_ref": "indicator--7ea7bf7b-b9cb-4b07-8a62-a531838654ed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee63698-74fd-4f32-bb42-76583bc6d57e", "sighting_of_ref": "indicator--7ea7bf7b-b9cb-4b07-8a62-a531838654ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef0e0a4-6350-4f67-beb6-ec2e4954c30e", "sighting_of_ref": "indicator--4e54dc38-cc67-435c-8a55-c525769dc209", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb25377-0f73-4367-b9c4-40849e75b395", "sighting_of_ref": "indicator--4e54dc38-cc67-435c-8a55-c525769dc209", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b1ec1f-d2b8-4618-81bc-5482b536683c", "sighting_of_ref": "indicator--3cca1d15-4163-4d34-8ebd-bcece47e07a5", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a800e4e6-ab77-4404-89b6-f0151274227b", "sighting_of_ref": "indicator--3cca1d15-4163-4d34-8ebd-bcece47e07a5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693612ee-4c0e-4490-8fdd-59d6844b2bb1", "sighting_of_ref": "indicator--6e4df094-6648-464a-aa39-c87ba6cb6184", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d00215-9103-4275-a0ba-8c21a8697f61", "sighting_of_ref": "indicator--6e4df094-6648-464a-aa39-c87ba6cb6184", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6766979a-52a2-4c3e-91d3-030b4cf14fb3", "sighting_of_ref": "indicator--c3eb1f17-d18b-4e66-a9e6-2c5657eb71ff", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11eb8a92-0cac-44b0-a3b3-d7fa40ccdb63", "sighting_of_ref": "indicator--c3eb1f17-d18b-4e66-a9e6-2c5657eb71ff", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f6f6be-d815-4aaa-ac89-d5e6a4f13cd3", "sighting_of_ref": "indicator--3d6d9345-4b25-405e-b15d-04883930ee21", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43ba754-afe5-4730-ad25-11e1075a0564", "sighting_of_ref": "indicator--a6074e5c-1df8-4963-ad38-367bd6bd1dbd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cc4ded-6298-4001-bc1d-9ff0a3170ae3", "sighting_of_ref": "indicator--a6074e5c-1df8-4963-ad38-367bd6bd1dbd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807e1e61-6cb3-4b2f-806b-62694b2855e2", "sighting_of_ref": "indicator--1a35f9ca-8104-4a8b-83ad-b02ecc183b6b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45be3168-4966-4404-96bc-6e10df115528", "sighting_of_ref": "indicator--1a35f9ca-8104-4a8b-83ad-b02ecc183b6b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6744e868-e270-4a32-a776-2617ee677ab9", "sighting_of_ref": "indicator--c3eccc77-e518-49b0-ba5a-2a89b930e13e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696b07b9-675f-4d44-b69a-e997b03e7e82", "sighting_of_ref": "indicator--c3eccc77-e518-49b0-ba5a-2a89b930e13e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb18b275-77d3-43c6-ae4b-0e66eaf300d8", "sighting_of_ref": "indicator--03a814b7-b461-4e88-8d0b-05448e5d434d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c106ed-612a-4534-b059-99900c51a211", "sighting_of_ref": "indicator--03a814b7-b461-4e88-8d0b-05448e5d434d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63570797-aa25-4655-bf92-edd3deca1796", "sighting_of_ref": "indicator--fd085d89-c07c-40ba-9128-40a27189a657", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2724f3fe-0cdc-4431-a57b-fc0a582f61aa", "sighting_of_ref": "indicator--85174752-3d72-4929-b93e-4790936c20a7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5be0768-b556-4689-bf74-91e4376da924", "sighting_of_ref": "indicator--3dd3cda0-93fd-4a79-b727-fa0bf2db04d8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27e33ce-f6e0-4d80-82f5-27d43ab8f8d9", "sighting_of_ref": "indicator--666a63a7-c811-4382-aecc-1a85f0dcd099", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acba940e-0ad7-40da-8ab4-5dd3b0e3d773", "sighting_of_ref": "indicator--5e801615-ccc8-48a9-bb2c-b95e0d22c881", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fcf62f-4c5c-4642-84a5-e62746c23bf1", "sighting_of_ref": "indicator--ce2bec0e-62b7-4d41-96d1-b68f6a15a00b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bebe315-062d-4417-9233-eb44c4182b51", "sighting_of_ref": "indicator--9841f534-40da-4b66-8912-13cccd7bc306", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad90f178-102a-47cd-9358-b32332543ae0", "sighting_of_ref": "indicator--6ef30d80-4690-4551-a5c6-8a5ef3e1f9dd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bbb611-6856-45b5-9e6e-340890108cc9", "sighting_of_ref": "indicator--9e3697cb-c0a5-4523-97a6-648a83660b24", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4d5a6b-c62a-47f8-8c84-13fd70ff04ed", "sighting_of_ref": "indicator--84892a66-14d5-4c72-bfce-04cf65f492ec", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a72e0a-32a5-4c14-bb09-8dc9395da7ec", "sighting_of_ref": "indicator--84892a66-14d5-4c72-bfce-04cf65f492ec", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3dd7d81-4e25-4fd2-9b7e-bdf5f64151e8", "sighting_of_ref": "indicator--03b0bf92-2fab-4ba2-9be0-27e4b0636503", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2833a487-e578-4598-a1d7-c80a66d2cc10", "sighting_of_ref": "indicator--0a856aa6-607a-474c-9767-87257bc5b2f1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af36d127-0e42-4bcc-a016-fa83a532ff7c", "sighting_of_ref": "indicator--0a856aa6-607a-474c-9767-87257bc5b2f1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009e51bc-c052-443f-9202-dee795835b36", "sighting_of_ref": "indicator--63dee41b-aa18-48a2-a7b5-7aa5f7288f6f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294a1c7b-acca-4fa6-9343-46cced32e15f", "sighting_of_ref": "indicator--63dee41b-aa18-48a2-a7b5-7aa5f7288f6f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5223b2-ac81-411f-b050-626fe252231a", "sighting_of_ref": "indicator--63dee41b-aa18-48a2-a7b5-7aa5f7288f6f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b1bc1e-5b0b-4d50-98c6-3eca46659436", "sighting_of_ref": "indicator--30bf5bea-66df-463a-a6ca-cfb8ca8e3f19", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5558d84f-f983-46dc-b351-86f79b1e44e1", "sighting_of_ref": "indicator--30bf5bea-66df-463a-a6ca-cfb8ca8e3f19", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8e7124-027a-487d-b566-c8ed7b0b300c", "sighting_of_ref": "indicator--390d5cc9-c05e-423e-9f11-bc23ab08a021", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086538c2-4ca0-486c-8eb3-1977ff365dd9", "sighting_of_ref": "indicator--cf2ebd51-ff06-4788-bada-b9bb3a844acf", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c50215-6b53-4ed4-b27f-8736564d9732", "sighting_of_ref": "indicator--f688589b-10e5-43d6-81c8-0c21aee87448", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e903c015-78e3-4384-8f63-e8a7895157f7", "sighting_of_ref": "indicator--026cab0d-5262-4648-9f94-a4eb1326bd01", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086c1f51-3794-42ae-9bea-07583f1ba60c", "sighting_of_ref": "indicator--026cab0d-5262-4648-9f94-a4eb1326bd01", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bfc8ba-efca-4dbd-8515-8954c5f4c54c", "sighting_of_ref": "indicator--c170a667-723d-4a90-ae34-e816473e618f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87913674-f9ca-4964-b385-acd77d0b4e10", "sighting_of_ref": "indicator--c170a667-723d-4a90-ae34-e816473e618f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0face3d-1cbd-4772-a99a-0caaa004fc93", "sighting_of_ref": "indicator--46120cf8-a059-47d8-8e51-1e4dffe547a0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5dde83-2121-4512-9861-9a8a035e4ad7", "sighting_of_ref": "indicator--46120cf8-a059-47d8-8e51-1e4dffe547a0", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01188440-17ad-407f-b399-6d21b24d5ec8", "sighting_of_ref": "indicator--8f6610ee-c6be-4e39-96e8-697127d7eed3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adb0a5a-e755-442e-9d44-f33b713f9d25", "sighting_of_ref": "indicator--8f6610ee-c6be-4e39-96e8-697127d7eed3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2d857e-dd95-446c-bd27-4de1350e2472", "sighting_of_ref": "indicator--d428a80e-be62-4fe8-bfbc-0f7ff4cc6a12", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e938cff9-93d8-4d32-b617-b84e32059045", "sighting_of_ref": "indicator--ad2b8bdd-4e1b-4675-885e-096e3af4374a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e71979f-adcf-4f7f-9d7e-be3435346d20", "sighting_of_ref": "indicator--a078188e-de3c-4603-ab29-5a81a2e52829", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07253310-53fb-47c5-b20a-e2a24c5b8996", "sighting_of_ref": "indicator--a8c69d0b-90ed-4292-b7c7-7373a5450067", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8211ba99-b339-40bc-a30d-6dbb40a3084f", "sighting_of_ref": "indicator--a8c69d0b-90ed-4292-b7c7-7373a5450067", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc1e7f6-b3a0-4fc7-9c91-f04e8e811b13", "sighting_of_ref": "indicator--ae69f1cc-07ba-4602-b0ad-d73f41689433", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbc4f24-66ba-4f22-ba61-aba842754fa3", "sighting_of_ref": "indicator--ae69f1cc-07ba-4602-b0ad-d73f41689433", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973a0aab-b36b-4c6d-816c-3228636ed44c", "sighting_of_ref": "indicator--835aaa19-3f20-48cc-8def-7d4ef0e2e92f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160f1523-cab4-4175-967c-bcb751c9198b", "sighting_of_ref": "indicator--835aaa19-3f20-48cc-8def-7d4ef0e2e92f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3077079-794f-4e53-a44c-723b345681b8", "sighting_of_ref": "indicator--9ec5001b-9bb4-47b2-b61f-9a9ddb6eadf3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ba4afa-907b-4bf4-8818-0bd0b01477ae", "sighting_of_ref": "indicator--b72b1cfb-7ec3-4311-a5fc-4e2fa390bc73", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be75380d-cfe3-4db1-8a5b-012518db0329", "sighting_of_ref": "indicator--0f1c2128-bfe1-4a40-8177-b716504cc2e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f93473b-933b-426f-af22-c920edbcdac1", "sighting_of_ref": "indicator--0f1c2128-bfe1-4a40-8177-b716504cc2e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaec7031-3f8b-40dd-a917-255c907083c8", "sighting_of_ref": "indicator--8fdd57dc-ba3d-4bfe-8b58-98b3b00fe04b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f750f65-4f31-4c1e-bcbd-94dea9b3b39b", "sighting_of_ref": "indicator--8fdd57dc-ba3d-4bfe-8b58-98b3b00fe04b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b2fa18-5ebc-46fe-8205-e6ca10f0e00d", "sighting_of_ref": "indicator--a9e942fe-3b5a-4d27-ad06-aaaec9ec49d6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e4ed73-2ba9-4c79-8543-44181c9801b7", "sighting_of_ref": "indicator--a9e942fe-3b5a-4d27-ad06-aaaec9ec49d6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db301aae-5081-47b3-b877-fd612bef344c", "sighting_of_ref": "indicator--91517607-bfbd-4e49-98fd-05a6929354b6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4dbca40-dff1-4948-91c6-c89926c87ffc", "sighting_of_ref": "indicator--91517607-bfbd-4e49-98fd-05a6929354b6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3488859-f2a5-4407-86d3-aec690bc5aa9", "sighting_of_ref": "indicator--41d031bc-cc0f-4bd9-b41c-43be4504c579", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745cc61f-9df9-42ae-a212-f314c0b723a4", "sighting_of_ref": "indicator--77bc776f-45c1-4fa4-8d38-7ca95a0a2689", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4632a3b-32f9-4c14-8aae-cf52deb03a2a", "sighting_of_ref": "indicator--fed4139b-8eb4-47cf-9667-a3f008f2dae4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12531ffb-83b7-4008-8dbf-cb9c4cae7642", "sighting_of_ref": "indicator--190b90b1-a997-4c87-9f3a-ec30e511ba56", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3618dc7-1218-4389-8d52-0a30546c1eb2", "sighting_of_ref": "indicator--2d5e2ebe-3ac5-4dd2-94b9-67a591881e0c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d55fc70-c440-443c-80d6-e099dd4a2031", "sighting_of_ref": "indicator--4a08e95e-665b-4c41-8c23-6a41f9e4ba4c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1aa9e3d-f943-4c95-af27-44e77a13815d", "sighting_of_ref": "indicator--4a08e95e-665b-4c41-8c23-6a41f9e4ba4c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e6aa41-117a-4acd-b1b1-202daee3c25c", "sighting_of_ref": "indicator--50969b27-bf89-425b-9fd6-88c29bb1bd64", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7fe7c9-8f0c-49d0-a59a-640294856fad", "sighting_of_ref": "indicator--50969b27-bf89-425b-9fd6-88c29bb1bd64", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0361a43-b045-400c-a236-27b2ca4b0286", "sighting_of_ref": "indicator--517908f8-8f8c-4293-8bd7-2075054c56e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39736603-b087-4219-97e1-44e92aa87357", "sighting_of_ref": "indicator--517908f8-8f8c-4293-8bd7-2075054c56e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3aa0c4-c278-4008-9c94-b9981bd1593d", "sighting_of_ref": "indicator--e933385e-0925-486d-bc6b-206a020ebc96", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c08e2f1-968f-4c67-b737-15a7f2d477a9", "sighting_of_ref": "indicator--e933385e-0925-486d-bc6b-206a020ebc96", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d377c4b2-02ff-4b1f-b079-92182f66207d", "sighting_of_ref": "indicator--7ef07c67-bf15-4858-9a65-d853add16f85", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f709fb0e-7374-4899-8cef-7278361d600a", "sighting_of_ref": "indicator--2bf073a2-9fbd-4387-a12f-3a26709c0d6f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aeb2333-448f-4d2e-a6ef-8e05993a6396", "sighting_of_ref": "indicator--0daa7a21-be0e-42d9-95f7-78cafaee8276", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7e8380-a31b-44c9-bf5d-1c0aa25bf50c", "sighting_of_ref": "indicator--0daa7a21-be0e-42d9-95f7-78cafaee8276", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94a2400-655b-41e9-88c6-9330c94c0fe6", "sighting_of_ref": "indicator--b7073f1e-bc83-4fa5-8bb2-f20c542c71cd", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2344aab3-3c60-4748-8fd1-d028a64530ba", "sighting_of_ref": "indicator--b7073f1e-bc83-4fa5-8bb2-f20c542c71cd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1f0772-aa0b-409e-8b8f-e9b1d9aeda65", "sighting_of_ref": "indicator--b7073f1e-bc83-4fa5-8bb2-f20c542c71cd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879e617e-e07c-4b99-9e14-4c372ae21906", "sighting_of_ref": "indicator--fb070343-4a81-4e97-b61b-01984441b74a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2a5886-b103-47f1-8ba6-fa632edd1cd7", "sighting_of_ref": "indicator--fb070343-4a81-4e97-b61b-01984441b74a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303b1552-7b9f-4af2-9530-30db13dbf074", "sighting_of_ref": "indicator--6835e88e-f0fc-4849-ba35-d56f5ce3397e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294acbea-dd93-46a9-9c3d-9f8a35f585cc", "sighting_of_ref": "indicator--6835e88e-f0fc-4849-ba35-d56f5ce3397e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94216d8-ae34-4629-91a6-b24b87460ea0", "sighting_of_ref": "indicator--0f201225-961e-410a-ae70-fdf4e20112eb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b7f5f6-e173-48c8-8f92-d2df84bcf1a2", "sighting_of_ref": "indicator--0f201225-961e-410a-ae70-fdf4e20112eb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0e602a-bd6d-4475-a7ad-85894f066606", "sighting_of_ref": "indicator--8b6761cf-286e-4938-a6fa-829e3ac0dd57", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d388c4-5058-494d-b206-c70a5043bfc5", "sighting_of_ref": "indicator--8b6761cf-286e-4938-a6fa-829e3ac0dd57", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66552954-22a6-4714-971c-e61bc77b17e8", "sighting_of_ref": "indicator--4536b680-37bb-4ef3-ad1f-a5799ca2d4d8", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0d6619-01bf-4dd0-8135-c157495d844b", "sighting_of_ref": "indicator--4536b680-37bb-4ef3-ad1f-a5799ca2d4d8", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae4d68b-e5b2-43ff-a6f5-d17a2752b75e", "sighting_of_ref": "indicator--c10d9143-06db-4b51-beec-6787d584d8ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f29220-6a40-4547-b33d-c18b412a6e05", "sighting_of_ref": "indicator--c10d9143-06db-4b51-beec-6787d584d8ab", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeef6160-ec7c-465d-b3e8-63ca602b5c9f", "sighting_of_ref": "indicator--f5ff1931-cc2b-4dd7-a9c9-d72c4fcdfc3c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814e6a7b-2461-4eae-a084-f03cf5b18bbe", "sighting_of_ref": "indicator--f5ff1931-cc2b-4dd7-a9c9-d72c4fcdfc3c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a65319-a76f-42d1-8649-c9dbe36af52e", "sighting_of_ref": "indicator--4d3067d1-3f0f-441b-a4b5-4aa8896b52f6", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2da0514-d19c-47c0-b66f-79a21615e38b", "sighting_of_ref": "indicator--4d3067d1-3f0f-441b-a4b5-4aa8896b52f6", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85a67b0-228b-4830-8299-1da36e4f4447", "sighting_of_ref": "indicator--65cd6635-979b-4697-9bb0-ab291aa95f93", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cdeed2a-c3a2-47fa-b145-cdb0f7e4d4a5", "sighting_of_ref": "indicator--65cd6635-979b-4697-9bb0-ab291aa95f93", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7100b0c-edc2-4963-ad46-8398a53ba0d7", "sighting_of_ref": "indicator--f65b84bf-8432-42ed-8874-4a5af1987a97", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74133fe4-a86a-4ed0-bd6d-fc89bc0c12f1", "sighting_of_ref": "indicator--f65b84bf-8432-42ed-8874-4a5af1987a97", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4ef121-ae38-4cfd-9fb6-96404bddb3db", "sighting_of_ref": "indicator--1319e269-ca35-465b-a640-4888d86a65b7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc8e7b7-389a-4036-bc2c-8289de2e8287", "sighting_of_ref": "indicator--1319e269-ca35-465b-a640-4888d86a65b7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a88d608-0fad-4550-ac7b-fe1f4f9c78a2", "sighting_of_ref": "indicator--47d7a860-ad1d-4cdd-9a13-400aad71406f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b85fd1-5ac8-4041-9b05-126b2df5f8db", "sighting_of_ref": "indicator--057a4c96-493d-49f8-af99-380f495a965b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd216eb-9fb7-4b20-ba75-049d218b0f7d", "sighting_of_ref": "indicator--84687c56-a426-4e1a-b52a-77fca1b82027", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236c2a1d-9e56-45bf-9356-c3fe6081627a", "sighting_of_ref": "indicator--eac76c50-85a6-40c6-a475-6063644b3ddb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15052be8-95f3-4554-8875-e984fa3b748a", "sighting_of_ref": "indicator--f0bf915d-bccf-472f-a767-c803194750b2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9363bf7-1fcf-471f-94e3-8c66da5539b7", "sighting_of_ref": "indicator--27cad8c2-9ad7-4de8-b2ab-191e007af348", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e545de-bbdf-47ae-a460-2ce89b58582b", "sighting_of_ref": "indicator--970e3e86-812c-4106-91ae-2202adf4c107", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1e5de9-d7f8-4065-90be-aadbe5176148", "sighting_of_ref": "indicator--2545d1de-3798-4fc2-a459-c998ffcec2de", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893b680d-d856-4760-89eb-7267a99ff057", "sighting_of_ref": "indicator--4004140c-e194-4193-ab45-ec96a40919ea", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508d8c92-470c-41ff-8cdc-a0c707ea3610", "sighting_of_ref": "indicator--4004140c-e194-4193-ab45-ec96a40919ea", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad8eb72-0bd5-411a-9276-ca69a6e198e1", "sighting_of_ref": "indicator--b62fb40d-7c1d-4b1a-8d9a-11698d992e86", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3c42e8-99c8-4524-a012-ed22322116fe", "sighting_of_ref": "indicator--b62fb40d-7c1d-4b1a-8d9a-11698d992e86", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc92f70c-8b8a-4c6c-899f-21677f5046f4", "sighting_of_ref": "indicator--61bda990-64cd-4119-9518-83b811cbb716", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe415c3-ccb4-42ba-b140-5f999fde15ef", "sighting_of_ref": "indicator--61bda990-64cd-4119-9518-83b811cbb716", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1a5d26-56e8-49b0-a971-f3f8d9af43bf", "sighting_of_ref": "indicator--87874abe-4a09-463f-bde7-a9484b145df1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261994c1-f5fc-431d-a877-e6158c2b9565", "sighting_of_ref": "indicator--87874abe-4a09-463f-bde7-a9484b145df1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd67a87-2892-4549-8e0a-1eaff77f72bc", "sighting_of_ref": "indicator--2486f62a-fad0-4717-b6fb-d73eb13c6aac", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d9ac4f-bbc4-4103-befd-ee298af688a7", "sighting_of_ref": "indicator--2486f62a-fad0-4717-b6fb-d73eb13c6aac", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdba4ea-b11c-46a2-98a8-6ed0efb56022", "sighting_of_ref": "indicator--b9da45d4-a437-4ae5-b98e-0eeb625be139", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f271c2bb-a1fe-448d-9a06-c3de2353ef72", "sighting_of_ref": "indicator--b9da45d4-a437-4ae5-b98e-0eeb625be139", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e7a025-001c-46b6-90d3-5ea6ffd5fb18", "sighting_of_ref": "indicator--8dbb4a97-1698-4cfb-b3bd-0297913e4c26", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65984e49-75b9-44d0-8ec2-1a621f769f1b", "sighting_of_ref": "indicator--8dbb4a97-1698-4cfb-b3bd-0297913e4c26", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28914c0-505e-4d87-91c3-72c6b88627c1", "sighting_of_ref": "indicator--8e4dcd98-b654-4c98-aa8a-954fefb32e35", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289677d4-9f31-4b00-a749-73f357bd55b0", "sighting_of_ref": "indicator--b9409f3d-7f93-4f2a-a926-cd24978e1d39", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ff96be-430a-424e-82be-9ffdbfae41b5", "sighting_of_ref": "indicator--b9409f3d-7f93-4f2a-a926-cd24978e1d39", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4981f5-4755-4777-847f-001961c7f870", "sighting_of_ref": "indicator--6009fcfd-784b-4251-9f42-ccb48a0972f3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a6953f-beb3-4919-adb8-d5f33bfc3c2f", "sighting_of_ref": "indicator--6009fcfd-784b-4251-9f42-ccb48a0972f3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8207cd12-a249-4abb-a983-0ec592cbf6fe", "sighting_of_ref": "indicator--685ef7fb-b298-4fab-b666-55ac1af6807b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9e4cc7-426b-4d19-807f-272164e3cc8e", "sighting_of_ref": "indicator--685ef7fb-b298-4fab-b666-55ac1af6807b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b8149b-daeb-44d1-bd32-08a82e6fec13", "sighting_of_ref": "indicator--5a1ab853-320f-4968-b059-f7549ba8631a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584e7d21-c3fa-40df-b829-551f852c73ce", "sighting_of_ref": "indicator--5a1ab853-320f-4968-b059-f7549ba8631a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bf65fa-7883-409b-9f4f-e3331579c297", "sighting_of_ref": "indicator--58233287-54a3-4fec-ac09-92c6121106cd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598c7ee0-60f8-4225-b39f-088fd72ad9a3", "sighting_of_ref": "indicator--58233287-54a3-4fec-ac09-92c6121106cd", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6894f20-e252-44c2-ae88-97ed3e92ce87", "sighting_of_ref": "indicator--4a1acd55-ebda-46d1-beab-4764c9241eba", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb81362d-f389-49ca-a8c4-e4bb90c1c00d", "sighting_of_ref": "indicator--f0ff7ecb-aac0-414a-a136-420b94514784", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ddbfcb-c445-42d6-aa65-b6b3d73f33fc", "sighting_of_ref": "indicator--dbd7588c-6cfb-4b45-bad5-e4d30da9d7d4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2203f9ad-2159-4805-be05-e7d25ce6b07d", "sighting_of_ref": "indicator--22e9ddf7-9b8d-4703-beb9-c8cd03404315", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053b549d-3935-443b-8700-ffd1dd21db43", "sighting_of_ref": "indicator--c5922829-c271-4ab2-bc93-2bcd30b62866", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f6a3d5-1311-4fed-9754-f6e2ec18f5de", "sighting_of_ref": "indicator--86b55ba7-ff6c-423b-9217-6a84d5ba848b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272d9a83-6b17-424a-8454-e8feb65b2209", "sighting_of_ref": "indicator--86b55ba7-ff6c-423b-9217-6a84d5ba848b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6389246e-0282-4894-b46d-94e25c0a1d22", "sighting_of_ref": "indicator--9823fa66-99ef-45f7-8550-a7fcbe8dfc77", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a0fe01-4c53-4366-b489-af53b9be3c41", "sighting_of_ref": "indicator--9823fa66-99ef-45f7-8550-a7fcbe8dfc77", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559cf4c3-dbca-4896-8895-b73c13de4f66", "sighting_of_ref": "indicator--8db9e9d2-6de3-471b-a888-3e48126d3546", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f800431-cb40-44bb-b2b9-4f34d45b7fe3", "sighting_of_ref": "indicator--8db9e9d2-6de3-471b-a888-3e48126d3546", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1dc12c7-b45c-4e2a-885d-120fd6000b5b", "sighting_of_ref": "indicator--dc0c487d-a497-4cb0-ac63-0cd9bcd500e2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edab840c-8e89-4fbe-b9a1-211bb75289e2", "sighting_of_ref": "indicator--dc0c487d-a497-4cb0-ac63-0cd9bcd500e2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbd63d8-8a94-43b6-99b8-d3a9c3bc97dd", "sighting_of_ref": "indicator--49d46a06-d64f-4ec0-9d1e-9eb13d235549", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4d93e7-06ca-4208-8f96-e0c253161719", "sighting_of_ref": "indicator--49d46a06-d64f-4ec0-9d1e-9eb13d235549", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dee229a-76f8-46f4-8849-39b765525739", "sighting_of_ref": "indicator--8ea74f45-e7d3-468f-874b-d6ac6c91909d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cf1595-2381-41a5-8093-700e388320f5", "sighting_of_ref": "indicator--8ea74f45-e7d3-468f-874b-d6ac6c91909d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4538d7b5-79a0-4d1d-aa7d-0f6cc5fe24a0", "sighting_of_ref": "indicator--a34d4b7e-7c95-4fa1-b45f-3d57eade9fe2", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e9b904-2038-474b-9fa2-f7748ff57e01", "sighting_of_ref": "indicator--a34d4b7e-7c95-4fa1-b45f-3d57eade9fe2", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e35ca0-1c9c-4374-b006-bc35d3476933", "sighting_of_ref": "indicator--c5c5246d-2fb4-42be-900a-b91e642689cc", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96dc93a7-e3ad-4aa2-b7c1-ec2bd7245faf", "sighting_of_ref": "indicator--c5c5246d-2fb4-42be-900a-b91e642689cc", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567366a6-45e9-46ea-a7c2-ccfe42043edf", "sighting_of_ref": "indicator--86c3ac2b-dde3-48bd-9054-96d5966ad4d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890fe6f7-32e6-47a0-b79d-ec6eceff4e25", "sighting_of_ref": "indicator--443fa33b-8bbe-42ad-a01c-caab0b88dddb", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6e8181-757f-49ad-89d9-ffd7a574ed37", "sighting_of_ref": "indicator--326a7edf-a638-4a74-ba7e-08eaca7eb08b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1083e0f-9f20-4bfb-ba5d-1a240d09b92d", "sighting_of_ref": "indicator--e6e8102b-95e7-47a5-b517-ba7817a49402", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efcc30a6-b653-4bbd-a626-f4528172bb74", "sighting_of_ref": "indicator--b81691c4-8f34-4139-9874-333912392776", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7f9565-49e4-4df9-a06e-697afc4c5ce8", "sighting_of_ref": "indicator--ffba0cdd-5597-4c0e-b241-912171b9220d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057dfca8-e889-4f99-8933-776659db07ca", "sighting_of_ref": "indicator--30531466-c173-4df8-950d-f18b1f5fd111", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe61c09a-ca04-403f-a6c8-9294e329cd14", "sighting_of_ref": "indicator--0fedc105-e9ba-4a7e-9a03-f5612430b869", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48e7127-c870-4ad0-b112-e44ad400b7ab", "sighting_of_ref": "indicator--dc4c1e82-3675-4332-957d-a8ef3e8fca0b", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48269ac6-294f-48cb-bc27-48de468ed5ae", "sighting_of_ref": "indicator--cb6bfb10-b8d9-4233-a3eb-a56e18f52b15", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40f52ea-d072-4b83-b01f-0efd48b66a25", "sighting_of_ref": "indicator--f42ef215-e794-4177-9d53-9726fd46ea2b", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff8d89c-60c5-4e1b-9e1c-4abb939532db", "sighting_of_ref": "indicator--ebf280ce-ed9c-46c1-8f5f-b93b6ac70199", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88581f1c-7dcf-4b5c-8b21-d34d4ee45526", "sighting_of_ref": "indicator--ebf280ce-ed9c-46c1-8f5f-b93b6ac70199", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93c725d-5c76-4b39-bd66-ee02fc6eaa30", "sighting_of_ref": "indicator--ebf280ce-ed9c-46c1-8f5f-b93b6ac70199", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21526566-5c16-47c1-9669-813f079fe235", "sighting_of_ref": "indicator--33993117-295c-4fc0-8ed6-6c147e58b331", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fee62d0-27ef-4b84-a5a1-2d1142b1b55b", "sighting_of_ref": "indicator--33993117-295c-4fc0-8ed6-6c147e58b331", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba2485f-7c0d-4912-b95d-a38498d29eeb", "sighting_of_ref": "indicator--08882679-25aa-497e-8964-af2186e8098a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473a82bd-236d-419a-9620-c3b9b9b60e2e", "sighting_of_ref": "indicator--08882679-25aa-497e-8964-af2186e8098a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1578d3-e161-453f-9c3d-98689db4b761", "sighting_of_ref": "indicator--3a8cd7b0-1368-4f0b-aabe-65288ef65c7c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09f8965-1828-453c-a9b5-51074abed7d1", "sighting_of_ref": "indicator--6065a7bc-a3a3-4acf-83b5-9b4bbe7c0b06", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff933faa-0655-4e22-8a3e-0ad2ac499bda", "sighting_of_ref": "indicator--6065a7bc-a3a3-4acf-83b5-9b4bbe7c0b06", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8587347d-a931-480d-927c-200b7c175ab3", "sighting_of_ref": "indicator--6065a7bc-a3a3-4acf-83b5-9b4bbe7c0b06", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ea9dea-e0fa-4aaf-9e92-0c66af8e093e", "sighting_of_ref": "indicator--9d9962a2-ef21-4b74-b2a2-6985f6382812", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32685e4-6127-4125-ba66-70d994f7495d", "sighting_of_ref": "indicator--d25ed8c9-e077-44a8-872e-c1b87e5b42ae", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bec5dae-5427-4c1a-bbe5-4d27ac611bd5", "sighting_of_ref": "indicator--d25ed8c9-e077-44a8-872e-c1b87e5b42ae", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4772ef86-68bf-4934-a766-40542bb39179", "sighting_of_ref": "indicator--9fc09e44-483b-42cc-9f53-57d5b40f3c33", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d010f03e-677f-47a6-b37c-26acf6e441bb", "sighting_of_ref": "indicator--4cfc66f4-7177-46f2-ade6-41d597bcdf9c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26d56f5-9401-4e80-91d5-f940d75db86a", "sighting_of_ref": "indicator--378a2bf0-0248-46ab-90dc-8edcb4ab8519", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45815df8-22ff-4041-b492-642886e65955", "sighting_of_ref": "indicator--c05e4eaf-f720-48f6-bc29-94d74d8c529e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7cb3ea-8a1c-4746-bc8b-8f6cf4a37868", "sighting_of_ref": "indicator--6fcda78a-942d-4b14-b050-435c278fd5ee", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2417f3d-1888-441b-85ae-8b996ec31270", "sighting_of_ref": "indicator--ab80b733-eafd-4474-9f13-10cef5157792", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e085d46e-7ded-4028-8278-ed68515ff1d1", "sighting_of_ref": "indicator--ab80b733-eafd-4474-9f13-10cef5157792", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c73ea0-7f8f-413e-bdd5-c789c79c2745", "sighting_of_ref": "indicator--ab80b733-eafd-4474-9f13-10cef5157792", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b350e5d6-1f50-4101-b0df-2888cac85bd3", "sighting_of_ref": "indicator--77a043a4-b763-4178-88dd-fe22a6671f93", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da92c41-7eba-4a8b-ba4d-e5598b9a806e", "sighting_of_ref": "indicator--a88947f9-a80e-4361-86be-02fcebf266d1", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6881de-c034-416a-af8d-b680c85f1ae9", "sighting_of_ref": "indicator--fcaf77ef-303c-4269-bebe-cbe70006a517", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244c6748-3c60-459f-b5f7-633e1bdd7bc6", "sighting_of_ref": "indicator--a09d22d5-9762-41dd-a8bd-e39a08efcb7c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5d051c-0127-45ff-ba81-251cf199ed50", "sighting_of_ref": "indicator--a09d22d5-9762-41dd-a8bd-e39a08efcb7c", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a501c282-5cd5-4be7-a267-ba789a4c4c23", "sighting_of_ref": "indicator--a09d22d5-9762-41dd-a8bd-e39a08efcb7c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78b5e20-60ee-411d-84af-ba3d283c5abe", "sighting_of_ref": "indicator--ae8b6336-4419-4a62-8f1b-118540bd9866", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48dbd1cd-53f6-4ae0-b017-f4c47914be8d", "sighting_of_ref": "indicator--ae8b6336-4419-4a62-8f1b-118540bd9866", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f76555-fa4a-44eb-9328-f636e834bc37", "sighting_of_ref": "indicator--45bdc2a5-1ac4-4257-9e3f-d65884ed1679", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4355a9b6-7f6f-4ace-a808-d55e33ebff3b", "sighting_of_ref": "indicator--2b18e1ce-9b2f-4055-8b07-5912664666b5", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f303ea-a0bc-45c5-9e0b-f5ea1d75b1ab", "sighting_of_ref": "indicator--d4b444d4-903c-4e0e-b976-df22e66624d3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d76618c-90f1-4398-92a2-b020b9dbd3be", "sighting_of_ref": "indicator--d4b444d4-903c-4e0e-b976-df22e66624d3", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2039b6b8-8238-4976-b2ca-b1bfe2890882", "sighting_of_ref": "indicator--33558785-3019-454e-a6dd-f312e133d28b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c4bd51-767d-46ac-bb8c-348c052f8398", "sighting_of_ref": "indicator--33558785-3019-454e-a6dd-f312e133d28b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d309f834-ff5b-4a13-a3e7-d153eae7a9fa", "sighting_of_ref": "indicator--adf2cb61-5d50-49ba-903e-6e532f9af693", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e15774-3b2e-434e-8b00-8a45237cb22e", "sighting_of_ref": "indicator--63acd973-8b1b-4e1d-81e9-be182842a104", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e4f586-9d4f-4745-8f23-6541cb487abc", "sighting_of_ref": "indicator--63acd973-8b1b-4e1d-81e9-be182842a104", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144ccca4-1d65-4a62-a4bc-de4c771b5ae7", "sighting_of_ref": "indicator--69b2fc5c-7e05-4f28-a77b-7bdf84558053", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a784f9-358f-49aa-9f86-4e9ead0df22b", "sighting_of_ref": "indicator--d2bac4c2-4bf7-482f-a955-83e3be4eecb9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad51aa4b-b00b-4e72-8310-1c449cc48043", "sighting_of_ref": "indicator--486ea633-a432-42a1-a86a-73e1114a9628", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71646a2f-9658-423b-bc1d-2795863796ff", "sighting_of_ref": "indicator--cdfffa63-682f-4be4-9f80-209e7df29ef0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd9fffd-8813-4e83-9cee-e51524f0d2ac", "sighting_of_ref": "indicator--e3b67784-2eb9-4125-8aec-8d07cca88025", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091a64da-667d-4904-bf58-820d122bee17", "sighting_of_ref": "indicator--94e3cbdb-4b62-4a9f-bae7-259deb2b04e0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34faf748-389d-409a-a8cc-c1ef51cf8c86", "sighting_of_ref": "indicator--13d53ba4-a8f1-4249-b59c-4fa79743948c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19dace8a-b7d6-40e5-b479-b98f3146992f", "sighting_of_ref": "indicator--510c595d-3956-41a8-b53c-a5e181f515a4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0bff1f-97d4-40da-949d-04bc2420f049", "sighting_of_ref": "indicator--034aa3f3-afb3-4c16-962e-eecb5d20a0ab", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98ea61e-3822-462d-96ca-ee4ef1e461f4", "sighting_of_ref": "indicator--0c544627-24ff-4d20-a37c-826ed3cbabc7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2820354-2158-4387-8248-cada764fede1", "sighting_of_ref": "indicator--cf789830-ea4f-44e3-b807-06a1903a06bb", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee3dc90-1675-4fe9-83cc-22301e36756b", "sighting_of_ref": "indicator--68a4de99-ef7a-4b42-8f07-5e02af517843", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb78f5e-8955-49ee-9db9-53dcc7b0e1c5", "sighting_of_ref": "indicator--f24a5400-7399-4094-a639-cbf75e686ce1", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38bc22b-09f6-40cd-b91c-dcca2bf18813", "sighting_of_ref": "indicator--d3875d23-183c-490a-8c7d-3f028ef3a1fd", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35898025-1920-46fc-ba68-a25500e5b72b", "sighting_of_ref": "indicator--cea9fdde-dc98-4810-9387-c300e000c2e9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b79421-e35e-414d-ae32-5bb821ebb6f3", "sighting_of_ref": "indicator--99ea4bcf-94d2-4cbf-92d0-79f0978bd35f", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b488c9-0f07-4e78-b141-53381bc7c545", "sighting_of_ref": "indicator--9e317310-757c-49fb-b84a-538dc2011d69", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e35128c-2f36-40fd-b891-a446c9600526", "sighting_of_ref": "indicator--930bd02a-4de2-45fa-814d-a6839013fd4f", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ce1895-5e12-4915-b71f-dedce7371776", "sighting_of_ref": "indicator--112ba171-e2f4-479d-a77a-994e73d6508d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a2f720-fa44-4330-8e0e-d25973f1ffd6", "sighting_of_ref": "indicator--8ae5fb90-78fe-4563-9cff-a3e2beead778", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed026a39-c189-4802-bf2a-8b7a203f7031", "sighting_of_ref": "indicator--4e3622ca-b966-4553-a424-05fd2203cb94", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf10fe9-00fe-455c-b877-81a390ac4f7a", "sighting_of_ref": "indicator--4e3622ca-b966-4553-a424-05fd2203cb94", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bb7af0-2fb0-498e-83f1-f4afad79e6d7", "sighting_of_ref": "indicator--e8e80c82-b5e4-4724-b59f-3574135aa2e0", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073265e7-9ab5-4e2a-823d-b46a4e464f9b", "sighting_of_ref": "indicator--3f17f200-27da-4455-bd39-25bccc2974e7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b675565b-9daa-499e-b09a-f362f6409c37", "sighting_of_ref": "indicator--3f17f200-27da-4455-bd39-25bccc2974e7", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7beacec2-18e5-4ea5-a427-5174513f2bde", "sighting_of_ref": "indicator--432d2e82-e3c1-4f45-93c1-2c1814d6e4f2", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63ee303-2915-4632-9b74-b6adb9ebc851", "sighting_of_ref": "indicator--33cd6107-94e2-44e2-8c72-f1b51c0d24ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3984a4-fd9f-4a17-86e3-c57e89ad2f87", "sighting_of_ref": "indicator--7a609c45-6746-47d5-96c2-cd7bef718c9a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253633be-8052-476a-9d6f-b4b0ab41be20", "sighting_of_ref": "indicator--3efa4a17-e025-4840-be67-b815d5ece5fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cab0952-59f0-43c3-803c-5c92b36abbe0", "sighting_of_ref": "indicator--886e7953-8205-44e9-bf0e-c994eb486d85", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7bb495e-3960-4dce-83ca-a54aaa10c83e", "sighting_of_ref": "indicator--b098d6b0-01bd-4f03-a1e0-6cfff78bc737", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1ca847-cd2b-49ff-903e-c638ab722ce6", "sighting_of_ref": "indicator--1f8b14ad-b8bb-411c-aa35-c42f245ef383", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca022d1-ef35-41b2-83fc-6b4827f9b75b", "sighting_of_ref": "indicator--fd45b518-2285-4fb0-8ecd-c19e21ac4cb8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b522294d-652e-452c-b5d3-07757cdf7f3c", "sighting_of_ref": "indicator--e65cbf22-a80f-4376-a329-2988a103597d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85829ae3-02b0-4e07-a63b-9ccc98c7d0b7", "sighting_of_ref": "indicator--4c450876-ae75-4d81-8892-50776e2a4a19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bd3004-e6fa-4495-950d-16b63ea15d6f", "sighting_of_ref": "indicator--3dc981c1-abb8-4c59-98d6-8cf210782340", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d181e64d-0ba5-4213-9df7-5cae8cabaa61", "sighting_of_ref": "indicator--ef11d9ba-6766-4d92-b686-fad4263239f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4e141b-4429-4e9e-8ec8-6aacd484be78", "sighting_of_ref": "indicator--f63b7390-1b23-458d-838b-1c61fd0aead5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194f806b-6a0f-4cdd-8bfd-f3860b1fbb15", "sighting_of_ref": "indicator--a36ed8dd-55d2-4f83-a306-1ddd53ff800f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6f4e2c-7723-4d20-9605-024086e12d05", "sighting_of_ref": "indicator--bee7135a-e395-4c81-b4b4-783fd61ba452", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc8d7cc-4b6d-4624-b53b-423daf2cd964", "sighting_of_ref": "indicator--7cbc96fb-c297-42eb-9fe7-52479119a93c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78aa1850-cca2-4e7d-a3a8-5aee8d102b6e", "sighting_of_ref": "indicator--13cbbfd8-6f24-49d8-9936-d3210375148d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7785158d-93b9-49f3-bc4d-4daa586872fd", "sighting_of_ref": "indicator--262141ff-ac17-46c2-a573-7061a17490e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505b8513-53ac-43cf-ab3c-0e490e023471", "sighting_of_ref": "indicator--5b71fa73-c805-46bf-840a-d00cd6e29a66", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81748a6-6616-463a-b67e-1ec99cdbba94", "sighting_of_ref": "indicator--33629523-6b37-4a00-aabc-75dbb9a64a9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8770f94e-4e9b-4ddc-bbe8-11bfd2504946", "sighting_of_ref": "indicator--02725118-8b60-4a32-835c-f5af197e9f03", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723a5d6d-49bf-4b39-9b48-89e5435bf7a2", "sighting_of_ref": "indicator--f631b1ae-4156-41af-bc2b-28887e207d12", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042868c6-1f43-4e24-afbd-1c8278e0e16d", "sighting_of_ref": "indicator--fee1cd22-163f-449a-89b2-bab132875264", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f44f61-843a-4392-b352-32a09b065b77", "sighting_of_ref": "indicator--bae7150b-3758-4fed-b220-a3c02e0f3174", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6483325f-2d08-49a5-9f71-f221ddb85672", "sighting_of_ref": "indicator--7b1aa5ea-9471-4f90-b63d-e75ec43624e4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fac75bd-a290-4082-8a09-557b93595da3", "sighting_of_ref": "indicator--8d909a55-a6d4-46c8-b791-4cc20e2aed9c", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9853f4ef-5036-4ed3-839f-ba725dfa76d2", "sighting_of_ref": "indicator--9e85af88-4ba7-44e0-a731-094f4a9da0c7", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61938b0c-a379-43e1-b20a-92287b982baf", "sighting_of_ref": "indicator--6b607640-89fb-4ff2-8b15-0ec8e4605f8b", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22182509-4002-42a7-97e0-f754fcb0b240", "sighting_of_ref": "indicator--0876c8bf-6356-4c67-b818-a7902daeef87", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20989c48-0ce7-4ccc-abfa-3bcebb1e4233", "sighting_of_ref": "indicator--0876c8bf-6356-4c67-b818-a7902daeef87", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce023edd-9c1e-4494-95ec-cd5d3b39ad34", "sighting_of_ref": "indicator--0876c8bf-6356-4c67-b818-a7902daeef87", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bc1851-5ed3-4fef-a477-4cbade409541", "sighting_of_ref": "indicator--06462011-f0c3-4a7a-904d-df9e407d11ed", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ea1b59-200e-43e2-82bc-2c07a193b6ed", "sighting_of_ref": "indicator--06462011-f0c3-4a7a-904d-df9e407d11ed", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa75ca43-91a4-4deb-afbc-1e7ae4cb9402", "sighting_of_ref": "indicator--06462011-f0c3-4a7a-904d-df9e407d11ed", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420710c1-aef5-4b5a-85cd-f3c6ed8d3394", "sighting_of_ref": "indicator--b2c4346a-21e2-4003-8806-d45bf4995d1e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894286d2-257d-4dab-a0bb-9590ae9767f6", "sighting_of_ref": "indicator--11d01706-9b2d-4009-97fc-a8a1136345df", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fe5c60-69de-4f3a-bb3f-9811b4a620eb", "sighting_of_ref": "indicator--322be96a-20d4-4cc9-b19d-ff480a6e4801", "where_sighted_refs": ["location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602a15a4-b542-41c6-b653-ee8db0dd9ef3", "sighting_of_ref": "indicator--6f371448-3f98-4cca-bf68-6b4df06faec3", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850c106e-d57d-439c-b52d-c9cdab48126a", "sighting_of_ref": "indicator--41332419-11e2-4081-9763-0536f848e96d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3180f824-92ec-47af-9ef9-b78f6d08aac0", "sighting_of_ref": "indicator--41332419-11e2-4081-9763-0536f848e96d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54ca6ed-78c1-477e-8a31-6b2f8324c8c5", "sighting_of_ref": "indicator--891e184c-b50c-4a8c-a216-e25b8fe230d0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f4d2f2-60d5-437b-971f-19eed49bdf3b", "sighting_of_ref": "indicator--cccee4c3-80d8-48d6-b4ed-4b37a0ddf84b", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1b7408-4e8a-4e08-82b2-c233c6805548", "sighting_of_ref": "indicator--331e4059-b161-4786-a039-6586687f8833", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca0eaa5-69b7-41c9-8ac2-0c2098b2ec8b", "sighting_of_ref": "indicator--0e7bd7de-09dd-4033-9b81-9523aa69a647", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee40e4e-1051-49b8-8589-087314aa35bb", "sighting_of_ref": "indicator--85505a33-3a3a-4259-8f0e-a69fd0efabc9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe25c49e-5384-4286-ac93-e211930060a3", "sighting_of_ref": "indicator--85505a33-3a3a-4259-8f0e-a69fd0efabc9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31a24e0-a73d-46d8-911d-73448f6e1bc5", "sighting_of_ref": "indicator--50ff970b-5839-4483-95cb-3494a8227058", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5271b3-6db2-4fad-99da-8417589bc0e7", "sighting_of_ref": "indicator--c65560b3-ce23-4fdc-a7c6-ff7fa0978d5d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd8db55-9c49-4aa6-b6ce-95d91142fc28", "sighting_of_ref": "indicator--5eafb1e7-b562-4961-a7a8-e504ddd6652e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8eacb5-923b-4adb-ad59-145f68b51fdf", "sighting_of_ref": "indicator--483ca904-838b-4d27-94b5-f31ce4c17753", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d330b79-0030-4801-8d2b-3684503accf9", "sighting_of_ref": "indicator--dc615cc7-32de-4e10-8ae9-960eca68326c", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408e27f5-3a7e-4e6a-a4ca-fed7e967a629", "sighting_of_ref": "indicator--d62e295b-bdc7-41d0-b165-2c9fe76f0d11", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627693bf-649b-445f-a37f-32bed8632e03", "sighting_of_ref": "indicator--a9462387-c6da-4359-b83f-024d5fc03bf3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f690a421-bd7f-4fce-82b8-62e18cc3fe34", "sighting_of_ref": "indicator--964894d3-80e9-445d-b752-f032a1bf7e52", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81851fe-4222-4476-989d-1082de7d37ed", "sighting_of_ref": "indicator--d1a27e5d-dee1-4721-b686-4fa1226cbedf", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54556c4a-8384-4264-814f-627f921211fd", "sighting_of_ref": "indicator--d1a27e5d-dee1-4721-b686-4fa1226cbedf", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625dd88d-b56c-4d28-b200-e4f6b19ba470", "sighting_of_ref": "indicator--8d9923fe-174a-4922-bf5e-8cff1722687f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba97a5f7-b3eb-4cf3-853e-b59e059c7ef8", "sighting_of_ref": "indicator--185ed67b-40b7-45db-ae8e-3741dc7ea9cb", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59717b83-476c-4e1f-a12f-a4f3df0034e1", "sighting_of_ref": "indicator--65803d76-bea8-4d18-928f-7bf6181d940e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28655f4b-dd23-4e95-8381-18365989da12", "sighting_of_ref": "indicator--65803d76-bea8-4d18-928f-7bf6181d940e", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f596d303-88df-4bf5-9823-9ed919e352d7", "sighting_of_ref": "indicator--381c1305-4dcb-4562-be9b-de2323da4d1a", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8e7a16-664b-4e21-ac65-9613a0a8def8", "sighting_of_ref": "indicator--381c1305-4dcb-4562-be9b-de2323da4d1a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d2af84-13d8-448c-ac43-53200167a1f7", "sighting_of_ref": "indicator--381c1305-4dcb-4562-be9b-de2323da4d1a", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb22321-bfe8-4814-b1c9-24de33a8a952", "sighting_of_ref": "indicator--425edb02-0ec1-4648-86a8-0028ddd1ba1f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947e284a-d7f9-48d1-b216-4da0cd7f5d62", "sighting_of_ref": "indicator--d423933a-de14-4025-8f83-a4fb2ef3a3ce", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6946ee7e-8ab2-4b5f-a182-332fd68dc63a", "sighting_of_ref": "indicator--9b7ec2ab-b35b-4881-a175-0d93ad205c98", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d53546-5b86-4d4f-a4b5-e16b26769e7e", "sighting_of_ref": "indicator--9b7ec2ab-b35b-4881-a175-0d93ad205c98", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c275e9-78ed-4df3-b230-e5cc5150e22f", "sighting_of_ref": "indicator--d7744c9e-62e0-4ba8-b456-ef26a11aef09", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01d33dd-0f1f-4a8f-997a-b51621fff13d", "sighting_of_ref": "indicator--d7744c9e-62e0-4ba8-b456-ef26a11aef09", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6e02d3-40c3-44ee-9b51-8ec46c3fdea2", "sighting_of_ref": "indicator--7158d299-027e-4bc7-bff1-8dec907c97c8", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769c8f83-98fe-42b3-85d8-f7e29d485fdd", "sighting_of_ref": "indicator--36872705-ea5e-4271-9746-dd9bd448001f", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c4ea08-ae5f-42ee-b79f-f4b0e08e6da7", "sighting_of_ref": "indicator--37cc5497-74c5-4829-8009-73969e78aa30", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91004338-398d-4371-9174-514b65b76aed", "sighting_of_ref": "indicator--37cc5497-74c5-4829-8009-73969e78aa30", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d29a85-7da7-421f-a8b5-8c1b54227037", "sighting_of_ref": "indicator--381788f2-7743-4a1d-b8dd-446da5413626", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c5dc80-7a16-4215-9758-9db587b4502e", "sighting_of_ref": "indicator--630104b6-e7ff-4c07-a5ce-2390c3e2937e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdca2428-b385-4328-9928-451ac80a268a", "sighting_of_ref": "indicator--d8d0b8d7-7ba7-451f-8a9f-aecabb3198f1", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841b292c-07fb-40b8-8389-82aca13402c3", "sighting_of_ref": "indicator--2b042ddf-4e7d-4098-975c-5ce1bd5342a9", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39973075-2375-47a7-b500-4e0de814b2b3", "sighting_of_ref": "indicator--a1a08c8c-d554-4b7e-a2ff-234011a68368", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd735e68-d7f9-4856-9492-92a4a3d1ad48", "sighting_of_ref": "indicator--a1a08c8c-d554-4b7e-a2ff-234011a68368", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb033e0-41b9-4e70-a0fd-edb10cd806a9", "sighting_of_ref": "indicator--3fad777a-99dc-4e1e-b620-e657eb0457c7", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225e32b6-0cf6-468d-a8af-64b656cc4036", "sighting_of_ref": "indicator--96e65b63-b205-4f5d-80eb-727afd52f9de", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285ebd59-eedf-4f0b-8376-7d9d2a4b10c5", "sighting_of_ref": "indicator--e7dbdd8c-00e6-4fb4-95d1-1079657d1ac4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ff7554-bbdb-4eac-8135-a729843a3e29", "sighting_of_ref": "indicator--8b196a5c-6e27-4dc7-b78f-c7ccbd0e7d5a", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe7f751-4252-498d-8d14-3a8ddde98e34", "sighting_of_ref": "indicator--55d48a06-0125-4147-896b-20845adc1bf9", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d831f253-68b7-4532-8eae-02f2d71914f2", "sighting_of_ref": "indicator--762ec45b-5db5-46c8-b220-4e379e2684c4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfdae97-2865-4942-baf3-c87551cd9dcd", "sighting_of_ref": "indicator--b09f374c-e9a5-497c-9b8d-ff3878e5ef7d", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917bfd4b-10ff-4701-858f-e1f3c9117b83", "sighting_of_ref": "indicator--b09f374c-e9a5-497c-9b8d-ff3878e5ef7d", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09b83fa-0a82-4a48-bf12-c7a86c9164dd", "sighting_of_ref": "indicator--b09f374c-e9a5-497c-9b8d-ff3878e5ef7d", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45503986-2ac9-4f86-bffc-4ced7fbed0f1", "sighting_of_ref": "indicator--0cfb506a-bf5c-4ebb-9ad1-720222382d5e", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d389ca5c-7c8a-4775-bb71-5e287744f06a", "sighting_of_ref": "indicator--773bceff-bf10-4a34-a1d6-d4281e116b65", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172bb7ca-949d-47c2-a1c5-4e63ad536a05", "sighting_of_ref": "indicator--9a89efd1-fcaa-4920-b8b9-f336bd477bb0", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65159d6-30bd-4ec8-889a-b3e3d1630583", "sighting_of_ref": "indicator--8bdc168c-f2b9-4dd5-9da9-c6dd889284c3", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb80b358-3442-4aa2-a65c-726f62ccf3ef", "sighting_of_ref": "indicator--9f0780e9-6387-42a9-bb4d-525fdf314a15", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc14afb4-4f9c-49de-b560-5f37488b905e", "sighting_of_ref": "indicator--9f0780e9-6387-42a9-bb4d-525fdf314a15", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897219d0-604c-480d-a8de-89ae2c20921c", "sighting_of_ref": "indicator--9f0780e9-6387-42a9-bb4d-525fdf314a15", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5eeb61-754e-4ab5-be90-9e101ce4cc1b", "sighting_of_ref": "indicator--5bfda122-d65f-4e42-9fe8-3713cf01e349", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097c3053-9ecc-45a2-8b5b-c05029c52824", "sighting_of_ref": "indicator--5bfda122-d65f-4e42-9fe8-3713cf01e349", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646cc8df-2404-402a-8170-6b70044da56d", "sighting_of_ref": "indicator--de7315ea-b697-4313-a4b4-79f850e013a4", "where_sighted_refs": ["location--f33a4d31-afc3-433c-aa52-2fa537b0c74c"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a2189a-27d8-414f-9cc9-89891dc92791", "sighting_of_ref": "indicator--de7315ea-b697-4313-a4b4-79f850e013a4", "where_sighted_refs": ["location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c944848-ae43-45af-ac29-1ad03721131d", "sighting_of_ref": "indicator--d09ac0bf-1439-4dd6-85b2-73154344be9e", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96d1e5e-2b0a-4443-80b1-54361342274a", "sighting_of_ref": "indicator--c79107b8-2d0e-4c59-b1f2-4b2382748c36", "where_sighted_refs": ["location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa"], "first_seen": "2026-06-13T00:00:00.000Z", "last_seen": "2026-06-13T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--ae15a97a-1b14-4654-9fe0-c453b15e4b55", "name": "Threat Report for 2026-06-13", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-06-14T11:00:02.008Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--f33a4d31-afc3-433c-aa52-2fa537b0c74c", "location--11dcb95b-fef8-4fa6-a2a3-bcce6cccf0e4", "location--79f9e75a-9030-4cc4-bcad-93c7c3d6d7aa", "location--a56f5c5e-f3b1-45f3-b7f3-efedd9f0479e", "infrastructure--ef4ab111-9ecd-4b0e-8371-dd75699cdcb4", "infrastructure--93f909f6-b212-4822-95da-7c9b87c61950", "relationship--e695d173-8761-46e2-ba97-3942ddc0e2c9", "infrastructure--3d63327f-5f6e-4f68-83f6-0e685a7d912a", "relationship--7c0179cd-6106-469b-bbc4-1f58fe96a983", "infrastructure--174d2695-bf12-48be-abe2-df908414c3a6", "infrastructure--2e935f86-2f16-4087-957a-0568f2447c33", "relationship--c5421aa3-1606-407d-a473-3edbc4e61c8c", "infrastructure--3559985c-d817-4b56-bfda-75f75dc1a791", "relationship--bac93886-298d-4075-b7e2-7e5887628bfc", "vulnerability--21469e18-4bba-40be-9147-213a16600fc0", "indicator--738c8108-c03f-44d2-a40e-eb8fd820db8a", "indicator--a85b5e9a-726d-40d1-85bf-8477d874e333", "indicator--eb6b0943-ea8c-44df-bfff-2698e23e336c", "indicator--b151f9ae-7cdf-47ed-a0f3-2ff9c077bfa9", "indicator--5c685f27-9136-40d2-995c-dd1b66d7738e", "indicator--69fd9d17-1e1b-4677-867d-e0782733dc9a", "indicator--b8c55553-dc68-4061-a749-53e6274ddaa8", "indicator--bb6b10bc-c63a-41ff-9f62-ff8014f45779", "indicator--6966254a-cba3-4aff-b687-ff0358297675", "indicator--5b8e699b-bea5-4af7-a0b0-0a3afe42e70e", "indicator--8d8f1700-8562-4cb2-93d1-7d5cc98b5b33", "indicator--ea30d690-7370-415c-bdff-a222a7c12950", "indicator--dc73ff72-38ed-476a-a8ae-066f3c2eda69", "indicator--c4d48e65-97ff-463d-91b5-a17851816217", "indicator--63d88254-aede-42f3-a35e-cc7c6f90a9d8", "indicator--2259e2bb-cff9-4e22-9cc5-f7bbf5306d42", "indicator--91efb665-e302-4aa6-891c-e86f8ab921cf", "indicator--deca284e-32ad-4ae3-a7f1-dd364ee82e06", "indicator--e655ffa6-dff2-49be-af4d-de0767116438", "indicator--e582e015-3176-4faa-84d1-3ce8f037701f", "indicator--a34302aa-8f51-4c68-ac32-9dbc56529144", "indicator--ede672cc-15b1-4449-8dcc-26243d4f12b0", "indicator--1d6cf04f-eb4e-4216-b32f-855af2169da8", "indicator--9023df53-4345-4b90-8014-3bcadf3d1952", "indicator--1d108a6a-0ba0-4e70-9be9-e0b26ad3ceee", "indicator--daea939f-b91e-437a-836d-e8a84b596006", "indicator--6b578b8e-42ff-4c4b-a293-e3bedf3cd8c9", "indicator--b7c69da1-7be6-46aa-b80f-6028e7d9af27", "indicator--1612c666-1b57-4109-8a45-9501545f3bc4", "indicator--6226d017-2440-4c85-9e62-2f499edac0ea", "indicator--c9b37291-c185-4bb7-b190-0434e508ac0d", "indicator--8ffc9894-b6e8-4e12-b4e3-ba0e0b79cc20", "indicator--f0a43a28-95ae-4d76-b6d5-56eae98321c3", "indicator--c1644a26-126e-42c2-b3b2-fa0a90eda525", "indicator--90f2f1a7-63b8-44c5-9dbd-5d6c18f12520", "indicator--40f54fc8-3b34-483f-8914-37a14caf7f8a", "indicator--555d4371-b883-4500-9ca2-bd03acb80221", "indicator--fd9d2952-207d-479a-8af7-8bf5ffc68626", "indicator--21d1d45b-8b35-4a9d-94d1-0e2303cc4220", "indicator--005613f1-2311-49c5-9e48-1dcadfb1a70c", "indicator--81929042-1764-4b37-ae33-4b061434db13", "indicator--86cb8c84-419a-4bb4-8a62-515223a5cc81", "indicator--0fc0f9c9-af8f-416d-8afd-d731396c08ba", "indicator--41d9a0f5-2ccf-4f9e-9bc0-b4acb77ad2af", "indicator--ee5d71a8-6416-4b12-911a-71ea360349f0", "indicator--cdd74fca-f0a2-4792-acc3-65de6737900b", "indicator--b0838d54-c20d-4f65-ae5c-6de2c123dbf8", "indicator--30f1c4b0-8a83-449e-90d2-fd53e4155203", "indicator--ca116102-6733-4dab-9b38-1acc8c5f8ad1", "indicator--df0ac857-9586-4b13-9cf4-99977b931564", "indicator--3d34ff11-c37a-4cfa-a12f-fe7b1434dba2", "indicator--16a970b0-9682-4cd6-918a-a344f2bfcdc5", "indicator--9502f144-286b-40d3-8bed-edf1d7347c84", "indicator--c80bf7ef-89ec-46ca-bdb1-514cb5cf1972", "indicator--9ae45c01-2bb9-4386-9261-9ef4e9cffbe3", "indicator--43194dd6-562c-4521-9711-842d8b262894", "indicator--60ad5238-1bb0-4d1a-9d70-50c1b27f88fd", "indicator--dc1c3982-5263-47b2-86ef-f886cb55c638", "indicator--d36ebe05-b022-4e92-a58e-37c4d93a4f7b", "indicator--2ad9e54b-f04a-4849-b7ae-9a1ace6e48a8", "indicator--dca33bba-a88a-4ee4-8c84-32096ee08078", "indicator--bd2a416c-821e-41ea-bff0-4e0ff86154a8", "indicator--5bc4a9a2-6978-4598-8eb9-6d11a2309d30", "indicator--9418f3be-db08-4b1f-b1c4-1da0e70fb391", "indicator--0279096d-9017-49ea-b71a-c20554a8b1de", "indicator--576172f3-ca9e-4dd2-90e7-ebdb6fe232e6", "indicator--b22a3fd3-35e1-4477-bfb0-ab890aff230c", "indicator--b084c9bf-43c9-4b57-8921-cf278810fea9", "indicator--f3d99768-3ac4-4aeb-a37f-0ac544d5c8f4", "indicator--0f630a4e-5dde-4ecd-a109-40a8b725e764", "indicator--3abb5ab9-2554-4ff6-a798-98452ce671ae", "indicator--7bbc7a85-1f76-4718-a8a7-3e393a697c62", "indicator--8589646c-2ae3-4be9-adea-8fddb4affba1", "indicator--e2906450-5b7e-4937-b1ee-5e83fcaf07e7", "indicator--db3f3d74-d410-4b69-9a8c-96562a8ad5e5", "indicator--493df506-9036-42fc-af99-7fd2fde7c14c", "indicator--7dba121c-d3c0-4d2e-85cc-ee28348b82e4", "indicator--f8d3a725-677f-4203-903d-885df1a0af0f", "indicator--074e946c-0c64-4e09-90c2-58c2e443f25d", "indicator--ad3d974d-4401-45e4-8ec0-15182949efe7", "indicator--1f44754a-cf3c-4e69-90e9-decacb6ff6cf", "indicator--bc8a8828-95d3-4b4d-85fd-55716a345ed9", "indicator--542e92a7-1082-44aa-8baa-0111b0df5d6d", "indicator--b465781c-ca58-4740-ab74-3539205131e2", "indicator--39310025-60e0-40ff-b0db-b810e8343f74", "indicator--12d51ab4-157d-4b0c-81ec-1a59c9ea4b1c", "indicator--e76ad1ce-cc87-4768-9f3d-7090db800e69", "indicator--4722bd1b-5caa-49eb-aaf7-46206012312a", "indicator--f93a9af7-936b-406d-9947-a3a1fa810546", "indicator--58c7dc33-bff1-491c-84f2-828e5e01c6fe", "indicator--385dd1d5-9107-4952-8c79-b568fa18b878", "indicator--9810e1e2-97ad-460c-ac66-3b17e785676c", "indicator--d29689b7-d2a9-4f6c-8aa9-da0221f30428", "indicator--0be83a61-264e-4aa5-b206-e872f72845d3", "indicator--6a1895a6-bb42-4373-a579-e3a6f87dc1b0", "indicator--69b35fc5-0d50-43d5-bb1b-8511b7a09678", "indicator--906901d9-e000-424f-83b3-b2a77fd34827", "indicator--e3274c42-ce29-4d94-ae64-db65f8c3b9ca", "indicator--176969cd-ee05-41c2-857f-1201a9e27824", "indicator--921797a7-95ae-4b70-8ef6-cf5371955364", "indicator--eb552585-976a-479c-9087-ad107f82a035", "indicator--063f8b40-75c9-4734-a694-1c19df439fef", "indicator--9c531fb3-4124-4d7c-95e6-c61066c55143", "indicator--8daefb63-4bd6-4fb9-974a-06f663e7e610", "indicator--9d44c667-402e-4dc0-8b51-28f914c4d868", "indicator--0c62e41a-aa36-4e0a-882d-de9dc96b5b0a", "indicator--ecab51e9-b417-4fb1-82f5-6c5723140068", "indicator--71c5a8fb-a175-4d09-b7b6-1ebea92f17b9", "indicator--3caa6d21-6fe2-4dce-ac4c-16f94cf93a2d", "indicator--c32560c0-36fa-4308-8bbf-6a611c245aca", "indicator--cf2dea9f-8b06-4b8e-b4d7-b7279016f673", "indicator--24aecc2b-7933-4147-b21b-7dc86367b614", "indicator--09e5436d-53cb-4f75-bdda-f484cd1d4c23", "indicator--a83692be-e6e9-400a-8152-60f07caa6912", "indicator--d394d4e2-74a9-40bc-ac15-0bfee31efd32", "indicator--dd8a41af-2ab5-49c0-ab94-fa61aba305b4", "indicator--256b043f-d182-4659-89a6-18ce2044df52", "indicator--f5ac9995-3a83-40ad-b723-649d73a892b1", "indicator--196132ca-7a03-4d4c-a8b4-ecbaded65af5", "indicator--ccd9b522-108d-4833-befe-5953484fecf0", "indicator--f7f349dd-d1d0-402b-8e74-50c3601388bc", "indicator--204d53e0-68f6-4ee4-a1a9-4daf69ebdf18", "indicator--9c6dda4e-8a29-4fb9-8dcd-a64d2ee6e645", "indicator--1524ea5d-c996-4c3c-a932-757571e26d92", "indicator--bda18391-cce6-4a48-85ed-7e3fa6f928bb", "indicator--6edbc0e7-cbc1-4954-b4ba-3177a03896d9", "indicator--8b386095-900e-45ed-b430-a7a5c7259010", "indicator--68d046ea-2d08-4ef1-803b-b9ba7a314b64", "indicator--286512f9-52e2-4a68-9d1b-5dcced788e2d", "indicator--011fd4c2-c4ca-4a6c-bfb9-1833b7fd0f72", "indicator--a09677c5-b5b0-4533-9d3c-d265fa5f731f", "indicator--92879a74-ec34-449b-943c-ea321a5fb6b4", "indicator--7b49e4b8-9d0b-4905-87a1-04c4f9f2779c", "indicator--f03cf67d-d576-4ae7-970d-fed7ca522ff6", "indicator--cab73e86-9466-4e54-85c3-09369d9513e8", "indicator--e1fae42d-77e3-4ae1-bd5b-f11db3092fbe", "indicator--ad54bef7-0766-4e26-95ee-dadfeee39ebb", "indicator--6b1d8218-bdcb-47d3-b054-d0cd4ffbf5ac", "indicator--5c824d80-4845-4422-a36c-f509696e6726", "indicator--61f559ba-803a-40ac-a6e9-299339010d64", "indicator--cfd42972-4c4c-4186-ae54-78bd0a33269f", "indicator--b8d8451d-be23-49ff-bb0e-e156a5838d1d", "indicator--1e7ab968-0082-448d-8971-18ce8abe9a0a", "indicator--666a9f33-f67b-40be-8767-fd90d0ebe083", "indicator--d0c212b5-e578-4d3d-b7c3-8e675cfac1de", "indicator--3b73e3ca-68ef-4f67-8af7-5a16b533c916", "indicator--b77b19cd-8d40-49bf-94cd-338f08ddfc35", "indicator--88a32b84-3191-4729-a51b-852913cb065e", "indicator--0b8d8604-a5df-4e02-82f7-2fc23fa38096", "indicator--10364b67-7f73-426e-95d0-c14e9edbbbcb", "indicator--7e167301-60d2-4e2d-bfff-ae52c5bae156", "indicator--b3dd991c-6dae-42b3-b573-f827dbaad173", "indicator--33996d47-0f3e-4ec4-bc36-bb864f0f53ec", "indicator--79a4a2f6-dd05-4efb-a964-9ef425e6dc60", "indicator--9bee9fa5-18a4-44fe-ad29-0f522fa82f2d", "indicator--cb0cfa0b-243f-4d39-b05a-33a4ea27b54d", "indicator--1d03a00d-2c94-4a7a-9b68-f62f543d0642", "indicator--96319942-f70a-4b8d-9aad-d642f3436263", "indicator--d77f1c06-4836-477c-846d-e7ca99b9effb", "indicator--3a2f7638-a59c-40e6-97a1-474ad3713826", "indicator--80953d0e-4abf-43df-a448-c9bb7476e0ae", "indicator--60acf340-b4cb-4628-b84e-fc22890a3786", "indicator--abbba223-1728-407a-a6f7-ebdde8090964", "indicator--06524e50-dc02-4d4a-bdfe-c46581ca4bb1", "indicator--766222a9-7b75-43cd-ae1f-df639010f603", "indicator--954fcca1-e6a5-4742-880b-d3e82f3db133", "indicator--b922252b-c456-45a8-b694-7bdbb50e059f", "indicator--a018def8-8982-447c-ade7-5d1bcc6d77c8", "indicator--85fae443-85fc-423b-87a5-d7ab1f22f7a9", "indicator--e2765cba-4e94-45cf-8cd8-3ddde66c422f", "indicator--1b2715cb-6bf4-46cc-9be7-178c4f11f131", "indicator--55d7da31-7786-4b4e-9981-b0939d5d733c", "indicator--892899b1-ff3b-4312-ae69-f43e5439c6d0", "indicator--34676183-2ed6-40d0-8ff4-193066112be0", "indicator--1a125f7d-59e7-4980-93ed-d77c049daee2", "indicator--16160609-a1a0-4c93-82cf-3a777430617f", "indicator--6f616f97-e2bf-44ea-a468-4cd698b13085", "indicator--94a20798-b262-45b2-8894-5a49e0df4726", "indicator--0131f977-d18a-48c5-9a94-989c19914ddc", "indicator--3f26d1b1-a9cc-4944-b230-e75cbf8c0b38", "indicator--2ffa45a8-07a4-4c76-846a-289ca2e7a1f7", "indicator--8851d13d-0f52-44f8-ad6e-ebbf125b90e7", "indicator--2a9dc450-69d2-4e83-8231-df518786df97", "indicator--3771be94-bd90-4a83-82d1-b2b2a6e5fef8", "indicator--dacae4ed-4fd5-447b-9339-4ce639589e41", "indicator--de5c35b8-8f59-4c60-a782-2fcf590275f6", "indicator--313abe07-6fb6-4e6d-81f7-180df01680cb", "indicator--5c38ccaf-5be7-4478-91f8-8f6ba41e09b1", "indicator--c5d1444d-f0c0-4337-9737-abb57f98bc44", "indicator--053ea56f-6dfc-4128-b5b7-597fa8bbcfaf", "indicator--7e1cf04d-0d54-4a32-97a1-992a22abcfa9", "indicator--edff42e8-2ac9-410f-9467-b2203eaebd42", "indicator--f5076e16-4f49-4270-af62-7f729ad6c86a", "indicator--a97758c2-f2d9-4aa5-8759-8f35c7870fcc", "indicator--7fba8ca9-3901-4e17-86c3-37eb8bd2708f", "indicator--272d6b68-1389-48a4-b15c-d0158b149760", "indicator--b92b5e85-0e6f-42f4-b568-d3976228631e", "indicator--3792c745-4fae-43ec-8089-83770cf67740", "indicator--ae7f5a35-c6e6-47c8-8b1f-194434542b00", "indicator--ed0e1c2f-07e5-46f7-81e6-2e3dbfbaeb65", "indicator--13ce956e-cca1-4bac-bbc9-9056c8d2f377", "indicator--90e3a6d4-8507-41a9-a74b-f23385b77346", "indicator--0c9e4d23-bfdb-4d8e-809f-bc79c2be5fd5", "indicator--2aa2ba26-0402-4435-8749-1db970ad0d50", "indicator--fea5bb95-d982-403f-ab51-90f012346711", "indicator--9c8c3741-a60b-4af9-ab0c-46053e932338", "indicator--e26db6e2-cca8-4f48-baf8-174745d1afd9", "indicator--71e87d25-040a-4c66-9e40-e3f8a883d7b8", "indicator--7a9239f0-ba77-43b1-9752-f6cee5318849", "indicator--9ff69a3c-5f72-4577-bef4-bc4b4a3aed14", "indicator--8bb1a2c7-bd06-41a4-85c3-c31d7386ba6c", "indicator--0eb21f2b-8a61-4254-b7a4-7538b6da17df", "indicator--523f5f53-df9a-4ec7-9a8e-3034a51617fa", "indicator--df4dd7e0-aaf8-4b21-a2e5-34a52f2e495c", "indicator--78e428d9-d442-4392-ae28-586d2184f36a", "indicator--150620e2-ed99-4862-bfa8-b37f057f33a4", "indicator--0c0ca6eb-952b-41b5-a0fa-aac988d46369", "indicator--f3db639f-2a1a-445a-be5e-54b63e1450d4", "indicator--dd9371cd-2783-4731-b61d-e16183272629", "indicator--121ad815-8dbe-4b6e-adc3-e85c050158b7", "indicator--63449030-0a0c-4741-9de8-b33e67f4e81e", "indicator--57972192-6705-447c-adc4-b1554e8c88e6", "indicator--50813ca0-e36c-46b5-af3f-9d4f154421fb", "indicator--6ea81d17-db1e-4aeb-8ad4-e30bdb6b40b0", "indicator--8944417b-755a-429a-a486-19dec127dbc6", "indicator--4b0b5c58-ccd9-4a78-b2c2-4487bfc9f4a1", "indicator--476c26fc-2970-447f-9f94-59258d6cf2ac", "indicator--8680323e-4f8e-4379-91c8-5ef0b7a3ae2b", "indicator--b2e19b6d-2e8c-4a03-b0ed-804b0b3fe6b3", "indicator--ba04ea40-ed55-429d-a38c-d9696349b770", "indicator--89685825-b6af-4064-afb7-6db03a5efb40", "indicator--13a7898a-3846-40bb-8a5d-ddbf342eb86f", "indicator--6de658a3-f4e0-41a3-8f6b-a641136c09e9", "indicator--3bac1bb2-8f47-4921-a907-ebdb6955a12f", "indicator--d72fd814-c293-4216-bbdc-6f189fc8d3ab", "indicator--1de1cd1f-eaa2-490e-b144-0ddbb1ada1de", "indicator--2c4833ea-b2e2-4d1b-9fc8-72b0760b7a8d", "indicator--d8844077-7c60-45d3-9d86-63b45a85f112", "indicator--9733dcb1-b805-4969-a470-c3eadf12f39c", "indicator--6815c2ac-99a7-404d-bd62-f6d0449bc797", "indicator--c0765649-5b07-4c29-bcfe-73716cfed155", "indicator--3925579c-7843-4b0c-9e82-826f85fe270d", "indicator--25cfd846-493a-48d1-a2d5-67adc0e922b4", "indicator--3b1647d8-3dcb-4fb1-af80-d87adb81dfbf", "indicator--0ad6533a-4ee0-4ba9-bc06-9b23dcd0fecf", "indicator--82092b96-69ed-414b-8e40-31ce2354d229", "indicator--9e31d85a-192b-4031-8a01-006abab83629", "indicator--18ac05a0-51fe-4a38-9437-0413ac4edf59", "indicator--cc3c5179-b7aa-48b1-9cec-7123874bfa5b", "indicator--9bdeb0a8-7602-486c-8e10-9418a35c6095", "indicator--94d62ed6-e159-4d5d-9d79-368faa78c35e", "indicator--eb0a935e-858f-47d9-ab2d-c29629fd7540", "indicator--8755e28c-b42d-4d94-8361-34ed57ba9bc3", "indicator--b53b5d37-1ff5-4ea6-921e-e6ba68436c8b", "indicator--2e327c91-cec4-471f-a31c-3cceef4fbd35", "indicator--ca76a68b-b368-4826-b278-e7aa68e14740", "indicator--d53a3e93-ba1b-497e-91d2-e544f6af795b", "indicator--14dbeb93-3f9e-4779-a996-233b99dcced9", "indicator--c26ceaf9-05b6-41aa-b2fe-33f718e40cee", "indicator--fc8e0631-df73-4d27-9f33-8117d660c8d1", "indicator--128f470c-06f0-4c5d-91b9-36f570950a0d", "indicator--dbeaefa9-463b-42f5-bdf6-40ffdd7000c4", "indicator--68848176-cee7-4075-813e-1177900276a7", "indicator--17b2beed-8d09-4f1e-b6dd-3d18f0cf334b", "indicator--9aed747f-0936-44f0-98d5-e504cf91e677", "indicator--3d10f375-d348-4206-bfdc-6b59ce1d52b6", "indicator--a857d620-606d-4f25-8bff-e7c7e009e0d1", "indicator--650ac42d-d321-4ac2-bc86-1dd21308363e", "indicator--ccb11ec2-0840-4387-98e3-236489e76a4a", "indicator--0fdbe8bb-d899-4221-b44c-c48f65d88b80", "indicator--a41d1f78-57ad-4833-ab38-5562b3daf0da", "indicator--b428561c-e321-4a39-875b-417e45750e04", "indicator--29b7e399-ed14-48bb-8946-93a23b4d7d2e", "indicator--d6dd8cf0-cec3-4b5c-abdb-78b6d363d27c", "indicator--3ac1bd71-de2f-468b-8f62-e7dee75ba941", "indicator--13946441-49d6-44cf-bda8-84637444ed41", "indicator--70037a15-ccf7-4aa2-8f69-faf953434da5", "indicator--b86c3c26-9e62-488b-869d-b8cf0b4314ca", "indicator--0a1f414e-b566-4eb7-bdfc-bc3246105c20", "indicator--88371ff2-2940-4835-abb6-12d1ac474c02", "indicator--d62bd335-d104-4d16-b7df-dcdc0c2f5455", "indicator--7039e986-70d2-4f6a-a223-a5c7f4648ed9", "indicator--569da213-c781-4912-b33d-ccaa7a24d1ee", "indicator--2d147dd0-ad78-46d9-a283-3fe686787c6c", "indicator--57e69262-5fca-4352-b3bb-3044db0bb869", "indicator--e0ae8274-13cf-4165-9169-1abf7981102e", "indicator--f1eb1a09-27c7-4d04-b9d7-72bc8639d752", "indicator--19e56c10-e828-4f6b-b24e-0bd3e07cc2ba", "indicator--66ba7f9d-30ef-40e6-a5c0-ce33bb763a8f", "indicator--ac79a4ef-32c3-4d3b-bfb0-42fb02e6eaaa", "indicator--7dae3b6c-4abf-4939-9b10-e6272f542a1f", "indicator--6ae453eb-c455-4316-a506-18340ce7da10", "indicator--9ead50f1-2061-4c60-86b3-415220b22601", "indicator--d9f313f0-d2f2-492a-8f44-433e7c054cff", "indicator--6850be42-59d8-4cfb-9bd0-34dcd73a3219", "indicator--de8cfd12-485c-4066-a819-2773f63b919f", "indicator--0f215dbf-f72d-4d0d-afcb-e3ef3c98cb0b", "indicator--14d11665-de1d-4235-a10c-a9a692d973a9", "indicator--47f19e7f-79ce-4be2-ad1b-a9774c8142f3", "indicator--c42d0962-43a1-4cfc-99ee-1f2fd9105a6a", "indicator--67ebfd43-1067-48f7-8a3c-1659d5d041d6", "indicator--c26385f0-bf44-4640-abed-c9cd748ade1e", "indicator--6a225470-c768-47bd-bd7c-1090778da66e", "indicator--e77580ba-62ad-4334-a0b5-5f20c341d57d", "indicator--a909597b-05f1-442c-a7c5-8f3360bc2c98", "indicator--c7c1e97b-c911-46f7-bc8b-1fd60a749ee9", "indicator--f22ce7fc-2459-4630-a645-7730990b6bd2", "indicator--239f41dc-3c7e-4503-8f76-bc7512bfad61", "indicator--8a827c25-4eae-490d-97cf-ef099891aeb7", "indicator--3ce3f6c4-a165-4a51-83c8-c10ea9fccdb9", "indicator--6eacc84e-a41b-44f7-9ff1-07c18acf8204", "indicator--af4ee3d2-e0f0-4555-947c-194038376419", "indicator--a870cb24-e671-4e21-8b92-9129f7fb378f", "indicator--abde8f51-6799-4218-924d-618fe64f2fc9", "indicator--e7e8d113-fbdb-4c24-9026-8127169d2192", "indicator--4c5fb70f-accf-476f-8967-4e473accea05", "indicator--30cbcf8c-ced6-483b-afc1-637b66e1e2bd", "indicator--01fbf129-344c-4af1-8da0-caf34fcd029f", "indicator--cc420074-9a99-4ae7-92e4-b3933afc1e60", "indicator--1882bb9d-da4a-47ff-9f59-0bca415d9344", "indicator--77ac598f-26bc-48cf-bf54-043eac6d7a3d", "indicator--1ab08c4e-9985-423f-ba7b-49416f752953", "indicator--2867e74d-9f05-4ad6-bdba-0916c7c3ced1", "indicator--c2179700-9bb5-4a34-9d33-0f3095238a29", "indicator--02e8d09f-4129-4a05-bc35-e0ade95b8cbc", "indicator--4ba01d3d-820e-49c1-81a5-465688f477a5", "indicator--9209e550-cf37-47ad-8605-6b601058fcdd", "indicator--147eeb76-94fb-4406-9cca-b78dbf78fb53", "indicator--cac8a0e8-7503-49a3-a0cc-740145a169c2", "indicator--ac684dbc-568a-49d5-826c-ddc1874dec68", "indicator--2020cf0e-7514-4edf-9cd3-1e7bbc452e8f", "indicator--5e1640a2-54fe-440e-bb13-de98df4c76d3", "indicator--b339c668-94f8-46af-8cf5-7831f39c92b4", "indicator--69312562-1fb4-442a-910d-7ee64f81c872", "indicator--f18afa19-5d10-4305-a1bb-ae24bef1c48e", "indicator--fdc79926-944d-4add-bd29-964230a3534f", "indicator--a5f30041-4352-431b-904d-f6b2bf7013e1", "indicator--e4f6f2fa-14aa-4192-b968-133f750782f1", "indicator--f5af5dab-e63a-4aa6-b0f8-cc791d26b6b2", "indicator--2cabf021-3309-463a-8aff-cd4af82e692e", "indicator--5b2e285d-a342-41d2-9c53-23e46c9c0fc7", "indicator--25b8f17b-8e86-4a75-b18c-215b58e0c11b", "indicator--fd715815-1ca8-4a2c-8a3c-15c0328d75fe", "indicator--e3ef6a99-d50c-4360-91cf-883072d99d13", "indicator--e860404d-90c7-4d46-9a2f-7a425b12abd1", "indicator--acf1e0ac-c063-40cf-9a21-c72f950826ae", "indicator--305c9e68-7930-43bf-9256-f90521316be6", "indicator--329ac6e1-ea8f-4c6d-98d5-cf21f6eb6e33", "indicator--03d372bf-72c3-4ac4-9972-ed48c6fdabfb", "indicator--2aeb7864-e52c-4441-9912-3a154a992887", "indicator--b471f394-b693-47d6-a986-370de479ec6b", "indicator--f5b3736f-ea6f-46f8-9063-bf5939a1e960", "indicator--966a385f-4abc-4aa1-8a5f-52636268f3e4", "indicator--b09099fb-406c-43ed-8a51-56b7256f183f", "indicator--c1e9b5c2-7bd0-485b-a80c-f69f705d809b", "indicator--89c238cd-8102-4560-8708-d291fcc66ebb", "indicator--b0a5d6ff-be0c-46e1-844c-c05306528c25", "indicator--763e9fa5-d3bb-4f6c-bead-e7b57059dacc", "indicator--658d445b-bd42-40c8-8dfa-030b0eb28caa", "indicator--a0f8b86e-212b-44b2-84c1-07e4c332a3bb", "indicator--73645018-0f19-4a98-89d3-9b8ccf622898", "indicator--540f514f-e7f9-498d-b299-47c9d6c0413d", "indicator--bb9643b8-30c0-43cc-a87e-3164a8b52ed8", "indicator--3bb53fd5-ebd1-4332-8632-56911d449c79", "indicator--eead8f1e-abfe-4065-a072-ac61beefda3e", "indicator--596846fc-ac49-48d9-b190-dc97d506dfc4", "indicator--8c82ce8c-82e1-4772-a1f1-dab779216514", "indicator--cd4501e0-8eba-4fe0-8fbb-84206f29a267", "indicator--0bb551b2-e635-44c4-9c81-1b1fec60331a", "indicator--6d05b0f9-18a1-47aa-b947-3452454431d0", "indicator--9dad8cc0-8d37-4c27-8813-7b81fd1aa221", "indicator--6a3ec502-1a8d-4791-90d4-cfef2702856e", "indicator--0405f267-26ba-49fe-8589-5d9207343cdf", "indicator--06758b7e-b062-40b3-adf6-5b62112a7e37", "indicator--ff6a7395-1c6d-4ef7-bb05-3bc1e14eabea", "indicator--73b0a50d-2edf-419d-b0fb-e700bfab8ceb", "indicator--17e5ddc7-d998-40f6-b6c6-85358b40db48", "indicator--cc534143-9f8a-4721-a7e7-ed2c7e5b2ca4", "indicator--94c523ae-8227-4fce-b9ac-074f54cda7a2", "indicator--aa829503-018f-493a-b0b4-55ab9834de89", "indicator--dffa4452-3751-4fb2-9048-d686bab40fb1", "indicator--4d17189e-885a-4c39-bc80-e672a959698c", "indicator--b7bc6328-4136-4dcd-a2c7-5ba2ecbe8bbb", "indicator--63e873af-4314-4f76-9938-9d8f360a25bc", "indicator--fbec6d8d-3315-486b-8025-a381117aecb5", "indicator--0792c186-1828-4ba1-ba1f-a52caf619928", "indicator--c4496ece-2261-4ec6-a577-a695fbab683f", "indicator--21bba19c-b478-4bb6-af9f-f60248389450", "indicator--6301938e-a950-4a9c-92d9-66bf824febfa", "indicator--11c76280-b25f-47d0-9916-50108825869e", "indicator--a2f30e4a-1791-409b-b7af-9f8044601570", "indicator--217a4a1e-652a-49ac-8606-f65dde2ef69b", "indicator--04bd52b3-7f1e-43f1-85c0-5da115b5f19a", "indicator--44b15d26-d8f4-4555-80aa-013699c83a9b", "indicator--9964e789-8d4c-404e-b3ee-8f21cf23a845", "indicator--b8196e2b-5e81-452c-a387-fca0ee08c1c7", "indicator--6256b980-3e9e-435d-9992-d08a8a56265c", "indicator--4ed17729-759a-4b8b-ad93-eae3de36faaa", "indicator--6e94c792-e71c-4767-aed8-684838736c5c", "indicator--a97da387-235b-4780-9ad8-cf33ebef802b", "indicator--7eb2cfb9-fa22-4a15-9501-b54f462b3202", "indicator--94d922b9-6351-4f39-93cc-458b3a0d92a7", "indicator--34bd9d4b-a92a-4bce-aed7-08183afeea93", "indicator--f0efd8d2-206a-482e-b518-34355067ac53", "indicator--d3f13529-cbd8-4c4b-a838-9003a87495cb", "indicator--84398307-23e8-49dd-b86a-809b708b0003", "indicator--44a70ba5-bf1e-4bc9-958d-0698e215989d", "indicator--03c35472-6db6-43c1-a8f1-97b70c46abf4", "indicator--8a42d7f7-8400-43ef-b812-e88323faa597", "indicator--66a818dd-28b3-4261-9d35-040d4b3a4654", "indicator--77e127d0-0497-4100-97bd-6a3a0f0c89c4", "indicator--abccb789-b64c-4095-9f67-e7bf4bb0ee81", "indicator--3c3c090e-0590-493d-8fb7-e60f9a6423ad", "indicator--daf03a45-b338-4cf9-abbb-00bbc8593577", "indicator--c3202f56-0c53-468d-94c0-2f751fa752df", "indicator--2f2feda9-1484-4a04-9f22-7556aea03f91", "indicator--4862ac40-dc34-43c9-9f37-2eb06c5ae556", "indicator--bf547d45-7020-42a7-978a-d0c3edf7d3d7", "indicator--5f0b8b4a-e0ee-4585-8c44-4b45526f3586", "indicator--c13b1c38-9ea1-499b-bfad-cdc76f01e895", "indicator--6ba3ec10-70d5-4b7e-9f96-261bb5e644c4", "indicator--1ec91a9f-776a-4c3c-8392-df46d3b8cd82", "indicator--dce5c1d4-6a31-44fb-8640-9e248ab7ff53", "indicator--647fdc84-b8d7-4337-95ff-67252d51275e", "indicator--36f4fc9e-8f1f-42c1-8256-74d46d5f7b72", "indicator--5730f1ef-47d9-4356-be63-965787babb16", "indicator--5f4b02fb-dcb5-4c6d-9364-67b1e63a1e86", "indicator--6b61adbc-94a0-4948-8b8a-24f06b24ca36", "indicator--c922d13e-705b-4e4f-b625-78ced58e4ab8", "indicator--1d3fab99-575e-4154-b63e-942d1598879f", "indicator--1a54da32-693c-4749-95d6-0c3a513a95dc", "indicator--f3c9b129-1ed8-4786-86c7-f5c73291b3b5", "indicator--c6118008-a18d-4713-87b4-a66070d5c221", "indicator--49c3b123-fc05-4685-ab7a-d52e881b2997", "indicator--be705e48-4570-4ade-9bf0-127c06e4f688", "indicator--2e69208e-ae46-49ca-b245-9f12cc08a9d9", "indicator--0bc4db9a-4cc0-4c22-8529-bb82f80f2547", "indicator--22e4fc4a-97a0-453c-a55e-fab8adc14acb", "indicator--407cab9e-8270-4639-a998-34230c7e1856", "indicator--5900f9f1-9ce4-4640-85bf-2b1a81766205", "indicator--2f0c801b-6ffd-4b04-90ea-2dc253311957", "indicator--f4503aad-1242-43a2-8bc5-65bb55d9d8c4", "indicator--6325731f-e9ec-4a9c-80ee-823a2eab3c44", "indicator--7c39ae47-c12d-4c03-9790-1efe754226ea", "indicator--be286df6-c45f-4214-822c-d6b91fdb3dbf", "indicator--ed0617b2-3317-41fb-83e8-4dd989b1079c", "indicator--e9bb0395-5955-45be-af96-4e91024fbebd", "indicator--afeaa288-5e63-40cf-908f-531042de7b0f", "indicator--2deb5ec6-8f83-437f-b3ff-569f4fea5d04", "indicator--b9fafa86-1d40-4cae-b6f7-43101640955e", "indicator--ce958fa7-bddb-4428-b7f0-24e5e3f8306a", "indicator--a27b3a2a-9163-4b4e-afe7-633fe2f90953", "indicator--e1b6c9c5-587c-4d86-864e-d62744c76e9f", "indicator--d6e287a6-af65-42a0-8423-759f4182b92c", "indicator--75d08321-dba5-460b-8fde-7a716647e0f9", "indicator--6eb6e29d-6e43-4199-bbae-03e7dd1fad7c", "indicator--eaf75947-29ca-4b9c-b33b-8abf533285c2", "indicator--1e3e9390-9088-40af-8135-d713b3890fbc", "indicator--817997c2-dbaa-4b97-b389-bc919280f52c", "indicator--49a3032c-b056-468d-a79c-6e6a813f9915", "indicator--8c93907b-dcaf-4620-b0cf-d480679abfa0", "indicator--f2a30858-9429-4a7f-b00c-7771e4358544", "indicator--f32a5a6b-ffbd-4285-b2b0-03ab7e5fb28a", "indicator--d108f0bf-2775-493e-bdd2-ec7ed5b3b1c7", "indicator--e811f956-005e-4f4e-bf4f-d5bfd2a9f816", "indicator--a8515838-4054-4f09-ad29-b27d2840b634", "indicator--af5e0b6f-929e-43da-a372-43d182fcc6d6", "indicator--175f1402-75f9-4ef2-98ff-551ee6b2022b", "indicator--e92773f0-b6fe-4f3e-a7b1-f4b3c75e994b", "indicator--bdc57a72-b134-44da-8aa9-2b8f4a8c9689", "indicator--c9d18a75-282f-43ee-b4d4-ebf065d8fac6", "indicator--812f1fe1-df97-4610-b7eb-420b60560f3e", "indicator--aab0eaf8-7dad-4715-a480-bb605a847d4f", "indicator--afbe2a93-a039-45c9-aea2-8163de1610e9", "indicator--3c069661-2a6f-4d06-9cc0-811421908fe1", "indicator--f9103aad-14b7-4738-8d21-26a8a49e7ed2", "indicator--327bf51f-2a78-4926-84f3-bf690351c220", "indicator--eafbda7f-6c47-4609-b427-d878ae6dc512", "indicator--a48b066d-c9b7-4c12-8430-e7a9b197a145", "indicator--49235b85-84be-4608-9789-e63a7b35b0e1", "indicator--404ec330-074b-479d-9305-c0dde701146c", "indicator--68de820a-1641-4a77-bc37-96b7b2a4317c", "indicator--28262d97-38e2-410a-b3ae-841b4c39a521", "indicator--87fab305-135b-4550-8631-fb7ddb5e9d46", "indicator--0511125f-f821-4805-beb9-5f7201eb7b9f", "indicator--dbf8c900-b16b-48eb-8648-f2fffa1b4149", "indicator--273202a6-c6e3-440b-8aa4-989b4091f7b2", "indicator--1d432cc9-be76-49fb-8089-731bb73a6666", "indicator--31206bf9-7ca2-42d5-aa71-9c1f1a49f9c0", "indicator--a2de329f-f0cc-40e9-8919-37a5665b6103", "indicator--e15d8480-7b60-4745-91a8-e50a7ca4af53", "indicator--6bf7844b-7118-47c7-9236-c19eb69c7a8d", "indicator--7eb55310-f87b-466b-9666-c60754d03c3a", "indicator--e6844b4d-5e65-4b3a-bdc7-b02d5c4bb75a", "indicator--78e1ce3b-5559-480f-81e0-84b176093773", "indicator--b48f1c36-a761-4c1b-925d-533d018395e5", "indicator--353653c4-3451-489b-996a-bde8f8eba196", "indicator--d875b31e-8204-40dd-bbe0-7527a872b2bf", "indicator--38c9e8b7-7d9a-4061-8253-a3d7ed7f1b25", "indicator--e1decee3-aff3-45b1-a0ff-826ab80883ec", "indicator--da511083-607a-408b-8f25-326663359693", "indicator--8d97d09a-81dc-4ac6-b7cd-259cc17c4c32", "indicator--19092012-8c59-45fa-985d-3ba9bb215d38", "indicator--b7c6ed88-fbf7-415c-b358-33bd146e72d9", "indicator--00d26596-4f3c-47c4-a436-4a86cc60e113", "indicator--2aa4112f-c701-4e98-ae6c-2f25b4eceb03", "indicator--558b6513-d4fe-4be6-894f-9b051e309c09", "indicator--8c3c650e-3852-417e-9b5c-7fb58dcd0146", "indicator--56da111e-88f2-4990-8f8f-6b9a8684175d", "indicator--23e80121-8cde-4623-91dd-86f7b96eed63", "indicator--4b2be16f-6704-4b88-9c6f-74987452986c", "indicator--49932f7d-cbe5-430d-b966-e8e6b419a339", "indicator--539df660-ec7a-427d-8bff-33458fa128b6", "indicator--ede7d630-a1aa-4dd8-85a6-3dea18ff2d09", "indicator--fcc02b4d-9c1e-454c-85db-90886d257d8f", "indicator--438b2ea4-b8eb-4bee-8f60-629dedab4fbe", "indicator--dcb4a0ff-d2a3-4db0-a9a0-ce3221a0dd98", "indicator--51feaf65-1c20-4b4c-b515-276e06f1cac5", "indicator--bc75e004-1e88-48f0-8085-5bdf124eda87", "indicator--89e6490c-8435-4655-96a6-7dbbd87c3aad", "indicator--59a149e9-e6aa-441e-bb38-5a0a99650444", "indicator--452232a2-43d4-43cb-bd31-66853119d255", "indicator--e9d4752f-7a62-42ee-a8db-31e3ff735ae9", "indicator--1d9a548b-b750-42e4-a881-2f8980c355a6", "indicator--b28ae891-5f86-4935-a6b5-e91ba5075391", "indicator--e868eb78-f7ea-45c2-8f83-4e8d14e6fb61", "indicator--aa5a7059-76e0-4b17-9503-d88ca569f374", "indicator--d90573a7-38f3-432a-8dcc-d825cdf28fc4", "indicator--66aa2653-bbf6-434e-9c91-9ed3d0c57e73", "indicator--f336bd2f-5a32-4ecd-805d-28025ad661ad", "indicator--2459e233-5e04-4281-a2e1-b5d41f64189a", "indicator--9176a78e-7c0b-4221-aa1b-8a391d321417", "indicator--949847c4-84f7-43f8-a3ff-3a8551d49dd1", "indicator--59d92837-41e1-451d-810e-782880a6d4e1", "indicator--fdf526e7-deff-453d-b984-a40938a4eaf5", "indicator--b2efd564-f7eb-42d4-b99a-21d5d5169f9c", "indicator--aadb6fee-43a2-4116-9f89-480119b42890", "indicator--09e6d66a-7a5e-4068-9116-f9be1e01375c", "indicator--00d7933e-afa0-4e78-832a-eb9054b990c5", "indicator--37218869-438c-4cf1-8bed-0eaf087c8a0a", "indicator--c219db8c-6b0f-424c-b070-464a413fd0ce", "indicator--e2627284-d00d-4853-8533-b31f5b456c04", "indicator--de8419c4-36ca-4264-8970-84915c46af9d", "indicator--e169a148-6d93-430b-aa3f-92da18364dd6", "indicator--ffa48fe7-4662-47ba-a4d7-5c8e12e42a61", "indicator--954148c2-f305-4093-9614-289477dcc14f", "indicator--ccff881b-7187-4541-9442-a7e2ccd18253", "indicator--7d2b72bd-b50d-4fc5-86e1-232d9e0d62ee", "indicator--5926337d-1938-4ca5-82a3-29b06d72415f", "indicator--71f18d93-a37c-4de8-a3aa-c5d6fae56afa", "indicator--a114f0af-2ca0-46c8-8d0b-86642e2bc328", "indicator--a985b6f8-8cf6-4c1f-90f7-6c9581f88795", "indicator--e1e58b99-07d6-4d1e-9153-dacb6d1d41bb", "indicator--4600212f-8523-4467-99e8-ddaa30e01d70", "indicator--cab917c2-bd9b-4f06-adcc-d63e9f3b8e6c", "indicator--ae525ee8-f5b4-40ab-93f2-12810356c08c", "indicator--a4432a3e-5f16-4f12-b7dc-3cde2e6eae20", "indicator--4250ce5a-917d-4b26-9264-44ba8ca870f7", "indicator--57927330-1819-4210-a723-34aebc47f9f4", "indicator--d6a36c69-b8dd-4b83-927a-22735fb611d4", "indicator--253f2d5a-9a3b-4c1d-a476-305d030fac7e", "indicator--77b20e17-ee6d-45ab-b643-9cfa78ed0ffc", "indicator--6fecee3c-6a6f-4e79-b5cc-07ea1e9e8d3c", "indicator--1f046fe4-b92c-436a-90e9-dfab3e5abf0b", "indicator--8565fe47-db62-4453-89db-66800dac23af", "indicator--16a6cd84-5397-4813-8389-e0bd562b2c64", "indicator--8c7de98c-2c83-4e05-8bf2-b5aa38b2a764", "indicator--1afbe6d2-269a-44d1-a643-7ea4d861af5f", "indicator--7928be54-53a4-41ca-8e59-3b285cad213f", "indicator--4e2cc993-7600-4cbd-969d-87c3efac2494", "indicator--64178a33-7cc9-4221-be71-f57c2a4c3b57", "indicator--0a4b223e-3c1f-497e-9f2b-95e0694da64c", "indicator--1f301e69-dbb3-484a-a9d9-f9b9e941f80a", "indicator--ac8b0ee8-4805-4699-9de1-d48dea5f297e", "indicator--962be54f-d7a6-4cef-9199-06a1255ce4e9", "indicator--46bff3ed-55f4-47b6-a123-1d07ded7ff2c", "indicator--f52696ea-adec-466b-95c5-1ce1dc84497e", "indicator--18179273-fda0-4903-80fc-1d1157d65540", "indicator--6857190d-7b95-4a48-8805-025290f99ec9", "indicator--1b4449bb-8543-4e2d-8237-ef695e6686a0", "indicator--15cc342b-4a9a-459d-bfb0-4984f3fc91b3", "indicator--f6be87ff-0ad5-4f7c-ba83-ae3f6cc03559", "indicator--68ed6422-d486-49f6-be11-c5d82aaff7dd", "indicator--8cefc4b6-ff03-4ce6-9f41-1249190d9a78", "indicator--423927fd-4633-41f0-9e09-041c6d8ded70", "indicator--23c04590-5e47-4a96-b0d8-385f1815c7ce", "indicator--ccd7a276-d17f-4c77-8676-8d02b631072e", "indicator--e638381c-48c8-4734-9388-e70ea718227d", "indicator--9b183b38-b65f-425b-93fe-3120a4b4f11a", "indicator--916554b3-a9c9-42a4-882b-d125bffb9585", "indicator--ee8fb597-b1af-4ea5-b8b6-4c61a226122f", "indicator--0787b869-b114-4f97-a2a1-b828f1cca6ce", "indicator--c64387ed-9b77-41df-9ac6-26b36546965b", "indicator--2ca550de-3483-4645-a67a-06c227a45042", "indicator--f2b65739-0af1-4cec-80c2-fef751021a90", "indicator--fcefd546-0e2e-4a8d-bbea-e3d9c6f6f8a0", "indicator--3a52d1ad-be50-4d93-a2b7-b968ba092363", "indicator--44a543c8-6b9d-4689-b6e9-4a2e28aaa80b", "indicator--12c0dc92-1c3d-4fc5-8be9-f6c202090ed3", "indicator--c9310cb9-d43d-4b73-ab8c-8f3f87601d32", "indicator--7c25ccbc-40ff-4a8f-98d6-3edaa3cbe17e", "indicator--72860c32-359b-4e9a-9809-a088db8e6165", "indicator--1e370071-11ee-453c-8a63-23aec127e18d", "indicator--79cc50bb-08a8-4d95-aa10-ab811c590a99", "indicator--62ad2b13-d765-4a28-8b36-1c0c3117c398", "indicator--d9a9690d-6cff-49d9-a02c-4d118290ff8a", "indicator--a8f22986-ffcb-4095-bd68-c902b4d84542", "indicator--8ac99104-a13c-4362-8778-7bb62d05a3f8", "indicator--3a72eb54-f700-4dc3-b576-b6ba9e0d4594", "indicator--3083ff16-ae2a-47ed-8ba3-8407b342c930", "indicator--9225abae-012c-477c-a733-652fe2cd7d04", "indicator--3316c46c-4f55-4bed-989f-0df7eb337744", "indicator--3c060f22-3f94-4d14-8f67-32696dc28ef4", "indicator--abce2fc6-9874-440b-8c49-ca573da4c778", "indicator--05f3471d-15b4-4a93-a937-a33b652aeb47", "indicator--a5b3bc93-429f-4efd-8f4e-6fa51a8ed972", "indicator--c14d5832-33a1-49d2-bfb4-2bf2a29b24a6", "indicator--e573aec3-a2cd-427a-8698-71c91061757e", "indicator--3479a112-3dbd-469d-a52d-eb7af29be554", "indicator--2dd372b0-bedb-42a5-b329-2c1dada64989", "indicator--3530b348-80b7-4cff-ae6f-c53efd810be2", "indicator--7d94cee1-0224-46b3-90d8-29fbf704e921", "indicator--42588175-a173-4bee-99ef-18c735dee7e1", "indicator--992a6021-bfa3-4b9a-adc5-27628bd39fac", "indicator--9f845e35-d57e-44a0-81c3-2399c162358f", "indicator--03672e2f-9b9a-42b4-b477-200002777b65", "indicator--c4400513-7aa9-46d3-a3fc-fd192d36218e", "indicator--c8f09ceb-f7eb-4464-b3ad-6dd503b1d0a7", "indicator--134d9862-2101-4c9c-b90d-e5fc9346560e", "indicator--273ef102-bab0-442a-9512-936f226d2c76", "indicator--c81ca92b-a380-4874-8a27-038738b46f7f", "indicator--4eca7ecf-3152-4a5f-9da6-1e25f34ccf8e", "indicator--5c5d936a-62c5-4bbd-aa1a-02b0848f5a08", "indicator--99821b3e-7b40-4394-a3d7-a55ed217deb9", "indicator--adca6a71-8a77-4d41-8503-03eef6538d3c", "indicator--9d39b281-db7a-4412-87af-172faffa218b", "indicator--924ce950-1d1f-4885-81ff-e4cb86dba169", "indicator--3b51d3f0-f72e-41f3-9aa7-82c186c164d5", "indicator--93a59a82-094d-4963-bb1f-8df75b9b66de", "indicator--aaeb2f11-497f-4cab-a656-9e45e12287b7", "indicator--f4fbcf87-d83e-4719-a21d-9d0a710ad5c0", "indicator--007ebc5d-c01d-424e-9d48-86c55ab6a531", "indicator--a2b4e94a-7c7f-44a9-914c-093728946218", "indicator--455ac648-73bd-44f8-b595-4db0fc5c3c49", "indicator--04db8cbd-7ec6-4fbf-830c-48798ed7b200", "indicator--d8ae7932-fd7c-4c65-a226-431a69cec9e3", "indicator--05fac5e0-d08c-467b-b069-83006f9392f0", "indicator--71e41666-b2fd-4a27-81c5-326cac6a7e8a", "indicator--984d5c62-fe6b-4ce5-866d-7d95272cb36f", "indicator--79623c0a-af66-44f6-81cb-60f7fe637781", "indicator--85bb071f-6407-4b1c-9ab9-ca3b7e014297", "indicator--fad13786-2fcd-40a3-b529-cc3ee078f00f", "indicator--6121da4a-209a-4276-9097-9dd70391618f", "indicator--4782baa8-8d97-46f2-a580-ab6b90044959", "indicator--497c6305-3a06-4fe6-adfd-69858c5ab304", "indicator--2513c0fe-23e0-4553-8b6a-f24447fe6d52", "indicator--8a10e288-3182-4700-8624-93ca8886a4a9", "indicator--d0606f9e-7dbc-4f1d-ac1a-85239563d1bd", "indicator--5db93c01-e278-47cf-8e08-8cb31c798c3d", "indicator--4c9b4a6e-bc8c-4c45-97e2-3e119ce374d6", "indicator--9f6a2391-66cf-40fc-bdd7-41b58f21d5f5", "indicator--8fc12096-cdfd-45be-8bf5-1abc00b77232", "indicator--500e179c-d315-4a96-a5fd-d778f40fc257", "indicator--dd8e4d4e-6d4a-473a-bc72-0199870ef1fa", "indicator--aa76a55b-a28f-4df8-8e66-5dc353d59955", "indicator--fd9d70d1-0fff-4a93-8cd6-6a5732f6bd7a", "indicator--05c4c36b-7995-476b-afb0-da7638db934d", "indicator--041c53ce-e455-4a2f-bca3-b88c441fcfe1", "indicator--a81f7361-86d8-423a-8bd8-b2049e8d209f", "indicator--53f971f5-1197-4b5b-85da-3c1462c28368", "indicator--7fae8d15-1943-43f9-9c83-932d8236b703", "indicator--132ef015-cfe3-4a9c-9e13-2b117e4e1a78", "indicator--bd47641d-60a1-4a9f-807e-2e82e9abb74c", "indicator--9d8345d2-21f0-4ac2-8e14-ac2b6722b838", "indicator--22d4c2b2-54ae-4b6f-a927-86b28a0052bb", "indicator--ab98a053-6c84-4b62-a421-a3545a352749", "indicator--1b26b106-9e42-4370-8242-27fe9e970bd4", "indicator--5645cea8-2dee-4a5e-91b8-513b8091605a", "indicator--7683bb3a-43e0-4e2c-b04d-b92782857531", "indicator--af726576-9e34-4cd0-881d-217aacabd85d", "indicator--494bb858-91b3-4ff1-a6f1-93e84f50823e", "indicator--3fd02022-3471-4163-8b13-5f0757f5376f", "indicator--3e8c44ff-af3b-44a3-815f-400676ea1096", "indicator--3e8d09d1-35b0-42e7-b28b-a3785347f1fd", "indicator--c8bd2cff-0808-436b-99a5-9135b09e9e5d", "indicator--054f0da2-64c7-4383-a776-56007b8f0d71", "indicator--0e0ecc00-6bf9-4980-847a-55af27933566", "indicator--a4803a23-c6ac-441a-9c43-26d8beed0c8e", "indicator--a7618b26-3039-4ff5-9fc0-10c4e54b9f90", "indicator--07baa4b8-3cb9-4bae-9da7-fbaf51df6707", "indicator--77b13a8a-5af7-43db-b387-40c99039c7b3", "indicator--eb69a825-5325-408e-9a12-dbc2fd84a0b5", "indicator--bb017685-24a9-451a-a57a-d113116b764c", "indicator--04cadca0-d95b-420d-af5c-7b78903c76f9", "indicator--97f9bfd4-1140-49ad-b212-486a369d9613", "indicator--bb2006dd-9160-40ff-87c7-4613a8aec852", "indicator--78cb988c-5529-4b8c-811b-9ef4614c98b3", "indicator--e1c8b9dc-4ee2-4c47-bc28-5b8078e25eb1", "indicator--bbe42011-95bf-4778-abbd-26673a96690d", "indicator--527d4fbd-9a0f-401a-a3b8-686316fbff2a", "indicator--5820e52e-55e0-4665-88b7-38396e2573c6", "indicator--ff4c1b82-81c7-48b2-8f43-2992b7dc6eec", "indicator--5f94dfc2-966c-49d7-bd4b-0af49f4a98f2", "indicator--41c2e18e-3d3c-43aa-bf7c-9c8b246b3555", "indicator--a64b4bb7-3ce8-4a7a-81aa-282e6860cef9", "indicator--09f1a1e2-45bf-45f8-a569-988c6ff5da12", "indicator--0844b2d3-77e1-48b9-913d-4834b68f8d11", "indicator--9d8d59ea-fd90-48f1-b98e-0b922c5acbba", "indicator--9b49e607-f5be-46e5-bda4-a84af42b0edb", "indicator--480ffb0c-ecc6-45c6-9fda-2368f003ce98", "indicator--8bced0b7-02b3-4561-b09d-6d212aa137ee", "indicator--05b99ac4-f3d4-4d6c-8188-c92bd3af79df", "indicator--d00e3729-122f-40d7-9aca-89bfd37ef355", "indicator--5ca03cbb-5939-4fba-ba63-9418f8380a0a", "indicator--c1834788-32f3-4c60-abf4-5e7c7ea57bb5", "indicator--d653c120-2116-4066-b8e4-0825aa817694", "indicator--689b3f45-7713-4a6a-bbd6-c2fd73104393", "indicator--2aa3e13a-a4a9-4e98-a581-3e691e461ca6", "indicator--ef49199f-c017-49e4-87f0-ee1f1afbfd41", "indicator--56836f35-c1d3-40a4-9055-8d27b1ad12a7", "indicator--efc8b1d8-60e1-461f-9b57-9fad39018077", "indicator--06c3f140-d412-4697-a169-ef1b387c5e45", "indicator--9bd8b470-0bee-40c5-95f6-daa47d7dd258", "indicator--735bed6f-0fb2-4473-bb12-1232ec9de944", "indicator--3664fc3e-4709-43a5-bac6-a8e59505c19d", "indicator--50cef7d7-7bda-4718-ae50-2ee827e16dc2", "indicator--a4341fb6-72ab-4d24-b204-cfecdff9f53e", "indicator--23387c28-0d69-4023-9d1a-cc04f435f01d", "indicator--9aef96cc-0310-4ecd-9a6d-089b8240854f", "indicator--d6354580-653e-4a8d-8962-64d992588391", "indicator--feeeb8df-4363-4241-bd4b-53f1b780b291", "indicator--1a56d54e-0370-4b9c-b94a-8ce89042e28a", "indicator--dcba04db-3912-4657-baf2-3c55e3eefd05", "indicator--7d3de245-a31f-490c-9900-d8fdd8417b41", "indicator--f5834c16-f289-455f-abcf-ce6b7008444b", "indicator--f0a097a2-f81f-4610-a04e-17c5f01b03b8", "indicator--522043a3-ef8b-4c7e-b1fb-c933690f4ecb", "indicator--50953766-66d1-40f9-9328-5b3d931735b3", "indicator--7227d897-5ef8-47d0-91aa-bb66c6b29809", "indicator--c1ab770d-72e0-4f43-8ffa-a94dbe828052", "indicator--bb3bb032-1716-46bd-8451-639350d36a1f", "indicator--7eb2c3d6-fbbc-476a-ab2c-353724cc6a11", "indicator--480f108c-c4e8-4ebd-af19-54c15ea67cb5", "indicator--917d89a1-e584-4964-8ea2-e10a915357ab", "indicator--12b68fe0-e918-4269-bc1c-f1090d8cc629", "indicator--722b2c71-ea53-431e-8091-e16808509692", "indicator--ea3bb99b-fd70-4213-9ba2-c4858d660e97", "indicator--9e93eec3-705a-4caf-927e-4c5940364d73", "indicator--9621a3c2-32fa-4d6e-aafd-c0ce922b49f7", "indicator--b4b9dc95-f7d3-42eb-8a94-0a2759ad11da", "indicator--be3081eb-f998-488b-891c-5a4e23d5e1b0", "indicator--fac76184-50f9-402d-8718-468b3c3dd016", "indicator--4155e8df-417b-4e31-833e-2fc01cc1e981", "indicator--6dbf5086-33f8-47a1-bead-6e84ac6a61e9", "indicator--cb8d0616-d59f-47df-834e-83876d33c803", "indicator--c83fc763-13d4-472c-960c-76573d0b64ed", "indicator--67c948c2-a58c-4de5-8c83-0b0ac29b4a15", "indicator--46774be0-05b7-4da1-8cb5-20e85414c48e", "indicator--76030bce-828f-4042-b602-c16cc8a7f0ac", "indicator--8de89a31-9189-49b4-b55e-0890346bc979", "indicator--b1348b44-a425-4c09-be04-3b4d0a224084", "indicator--904ee84a-ff93-4f61-84d8-cb85413bf8cf", "indicator--7128cfa2-091d-4e48-ae07-c4c81e866eea", "indicator--2858ad2e-6793-4a06-90da-1d58b471334b", "indicator--fb35b7cb-993c-43bf-a068-4d54d6e07c92", "indicator--3b8ec514-e1f8-40f6-978c-9baf8632b974", "indicator--4d27e591-176c-41b2-acd9-a04f6d2a310d", "indicator--764b9d72-0d8a-4bfd-94e0-84ac1b2b0db1", "indicator--ebe3842e-f4ba-4876-acac-f6498db4c3e8", "indicator--e7c09c0d-2e42-4e9d-9ce8-c516bbe1162a", "indicator--a2f59b82-b4e0-4ab6-bc40-3dac8efb9abe", "indicator--887e6a68-7d56-4d4d-8766-3c062cd592ed", "indicator--2b2712b2-061b-4428-801c-b6fab8bae623", "indicator--6f3f14d5-694a-4e1e-ae05-0234f6ca6c44", "indicator--62ec14fe-8fff-42df-ad01-32ad65bfdb43", "indicator--87c0a388-aabc-49ac-89ba-1fe392648ab6", "indicator--85d8388f-9f0b-4c26-91b4-41a86d86eedd", "indicator--55101d8f-5c1f-4cdf-beeb-3cf05e581848", "indicator--9f947d89-2ea0-4b4a-a8e7-4bdd5f34d8a8", "indicator--32e74a2b-a1e1-4316-a761-1f310daf5639", "indicator--cc43c917-9095-46ee-9434-13baf2ed2863", "indicator--7dbe208e-c8b9-45e5-a999-a01d9c04806f", "indicator--304d4c16-0afb-46a5-97a0-8ef049a5f417", "indicator--d8d1c959-95b5-45d3-b2da-3ad4aa2e4958", "indicator--5d8666be-55b4-426d-8caf-c451d637426a", "indicator--f857b2ab-77c3-4c56-b361-4374b681c5c6", "indicator--82fbeea9-1941-4dde-b6aa-1d68deac5a62", "indicator--ddf022be-9137-4ad3-8208-bbd35f8f2c37", "indicator--0da25401-f7f1-45f9-8de8-79c6d241d1f4", "indicator--971bf806-0d84-42e7-bade-d76b5c1293d0", "indicator--9fbe81a0-21cc-4765-bcaf-22d5d748c69b", "indicator--75a16b57-5f97-48b4-a837-92a81fc69289", "indicator--96b2572f-6724-4162-9ad2-179596d1580b", "indicator--751d8fd0-429e-4a36-aae9-9dee121a9194", "indicator--f46bf5f8-1dd4-44c7-8250-51552eb627a4", "indicator--aef8b6e9-432d-40cb-83d9-b3ebe96aab1d", "indicator--3b9ca9ab-4fb0-4327-b13b-653bc22c33f4", "indicator--5f6a230a-5fce-41d0-a86c-c1d6ef165633", "indicator--6d0062b6-b946-4aa2-9038-209b4bc67a14", "indicator--408b2bc7-d4d6-487c-a572-4152f6bfd501", "indicator--43aaa12c-36c2-4cd1-a4d2-9ae9f9652ed4", "indicator--483dc6b1-781e-4f91-8ef4-1c5055213714", "indicator--5240945d-c098-4e3d-b246-ba9a158b9de2", "indicator--aa036cc7-8c68-42a6-8960-e478953e0faa", "indicator--878e4e87-7a91-4122-9ea5-8c4a4e3401c4", "indicator--b674ad5b-561d-4374-82db-f8a98b2c921a", "indicator--18aebb3f-bcc8-441f-ac9e-7a348db5a138", "indicator--b58de3bc-2eaa-4ff7-a60c-d13a24de51e8", "indicator--ca7ddf25-df23-40af-aba3-2a64e248db8a", "indicator--badce491-fe47-46d8-b502-fb126f4b8e16", "indicator--2350770e-9111-480e-994f-4d6877580e14", "indicator--cb665d23-f326-4803-955e-63fc3a73be7b", "indicator--9fc91cbe-ad4f-4fdc-a38b-db52d9fff476", "indicator--1506d381-6116-43d2-8b9e-2e50cf2b0339", "indicator--53a03020-db20-4023-875f-fff432b0a8e1", "indicator--bec48022-9488-4b74-a52a-68bc73527efb", "indicator--e3786d8b-c9d5-408b-b2b4-439f5e28b398", "indicator--1dff3a89-6b02-44e2-8f0b-5a96b5449c83", "indicator--04a1e99a-4361-4d68-9a3b-1b6bd5747b9d", "indicator--7fbf5a38-01bc-462f-a9d4-12516959bf50", "indicator--2fc586f4-7309-4815-b7e7-bcb00e7db852", "indicator--610b1ba7-9eb7-4407-bdf3-7b78f84f6542", "indicator--39ffa99f-519a-414c-8734-43c4d1e98d78", "indicator--13201e46-2c0c-466f-85df-3f97a77b1eeb", "indicator--81b420f8-de36-4afa-b27e-7cf958a9404f", "indicator--e8e44bb6-9ba6-419f-82f3-15c48ad17f12", "indicator--4dfe58ac-2a12-46c2-85a7-ed5315e0f619", "indicator--3cb2fe89-a4d0-4592-ab70-210b889240d9", "indicator--3dd31612-c858-4758-a86e-1531670cedfd", "indicator--5df133c3-654f-489f-b5f9-8a68f20812b5", "indicator--ff1b8394-14a4-4a6f-bf68-5ef98c8189bd", "indicator--7b8aa55b-c7c4-432e-afbb-79ffd135ad49", "indicator--b3211e41-4c4b-483b-b6be-4873077ecbab", "indicator--c06de8c2-b7a6-4d01-96f0-bf0ac80f0e2c", "indicator--668c75a0-589e-4dbd-af56-62d2b35c1f07", "indicator--b9515eb2-ee60-44da-b3d1-f116b07c244c", "indicator--af7263be-67f2-4e52-9dde-2c7f3cdeefd4", "indicator--9df099b0-d191-4bf1-ade4-4c30ed588559", "indicator--fe30e70e-b525-4a8c-9ad0-68f882577207", "indicator--7fa1dc55-75b2-4773-bcd8-f63c1b1b55f3", "indicator--fb3f30b2-7423-4c8b-b890-a460f603c4eb", "indicator--3ba70a31-e541-487a-8212-ccaf9febb96b", "indicator--2757ea1e-e5c2-4600-96ef-15e1ef6bb916", "indicator--4263987b-df67-4792-aeff-177e65d7a490", "indicator--f687304c-370b-4158-bb34-d865f969ca98", "indicator--44d7dfd6-2676-4f70-b4ef-1ce37e2d216d", "indicator--d8046647-9df4-478a-9160-8e8b2081cfe1", "indicator--fdc87169-2cb2-40e2-a0d8-5f41be7b3ecd", "indicator--61666116-c116-40cf-b1f4-da673d8e65f6", "indicator--42c06cd4-a01b-407e-8ac6-25e321905200", "indicator--8c7e288f-0db5-4905-b5b2-9dfc2dbbc580", "indicator--e8422780-795b-40f8-8c85-05c63890f4f5", "indicator--fed360bb-06d8-42b9-b770-73d7e0396cc2", "indicator--79a07faf-c467-4451-a4fe-c1b1b8de7df8", "indicator--675fe07e-29d3-47e5-b107-15995a7b68a6", "indicator--f197d0d2-6778-4a03-b32e-8cf2b28f1420", "indicator--246e21b8-4bfd-4c00-ac9a-679b0632cb1a", "indicator--d9410989-4c28-42c0-b76e-3351d40457be", "indicator--08aa27d4-95f7-4fdc-9350-0c27240c4d47", "indicator--c6046a14-0627-4ab4-9887-451613f001bc", "indicator--c4ae053e-5995-4f70-8d4e-08dfd58f7885", "indicator--233e25a4-8747-4837-9aac-bccefc85a37d", "indicator--6ff5acd2-9cf2-479b-bceb-f3c5a049bc66", "indicator--8633e443-0d79-4200-8162-01e0ea711594", "indicator--df87f1a2-5547-483c-b5eb-e833a5dfd2bc", "indicator--efa90d8c-5c12-42db-8491-17606dac68ac", "indicator--f1e70fd6-9d95-4402-ae0f-254f61c3113c", "indicator--5c8a4447-d9d7-41a4-9299-cbae67a5ff6f", "indicator--47cf7948-d474-4639-a29a-48c26f746df8", "indicator--00b3fdaf-b936-45e3-8a99-b28a843a2a72", "indicator--d49d15e8-b16c-40d6-8f13-a1486dc91c5a", "indicator--e3d0385c-87e9-4676-8d01-f94559380cbe", "indicator--4618d23f-a5fd-4101-88f0-601f05f9c5ee", "indicator--6383c43d-8c27-48d0-bfa5-a0a2b89bd895", "indicator--e003105f-8a16-4887-84d4-c6bf75020c54", "indicator--0d81600d-4f4b-485b-9433-e1ca61123c47", "indicator--b7dbb142-5e36-4285-9c23-c73690012db6", "indicator--269c4dfa-5def-44c0-b0ab-9fcfb86a35e5", "indicator--18e7b09f-e262-49e4-aab3-4f830f26bcb4", "indicator--88cf2147-89ed-412d-b241-294014d72351", "indicator--5cd0c277-9ea8-4cd7-be9a-17213da20758", "indicator--c9c9f8bb-c2eb-4c33-aa36-95ed6205bf8b", "indicator--c923522d-a66d-4ab6-9a22-69dd3e87e800", "indicator--a8308d87-805a-451c-9b74-f982e8978cf9", "indicator--2cdd5448-52b3-4ab3-b9db-b9941e5ca693", "indicator--330962f4-394f-45d9-a564-2eaed7d6b011", "indicator--d7fd4fa1-462a-4b06-bd6c-181594c3fd8a", "indicator--af2468ef-aec4-4ad4-8e0f-e4195f8b4c55", "indicator--163404b2-6335-4b80-9f49-5e7c275026b7", "indicator--18478602-8ac9-4a29-ba77-08978db8678d", "indicator--3fd88c8f-5ced-4f3e-9cf5-bd8ba7e4a2ca", "indicator--27d627c3-58c2-4144-ae1b-32635afb9185", "indicator--666c9ba7-78ec-49a3-b0d2-e8cd1ed2b491", "indicator--5f776be6-8ee3-4097-a038-591c0d6c1199", "indicator--4529e385-b12b-4d2e-acbe-8657b7a67143", "indicator--27f39b35-27e6-4796-8459-69610cd2eb72", "indicator--28cbf861-902f-4700-ad96-6519f780832b", "indicator--9666edc1-930c-471d-9951-6d8925d336d2", "indicator--f8f344f6-4796-4fcb-aea7-a4c5cf1c8b29", "indicator--22af99ab-ac2f-4eb0-9f7e-ec3ba438a4ab", "indicator--af080a04-b7dd-43d8-b015-5fa418aee715", "indicator--d943774c-aa49-4581-b9c5-e8232be6cb18", "indicator--d30f8f8e-80b1-4375-af80-372efa17d736", "indicator--3a68f81b-4327-4dab-8f2c-f4f7d8c28767", "indicator--75499260-9cc3-42ca-97d4-814239cf31fa", "indicator--b424232a-4124-400a-a740-b5536740354c", "indicator--007c63a8-49de-4a52-9210-4ce5ce3ab445", "indicator--3b4b0d68-0d17-4e7c-aff6-92c7dd152406", "indicator--cd6f0165-f7ce-42af-84f6-75d7a6ca888d", "indicator--ee0bc2ec-d3b4-4572-8912-b45eb48ac28a", "indicator--2153d76f-bf89-4ebf-9cf8-b140d1b1a095", "indicator--0faf8c1d-a7ce-45f4-b169-bd992ddf574a", "indicator--7ba44bd1-b572-41d5-b176-ebbf7690dfba", "indicator--9a0cfac3-18f8-41dc-9c32-2c4bc9a652b4", "indicator--84bb4e0c-c832-4001-bd37-51606e8bc3a5", "indicator--5496d0a6-78f3-422a-9495-6889af98b274", "indicator--39a34155-7289-4ffd-a568-0325d799b922", "indicator--a7a42fc4-5a81-4a7d-b4b6-c9cad761b543", "indicator--f1f13c38-1118-4645-a618-ff25f602e592", "indicator--9ef4abda-9a00-485a-aa3d-11fcfce33ff6", "indicator--82f1d9b6-42e8-43ae-9491-dd9e7636f3c9", "indicator--f8e3610a-194c-4539-b649-a4aebbbf4c00", "indicator--0037d99b-c0de-4da2-aaec-1fbf585824c2", "indicator--3df2bb8c-53a3-4a21-950d-46a8573e7201", "indicator--70189a6c-01be-43f4-b888-d1ca8e8688c6", "indicator--2e8fd8ad-3d87-4f90-979f-f7f040c6476f", "indicator--64e486f4-4ce2-4e5c-94e4-8f9c312ae698", "indicator--79558d31-d672-41e3-a360-f4cd9ccccaae", "indicator--210c7114-1650-4c04-a52a-804570c15c09", "indicator--e0211c01-8894-4493-9d4d-376774cc88f8", "indicator--fd9721d8-b07b-4d35-a063-5f16b8761deb", "indicator--5423ff45-66f9-444a-bd2a-2bb5faddc6dc", "indicator--20907606-7903-470d-a389-19b046270e87", "indicator--41d80549-23e5-411a-8a97-c439f3b4d08e", "indicator--c1a55d14-42e0-438e-b13e-faeb75665cbf", "indicator--d7f78d02-f837-4fc9-af3a-1b5bba32f1db", "indicator--7cf19c3d-7e9f-44cd-baca-0149bc457597", "indicator--d86b20f9-39c6-411d-a53e-dbc9da854806", "indicator--813e5f34-4ce5-41ec-9eb0-ddf62e385292", "indicator--86ac225d-76ce-4e93-8640-1d36ecf55c98", "indicator--861fc848-bfc2-4d2a-bdb2-56749bc25e0f", "indicator--1fa57bc5-fece-46da-b3f0-535ab12974af", "indicator--e519abe6-c4f2-4949-a9e0-5565378f1cf7", "indicator--94df03e7-cf04-42e3-89a0-603f9eafa76a", "indicator--af1a3c51-54c9-4591-b64c-274e269998e6", "indicator--04585dc1-d1bf-48e4-b2f6-cae127e80cd0", "indicator--11726d69-d06d-43a1-a555-69536fc49dc8", "indicator--fe716ce1-0bab-46eb-934c-74ac01d01b40", "indicator--34b02fe1-679d-44ee-a6fd-848a785a3bb1", "indicator--086db9d5-3024-4a05-b613-c81b9d5764df", "indicator--87bf5261-4ba7-4387-ab17-f7a819d35a62", "indicator--bbe54940-c810-417f-bc8b-6c8fc3e81357", "indicator--073493ed-2ac3-4eae-ae03-966934c176dc", "indicator--d901007e-564f-42ab-8c71-08ac9c255964", "indicator--177f59ba-ff54-4b64-9196-97c22671f5b8", "indicator--bd6c1549-1b59-435b-aa13-c26897b9bd20", "indicator--c537d87d-bddc-4a23-9c63-84648e1f793f", "indicator--3b613aae-8957-40c1-98c8-396e679bc19b", "indicator--f25fe90d-bd69-4f0c-a9a0-c82fd8708ec0", "indicator--79266d3d-96f5-4fc8-9a69-18e9dc26aa85", "indicator--ae1df018-67aa-4cfb-b61b-a0ab592fae81", "indicator--91eab096-a936-4edd-ab94-c2fdc72e8c0c", "indicator--a0c789c4-5110-46a5-935f-bb3031b3306f", "indicator--00c037b7-905e-4e67-9f8a-a388c2fcd2c3", "indicator--f1706a98-6e71-43d0-85fa-2b807cb278bd", "indicator--7e2d30be-975d-4edf-8e46-0ed6dee00a3a", "indicator--968ca341-ba49-4979-b990-37fd12585680", "indicator--dabf82cd-dbf3-4190-8506-86ac1feb19be", "indicator--97d29546-b7ad-42a5-9695-42775909ad8c", "indicator--f4e38371-24df-4bb9-a637-2c9efc4e357b", "indicator--fb9406cf-d1b6-42cf-b047-f21a9b538e16", "indicator--02598c60-3abf-4b9f-80a4-08c136fd26cc", "indicator--900a0c0f-54e9-4d6b-bde0-3867292699f4", "indicator--6bdf40dc-5183-4c29-9471-169767aac638", "indicator--6f31e0ab-8c41-4fdb-84f0-77bbcdd326ae", "indicator--ad8fe746-9879-4f24-a812-5e69b05949f6", "indicator--4c57d49a-4e32-461f-b9e8-93b479277ff2", "indicator--39cbc9e4-9d9b-44e1-b26d-c75c75e163e1", "indicator--21dcb0ea-7eb8-49af-9e2c-b360410029ad", "indicator--6f6b1b53-313f-4295-8089-f3e4a25e3e4d", "indicator--2b82d2d0-b1a6-48d6-9665-0acfd5566067", "indicator--e41bfde3-ca14-478f-a4b1-1d3cebd2c147", "indicator--b7672250-ca59-44b9-9a8e-216ce95be1b3", "indicator--7e6fbeba-7ad8-48a4-88e0-0365e7734da0", "indicator--25f662cb-b61d-4a2f-9cbe-bf3dde6d7126", "indicator--9d708304-44ce-428e-b024-3de00c322e5f", "indicator--8d63751b-1d16-426e-9f48-cb0efcb5ff02", "indicator--747f093d-74ec-4668-bab3-a5e9da7cf1ed", "indicator--5a5dcf8f-65de-4efe-8569-8c1ccf514ea9", "indicator--d1151735-d889-417b-bc5f-9961fbf16a8f", "indicator--6ef52f46-3806-4dcf-a1b0-db205bd54f8c", "indicator--b283e3f5-33c2-435c-a625-0bb20fc518b0", "indicator--1f4065f8-e306-47e6-881e-3e23055ea5a7", "indicator--0c4f7e3b-92e6-4201-ba55-49aa93e88103", "indicator--c5b4aff5-21c6-4491-aa70-f5ac508ac740", "indicator--70f90cdd-e6ba-4f28-af85-1b3ac3822d1d", "indicator--febbb2cc-2326-49c7-8a69-5713a7be73cc", "indicator--86583dfa-ac09-471f-8742-00c1716745a8", "indicator--d3c125e4-c7d4-485a-a870-b5be5f63120f", "indicator--e7d465e9-b3e5-4023-acfc-c9fd45fdb7e0", "indicator--c6bee0e3-1a7f-4c9e-99d2-43ccbc53e4ae", "indicator--9196f0d1-0e41-44f0-a9ed-f55ca8a30d65", "indicator--7cf965ad-7261-4903-896d-c21706c33626", "indicator--abeca387-7d76-4bff-b21f-51f3f337edfe", "indicator--69827e25-76b9-47de-8324-9b76a627ef9c", "indicator--507ba5cb-5fee-4206-88d6-c1809b7a935e", "indicator--7418ae2c-ee5f-4860-8382-82d9a25922a8", "indicator--03192e92-412c-457d-a458-734283b7da7d", "indicator--88edce0e-f9a3-4868-8747-23d37459d318", "indicator--c0830607-05a3-44ff-99cc-d1dbb4c1a06f", "indicator--21533f2c-cfc9-4be1-9705-4fbfa70cd85b", "indicator--23d214b1-ff05-4030-822e-0da8c8bf4e99", "indicator--193c929f-0f26-4800-b543-8aa217e93187", "indicator--5640be92-ab62-41d8-9f35-643e4396d586", "indicator--9caed8eb-402f-4ef2-b6cb-98d4b9848293", "indicator--40b90ee2-46a7-4331-97c1-cfc3ea45a6ad", "indicator--7d8888c6-c7b2-4c64-82ba-5cf4ab25c366", "indicator--32cc4549-170b-48e5-b0a6-9435e17ea91d", "indicator--acbae8fa-7c75-4016-a50e-0146b2f790b3", "indicator--10b539d0-4b88-4ac7-9ebe-d044eaf5b7fa", "indicator--ee64efb6-48dd-4241-9871-cd4230687ba1", "indicator--2eff2b63-384d-4248-9530-41ff8b000851", "indicator--c8d30388-6382-48b3-bc6c-26a884f0bf14", "indicator--8b763e7f-55d2-4a0f-900d-5411003292d3", "indicator--124ed399-10e5-4f1b-b1e4-9448e67f599a", "indicator--090858ad-b497-48a7-ae91-38377bc6149f", "indicator--2cce554b-0809-4911-892b-9c53bb33faf1", "indicator--bc02309f-041d-4b68-8b1d-f9a31c03126b", "indicator--d0e28d49-02fb-41af-8d9a-470b9c0229f0", "indicator--e382c63e-a7dd-4f64-89f3-0a5d520fa4c4", "indicator--0b5b41d9-4ab7-4483-868f-80f2f923b9af", "indicator--24003444-4d8e-42a7-82dc-50d400efaca4", "indicator--09951c21-3a30-476d-8212-0119a9afbe88", "indicator--1e4e0a72-df9f-48d8-9ee8-1ca4b0c69748", "indicator--02f196d2-0ff7-4643-becb-118895be63ba", "indicator--558a588e-3234-4509-a96c-18a41c9cf978", "indicator--9c407935-80b5-4ca5-a22d-f6b442b439a5", "indicator--43607fae-a1ec-4445-ac8b-732f1602ef14", "indicator--4ed19e31-bf80-4eaa-b964-7bece2bb1ddb", "indicator--53138c78-4cba-4854-a54f-9146161a9685", "indicator--b31a13b7-6bda-42e7-b3df-cbb971112bb0", "indicator--b22ff16e-9ec1-4d1e-b608-5b3609ef189f", "indicator--87f1aedd-b6a3-434e-9d4b-1ed097a39f05", "indicator--8a2109e8-72ca-4b79-bade-c6603e6e0cb9", "indicator--ba398cc2-d927-461c-b0ae-fa6b766ac0dd", "indicator--ca7d7793-56f1-47be-90ab-b2a61b4afd73", "indicator--f4b2d0d7-1d2d-490a-aeac-c97cfcc56637", "indicator--3cc5f719-3938-483a-8398-990367fdb25e", "indicator--0da8078e-58a9-47ce-b903-9a14d5ab0628", "indicator--f8834d49-8397-4684-a564-9e5bd9eb9639", "indicator--3d7937f0-7960-4fce-998b-41947d8be26e", "indicator--0ce4b826-c4a8-4df6-8a1f-b43be17b8c71", "indicator--f2e3963f-04d5-45c2-bf15-2f9c2f398807", "indicator--14fd5ebc-1adc-42bf-a7c4-b12b2fead496", "indicator--acd1518e-036b-4d26-ae59-dc301c0006d8", "indicator--f497b42d-48f9-4cf5-b24c-ae60e8b80cbf", "indicator--47fd23ec-4cae-49ff-a170-5893f921159a", "indicator--40651a58-76fb-433e-9027-43d1fc4155eb", "indicator--e1769c1f-1a68-4243-af3b-694f30cf9bc0", "indicator--1316a342-eadf-4737-b6d1-38951da079d7", "indicator--b8ca28d0-ebf1-44ee-80d3-74c633fef1d8", "indicator--37fda150-4101-4dd7-b871-ce857f89fcbb", "indicator--3cba2f1e-c119-4fd6-b05c-317b15969390", "indicator--e47407db-0f30-4a8d-a23d-1c80e6737bf0", "indicator--96c7fdb3-8cdd-4a91-a40d-5643ea29e532", "indicator--96709a63-ac4a-49c3-9863-289df8ae7b12", "indicator--23dca463-50f4-4a53-98c2-11ae6d3dae1d", "indicator--e30135ec-e4c3-44f5-be41-fa2079406d7d", "indicator--9ef2efdd-40f7-4053-aefe-77f932ddd0a4", "indicator--11e881c4-ba5d-4591-99af-f2c6b77b5c4b", "indicator--50d3b2e2-74e3-432a-bc2e-3f98caa17d82", "indicator--3a33d309-120c-440b-8ba1-952486ed9301", "indicator--868a51ca-96b4-4920-9a37-b9d0a1958f48", "indicator--81e0d853-3296-4619-b043-77ecacf825e5", "indicator--23cdc8b2-9549-437f-b508-ee955522864b", "indicator--88a58dc0-e887-4e73-9b04-eec00aa16455", "indicator--90ce0dd2-683c-40dc-bb70-421153a456e9", "indicator--6824094d-3aaa-4700-8618-9ac4bba9e82f", "indicator--5c447623-8a4a-4313-b5b5-384e08bca7b9", "indicator--bbf06fe9-82e8-43c8-8b45-41691f921bb5", "indicator--63be861e-e6e4-4197-9124-2d1972690bcd", "indicator--0db59ed5-a00b-40af-850c-0fcec911c756", "indicator--a36b2a25-ada4-4383-af5b-3bfd8dd8b659", "indicator--6afeb6b7-c5a3-4413-be63-b5b11355ea9a", "indicator--83545da3-887d-4ff8-9c90-c31107ca8a40", "indicator--24e74539-94c3-4420-a95f-3da85e03c443", "indicator--e8908cc7-5c4b-4a85-a42d-0decce36aa45", "indicator--5cdc0394-1e8d-4956-843e-12f947c3afb6", "indicator--302ce204-1ae9-4ef6-b5ab-c957a2a049de", "indicator--cf566619-58d2-41ca-b412-ac2c63be9cd5", "indicator--40546d57-7255-40e8-aa01-255e2c4bcdb6", "indicator--3589740f-9a74-41c4-a349-3c559a37c41c", "indicator--27adeb9d-be08-40cd-a02e-a1ec896aeb96", "indicator--312f5a14-4a7a-40e8-a84d-dfde55a8d68c", "indicator--acabfb02-10db-4547-9ed9-85030c1c495b", "indicator--09063a82-6451-459e-a998-a73ddc99c877", "indicator--352a7f53-1a5a-40e9-969e-91df349ec822", "indicator--2186f851-2029-4c56-8b8b-993645ab9128", "indicator--bf83f609-4f0c-446c-9e6f-dc4b1ba2dc2a", "indicator--eccd394a-2f55-4e61-bc48-3465c1716e3e", "indicator--879d205c-c0b8-4c99-97f0-9fa758ccae0b", "indicator--7593cd3f-2604-4a1d-8ead-ffc6b0dc4b5b", "indicator--7777b9a5-a861-4b2b-ad40-d2ac63a129f9", "indicator--ee325d27-9343-4456-a38a-1eb604429a38", "indicator--e363435f-5f53-4079-8dfc-8db96cd60eeb", "indicator--bb43805c-235f-4bf8-ac96-47ff262961be", "indicator--f3f7f355-2244-45d6-b74b-fcc08deef2d0", "indicator--ec8310cc-4223-4a07-af21-8723f882968e", "indicator--26183a8a-8c65-4ea8-a9a1-2652b3ab9f4c", "indicator--35a2d1b7-65bc-493b-ba5a-2dfcd19a3693", "indicator--2648b470-27bf-4e1c-ba51-06d26ec414a5", "indicator--25f98e36-a705-453e-867b-f7ed19fe203a", "indicator--85f6cfeb-1c5d-4257-9a0c-ca161d102eff", "indicator--d2196117-1f4a-4fe3-9923-cf19ef58fc78", "indicator--246a4dc8-01b7-436f-b72a-d641377f6acc", "indicator--cbd5cb70-8e13-46d9-aac2-5e664fea9594", "indicator--7c499062-44ba-4abf-a518-3fb6c10404f2", "indicator--a8929f50-514d-4d69-a18a-2f661711f284", "indicator--09e002f7-50fb-4848-807c-09c03d4dcda6", "indicator--0760fa60-a808-4e0f-a640-712945656d87", "indicator--8651efa3-fc61-4a39-9c02-324b921d9e66", "indicator--8e057aa9-2621-4750-aa99-947ba10d2c9b", "indicator--d0637452-cbf0-4de8-92c8-24507c4e5b12", "indicator--f72779b1-1a3e-4061-bdff-15680854662a", "indicator--e41c1e14-0959-4be5-be30-ccd8b97d163e", "indicator--e702a83e-3767-4020-acf3-15b30e8d7663", "indicator--9e8d1230-e516-4ca5-ade2-d5b6715ee12d", "indicator--09beb6a3-ccf5-458f-917d-62c8d51def49", "indicator--55ec2e8f-224e-45a6-8b53-92a01df88f91", "indicator--8e5432ac-319a-4199-aa27-58c56cadf909", "indicator--2660fd45-a027-484d-875d-f336b833bfeb", "indicator--2e3de04a-7d22-4438-b2ec-e623d94d69c3", "indicator--20ba1617-988b-4b15-b30d-834af69fb935", "indicator--0cfac726-0375-40a6-8785-b6763781e5ca", "indicator--e98a46d4-8951-46b6-89b9-f96dc3e513e5", "indicator--7b0ff1e2-7f72-494e-bcb7-40c839b9059d", "indicator--6d7bd73a-4e28-4e41-9dad-20e7b93b09c6", "indicator--9bacfd5d-c942-4123-b91d-ca89c6175318", "indicator--d0b7b002-1abc-4ca6-b2c1-0695bd19b58b", "indicator--f8cf70b3-0f5c-4bec-8699-8d1a495be60c", "indicator--577ab014-3b68-407a-ad80-a208bf1c4978", "indicator--3bbbd113-427c-4722-a10c-f779d3148936", "indicator--c3aa4f60-b91b-419f-9524-20b9fdb8f791", "indicator--28f68353-8b74-421f-a917-40fbe3ee2b8d", "indicator--d3a97e28-a34f-48b2-94bf-03175a85ffef", "indicator--f8d8148f-c656-46ef-8eff-22e72cc275f9", "indicator--67ff7aa2-160f-4c2f-b564-81ed2c796b10", "indicator--ccfa26c8-96fb-409a-b258-59684112e9bd", "indicator--407e66e9-edf8-4065-9f82-b9722c459ef4", "indicator--4885f6e8-17fa-4810-b343-d332168f6574", "indicator--9b4f822b-54cb-4612-8dfc-f74004822a47", "indicator--d15525d2-ba8d-4f08-b6b6-d1bd9299b856", "indicator--9e6940ae-43b0-4e51-9f85-77858dc2358a", "indicator--57b68579-cbef-4682-9c10-49ef719502aa", "indicator--d69edbc3-15db-4465-9dd2-c139f15c760b", "indicator--e062e6ef-1c1e-4482-af7c-e775f6891df6", "indicator--0f9e7310-99a8-473f-8b46-959e0a80c61c", "indicator--f53652ba-f915-4de3-b84e-477a3c3f5ccd", "indicator--4638c47d-cf04-47bf-a411-db06d0adacad", "indicator--882c008f-15e0-4cf4-b5b2-c60260c104d3", "indicator--c9fd00a7-1e71-4362-865d-a8ffbc6e2c92", "indicator--2af66aed-ddad-43e4-8f9b-802710c0eea9", "indicator--474acb9c-19a3-40de-ba9b-644564313110", "indicator--1cb7e143-f669-4b52-b898-a2f07773cf4b", "indicator--e577c928-b25b-4903-9b16-dc56e2fb606d", "indicator--5c5bf15c-7b34-43d5-9a29-32183e3e3fac", "indicator--3ae4c103-b26b-4e41-bf0e-dd88aa6a557c", "indicator--a43541fb-11b8-4621-99fa-5908d7303042", "indicator--b85fe3c8-617d-4c93-9397-fb1863cb2f62", "indicator--36ccfe81-653c-4616-a883-bd210b2b1a03", "indicator--49fce4f1-a420-45ec-9b33-0d73fe462a1e", "indicator--c72260f0-c1eb-49f3-9933-948c36b7bca7", "indicator--1fba54c6-0261-4209-98cf-c32e7cf788bb", "indicator--11d07c63-c264-424e-86d8-0461f8010eae", "indicator--369b535b-c351-44bc-86a7-13437426df6b", "indicator--a9ebc00e-02b2-499f-ad20-39a2bbcbe98d", "indicator--f750fad7-c857-4e21-b7a4-53f564a907d3", "indicator--a0190773-cc6b-48c4-aad1-9016850b5f26", "indicator--6fed4553-2859-41c1-b7f9-7311c50f0302", "indicator--81aada75-4b11-4a44-9858-e7c6d0598460", "indicator--d45b0cdc-571b-41b9-a011-e259886ab1f3", "indicator--e9b4719f-ab79-4983-a87c-70b4d0e3c622", "indicator--adc533f7-7337-4888-8f14-c242f7121fdd", "indicator--eebd06b0-94a5-48eb-8336-64e465692b32", "indicator--4cb90cd7-2632-47a3-a62b-d8dec6e33985", "indicator--e1ec5491-a64b-4059-be41-c33525281bf1", "indicator--06e155b8-4016-4ac2-bf86-d18c095ee74e", "indicator--30434e77-c9c3-4e2f-a742-64cfbbf54727", "indicator--3bf8c5f3-2a4e-494d-9fb2-63b9518d84b7", "indicator--ac8be2f5-5ed1-4c5e-9464-41710ab05bb5", "indicator--764b150e-12ad-4e3b-9e9f-bae3e8009407", "indicator--6ab9ea7e-4b7a-44e3-8342-683baa098216", "indicator--230d98dc-961d-46d3-b47c-c2939333f459", "indicator--560d651e-cc27-4388-8eb4-ddfa890c09c8", "indicator--a1b915a4-f360-47a3-a506-6bf0c47fe070", "indicator--e9a0df2f-6d66-4031-9785-f65589bebb30", "indicator--55bb186d-7c07-45e6-98c0-52ea0e13b051", "indicator--b485e14d-947d-4e3e-a89d-7940e030d76a", "indicator--e799c71d-86e0-481e-8723-d9c62d5ea8c6", "indicator--3d1bac81-cad2-4347-8061-07adbeaab3ca", "indicator--4a6ddf72-5bef-4098-a248-655b1c076989", "indicator--847f043f-ca12-4262-9dbb-58f38690bd77", "indicator--2990658e-e19f-4104-bcfb-2645ea5f9be4", "indicator--658a20f2-4b4b-470e-bead-9119105af914", "indicator--a5878820-1e9a-47a6-9436-22e0f27f9d9e", "indicator--f81f36c2-5486-4708-bd9e-805f45c5e01e", "indicator--960f535d-bfe1-4d71-a01f-70d788af218f", "indicator--18e9e483-6d5a-4178-83a0-b27a70a8fe51", "indicator--d1418ce3-fe84-440c-a807-fad54482ea5e", "indicator--2a439925-e381-49af-82a6-227ca4e9a1af", "indicator--0419557d-bfa2-4011-b610-bee4350f94bc", "indicator--08a2f53d-dc99-4172-9fae-c584c473ea57", "indicator--6fae5e74-e6de-4600-8c75-ef997cf948bd", "indicator--a6cd6242-77f6-4229-b059-62c24a3df216", "indicator--b6a10c0c-b406-4cde-aae7-a11cc322fadc", "indicator--0e2be786-5151-4464-9867-a04d704b144a", "indicator--0420b04f-5f7d-4dbc-914c-21ad03e4a7af", "indicator--551617d1-8850-4ffc-ac92-c4052c798fd6", "indicator--6f1acb47-df2c-4e10-8ba3-4f05f168da0a", "indicator--8af7d1d8-60c0-4ff2-ba02-5ed63e3e40e3", "indicator--85ad677a-e5f2-4e46-b478-9d35d9a8db00", "indicator--d0d94c87-9cc8-4c45-89c6-2010935a3ffd", "indicator--67ad7ee1-8122-4cbd-b429-275993143c48", "indicator--346ff9ec-dff5-4546-8087-7815b74efd39", "indicator--027bc561-9b2f-48b2-a755-cd281e048b57", "indicator--6635c473-22ab-46f1-b1c8-808be4eff282", "indicator--ba1fb9d3-e20c-463b-8bf0-95386ee20575", "indicator--00fd9aba-7478-457c-9bf2-277ee356d592", "indicator--59279de5-eb72-4144-9c48-5d6a76d35b16", "indicator--8ae6600c-43b5-44c7-97d9-98d32ac9f256", "indicator--4de1a1f9-3707-490a-ba51-1f2476bb621e", "indicator--2b317870-0e69-4762-b7b7-ff73f3cceaf5", "indicator--6a62dd5a-dcbf-4498-bc1c-9dd9a8a66ee1", "indicator--870774c6-7e3f-4d88-8cf5-6f0f4e6efb39", "indicator--8f444ce2-ea46-49ab-96e1-9a99895f8458", "indicator--4f252824-334b-4397-9048-2c12fa38b061", "indicator--f3fcc634-136d-4c9b-9bc5-34f324cf715a", "indicator--ad95b15d-43e4-4d83-aeae-0fe715bda542", "indicator--b7a64d55-4753-4ba4-802f-c5373d2cb1c0", "indicator--2340001e-6afd-4423-aaaf-159c4e61a1ee", "indicator--19a94b00-2d7f-43e4-9f57-d101a659e8ab", "indicator--fb1dd0e0-bd0e-4ebc-840b-3ab10b301b24", "indicator--99700ef5-6e20-4908-8dfd-026b806c78ac", "indicator--bd45e1a9-313f-4d02-a5f2-cc0a982839db", "indicator--f758c6f6-0cb8-4810-9b8c-47444d253630", "indicator--0c68e3b9-4293-4788-a4ee-8234e3afb800", "indicator--80a4fb42-7511-4f6b-8958-8ba1c991016c", "indicator--c93caf3a-57c7-4014-a3af-21ffb2ca3006", "indicator--cf22b902-e44c-4b53-a2d3-c114e65a2cb1", "indicator--244439b7-c007-424d-932e-2697ada4d0cd", "indicator--941599a7-8f81-4961-927c-fc69d58aeef1", "indicator--4bd94042-1e82-4d70-9803-127ae93894ec", "indicator--3c1a3bc3-a05a-42a8-b346-3ed47d482061", "indicator--50fbbc7e-84e2-4744-ba82-81e309436c6d", "indicator--dd1a138a-801f-4ee6-94a3-930a6458b777", "indicator--43e4bd21-196c-42ed-baed-82736900c436", "indicator--81f241f9-7243-4adc-8f80-57117203e06c", "indicator--f108a25d-6e62-4dde-9e8b-ec30fc6ed336", "indicator--6198c668-3e2a-4849-895e-44084a87176e", "indicator--910c6778-0325-4d67-a146-00d35e516e7c", "indicator--69301793-d93c-4bab-9a49-76f9d97099a9", "indicator--bbfb41fa-b2f9-4b45-9f25-68311de41f49", "indicator--02bf719b-fb58-479d-92a4-1f9cc8b477d7", "indicator--18c52d5f-0ed1-4f53-99eb-f407a875adb1", "indicator--b47169a3-039a-464a-a64a-e2846213a80c", "indicator--ae8f47d2-efab-44f7-986e-8a28398f1ee2", "indicator--490ac637-9659-4cc3-9bd4-cb567413d8da", "indicator--96c7b626-6d34-4a90-9eb7-148b00c4c94b", "indicator--a89e13ae-5de5-4a82-a3a6-711d9957c011", "indicator--5549c8cd-8436-4aac-b30b-e5c608aaf91d", "indicator--12e263dc-f610-48c1-a8d1-777cebb9d39d", "indicator--d07ae77c-598b-48fc-9354-7b6ef5e14a76", "indicator--027daf29-dacb-4535-a4e5-a5fe01c8ef82", "indicator--36696c31-935f-4625-817c-6ab01b318dd2", "indicator--885642bc-a6c1-4675-aa7c-faeb408ce160", "indicator--eb3cedfd-af20-440e-9aa5-3547523011ef", "indicator--338f1f9b-5344-4397-8b16-a9e9bd644964", "indicator--ca9b4f65-06e8-47c7-9d7b-c83793be3389", "indicator--1535b2c2-12e6-49df-9da2-3239854f12bc", "indicator--29e26e4c-bfc0-438f-89ef-75484fc769f4", "indicator--7ee27fc9-e19d-4cc8-b856-e0f70f36f67f", "indicator--45b6fe4b-94df-489a-882a-342ed77373a6", "indicator--2bf59977-bef4-435b-ab4f-937b5c938bbd", "indicator--a1d89bf7-dbf5-4fab-812f-75413067c04b", "indicator--299b374c-83e0-4182-8dff-2ee43c4ac036", "indicator--b09e4c0e-94d7-4b10-a2dc-8393207f9535", "indicator--2942f8db-9851-4e89-aa71-d86a11154a55", "indicator--92b760de-648f-406e-9693-5ea088d7d5d9", "indicator--cf38b469-00c8-462f-b942-74deac850559", "indicator--96ab74c3-5482-4170-ba6f-22ba7e5766e0", "indicator--80d347c1-e3d9-415e-88c4-0ae815e729f2", "indicator--7b85ce2e-41e4-498c-81fe-6386a11e7c97", "indicator--50276501-6233-47d0-babf-4a9c9fbe3f64", "indicator--98f46d97-ba7c-4290-b9fa-67c8d5943966", "indicator--aba64af3-52c2-4e0e-a507-90dcc608300e", "indicator--c0fcec51-178b-4819-be30-4d83b20e35d0", "indicator--9ee5c0cb-ada8-4616-b3d4-fefc84963f62", "indicator--b4bbfd51-0690-43ae-9736-7d26a0b46495", "indicator--00be4abe-8989-4494-abee-f5f80d54d6ea", "indicator--a048af49-234a-44d4-85b5-71602ac71a74", "indicator--410ed5bf-372d-46c0-955d-548902335ab4", "indicator--796f22bc-b16c-442a-b06b-7f214a61fea9", "indicator--9382a47f-4db6-4ec5-8804-12ec8511ecb1", "indicator--692089cd-124e-4e2d-8997-4aa216cb6c90", "indicator--9422ba70-b73d-4241-82f2-b621b5fb3cc7", "indicator--82d94dd1-dd88-4d8c-b4f5-976391593a0c", "indicator--e3578b24-eea8-4a8c-80b3-6ed9548b32b1", "indicator--c0f5f984-67c4-4154-9a80-cef5ec7c89db", "indicator--e475f365-7d35-4ad2-b863-bdcff685c447", "indicator--a4223af5-0996-4068-aa19-66c93b9e378d", "indicator--80ee31b9-c097-4a07-bf4d-7d2cbccf693f", "indicator--9abcd108-2005-42c7-bd85-b1edad8107e8", "indicator--0480b946-8ef4-4fd5-9759-33563fa1855d", "indicator--39a0fc83-93a6-48de-8a31-8a3254ee8611", "indicator--355bb660-0248-4bda-9943-b02d478b8828", "indicator--186eb1aa-5dce-4524-8f5e-4d491f130b2d", "indicator--19282ab0-955c-4086-b5d2-478adcff8d3d", "indicator--16e9c01e-51c1-40e7-9519-724a66752215", "indicator--ab3c41a9-397f-4bb1-bedc-e97ee8f25b3e", "indicator--d1a6a247-0a45-4f73-bae6-7d9a9c2c4592", "indicator--5734a2fe-1cee-4d1a-b8c2-e5291d601849", "indicator--3bbf50e8-73f6-40be-a80e-a09531027607", "indicator--800f412d-9584-4e32-8fe8-23800c83e14b", "indicator--d3250c58-b4b3-4718-a0be-4888e2814df2", "indicator--840349c0-1110-4d81-a219-66b1b0f64245", "indicator--fc42bac7-d411-4588-aaf8-6eea2b99a6d7", "indicator--1156419b-5a70-4338-8ec8-6fec7c1a339a", "indicator--033d7ff4-638f-4447-821d-af81cfae71ff", "indicator--92142b58-79db-4c24-ac2d-eba1edbb7cab", "indicator--6fcb35d1-3185-4b70-ba19-afb2a31cec76", "indicator--c5ad2719-3e39-44ac-bcbf-dbe7d80d2f5b", "indicator--0428c8de-bed9-47a0-bb51-6561f97be245", "indicator--3fd0fe55-ae41-48a1-904b-789b1e85d9db", "indicator--93ba3c91-d1ec-4c13-aa18-ef2d3c033fb6", "indicator--75e314b6-77b0-481c-b26f-4b6510193622", "indicator--a8719457-df98-4096-b131-0ccb10aa6a05", "indicator--cb8eeb66-5791-4a36-a31f-e2a2b0e0bb4f", "indicator--34fc0aa7-46da-4b18-b546-4738e0f45faf", "indicator--77e45d29-3423-4c21-93dc-d2ad09fa53e0", "indicator--1e127a46-acf7-4dc2-98ad-3076fd717ba9", "indicator--4af6ca1b-41a1-430a-a328-10c1cc46c08d", "indicator--f3d60c09-ed9c-44f8-bc89-719c62eb1033", "indicator--007d9c4f-11fc-46a9-894c-e01488511457", "indicator--cfbf2b22-afb0-4b81-89bd-97cd8f545d81", "indicator--c22a5ba0-49f0-4c6b-8704-ffb13865f634", "indicator--fd2fbeb3-7f5d-430c-b962-67d5a0f962f5", "indicator--537777b4-ac48-40a4-8602-cbfa5be83667", "indicator--e60a4ca3-5959-4dbe-aff2-c2e380c531a1", "indicator--d6d45697-21a0-4252-8ac8-c5e32513985e", "indicator--58549cf8-0a17-4330-adba-29c3d1cbc686", "indicator--2a836621-b887-4c43-8b4d-e4fb55217755", "indicator--8f2c4579-7b0b-4034-8622-5c1d80502126", "indicator--2285357c-f720-4fbb-b98d-4a909ccd218d", "indicator--76a739b2-89f0-473c-930b-e300cac8f1ca", "indicator--829d65eb-ba1d-4028-a26b-00d585d67685", "indicator--baef765c-d5c6-4856-a988-8e31009f214d", "indicator--3c503794-8f2f-4d70-b5a9-8279d588f533", "indicator--7049e6b9-b473-4fc2-a598-7c834f11b37d", "indicator--9b813d59-72b8-4430-b59b-a67b672a0181", "indicator--1f70d78b-861f-477c-b6a2-0c8163118d30", "indicator--f0409550-724f-4b7f-8a18-74b273aff17d", "indicator--b04221c8-01fa-404c-aff7-8fdf12e79ae4", "indicator--abe2f5b0-a865-49c2-a791-dc955528dfc7", "indicator--29330583-21fc-4636-917f-a1e9cb56ff60", "indicator--90fe4662-71a1-4e0d-880e-e02de29f949c", "indicator--43d29be3-d77a-429b-8bd1-97bc09b6613a", "indicator--a69ab761-1ff1-425d-87b7-970ab7889d49", "indicator--e68ee276-b910-485f-8db3-c26a256f1d81", "indicator--8015a501-4f06-4598-8cb5-d9e07f935c06", "indicator--a1edc3f3-1d62-4a22-a257-916788276cce", "indicator--b2147436-df26-4194-8c11-d5f4331be005", "indicator--39477ffb-2d89-49ad-a1c5-3409619d77c1", "indicator--e92c6e49-05f3-4257-965d-2c699f0be238", "indicator--fa35966a-6369-40ff-bcb6-abf56ea9d8bb", "indicator--e39f500c-fde7-438f-b7aa-f0854c88b255", "indicator--9cab0f24-03b1-4f16-b228-953d9f43369d", "indicator--d8825150-c110-4e35-a539-b4c4d76067cd", "indicator--6b332b6c-9cb5-455f-8aa4-2c855c00dfb0", "indicator--49cefcfb-fd05-41d9-8b1e-ae1077088cd3", "indicator--9fb7f91c-d145-4e93-bba9-72bf2ec516cb", "indicator--c728e403-b72c-43cd-beac-e52959f3fe61", "indicator--27e4008d-b68a-4c67-a61c-aa8d90c609e3", "indicator--cd5e2f69-6fc0-48c2-a01d-32681b6e514d", "indicator--e82ee0dc-a691-4577-9bec-6112ee134a1a", "indicator--27f5ddd0-7ac2-4b00-ac83-c95f0dfbf0e8", "indicator--50e844fe-9353-4796-a354-feb876f12a78", "indicator--30f25e96-0951-4bb9-8859-974bc18e994c", "indicator--20c6854f-116a-4a7a-b5d5-8fc48c84e917", "indicator--0fa9e484-acc8-461c-806f-321ca6c32af8", "indicator--f03181a0-fd0d-4783-a141-e18473b5fb8f", "indicator--357d64d2-6092-418f-bdb0-3eeb4653741c", "indicator--6b4bd8f1-cfab-4314-bef1-12d2679b7669", "indicator--c8d497c0-5f14-46c8-ad73-49e4e7dfc614", "indicator--1e6e1530-8c49-48c2-8154-92fc3b99c1ea", "indicator--cbccbb39-b942-44d4-a530-49ce3cb294ec", "indicator--6ae5d046-2aea-4253-8c9b-87cb9e5b9319", "indicator--ae23d2bc-a07e-498c-a09b-4e6a6b8cc006", "indicator--ebd37983-a26b-42ba-83a9-3c6327536491", "indicator--a1f58156-7517-4249-bf0f-fd66df548d42", "indicator--a5320328-0c2a-445e-b623-f30dad461ace", "indicator--9154926b-639c-4d87-af65-c2ee5d29731b", "indicator--a973672f-bc88-4ad4-99d5-600e7d17dd09", "indicator--e33bd149-ccd7-4c8c-8a87-7cdec29e1ea0", "indicator--db2efb22-d910-4e50-aaf0-7d97bd3779e6", "indicator--b3f2e560-3462-4702-bcce-ec20a6c19452", "indicator--55a78aea-6f38-4574-a8a7-87bf76530a4e", "indicator--21e459b9-423c-4c1b-bf69-26cbee846bc7", "indicator--da009971-52e6-48dd-a418-94ad1176f8e0", "indicator--879468bf-7eca-45d9-8153-f28d66b2ddf2", "indicator--4e25eeaa-d375-45bd-8a34-38fce6ba1e7d", "indicator--1c8d8452-5c86-4baa-8eee-b2a5206e3562", "indicator--7023e688-2609-4383-9de0-4b413accf844", "indicator--def5a990-4c8a-45c4-a1d2-88d81cd93998", "indicator--bacc1e9d-9621-421e-8d67-abb8244cba65", "indicator--439fb09a-2ed7-49c8-b5e9-88dfe0f27dde", "indicator--cd35094e-1db4-49d3-a374-4db9d295eb59", "indicator--beadafd3-1211-41c4-8890-5b0484244418", "indicator--45102c86-3da4-43d9-92af-42333b1149ad", "indicator--be994eae-124a-4f9b-98a8-9e6b950d3028", "indicator--f2e78899-b37d-4fef-bd67-c7533d8fd140", "indicator--066db160-c15a-4950-9baa-467e8108e4c2", "indicator--428264b0-73d7-4455-be76-ea8b60c4a7ed", "indicator--6dcd6155-aabf-46b5-90fb-a45882d61d68", "indicator--b495e219-759a-43be-8515-15bf924dfeb4", "indicator--c176ff7d-284f-4355-9dd8-9ca7d98eaa92", "indicator--d117566b-0cad-47fc-b5a9-44658f064ecc", "indicator--7646d63a-1555-4c99-90d1-10362b43f4f3", "indicator--03804f47-40c5-41e7-9365-333fb59a7754", "indicator--fc70ade9-8685-405a-8f6a-f831d12b347a", "indicator--96079646-4fa8-4798-9a01-4aa68527ff9f", "indicator--a6b4edaa-3424-4308-90b0-c96bb66c51a5", "indicator--cf914b44-294a-48f7-b238-3e91c1c894d2", "indicator--669571b6-4bce-4e33-a41a-b5cd7560e7ed", "indicator--c5794254-e13c-4212-9caa-876d6087ba4c", "indicator--2699cec9-9356-4cf0-9b5d-6d996e254d94", "indicator--f66df3fa-0b56-4809-a14f-74d961694525", "indicator--57fb1160-6996-4d05-a780-ebd41683fafd", "indicator--c15220b8-6ce4-4d6b-9759-374f5b21ca71", "indicator--e98f4525-3746-4735-b3e4-4caae42e97d6", "indicator--25c35246-26e1-4b51-91ec-4cd2d3f7ab3e", "indicator--20973359-4e35-429b-9228-99e6fb7fb6d5", "indicator--de09ba0e-1cff-4def-b9dd-d1c20120f347", "indicator--f6e30f45-6e57-4424-bd76-c1c849b97438", "indicator--fb2add71-4b5b-43ca-ac2f-b2c1ad179d65", "indicator--2233ebb9-c860-4092-a810-0dd8f863a2ff", "indicator--708ce9ef-e7cd-4adc-ad7e-81fdada08adb", "indicator--775ab141-f342-4c82-a7cd-ceda01841ebc", "indicator--571ce7c3-22f5-4ef6-a618-597fc6a022e3", "indicator--03d2a6f7-1603-425e-ac08-58a84bc47b66", "indicator--f98203ce-924b-4cb0-80a2-29e5e20c0198", "indicator--414b1f3e-c74a-4dd4-b335-bd6b864270dd", "indicator--bff9ad12-96ed-4fd7-a7a0-c700ed7d6a03", "indicator--67670db1-e297-4760-a6b3-95b442c45338", "indicator--2bc1c1c7-6c63-4730-8aad-35bc862c13f6", "indicator--a81ec5db-04eb-4c56-8d45-8841f7960297", "indicator--00ab199a-4a00-4bf8-ae23-3119d369109f", "indicator--5be6af56-3eca-4e97-94e3-e8f732a3dbe6", "indicator--20bc98a0-00eb-4361-a68c-e2f7c6f3c7ab", "indicator--44cee309-cc16-4c91-a02c-2282943a69ee", "indicator--222804db-b68a-4b9a-b2ea-7b40f51c699e", "indicator--c036eeee-7858-4c4b-8b2e-de1343c92423", "indicator--17f070b9-2d27-407e-b441-171fcfb8f60b", "indicator--7be6709f-1e56-41b6-a0ae-b3064570afbb", "indicator--84fc4aee-ce25-46b2-8db9-a7d6576620b9", "indicator--d03d1f26-3467-496d-94a0-8a9b45da412c", "indicator--2be1328b-65f4-4db2-9238-1fe09366f4e8", "indicator--22ecfe1d-df1c-4019-b2a4-9bc83204aa7c", "indicator--5ce8b81d-73fa-45a5-9305-8e7fb5a37235", "indicator--b512f90c-0d56-4acd-8c2c-f706e8239a7e", "indicator--745dbb38-9fd6-4f2b-862f-179c9387010d", "indicator--efccea20-b6be-4e34-a128-2f3054f94396", "indicator--ad77377e-c8b3-4675-81da-7f35688fb9c8", "indicator--3aad9f6f-6c97-47d1-8180-d46fcdf8acc7", "indicator--b6fed4fe-feef-4994-86e9-ba97cc8739ee", "indicator--c279def1-1a65-4521-b0ff-9d46a85af7b3", "indicator--b4e1f918-a950-44fb-ae20-8319ce85d114", "indicator--d93d3d9f-185b-49d8-870b-7186fff6de91", "indicator--dd63699f-bdbb-44d3-aadc-d79507be5895", "indicator--98dc6634-f4d1-4c6a-bd89-00bd2e2e818a", "indicator--d850d60a-3586-441a-856a-a86c7f15cda3", "indicator--064675c4-2fa1-4ac4-aba4-cfb352514e04", "indicator--11f15c48-88e8-4431-8df9-829126156da2", "indicator--0b0bdf93-e82f-4dd9-bd64-213d5381698c", "indicator--cf946721-45dd-4bfe-8202-775d468f5069", "indicator--94e7a90b-bff1-4482-8d45-4af8a3a051d1", "indicator--a37df4d2-2bb6-4e7d-bda7-32373c3da2ee", "indicator--886a9577-b937-4253-be90-40d988d1b9be", "indicator--74f150ac-79d3-44e7-8395-ce389903b6ef", "indicator--7158e4ae-e29b-4eb6-947a-518fcbce662f", "indicator--6cab5d92-7b65-424e-8528-3c146f9f6a3c", "indicator--c1feba48-446a-4659-8ec6-3d26566e238f", "indicator--0fce9480-0f59-4f72-84e1-7a02b0daeec0", "indicator--7e672eb2-39a8-4154-9f1c-983c74e79c16", "indicator--b3eb1a20-8c2e-4340-91e4-0b8bd9e20b34", "indicator--ef1314b3-ad73-4880-a86b-13aedd1b8987", "indicator--5ad7e6bf-90e3-4055-99f2-c011a0791c72", "indicator--e71d44bf-2e5a-4ff4-a397-441686bf3776", "indicator--a121d04a-96a7-4492-9445-3e1cc51a4921", "indicator--859f91b7-c428-4857-bf60-756e2f8fce08", "indicator--32f4f181-a13c-4b39-b77f-68988dabcb50", "indicator--4cd6aaa8-e936-400c-9c8a-14bc4aa906b3", "indicator--bc2b0845-3350-4a4c-b1fe-3acef86d25ea", "indicator--29012148-f072-407a-a264-f760e6c5fb71", "indicator--2e7254ab-77f3-435d-bcb8-aad519f20bbe", "indicator--225e0fd4-e57e-46e3-b86a-e268673af795", "indicator--6e2d5a35-bb1d-4f44-9e6b-b956133e35d6", "indicator--05c265fc-e9b7-4376-b506-d03ce9f8e959", "indicator--a1de312f-3bf2-443e-89a3-94be67c15b51", "indicator--7c264a55-e906-4a65-a1e6-e58d8edcaaed", "indicator--3dcd5234-39af-43dc-aa76-5443ad28610f", "indicator--068be326-eec5-4ea9-b0e9-d25667786e65", "indicator--ace31402-e8cc-4867-8f55-e8288c0d131a", "indicator--5bbb2463-f00a-4183-b157-d2d1b1b1b748", "indicator--64f46c61-9834-45ca-8f74-efbbc2ea4778", "indicator--848e62fd-bd48-4e8c-93ad-d2630f8fdcb8", "indicator--4a710e58-224c-4597-a605-4000344d4ba4", "indicator--f9cc3171-a6e3-44b0-9784-9f3da8509060", "indicator--e867b0b6-c8a5-485b-8086-c656d7d060bc", "indicator--b47ee336-7e92-4ae6-ab06-69d8fa5e3b7c", "indicator--0245d5d6-bdfa-4de4-a4ec-1277fd95f4b0", "indicator--66c3c1d2-26cb-4d52-b3c1-57a393fa9ca2", "indicator--a2557957-39e2-4afb-928d-daa10d7f0066", "indicator--2f90a2bc-b7d6-4003-850e-653ef726a432", "indicator--579fb8c5-c622-424e-9231-64a929808ed1", "indicator--8bca8ac0-f3e2-43bf-a782-09253a641eaf", "indicator--1a443888-7c98-4d8d-bc48-f5774c37830b", "indicator--829d35e8-ec89-4f51-a635-9d4caadd2bc7", "indicator--f935e8bd-116c-4222-b963-cf9805bfc6ed", "indicator--069ad771-f346-4209-a271-b5a6606cdf56", "indicator--00b0779f-b37f-42ae-9474-a6310828d978", "indicator--77c861dd-78a6-43a2-8941-14193372fba6", "indicator--272c5fd7-65f2-41e1-9f06-e2a4db619c93", "indicator--c74cc2eb-9fb9-4dbd-8a6e-0cac54535a4e", "indicator--ccc59273-4e27-447e-baf2-32f5a8ebfe29", "indicator--aeb5e454-18eb-4ddd-99e0-e985b4bae1d2", "indicator--98fc5ca1-1a18-42a6-a336-a62ed65dfe14", "indicator--0a95b5da-215f-40ba-a61a-b8d323f606e2", "indicator--1cfe2bd4-511e-4e1a-af29-7b7f31a71785", "indicator--8bcd5486-4c0b-49a3-be99-3ded61647197", "indicator--a2894867-d7ef-47ea-8db4-505ae2d49238", "indicator--24d3bc73-842a-47b1-b88f-b17d565099a5", "indicator--0395e712-4a29-4f1c-9049-f960f20a10e4", "indicator--149f8d7d-43d1-4f94-9db6-30ff5432861d", "indicator--7bf448c5-fd38-44a9-a52b-3fa6d2c6ff6d", "indicator--b633ba5f-5604-469b-b820-5e5a6d8640c6", "indicator--d113b0cf-d597-4523-8ad7-962173ff8196", "indicator--777649c1-a51e-4f24-b728-5b552c35ff07", "indicator--386b791d-06ce-4dd7-8105-b07b07fe65e6", "indicator--28d21e4e-bfdc-448f-addf-0fd2560fd560", "indicator--acbe61b9-c833-44f1-8fd2-a329782585ff", "indicator--9880d226-c5a0-4a55-9622-537c1bc9caa8", "indicator--a6202ef4-ce34-4780-8abe-fa0e242b5d46", "indicator--9b5cac97-7fc6-40c0-92a3-148d7297cf49", "indicator--9c991653-2ee6-4215-8d2a-5fce9fbf8733", "indicator--f732801d-467c-48ad-aa9e-b672d64fc44b", "indicator--b278f234-c6a0-4af3-bf82-e4e74b7a4a41", "indicator--402d562f-df17-4c1c-a136-d4bad9ae9aeb", "indicator--5aaa2404-883e-4eb4-89dd-fcca3695008a", "indicator--f635251e-f782-4b18-a9d8-47f6f516f05e", "indicator--cfa10f65-becd-42fb-9f10-df3cd1cfbd8c", "indicator--eaa2c86a-dc7f-4f53-8cb1-ab24d953fa17", "indicator--c4872056-be4f-4432-9fca-861c1bc0ba6b", "indicator--3768a788-b782-4d18-9dca-7b5a07d4b226", "indicator--1950c41e-1e26-4863-bae4-77de172640a6", "indicator--622fd7b8-9db5-4986-92c2-905bc7c5b678", "indicator--81b98c58-a0f5-4155-91e8-f2038b7c4c39", "indicator--9d269676-85d8-4090-a104-149e03d0d9d6", "indicator--e7dad380-fb01-4345-850f-49e516148a0a", "indicator--86bdb822-5531-4927-b887-62b80c3bca35", "indicator--29d34a4e-7789-4b0f-8719-211385ce80b2", "indicator--62db377c-ebad-4ab1-90e4-77b69300f242", "indicator--f5061b1b-43ed-4385-895a-b7415ff4afb6", "indicator--6f4052be-574f-4ed3-89a3-149ef045ca74", "indicator--79566c76-ea34-4be8-a0c1-8de5c1e57599", "indicator--fff7c910-be37-489f-bdcb-751baf4600d1", "indicator--8c7557b0-e4a4-4477-8e51-0cf15a704f1a", "indicator--d48ccc1f-4161-4f97-b733-55438f17ebef", "indicator--d797e882-0de3-4e18-af26-549cb56bb8cf", "indicator--cdc9b8fc-b0ec-4ab8-b4ea-db8ef5756d33", "indicator--360f3773-ef86-4afe-a3b7-c9dd539f0739", "indicator--d122ea93-5c1d-4a02-8308-dad6b4dacbc7", "indicator--78a9989d-a82c-4be0-99c5-96b5bc0792e9", "indicator--9928283f-f0be-4f2d-adc5-77e78e6a4ecf", "indicator--594c2315-0863-45dd-8ad8-e37b73b2aa80", "indicator--78a2d279-35ee-49ed-8a68-9fbb6dfff0d0", "indicator--0e8122f4-d12b-4a98-b29e-b5350586cb4d", "indicator--dc5a5077-55b2-4a72-aadd-b79398eddc43", "indicator--5abafe6d-2ae2-4438-bf90-412e45b810bb", "indicator--7b8dd879-cc14-490a-a065-d060778ffac4", "indicator--690bb53b-b63c-4fd4-ab98-8f77ee04c8b1", "indicator--6d74a7de-5959-44c7-a261-183c89a03a9f", "indicator--5cbf5a0e-8362-42c1-b01d-8d57ad730325", "indicator--6a586c3f-0964-432e-a311-9d391a3a489c", "indicator--0f8b6894-6e73-4cde-a5ae-319c0a5c894e", "indicator--a1175982-aee7-4a06-8f47-064b3e80c7db", "indicator--b9d2edba-81bb-48a9-b508-d1f360d025fa", "indicator--6e371570-483d-4567-bc04-e36c9a3fc3f0", "indicator--c57c84da-8aa7-4e6f-99b8-e3350b45538f", "indicator--02bc32bc-d41f-4924-a2d8-f9686bac5edf", "indicator--727ccc8b-e767-43fd-999a-b29a6fe19530", "indicator--33c7dab7-1cdc-4740-82ff-7c25b3c985fa", "indicator--c72b8d4a-daf8-4bcf-bd8c-2ead74147be1", "indicator--29ddff0f-7cfc-4fb7-9ccf-a43589a71d05", "indicator--e64e14e5-cf49-461f-8be2-7ac5c97df5fa", "indicator--688e5974-b258-48e2-b307-0cbab4c641b2", "indicator--989449dd-55de-45e7-89ff-e14d8f5aa125", "indicator--9173c243-f381-41d8-a45f-e5d842ef842e", "indicator--4bf7ac9e-01f0-49ce-8cb1-be6695139089", "indicator--a1dec58d-5ea7-4c92-a1ee-62b0ecdc270e", "indicator--0c0a0112-25cf-4424-9f56-69b7d9fdf057", "indicator--e6b916a9-af29-497b-a6ef-78cf8c23d799", "indicator--937c9049-4cda-4c56-94be-e08db0d610cd", "indicator--e3264d2a-26ba-48db-9f35-9e876be10883", "indicator--5c5ae739-a19e-4931-b530-37501dbfb5c0", "indicator--3e1b549b-b1f0-4584-96fb-3a9a051c747f", "indicator--1a05a15f-c057-417f-9e8f-5c4be13dcbeb", "indicator--5602c498-ea34-45fa-be63-2ca38b94d301", "indicator--591ada3c-9147-4d71-ac76-d1167120c830", "indicator--f90919bc-092b-4698-bade-32c9e6ab82b1", "indicator--2ccdb7b9-f1fb-496d-b4b2-87707c56f3e8", "indicator--1ae2f7f7-2906-413f-adc0-8a54d498601d", "indicator--1ffc92ee-f1d0-49a8-bfe8-138b6d0bf677", "indicator--f525dcb3-18cf-4fbf-bf37-0e1af699f31c", "indicator--3ba9c4a5-3289-47df-a28d-718018b4b1b8", "indicator--5ef65dd4-bdb1-4f2a-aa71-060da46b6638", "indicator--ca06a660-b58c-4788-b2ac-d53a57580f44", "indicator--7e6d052d-9656-4875-99ad-ad91236b57bf", "indicator--1e816355-d996-4583-a00d-9ee5d34f4f5d", "indicator--057f8632-289d-4bf8-9af5-0b05a3a96d8b", "indicator--7b11d594-7ebc-4e54-89bd-fbdc09661b5e", "indicator--4233e463-ecab-4a8b-92e2-05a921576af6", "indicator--728cd5e1-06be-46ec-9a7d-770c040f28eb", "indicator--63c20854-c227-4815-965f-dfc599baa261", "indicator--e58b3c96-3f36-43f9-a657-135dcad6a9d2", "indicator--8283701d-537e-4ac3-8273-fcad0748bc99", "indicator--c06bd290-c989-468e-a695-ee78967649d8", "indicator--f760774c-c616-409c-a7ad-61f8b7733c64", "indicator--22f3a1b5-5a19-42cc-923c-d850f474f81a", "indicator--48de6b69-63d9-4c7f-8125-038861e364ad", "indicator--d334ad5b-73f6-4d4e-909b-74b4f207faed", "indicator--8695da6e-3cb0-4c41-964c-4a4b7c8d739f", "indicator--db25ad36-e6f4-4fa4-b303-18854b6bad30", "indicator--a81e39ce-5833-472e-8a66-305fb1622a62", "indicator--f5b6446c-d832-44e3-b271-b58c765eb419", "indicator--415c695b-ec3c-47d2-8c0d-b8bd4af0d99c", "indicator--3ffd2edf-d8b2-422e-832a-dcb5799790d9", "indicator--9924e708-60ea-43b9-8b5b-6534819293c4", "indicator--01c36ed1-6cb6-4e15-b0db-1a3d0e5af5ae", "indicator--8109df98-6442-4527-bd4b-6ae78a8d906f", "indicator--f9b890ea-5928-45c3-b584-57cd89ce3c3e", "indicator--9625d89f-90ff-4882-9c90-687ac68cc336", "indicator--a7672812-1243-466f-8cb2-3b59581df940", "indicator--d3f32cb5-4213-4b4f-814e-867b4e38218f", "indicator--0fd195fa-204f-477b-b40e-121bc2e5c298", "indicator--28beb4d7-3897-4a9b-b947-b00463859475", "indicator--ce8a746c-bab2-4c52-ad05-5787a44c3f12", "indicator--cb0ce165-1f14-4aff-90ef-856c68e7123f", "indicator--3a111c77-5625-4655-b426-6e5028d55833", "indicator--b5b34e8a-1736-4d91-b078-faf3a150b2d2", "indicator--3c777224-1b35-4bb3-be4b-e88b4ef34b2e", "indicator--1e4d072a-2928-4fbe-9d79-5f8c24e6e4e5", "indicator--6fdd6a19-3927-4c30-9d36-05e13f942461", "indicator--b14cb712-ad2c-421e-b6c4-a4f05acc4e51", "indicator--1bfdb9b3-d1aa-47a4-bb53-0bd62a971650", "indicator--922aff65-a189-4841-bd45-1e58392599c2", "indicator--0147679c-2da9-44b5-a0e1-7b28c2e765ad", "indicator--498b5ef4-f234-4e4d-85ed-7e9f438832ba", "indicator--18b652a6-02ef-4e10-bbc0-90a6d1edfa80", "indicator--8e706178-2a98-4b8c-92ab-2f44f266e3b4", "indicator--cf11faa0-4420-4458-9d55-64cc52f82243", "indicator--8678a76c-5786-469b-acf5-851e4febcbaf", "indicator--410d0f1a-6c9f-4b7f-8bc2-63cba22752ea", "indicator--e9139923-f5c1-4de4-928e-8f944a0558bc", "indicator--c5844359-50a4-417e-92ec-92bf7af86448", "indicator--f85c08ed-40fc-45f4-8037-51e04b3af79d", "indicator--bf60861d-1bdf-47ba-abca-e3f59412b047", "indicator--1c9bc2f7-005b-45a4-b5a0-9c57c90f0ad5", "indicator--c042474b-5338-4c20-a6a9-d93042cef6ae", "indicator--17238bb9-7d3f-4109-8567-a4893a2a55cf", "indicator--204c25d7-f8d6-4969-a8c9-495ee1b004fd", "indicator--549c44d0-4bb2-4434-832b-c5053ec176c1", "indicator--f46be945-3213-47ed-9505-ab1832dd52eb", "indicator--a81121d9-e414-4dd9-9be3-d219645350d7", "indicator--9b9f738a-595b-4927-a046-672f22e1643c", "indicator--aac6aab7-6493-4726-9b40-cae70ce17e8b", "indicator--e1d317ea-266f-49dd-af20-34b566739fa9", "indicator--6bc51b86-253e-4246-a79b-13bb39b63b5c", "indicator--b1419ca9-a756-48c3-bc2d-572f11b148d8", "indicator--9768b461-0319-4f1f-9b86-d4f861285006", "indicator--f4ca6f09-d66a-43f3-b3d9-35716e9ec812", "indicator--ebeb13f0-f17d-4207-8aba-75603a6778b5", "indicator--5ebbd2ed-f6d0-4728-9b51-662b00ecb5ca", "indicator--19254ed7-15d2-4417-8e06-342af22b52f1", "indicator--7d07628d-8d10-4570-a2b6-dc18a18e8e74", "indicator--b48cf5fc-9a7e-4668-aec0-b14b1c05fb32", "indicator--b212d51e-fcc3-4953-a985-142edfe86a61", "indicator--3dee53f4-b865-44f3-9780-6d798d9b370d", "indicator--1bc0ad79-8104-43cc-9647-bc82f6083012", "indicator--7f01ba1d-11de-4e45-976d-a11dcdd5edf5", "indicator--1a8283a1-c536-4d5a-872b-77c3fd6e0c68", "indicator--6bc3b82a-7e52-49ca-ba52-ffe6bc931014", "indicator--b4b52996-ef12-4ea2-aa90-9214394241ed", "indicator--dc7f46fa-020c-439c-b84d-ab485609d6b6", "indicator--22cf8050-8c84-4fd9-9eac-90db0a7c01d0", "indicator--5336d533-9249-4148-897f-dc0e88df0a08", "indicator--6b296029-0200-4248-9bee-2a1375a940b8", "indicator--c5939ae7-6dab-4610-9149-71d7d22ba63f", "indicator--edfc51d4-331e-4055-a8e2-c8d82f1d954a", "indicator--2a03af89-032f-4c84-8136-2f01a8224b13", "indicator--68dded42-214d-42bc-83a6-6ea89290cf64", "indicator--7c4b0e47-73ed-40b7-a5b6-e565179543b5", "indicator--a3a167f0-ecd9-45cc-9180-820e206764e3", "indicator--036bd420-d340-45be-8df2-0ece8d1d11c0", "indicator--145c6dbd-be71-4f9e-959a-a5dfe2c21329", "indicator--8de1f57f-34e9-4fbd-96b7-84618a1d5642", "indicator--69d03e17-2ad4-488e-ae4a-f7e7554a0bee", "indicator--4d4b403d-a7f6-498a-bfa4-8fa656e97ecb", "indicator--46f299c7-e85e-4795-af01-8a4d34c80f0c", "indicator--d77985da-472e-43cf-849f-0f5f43d27084", "indicator--63d152d1-a45d-4211-8715-74b14e2dea77", "indicator--e10b7ec2-75bb-406f-aa63-a53ad4513dba", "indicator--513e2aba-c66c-4622-b5f7-1c9dbb706dbd", "indicator--b9141c7d-c43b-432c-9a6a-4f9dd611a49f", "indicator--eac42215-459b-42c3-b0d5-d104770cc90c", "indicator--ff691c68-9776-4839-8bcb-bf00649d8823", "indicator--6f7d9ff0-6590-4663-81df-ce51d3322017", "indicator--16a8d606-5420-478d-b897-72d6f433a12f", "indicator--a4e935c1-2187-42fd-b53b-94213b7d571b", "indicator--e1e91200-33fd-4200-828e-a583f737ad0b", "indicator--91ecbac7-03e1-437e-8b83-053aff8d42d4", "indicator--5c07f2da-912b-457f-87be-27d121d01dfb", "indicator--edbbc34b-570f-469b-a1ee-bb1f4f21eb4d", "indicator--a74d8e16-d9d1-4e48-bdbe-eb4ce5c62530", "indicator--e3de5a9b-23e3-4817-8b1d-482495a0c67a", "indicator--194b69ce-ed53-4815-bcb3-e9bccbf57b69", "indicator--2f030adb-2606-4251-a994-e49a2c6b4be9", "indicator--a01e738f-e395-426a-b855-636b2ee5cbd3", "indicator--849d9da4-3fe8-4b41-861d-0677fa283021", "indicator--0355be27-e759-4ede-bfc4-4b7761d753a1", "indicator--9e8702b2-714b-47e4-972a-aca247b932c1", "indicator--25bcc6d8-7c4b-477a-bca0-ccb40e97c8d2", "indicator--858be74a-a289-4340-8025-c1c0523ea607", "indicator--6b21254d-5ce4-47c3-a5ef-13416b370a5d", "indicator--25597f51-1f51-48e2-bde6-49b4e449cee0", "indicator--815e72d9-c124-4f18-9882-13421773b5d9", "indicator--209c1ff5-8a3e-4441-903c-a5877774e2fe", "indicator--e460a862-4669-4cce-bab3-fb0dab49625b", "indicator--339a4b05-1f36-46c5-a9fb-a2116abfd8cb", "indicator--6e576bbf-b573-4959-a23f-9955416a8dea", "indicator--4b7b31a3-b4db-424d-8b22-2f26af26d247", "indicator--ff172f89-b332-4f69-89b5-f7234a3ed5c5", "indicator--786b0026-3ca4-4745-9092-f461ecb86890", "indicator--5789dae1-ba85-4533-8684-a71a03546785", "indicator--752b8747-86d3-451f-ab69-dbbd0c2d3f40", "indicator--2d2fea1a-182d-4d14-ba79-c79e71ced300", "indicator--bceb42b1-d4e2-4f4f-a459-63f165ae50ac", "indicator--d51b1c94-92ee-470e-8404-387bce9047c8", "indicator--a107f6e0-318f-47a8-892b-d765808db06a", "indicator--3c8e443f-b87f-4676-a207-9692deffb60b", "indicator--727f891b-5840-4edf-bd83-b895a266938c", "indicator--dfe48688-42a8-47f4-adf0-0bbc385ce3cd", "indicator--67d95830-34f3-41de-9fdd-2b25bf5445d2", "indicator--7d3236c3-6446-4582-881f-7b2f95cef4ad", "indicator--be840eb9-eb98-46ab-8ef0-ea6a26b97c59", "indicator--a0073ce6-dd79-4da8-a18c-5c320dc21f32", "indicator--0eb311fd-6429-4208-b0d1-edfb0173b1c4", "indicator--e649b26b-7ce8-46b3-8688-fb6c7793aa1a", "indicator--2c14a2ad-99fb-407e-aec4-ca0aa9921069", "indicator--e2005f52-f2df-47fb-b9db-e0156dba0991", "indicator--3bc2bd03-7773-4128-9203-7a514288f558", "indicator--33b46664-f3c3-4ea0-836f-a80dd556e994", "indicator--01b5569c-c37b-4c8f-a943-38dbce930a3b", "indicator--30bbb854-79eb-41c9-a397-c00516539558", "indicator--523c9b23-69b4-4f05-8400-a83d29036ede", "indicator--d6b4b5b1-213e-4ff4-a81a-ad6205e6dcc4", "indicator--70cde57d-584a-48cb-9310-3a6c1879ee77", "indicator--a6ff53bf-af29-4639-be39-9bfb41ea967b", "indicator--5be2b4ac-6882-4cd1-acd2-ae84c2d865b1", "indicator--debeff97-d1bd-44d7-8ed4-dbd88b0b3b31", "indicator--d558e8a6-749a-45da-86d3-fae1a7928a00", "indicator--dfb1c0e9-5ca9-41e1-b180-24e39c49b6b1", "indicator--f213815d-8250-4d23-9827-be39aae7d293", "indicator--212b443c-4c1d-4f02-9c5f-b2d40175491e", "indicator--b3653fca-c483-4218-a969-3c0bff2a33cb", "indicator--d74338c6-fd15-4711-b393-1af740e6f356", "indicator--aec8173d-1051-4376-bc9e-f413f1d5839f", "indicator--bbabff32-0764-4a9a-9405-321ef3be42fb", "indicator--a1854be9-298c-4db4-a00a-33db5bbfe14c", "indicator--0fa891e5-68fe-4694-96c5-d6e3f0a0ad2e", "indicator--e2c48b8f-c95e-4612-8131-4b5703bc9f81", "indicator--7737095d-7308-445d-805a-5943ea89a330", "indicator--8625c0f3-adf3-44af-8986-751bc970a532", "indicator--e9d7d147-edeb-4035-8513-372f889b0042", "indicator--cbc105a0-e35b-4fd4-9079-32f9b97f42b4", "indicator--a9908f83-9899-43d3-941e-1546fd5b83e4", "indicator--b7ecc588-26cd-4e59-a7b4-a46e6fc69f8b", "indicator--69ec21a3-065d-4877-aede-a65249a58dbf", "indicator--35e2c10a-cef5-42dd-918d-978a2366487e", "indicator--7a24819a-c2a4-48e6-be8e-517b277a43bb", "indicator--33357010-24d7-434e-b036-e56045bdafdc", "indicator--7f0280dd-d893-4734-8522-559b0fefb202", "indicator--ca5bbce8-79a9-4980-a80f-1be5a3b52e19", "indicator--ffe7a007-d2a3-4dcf-be54-f9625a810000", "indicator--500f2dd5-646a-4730-bd22-5c73edbbb7ae", "indicator--9345e968-7e2a-4936-8861-683a7e6e430c", "indicator--41db4e4c-c06a-4e47-a3ff-b764ed608b00", "indicator--462cf2c3-ef44-49ce-af5b-4152dad78796", "indicator--0477cba0-7f22-455e-8329-bf0aeab540cb", "indicator--7f61d573-382b-4717-aabe-cb7eda7c8d49", "indicator--4d0b1f36-7fe0-44a8-a189-968a62da8e6d", "indicator--f6a7c1c7-1685-44a5-b44f-31e171912d02", "indicator--ff067f2e-1d81-470d-bd4a-932e9cc7df8e", "indicator--65e5af4c-48b7-47b2-b216-e6d9a468c36f", "indicator--cb643226-761e-4994-9370-8a0fed9f15c3", "indicator--814d923e-beaa-497d-a600-257f051dbee2", "indicator--32485b51-1bce-4371-9d8f-a39dee9fd5ef", "indicator--7a8edda7-82fa-4d21-a6bb-7a421a374600", "indicator--ebd354ed-d277-434d-9c48-9a84dde8cfd2", "indicator--bf61aba8-de18-461a-b149-f8d744342a66", "indicator--306821ab-ff42-4c0d-852b-907ec40ffacf", "indicator--c7ac20e1-5f5d-499b-a30b-23e4c7826b74", "indicator--05750073-f743-4577-b058-2b49b9f8fa5d", "indicator--102e52c4-87dc-449b-86f6-701f099d1ec8", "indicator--96313ba7-ae2f-44ff-9f2b-a612f7f561c5", "indicator--3d306508-4b10-4f2d-9d4d-ff291df6868b", "indicator--301dc1a7-a08f-4d13-9dda-acf289ab2ec2", "indicator--6e2cd3ac-092d-4e79-b040-6ea2f19ef51e", "indicator--491cdb41-26e6-4304-854a-97eb1315b92e", "indicator--0ee9c58b-dc8c-44ea-9b59-fde155bbee08", "indicator--f3b24cab-7610-4ef9-9b7e-97ad610a185a", "indicator--3a6cf898-d739-4bdf-a1a1-01a0f2d1dd43", "indicator--f3ac7e91-4bb4-4711-b53d-cddd4ede75f9", "indicator--3bdc4fb4-fa2f-4bc1-bb97-f2a55b4bdbda", "indicator--f7cf0153-6d74-455d-aac5-a7ed899824c0", "indicator--2dc2d81f-b0ee-4339-98e4-ea3343a77051", "indicator--28538a8d-4bea-4179-aab4-302d9aaa4d05", "indicator--788d0465-d77a-494b-bae2-d6ab6f542c1c", "indicator--4d9f8b32-e53b-4f5a-9dc8-a5a2b1651825", "indicator--ebaed5a4-6e6b-4247-9ab6-8889d4021cb2", "indicator--f34b261f-6d06-4864-b97a-86733922c8ab", "indicator--8e1a0357-d7a9-4b43-9ef1-e26191b9bf90", "indicator--14feeb2c-d461-4b42-9b70-5bbd11066d53", "indicator--05457bfd-58f1-4723-b5e7-1b464ba38617", "indicator--dc0f2639-cdf6-4f29-932b-ffd12bb6c485", "indicator--37f66978-2662-4ecf-87f2-f6fec8b4be1f", "indicator--6a3fd44d-5242-460b-9c0c-5d60e7bec716", "indicator--7736182d-b3f0-4e77-b100-7b317660086c", "indicator--27e02973-2a21-48a7-9ee0-d5a862bddca1", "indicator--2f99a48e-1d34-496c-94f9-5c50609d1c2c", "indicator--f4675caf-50f6-4124-819b-f72b67cc56fa", "indicator--e1c254d9-f7fe-495f-acee-bddfcd6c4c02", "indicator--9289ac0f-4a0d-4842-b735-978d083c187a", "indicator--b6b631e1-6708-477b-9ff8-a4e894976473", "indicator--2b58e617-d065-492a-95b6-47e9b33494eb", "indicator--56a672a8-e3ca-41ce-8dce-31bf308fecc3", "indicator--9321d23b-6220-49fd-9d41-5bba66aa661b", "indicator--14ca3f68-1cec-481f-a1b4-63eab16ffeb3", "indicator--94fdd99f-2383-4e3b-9e43-74835c96511a", "indicator--f705221f-c4e6-4992-ba3c-b625a771a21d", "indicator--2775b897-8105-4085-81d7-c35088cc033f", "indicator--bdd720da-8a5a-44dd-8f73-b8ec7273f6f1", "indicator--7f1794ca-89b4-4547-8cea-aa5a25b872f3", "indicator--be99de56-1b77-452e-8218-ddd6d34a2357", "indicator--46f87529-3e95-4c9d-9350-fc7868dc5536", "indicator--72c729b7-5c8a-4098-ac36-ead249b9be70", "indicator--bdc93717-127b-4462-90a5-52c596666d68", "indicator--3d41af96-37a9-401f-be3e-953934d2c371", "indicator--14600395-bf21-43cd-9971-72f5079ab766", "indicator--396aa626-b2e9-4c27-8fd6-26c5c0d9f962", "indicator--1157ba8a-5436-49fc-9340-f6e0563b9a96", "indicator--98b396a1-b0f1-4b8c-8ae7-a6bd92834cb9", "indicator--c612fca8-6e6d-47a9-b00f-0bb93d9deb1d", "indicator--2f81d04f-f702-4172-afb6-6dec13ed0f52", "indicator--1b359230-f21d-4fee-adb1-c0606e63fd8b", "indicator--ac9abe04-60c3-4169-a6e6-82d47a470d64", "indicator--e5101873-cbca-4451-86dc-4e2a41041a60", "indicator--447c1f27-07ac-4dd4-97eb-8f420f87c5ce", "indicator--fad70b4b-24fd-4fba-958e-1c8809fae609", "indicator--0c3ca667-53be-418f-baee-7897ed696ff7", "indicator--63d725e5-baf9-425f-adb9-b136d5b001e0", "indicator--8b93eae8-945f-4da2-b423-998c1c7152b7", "indicator--8798f139-a999-4a78-b8b1-40c4be9affda", "indicator--13f0fe0d-8e58-4220-96e5-dd5510f60af1", "indicator--0359e5ad-b516-401a-a279-694cf5c58e9f", "indicator--b77beea4-4a2a-4403-9ba4-cb405b7b4529", "indicator--84932fcd-d96b-4f0d-b125-651869455aec", "indicator--c2a5d3c7-dba2-4bac-8ad3-e7658a1b9bc6", "indicator--084a8900-6657-49d0-ab32-5fc2cbd865dc", "indicator--2fd800e9-99d5-465c-8fc4-31570bbd996f", "indicator--6c80cc33-4828-4905-804c-df18ef717d58", "indicator--5c17803f-19d3-4069-94b9-034484aeb667", "indicator--b2d0fda1-b3e2-49fe-9df0-9501b9e35292", "indicator--f6fd991d-5a93-481e-801a-433afddc4316", "indicator--de08ca66-44eb-41c5-a70d-a2faaf280811", "indicator--02e73984-ed42-4088-9014-5e1463fd275d", "indicator--6309da44-ea21-4f73-b703-0eca64c7c128", "indicator--4e58d9f2-7f28-4e23-8372-1b58d94ffbcd", "indicator--a5797a4b-062d-4470-b8c8-94fdfd8e81a1", "indicator--eee50b32-c107-4298-9788-87940a626e5f", "indicator--35f302b5-9a83-4cd6-8aa2-4a72fa6f0db6", "indicator--07a9b638-3841-49fd-a583-1e463ca362e9", "indicator--47928f0e-15af-4819-ba26-bb98ddc9e770", "indicator--5801eb98-aee1-418a-ac08-dc9855ddb57d", "indicator--72648cad-b08a-4f67-9f9c-4f01740efcad", "indicator--d12d0f86-40de-468d-a8bf-ebea4e76df06", "indicator--270bd66e-6b6f-4b9b-b2e6-1720032e5141", "indicator--9b114540-30b9-481c-b1c6-091335d57dd6", "indicator--2d557649-3dc9-47c7-aa7e-ed24ea6d764a", "indicator--d6cc7184-7ade-40ef-a736-489d2d44d7fe", "indicator--b05ae839-9b5b-4e85-9ddd-065bb717bcbb", "indicator--08229095-0fad-487e-a530-027fc1929189", "indicator--e8f61424-43d4-4d19-bd0d-b16ea0ca0634", "indicator--4dff1db1-6057-4c38-a22c-a1a088c4e5de", "indicator--54631e03-01e3-48c9-be30-fe76e86ec98a", "indicator--9e384386-08e1-4489-a146-60bd2507a4c5", "indicator--57666542-147e-4f51-8a7e-2938367040f0", "indicator--048e70da-d98d-4397-8e57-18e21720408f", "indicator--8b78daad-f91a-4681-9d78-132cb760dbfc", "indicator--5f40715e-7f83-4c55-9439-62b02867c81a", "indicator--2c7e862e-f732-4ec9-a1c4-8a4e24f3017a", "indicator--4512443d-46cb-4f31-a69c-1c2465637a19", "indicator--f0632bbc-7302-445c-8707-7be8d9ea419d", "indicator--e76e86d9-3fbf-4eca-a774-c4912accccc1", "indicator--70256165-54c5-4a47-9e83-0b79a9efdfcc", "indicator--1bd6a553-2b71-47d0-af66-67ce557166dd", "indicator--47ee4168-f01e-4e50-a6a9-98113b5d286f", "indicator--149008d4-260a-4f20-94c2-0c37a3c077a8", "indicator--829c2c93-97e5-4646-b7b7-799d1d0371aa", "indicator--0ba6f98f-4d7f-46bb-b08b-e0ab9e786c2b", "indicator--ece1d861-6e7f-40fa-8d0e-f980955c8c5a", "indicator--1085d662-e3f5-4bf1-b314-765f8d9bbff4", "indicator--539e6a10-18f2-4fde-b6d5-777981b09d19", "indicator--bb2b9039-bea3-4fb6-8445-60b75fde954c", "indicator--fa9a68f4-2dde-4edc-af7c-6c78c0636736", "indicator--3ca5a5df-4a8d-48e2-9606-17a265201ac7", "indicator--94dfb0e1-681d-437f-b095-52f727053b9c", "indicator--e2b0bbd3-01e6-4ff1-a142-f783d5cd4277", "indicator--79d35a37-6a45-4a75-9255-bb7206318f6a", "indicator--a8e7e709-562f-4a53-9020-7a67facf372e", "indicator--6f6b71db-6566-432f-af63-5c2e6c667346", "indicator--8e43376e-aef2-43c0-ac6d-d1e211cd137c", "indicator--4e1f2766-a0a4-493c-885b-aa43a3d42c95", "indicator--4e0eb2d2-482a-4516-a060-24fd461cac7f", "indicator--70c70028-c7a3-4efe-a515-ff6bd92a24e7", "indicator--61b509ec-edee-4fb4-9131-b7828ff327ff", "indicator--2500ed8c-93b9-40b0-92c3-777f662d955b", "indicator--6a3c3418-eca6-419d-9177-4858fc7acc16", "indicator--dbdb6fd4-bd8c-47fc-a85c-38b71dab8e4e", "indicator--be34fafb-c21c-4c3b-b5ec-5fad6f121ace", "indicator--1b20f72e-ee6a-434a-8994-6ec057b6ef28", "indicator--831e8819-181d-4e32-92be-96fed02a5120", "indicator--83e97f2a-7a02-4ce0-8851-837a81a24e97", "indicator--14fcf33c-9868-49db-a789-8037aa15f0e7", "indicator--a7a7b131-6080-4389-9c05-eccabd672484", "indicator--38ccdaea-638b-49f0-873c-ec1b9f3457f1", "indicator--59288293-72c2-4264-9f54-7a95be82e67b", "indicator--166c5b96-dd54-4b95-97fd-5fb9d9f8d180", "indicator--9cfa8eeb-ad63-4ea1-a7a9-bc86ae11d2d5", "indicator--94c306d5-390e-4473-b7fe-0ac5d03f5112", "indicator--9d152e2d-f426-4452-ba8d-de37bc09978c", "indicator--1051bc49-c326-4393-8b43-3bf6a2b53217", "indicator--4b35967d-245e-4578-94d8-ddb105ee67e7", "indicator--c112178c-98c2-4b65-80bb-a932ef001bf6", "indicator--7324862e-3d89-4429-a6f9-c4424e66ceee", "indicator--ed758f57-5dca-43ae-b567-0487a7e9317f", "indicator--24132524-e3bf-4e62-9841-9a7e9adbff51", "indicator--2f95a009-e8b2-4ad3-b16d-f9194ceaa667", "indicator--318a0e03-51d3-4bdf-a980-becca48bb08e", "indicator--c5d4969b-ca39-4165-8bef-57a0582abaa2", "indicator--7f5d6c4e-54d2-4d1d-ac3c-5d87cde7aa43", "indicator--09b34483-5a72-4226-be1e-434ee0365ce3", "indicator--38d89b99-8c02-4c4a-b9b1-b6d96ecf713a", "indicator--6503446c-7580-4985-817f-fc4d66394f72", "indicator--7ebdde35-a393-446a-9cbd-0ea483481d7d", "indicator--5f0f9041-28e9-46ea-a76a-cdd709386708", "indicator--e639c549-64f0-4dd9-a693-3dea1ee027a3", "indicator--1660acf1-9e78-4c8d-b53d-243f01c2d76a", "indicator--3622d5dc-5bbe-4a3e-9d10-204e05ae4da2", "indicator--2ffb2e63-1de7-42ca-a087-bfd8a7d235eb", "indicator--62876460-c1c3-459f-a275-f42e7a120ade", "indicator--cf5954e0-4495-41c9-8249-90279973a288", "indicator--76f28575-a747-4f4f-b196-0939807518c0", "indicator--9ac74fd9-a7b9-4b94-8c38-4a7d75869909", "indicator--8fa65e4f-d46c-45dc-85b8-6848b5b3a0c5", "indicator--cbd8566a-533e-4c61-aabd-2f81240c8125", "indicator--4f2c5321-735c-47c0-9392-06288703e112", "indicator--5165c9b8-a022-4338-a64a-24a5e0a1a318", "indicator--4d090513-d0f9-4b2d-a6bd-e9cf1ad7ccac", "indicator--b4da4ee8-254e-42cf-b3fb-fbdd4f97fd1a", "indicator--bae7b664-09ee-467b-86bd-76b05c805098", "indicator--3b581c0f-cdf1-4877-a8fd-d53def64717d", "indicator--c7f1b88a-58a7-4887-9eba-eee0d74e3124", "indicator--01b5ccf3-18d6-4602-952e-c12a81ce2175", "indicator--087a0ae0-2e2c-4acf-821b-1354c8d10498", "indicator--cc158dbb-e3fb-4f32-924d-4b614455f9a2", "indicator--f22cf0b5-4aba-4c72-9c92-5a22f52910ca", "indicator--728184f4-6416-4007-ae81-4f99331b7ce0", "indicator--efdd7559-9c74-4031-8884-b86e6b41debf", "indicator--d8f64305-cbb7-48d5-b98d-b3e5efcf37ca", "indicator--1c59fc02-3385-4eb9-87f4-3d0c727e90a0", "indicator--89c263c4-cc62-4fe7-9f1b-9903ae49213d", "indicator--28c456db-e9f4-47b9-bd38-006c65b5979a", "indicator--286419d7-a1a0-4a1d-92f0-8703ddbe3758", "indicator--277047e5-f655-438e-8ce4-deb32ddfe5cf", "indicator--f1723a92-2c74-4799-97d7-771cded740b9", "indicator--7345be71-e701-4e18-8484-9414b095cc4d", "indicator--35332a02-2f1f-47ea-9eab-4f7aa15d8d20", "indicator--05ee7dc1-5421-4a80-b9be-7ff4643150f6", "indicator--8143ea8a-0b60-40ba-bfdf-137b522a00c0", "indicator--04e0ca47-30ad-4cba-b91b-c26054ad7595", "indicator--c947ca30-b6c6-431f-bbfd-95d2609096b3", "indicator--8f42ebb3-4a1a-494b-82af-02cea920f210", "indicator--980f3706-6653-4b97-8dcb-75641a54d171", "indicator--1abfb158-6e36-490a-9d5c-88698cf045f2", "indicator--0e29c89c-bab5-4c16-9664-fcb4320b17c4", "indicator--d02d7fcc-b2ee-401d-9e24-ed130cdb9c24", "indicator--039fc47a-734f-458b-8ce0-3fa4681b654a", "indicator--aaf76351-5584-408e-9b5b-3de5eaadc29f", "indicator--653a1f9f-fbc7-4fc2-b953-fb76d7787b07", "indicator--945aa7ec-a107-49e0-904c-b1a6c5f40345", "indicator--e85a7429-5af2-4cd8-b472-9802c4df8dd1", "indicator--f8889909-ace8-4342-8611-1cbc7e3f4ee9", "indicator--1b5162ac-5f8f-48d5-91f4-6500e014a04a", "indicator--063d6b36-758f-40a5-b670-71e4d1897090", "indicator--4b9ffcce-b3aa-4bdf-b155-653b851fbcf8", "indicator--449807de-67bd-4115-9e9f-9c6465ce3df5", "indicator--aa4e247e-a5a3-4840-a8f2-e28ebd1ba638", "indicator--20cced31-0852-426f-8349-498977f3e2bc", "indicator--14593579-1785-4619-a4ea-62bff7c02446", "indicator--15cb68ea-2b43-4b85-a8b6-f1520925e574", "indicator--2dcf9725-628b-40c4-adba-de418b109f8f", "indicator--b1c6846c-0f75-4257-a1a2-71213acb8d9c", "indicator--e26a5b1d-2b70-4282-af10-bead7a36f681", "indicator--e1f47f19-1f08-49b9-88f8-883b3f1dd2be", "indicator--169ba4f5-2ca6-46cc-af21-8911e1f12218", "indicator--81f24efc-abf2-4663-bfe1-98ddd8102c5a", "indicator--fafa7fb8-c0c9-4b87-9cad-aa56ea8a8fe3", "indicator--eead76e1-5359-4f7a-b9cf-a1b5d29447de", "indicator--c9d1665f-cfc7-437d-9841-55a17e243d6a", "indicator--30266331-7784-4724-8804-4a217a88e8ac", "indicator--7b1706cb-5ec3-4a8d-a869-93507b8f2005", "indicator--53bcaae4-c4f8-4f0b-a393-9f9201159856", "indicator--a8bc704e-cf54-4a6e-9fd1-7cf9ddfc12e2", "indicator--3c861abb-168e-4556-97c4-8682cc53b5e5", "indicator--11e1c27d-d017-4d6b-bcc2-0857d22a2028", "indicator--845058b4-b611-4408-ab40-5340e8c86de3", "indicator--26bbea5b-7718-4509-8b62-26a6f7ae17bf", "indicator--6cea02ab-6632-4ba4-99a3-61dfd0966045", "indicator--112e0f91-14a9-4b11-9cda-2adde6435aed", "indicator--81a65574-e420-4181-8e68-8ac10d07d81b", "indicator--ad7e2ae3-4c43-4cc9-90cc-462ddbcbfb9a", "indicator--a3402425-6fe5-460d-b284-b67c5141f78e", "indicator--816b8710-1bf8-4a25-8953-f506edb5f096", "indicator--038bfd12-12d6-4a29-a473-ec5ad951ea39", "indicator--9862d07c-9c2f-4e55-8858-ec3138d7e61a", "indicator--d47b948c-dd34-4c4a-83d5-bf6e41cbe898", "indicator--4d1c38ab-6c72-43c0-94c3-99b9b80bc7d6", "indicator--2b965baf-d3f5-4fe7-8026-c66301f24d25", "indicator--874160e1-acd7-42b3-89b7-666db8f38385", "indicator--8db5148c-2b5e-476b-bc4b-b17aef56da56", "indicator--d5ce0c1d-43e5-4e9b-a32d-90ec85ff0840", "indicator--fcb94486-1b12-477d-99e7-1fd8a193cf8e", "indicator--5417683a-d559-4aa4-8e6b-811fb5c95b8a", "indicator--0b2f91cc-08f1-4bc7-9956-6c23f6966084", "indicator--8d342a99-86dd-480a-88c8-9e0fe66a489e", "indicator--cff4c47f-5a6a-4428-8ef9-9bdbdeddf252", "indicator--e2b0dd05-9552-4faa-bbfd-4c3f49e0dc38", "indicator--d198a8a3-3d54-4674-8731-24007f2d077d", "indicator--8e051abb-decc-4828-91ab-22d250214f06", "indicator--edcc0bc1-94d5-4fb3-8b0d-1a16986c7c71", "indicator--d6444745-b356-4d6c-be80-c8e83731f37f", "indicator--3f30ec59-58c5-48bc-9f9c-7a69643bd867", "indicator--236270a9-e2d3-4ba2-bfe2-c1049218dfd8", "indicator--a70225f8-363b-4902-a706-900e1b2e338b", "indicator--90038eab-88c7-40af-b165-a5da5ce7cd26", "indicator--807728f7-d48d-4d23-bf1c-a3ab4206245c", "indicator--4a0a0af7-9bee-4bc4-83a3-b81df7f1e256", "indicator--3eee23be-95eb-49f2-8cb4-20b185b97a4b", "indicator--1e317db0-6267-45e0-af18-769a8a9b3489", "indicator--2ee01a0e-2707-4f48-b357-880fc6883c80", "indicator--86b22875-551c-4dde-800d-e7351ede10ae", "indicator--6d5c0385-0d68-4dcd-bba4-0b76acb2afa7", "indicator--0e8ad322-02a8-4689-8e5a-71ff9e7882db", "indicator--29209ea2-2b54-467e-a632-0a187344853a", "indicator--8bdaa487-4466-4ea9-9c7e-a5d491857e03", "indicator--b9acbc65-b19f-468a-b177-361cf64d6d0c", "indicator--f225564c-da45-4008-9fe3-a3a86b9b5217", "indicator--220758ca-6100-479c-a23c-9009bc1f0e22", "indicator--46a27ea2-56f8-47a9-96bf-b873260783a4", "indicator--46f4bd0c-1484-4dbe-9151-73259a869216", "indicator--5b3d2a92-dd73-4f4d-a9f7-2bf94da163be", "indicator--ff2fa0d8-eee9-41f1-9f13-26d744831336", "indicator--0d70dc31-6e51-404f-bfec-85bce88651cb", "indicator--ac25fa62-53eb-4df6-9c9e-d3101a4d183c", "indicator--2aca5827-dd26-40b1-a99c-aa2ef3bb3f7a", "indicator--46092eae-3e83-42df-93bb-e2ca3d049b60", "indicator--b1878ad6-b422-441d-bfd1-07e884114202", "indicator--4a11f5ee-5958-4aca-b8d9-a036b79db10a", "indicator--612e5725-7ddd-441d-a325-e4d28d87c2ad", "indicator--459657b0-356b-4862-9b99-abdcc8b688b7", "indicator--8be77238-5411-49c6-bc98-91c8e0144598", "indicator--12eaaa14-3509-4f75-8be4-464b8e8614af", "indicator--516f2332-e2d9-4822-8f74-3bf2c9a59f5d", "indicator--d2c4ae13-31b9-4689-a69a-31b9f1a7abf8", "indicator--fda221ee-5b76-4176-af7d-d6d852fa5f6b", "indicator--95007a98-28b2-435d-8497-af6a418bc082", "indicator--822c6c6a-abd6-4f94-b9f1-14ba02e93f89", "indicator--ded54d91-28fb-4dae-bb52-cb09ba90183c", "indicator--65e67b56-abd0-44e4-9757-250d3700fb24", "indicator--a959489e-64e9-4f2a-bc18-da98983fc94a", "indicator--316f9d30-0ac1-43c7-9c72-553c53ad84e0", "indicator--87d81505-85ab-48b6-b681-bd0c7798ffe9", "indicator--27422ae6-a785-4a25-b6e4-c70481f1d89b", "indicator--c76f8704-da37-43c8-bb53-45c31c84a2f4", "indicator--3913a496-76e1-4396-8b96-b99650db312b", "indicator--5f22683f-00c0-4669-933e-0e7c917581f9", "indicator--2edb0066-fa11-47f0-8db1-8c46cf054dff", "indicator--fffe87ef-c20d-4d0a-9a57-63e85d65c5dd", "indicator--ee6f5235-297a-472f-a8c0-3cb041f3c93f", "indicator--c6558b92-d537-46c8-8a9e-0b5c539ea367", "indicator--4d0dc4b2-261c-486d-9979-799ea16ddc7c", "indicator--571a595d-0bf3-450a-861c-53d81408bf16", "indicator--e8b4d02b-eba3-4431-a319-8ae6fc81f1ef", "indicator--0fb790e6-6843-4697-b4d5-d78c75bee3d4", "indicator--77795856-2ab0-4fec-9925-269e38be506b", "indicator--dd57a7f1-2907-4ef7-b155-f8fd017a9415", "indicator--6ec19650-a74d-4f49-8db9-a9d10c978cee", "indicator--53e65d60-bb1c-420e-a56b-c26af9f89a6b", "indicator--15314070-b796-40ec-993d-2b090490d618", "indicator--62e3118a-752d-443e-bd69-038bb95c2f9d", "indicator--23856071-8f07-4328-9841-0e132336e035", "indicator--f99b6e54-3c25-4fa8-a9e9-397ba9369f80", "indicator--feb3c9f4-8596-456a-bb44-39fd97b67168", "indicator--2d9abb7c-f0d0-4548-831e-7d0b31fd734f", "indicator--e48622fd-9a28-44d2-a8b4-397a2d631cbd", "indicator--a82e654a-5901-4e61-a157-610a02fbbb80", "indicator--38914d63-b143-4341-a2fc-c60fb5c2ba26", "indicator--822f17c0-577e-4d74-ab3d-50bc47a29846", "indicator--0ae2c62f-cdde-4442-94d4-0ea039e6822c", "indicator--e7cd2db2-61c1-42e0-98be-8f40b6ccc413", "indicator--80a2fcae-310a-45b0-a212-3b99e27ced44", "indicator--ecc67bcc-b684-4d61-a5bd-798675e82c87", "indicator--400b22dd-3e10-4cba-b2b1-32c952913a5c", "indicator--c98afd78-67fa-4ab3-a84c-c0201b174eb7", "indicator--c153b834-231d-4e56-a34a-6d4337d03f86", "indicator--ab647b25-ec26-413e-a92b-1f59eb547243", "indicator--624a9ca8-ec77-4893-9998-4f05fcd75779", "indicator--fe8f7e6f-b9ab-489d-ad19-346aee451f0c", "indicator--f36387e5-f3bb-4414-b094-86cc4d7e3c6a", "indicator--c932678a-57fe-48de-8ecb-26af1e6d1e09", "indicator--45a0687a-9ed9-48ad-8db0-f8ea7c22ca15", "indicator--2ed81815-2164-4b7c-88b4-a1b4415440de", "indicator--a5ab95f2-115c-4886-8a51-d7b0041cd71b", "indicator--19864320-d291-4391-a98b-2e7b590b97f7", "indicator--704bfdf0-b53e-4ee0-aba0-c8cd75736e7a", "indicator--6ecf1253-777a-449a-9db9-bf2b8dc7eca3", "indicator--de40ab10-dc4f-41c2-b437-3529089372fe", "indicator--54542764-4b4d-4f58-9e2a-64feb16ecc04", "indicator--3830fe7a-e1e9-4c1f-a88e-3ba7f4a33988", "indicator--e0333dce-18e8-47dc-973c-8000164d6160", "indicator--e50d1228-0dc7-4f56-9558-88a23c59d6cf", "indicator--4c9c491e-b1a1-49ce-9424-d51231f02886", "indicator--86432d15-5803-4e1f-a884-b08bf6e18d58", "indicator--85cdd6c3-acaf-4552-9c2a-a5f3c92f24af", "indicator--13032b75-15df-49c8-8ceb-ffe681195809", "indicator--e1596704-4116-4fdc-995a-6cf3211c3438", "indicator--35f46d42-4515-4bf8-853c-05b87341d3a6", "indicator--ea821cc5-738f-4a4f-991d-ff3a6bdbaaba", "indicator--95d5b9e7-7788-460c-bc6a-e6108d59063f", "indicator--cdeb4b18-3b57-4410-bda5-68eaa4c6ac10", "indicator--13d830bb-0f24-402c-b987-b6f52ddb96d1", "indicator--63cfcddf-b043-4cf2-be49-5c6442cbabea", "indicator--0a01960f-6947-4b2a-9f8d-d597c846df39", "indicator--0d9632ae-d539-403a-9bf5-758cb64ade12", "indicator--00adbe4a-ca64-4be9-afcf-94002d567824", "indicator--351af504-970d-440f-a686-7ba6c4d40264", "indicator--93ae4b4a-6af4-41fa-a6f4-2f38bb446448", "indicator--07a59024-5d32-4cad-9878-f0e43e7f8d05", "indicator--f6d6c7ca-5b0f-4d19-a214-1bdd3160016d", "indicator--14b72a8b-7d5d-4000-b6d7-04b76b317826", "indicator--9a1f5792-3ba6-4fb2-b446-d5293649ca28", "indicator--c118159a-b4c4-4024-887f-8705a8599d84", "indicator--1c0c1a66-39b2-469a-a545-ee832f84021a", "indicator--b6f2c412-9311-4312-af2d-39abd62ea8c0", "indicator--99b2afc3-f383-45ab-bfe3-142dba99d791", "indicator--b98d1454-1e6c-475e-9a79-1177e8243dbb", "indicator--52f776cb-fa5a-45f2-a3f4-5f09c110d1d3", "indicator--76637859-c51a-4262-9fc0-509942d2dc03", "indicator--0e968a6e-f16c-4a67-8e50-cf17df1d4cd7", "indicator--767654f9-e0fd-4d8a-992a-69f23586b23c", "indicator--2fc4fef7-4a0e-412e-8333-c8c439f00051", "indicator--e2149b04-0866-46ed-8375-adf3233129a7", "indicator--903a8294-241d-41bb-ae8c-4dc2fb7a1fc9", "indicator--eb2a545d-c30c-4027-8e0f-a83bbb17f71a", "indicator--b1b28014-50ed-48a2-b54f-65ed8bfd7b4b", "indicator--075c5386-6f81-409b-ad6b-82c74138502c", "indicator--c81c623c-07a3-449e-bb97-a5c50d5b7318", "indicator--3a65283d-66ea-4696-a959-ef31b83a8ed5", "indicator--9be4c60d-9553-4fb4-83df-e498f6b883bf", "indicator--7d1aff58-6999-4eb3-8c78-40c7fdb987da", "indicator--8f593825-a3cb-4483-a4e4-d3c3871d8446", "indicator--d30d8e6b-8b34-4297-b87b-00b0828e9209", "indicator--af0cf8e4-943b-43a3-a513-2c581106d956", "indicator--2123699b-6747-4cff-8dc6-9d5089239f0a", "indicator--bb8008d5-4336-41a4-a8ab-680d3d9c249e", "indicator--da44e16a-f0f5-40d2-9070-45879d7c497b", "indicator--99090df7-8828-45a0-afdf-b6b2421d3e21", "indicator--c7079b1b-dbd9-444e-8a64-c6fab115462a", "indicator--385788b6-ae65-4048-bba3-2f86d841e61e", "indicator--6d83b379-14af-4d1f-a55f-db45813f1171", "indicator--8994d39a-90b6-4dd6-b26c-6345606215ec", "indicator--51b1f28d-fa90-40b5-a62b-4db68dea7c22", "indicator--aa766a2c-85d6-4591-9d7e-2a82c1c57241", "indicator--303457cd-b620-4b46-826d-17ce84ecdcc2", "indicator--7e98e730-b66b-4f30-935a-c5ee4ad29c26", "indicator--d55bcbaf-f644-436d-b3b3-f9d8349880d6", "indicator--dbee3fe3-b0d7-45e3-be3a-30aca812d9ff", "indicator--d00cf587-d0da-497d-b147-cc3a75234930", "indicator--fdddf504-bfe0-4c61-8e9d-14d55816f5af", "indicator--a46e04cb-8cae-4321-9ff0-9db8a95b4293", "indicator--d102cb6e-7c35-4812-b60d-261e4325ec62", "indicator--79e9f635-7ac7-467b-8f8e-b0836864a8c2", "indicator--c45e2f23-f0ae-411c-8ea6-5275e78db21f", "indicator--2b896b75-5f84-4142-bab4-55a3b58e5d0e", "indicator--dac13020-e282-4599-b3a7-972d28c76fb1", "indicator--fdc495a1-11af-4b5f-b55b-54a7b8f02d2e", "indicator--5b791698-2d2e-4563-a855-bda9f4a8e1dc", "indicator--d81da9e4-0d44-4838-ae26-574f52f592c9", "indicator--92efa23d-b393-45d0-8238-d3a4d24a9ae9", "indicator--43fd8cca-98e0-4a3b-ac18-07b668f27d98", "indicator--c54368df-12a2-4a3b-b72d-6fd8bdd475f2", "indicator--c819c2b9-ba1b-4085-b242-3b8adc2808c0", "indicator--dd21eb2d-1eb1-4187-b849-2d4f3cbedaa9", "indicator--2b8d815c-0da3-4055-acea-8d18f1be8e04", "indicator--d65754ad-0d88-4fa8-bff8-c78fc421c78b", "indicator--b6240a2d-9216-4826-bd58-da04b274d13e", "indicator--d556ca9d-8d7c-4fcc-9435-3891494da04e", "indicator--ad1d9940-53b1-4d9e-baea-7d49470b81cd", "indicator--dab26a10-aaa7-4946-b75a-f7269fed1bc1", "indicator--071e9e43-522b-46e6-9dca-382f7c3148b6", "indicator--b4913d06-970d-402c-8118-ca6a34717ae2", "indicator--5f6dc904-53dc-4127-9c86-daf341057b4f", "indicator--94d55bab-fbaf-4d96-b3db-38edf10104a3", "indicator--27156dca-200d-461e-8b8e-efd4d9709ad3", "indicator--b44dd2ae-5696-4921-87e8-fc55e872d927", "indicator--029a5177-8845-432f-b892-39a88d62f6c5", "indicator--f24a9e1d-96e5-49d7-9dc4-38a74c76940b", "indicator--c6e3ca9b-8074-467e-b87e-b69f608eee40", "indicator--ab6ff58b-308f-40e1-9f77-d623fbc50a58", "indicator--9be6eead-5844-453d-b2d3-380ca3612765", "indicator--dd700efb-7668-49d7-9256-554e500ad5f3", "indicator--0553671e-7c53-4e85-a014-903b9e6e5468", "indicator--9d24e21b-0b59-4e79-ad23-ff0b91d6312c", "indicator--37dfe11b-c1c3-4610-86bf-c71464bd1d21", "indicator--486f3a3b-54c5-4188-9377-078bb5bfe732", "indicator--86bcaad0-2bb8-46dc-b6fb-057c402bc58b", "indicator--638916ee-12d0-4f47-850c-60bf7bef69ac", "indicator--81e3be9b-473c-492f-9ad2-c99b352ca89d", "indicator--984ac009-289e-4840-a62f-0d3b72bd5fa1", "indicator--f913d6e5-e654-4679-b374-3dba0fe6a54a", "indicator--3ac34929-2539-4621-997e-a1f2e63928d2", "indicator--9c5db5a8-abdf-441c-b8a4-16f3b19cdc02", "indicator--599c6168-357b-49c2-9943-92f9d930985c", "indicator--23c081ab-8e3e-4451-92a5-cd1a3447b3a9", "indicator--eddd0580-a218-46e7-a942-0b2abce4206d", "indicator--05daf83d-c527-47d2-89f1-05ecd6922074", "indicator--7b329b4e-a92c-400a-8177-2ca2d88b05f6", "indicator--f4a3fa97-0b76-4b8b-99a0-0de6580b35a9", "indicator--474e62e8-074c-43de-9f35-f9a0b110deea", "indicator--7a45041f-d89a-4d1c-89c2-d96a4e82a726", "indicator--21995e5a-801c-40f4-8fd7-03af8948ece3", "indicator--1056ea2e-4574-4e17-892f-c4ee2b318549", "indicator--8596a2d8-f90c-4ee7-a30a-4e2dda649ec6", "indicator--2490e8e7-3306-4826-a437-deed417b2f26", "indicator--51134bca-3e61-4ed8-a295-e114fa6373a2", "indicator--4f4a28d4-5385-48dd-b614-7cdeb80a8d84", "indicator--b4622add-a23a-4d0c-9c68-024051b49934", "indicator--c020e5a5-22a1-4b97-91d8-50c73918245d", "indicator--ba7e5092-45cf-4207-a47f-9019815b0204", "indicator--5e192f0e-d88e-448a-963d-19aff6d1be81", "indicator--e974aa4b-c298-46ea-99ea-2b0eb8649b56", "indicator--07cbb235-8d30-4cb7-9528-b52be0ba523f", "indicator--3cbd272a-ab72-47d2-a908-e6993aa662ec", "indicator--337a8508-c6ed-4dfb-9d97-6f3a8aa84a2e", "indicator--1bb6566b-972f-424f-9a7a-ec7a1e5a1d96", "indicator--bbc00550-4f6b-4a90-8ae6-173a8d55f05a", "indicator--e4dec201-0402-4c4c-bb4d-c561c94e6ad9", "indicator--840fcc15-6d7e-46a3-b8af-6de780914528", "indicator--8bd685d7-cf98-4ca4-8758-99bba00d3964", "indicator--d3e9744d-f1b5-4372-bfb5-b230c872d127", "indicator--c24902d8-7bb6-4111-bafe-43a3b5196985", "indicator--873b1ef0-5e37-461f-9de9-64559cf1f311", "indicator--93fe25da-122a-4fe0-832f-1aacb881819d", "indicator--c3d2bfbb-f369-49db-92df-7e79f57c6aed", "indicator--1bcb1ec9-ede7-4882-b2e3-477f31c7b361", "indicator--8c953a50-4303-4d96-a465-c646174119b3", "indicator--29ad4779-fb0d-4ebc-a479-eade52a45cc5", "indicator--4fe9c7f0-f4ea-4107-806c-a09f96762e91", "indicator--3c01ebbf-ed6f-4624-a3ff-78de27b0a392", "indicator--7cb2259f-334a-46b9-aabb-da3f7a4a546c", "indicator--8a146e9c-7090-4a63-a4c2-b0d02daf2da7", "indicator--2866f15d-ffc8-40f5-8670-334c99562ce5", "indicator--4428b3db-72ac-4509-8892-10741e541983", "indicator--c5474b8e-b849-4abf-bf63-e35ed3ea483b", "indicator--b1275611-e1d0-4636-ae19-83df8ad05b3c", "indicator--4991d5a9-6727-4e5c-9a9e-ba64123a896f", "indicator--95ec46ad-0d1c-48a0-bd09-7e344831f3b9", "indicator--3c5ad4fd-af0f-4653-9d00-d15643d92988", "indicator--8f8e9b7c-cf99-422e-8b9d-5205e462c9d7", "indicator--405a153c-2977-4797-82ff-1469c8c7bacd", "indicator--7d2a7a2e-b674-4cca-9e8c-ba1c4decc7c0", "indicator--a0e106b2-6668-4a6d-b97d-4587b946da0a", "indicator--db0c1282-d711-4cac-b4b1-dffa1dfdba60", "indicator--cdee9b14-e360-4150-a0b7-82134d80a759", "indicator--885667e0-0495-412c-a13d-30c9fae67d6e", "indicator--88b9ab21-fbbb-474f-a128-e408d33d1002", "indicator--96b14f00-f577-4e4a-bd3c-aaa309b03c1c", "indicator--d775a317-1373-451b-a5b3-66488946a96b", "indicator--48ba5d7a-fc29-4d7d-8112-96106234737f", "indicator--d32856ac-c3a0-4d26-9c5a-a55730722108", "indicator--e810272e-d94e-47d6-a16d-1ec927f0d923", "indicator--89719161-07ff-42c4-9d07-b4684fbf7755", "indicator--b823ee95-7aef-4fc6-b273-c29575bca5f4", "indicator--4e681e9e-785e-4d5e-835f-bccc8c3e0e76", "indicator--ef90c807-cf83-43d7-897f-db927b1b886f", "indicator--aa72a471-6827-4d84-bfa7-4e84ac622fc8", "indicator--a506d748-237b-4dea-8cbe-ea1bdecc1cc2", "indicator--4327d42c-30ac-4aa4-b25b-693428e15d43", "indicator--fe55e8eb-82e6-433d-b64c-50ed01de71e0", "indicator--0281e82b-e328-49f0-8f56-22c37a0c14bd", "indicator--fbf06283-d651-4e7c-a3fd-e1be7527135f", "indicator--ce413fb1-cef3-47c2-ac74-a14ac38ce9eb", "indicator--7662d5cd-7a92-41d2-8403-28010e85bcd8", "indicator--4f8149e8-3e67-4a38-ba49-974bde7ab8cb", "indicator--34da0c85-b0fc-4a09-8074-5c00dc172145", "indicator--c2529813-66ab-4cc3-88df-60f0a5795941", "indicator--49a3d51e-e8a3-4669-8d31-22c8711c0ba8", "indicator--39139b82-f24d-43ed-af73-1e618e84f1e7", "indicator--eb102ac4-b4b3-458d-8a97-7f0f87520436", "indicator--0989c2f4-7ea4-46b5-9364-094e25ddd202", "indicator--df59f1de-c967-4fd0-883e-1e57f3c09f79", "indicator--5e63a1ae-5ad7-4414-b90e-99557bca16c8", "indicator--8953e37f-f2da-468c-a5d6-823e844f4341", "indicator--dd196512-e144-4362-845f-2e0769504ecb", "indicator--ccba6d17-bf61-46bf-ae6f-4d9adcd690ed", "indicator--9e345599-9628-4756-9681-2942832d946e", "indicator--4f88ad2f-774f-40de-9032-5addb093f6f0", "indicator--26f45e34-c398-42dd-b490-82d5f2f015f5", "indicator--adf54874-2893-4bf9-9c01-ddbb2fb45efe", "indicator--7d8344e7-d795-4aba-b754-ff062146a918", "indicator--f2628158-ca03-4580-8a64-9ea987df6d68", "indicator--a3c541d3-bed6-4257-acb9-a9417dcf43ab", "indicator--30023a4a-11ba-45dd-872b-ce10fc55a9cb", "indicator--b4e6422e-546f-4e53-b979-ff3c2c4ee27c", "indicator--b1bcd895-1a60-408b-95a2-0fee94da0075", "indicator--e5c8a3a3-c5dd-4169-b594-c3bfb43f577f", "indicator--91ece616-34a2-444b-877f-400f663f0a0d", "indicator--db12ee15-c1b0-4113-a788-856936196a8f", "indicator--217bd8f1-00c8-4c1f-869a-32fac41e3062", "indicator--cd942271-ff17-4c73-abf5-4ab96fd40066", "indicator--f24651a2-efd3-4d6f-9691-378e25e33c65", "indicator--252a58c9-654f-4df4-abf8-ee8a32d72d86", "indicator--ef573735-6629-4ed2-88da-c5117ecc108c", "indicator--2d2ca180-64a6-4424-a280-4e63e82958bb", "indicator--c2933d0e-1b9a-4f95-9659-e2a546ea98d7", "indicator--66cc52e8-2d7a-46d8-9b51-bcdbd46ff375", "indicator--c9053734-9b36-494d-8f86-6491a128ceb4", "indicator--ec85e9be-7084-4562-8430-82a55f33c07a", "indicator--ffcc9315-ff3a-4885-a526-88b846c9b0fc", "indicator--86faa368-2e7a-4c7b-8dd5-e385799347ca", "indicator--a4ae0c1c-8642-4878-b080-1d373289caaa", "indicator--7827e706-b6b2-4d65-abf4-e373c72d7f99", "indicator--86d8cb0b-d0a9-40e1-950c-d60e216b4780", "indicator--e0d6a5c8-877f-48ea-8e3d-3a620537f99f", "indicator--1615c511-6d51-430c-8607-b920c273b12c", "indicator--904bb92c-d716-4bc2-8a1e-2dc4ca58cee7", "indicator--2467915e-8e75-4232-bbf5-0e8b2205527a", "indicator--7fe7a9d5-5549-44c1-be29-836e0ceed40a", "indicator--76b79c91-9353-4cb1-9fc2-1d5f3792944b", "indicator--3d9c03e8-e932-4def-8cb8-765dc764f2ba", "indicator--f910ba41-1fbb-49fb-a73f-841c9ca8286d", "indicator--851d2115-4cb2-411c-8c87-87bfc2bd766d", "indicator--117d32f7-96b4-447e-af0d-aea01fe6a436", "indicator--15866099-1fdb-4f60-8a99-b56938967d7a", "indicator--fa76caaa-f1e9-4da1-ba37-b435955fbf61", "indicator--ea5fa2ca-e925-4d34-8eb8-6d60be9ea843", "indicator--8e8fafe9-fa18-4fae-b3fc-31373d76bcb2", "indicator--540f441d-ab1d-4ccf-93fd-15e19b7216fb", "indicator--1ea9bff3-62a9-4a99-b023-119156febf24", "indicator--abf18ad6-4a0b-47b3-8e75-7b40fbca0c77", "indicator--75b5c0b0-748a-400b-bdc7-2b44693ab899", "indicator--85bf31b3-8b54-400a-a994-cb2f5e6af977", "indicator--d46d63e2-37f0-4c20-8551-606ce2f99937", "indicator--d91b43b0-58cf-43e7-b4ed-1bd786480f3f", "indicator--afec799d-0245-41e6-b2f0-12f12bd5434d", "indicator--b7501765-ad33-4b37-bdb6-536158baa990", "indicator--642ca60d-32d1-408b-ad96-a25f411a0f68", "indicator--9173f7a9-24ce-4dbc-93f4-951a8dc403a0", "indicator--0dcff5ba-8188-4c5c-848a-ac1921204a92", "indicator--ce9ddea7-a3b8-483c-8886-3c7fe90fd91d", "indicator--bc10c44d-abfe-4bbb-bbd2-a6fac0032bcb", "indicator--88fcc561-a45b-4d82-a74d-156531f4261a", "indicator--c4123e3d-1aeb-43d9-bbec-1b102e27e219", "indicator--1ded6f0a-a169-43d1-ae93-9a469e7a52b7", "indicator--74ba1127-86af-41fe-9147-ed1ae1e601d2", "indicator--b914dcbd-e800-4ea4-a6bf-d43a20fc5465", "indicator--dca072e5-8bb4-4a77-b494-45257fd73f98", "indicator--435052c4-011d-4554-82a2-d885e9b29940", "indicator--19104cd9-4bda-4a91-b75f-f7e0edc6bdcb", "indicator--211eeea4-39cc-4723-ade2-a20bd0f74353", "indicator--2cc5fcdd-68c0-4532-ad87-f990d2f15031", "indicator--fd188289-c1fb-46f3-855b-c635ad03c01f", "indicator--3daf34c0-72e7-4e60-a57a-a18ae13bc0f4", "indicator--062bd582-7234-466f-90de-47c8a6fa4e27", "indicator--75f82885-acbc-43f9-87a4-e97eb5be12a9", "indicator--8375135e-30f2-4224-bc61-6f9a2b0b1e52", "indicator--dc1b3a73-be1a-471c-bbd1-cb1c9f77d0f2", "indicator--ba892993-6698-440e-91c8-9859029be890", "indicator--b71a7ec4-c25d-42fa-ba05-ba0e3cc5fd08", "indicator--f999688a-9e44-4bf5-9ebf-e0a6655e1958", "indicator--afd79e65-ff89-44ea-8a07-3f26bb11f999", "indicator--7325e78c-fa09-41e6-9967-6882129a0f13", "indicator--1c7bd3af-4ac2-4e83-8363-49fb15fdaa1a", "indicator--f46e5ade-4980-4551-a90a-b51cd3c48a4b", "indicator--d0ad375a-97aa-4160-8951-cca64644c900", "indicator--c2d8317c-de02-4db1-afad-eaba0339b7b0", "indicator--89aef501-95f8-45de-8f79-34f7fc583443", "indicator--b1b420d8-3f26-44e6-95e8-446afe646e60", "indicator--ec5d24b7-5bf3-4b06-8057-5d900530f4fd", "indicator--6fea7b60-0954-4dcd-b56b-fd1c7e15ccd0", "indicator--eb8ba7bf-15e9-4432-a990-a5e8662b3412", "indicator--e085d4ea-3eac-420d-a0b1-9bc72a17a8ae", "indicator--2baebd58-9492-4f68-b0e9-9485156e894f", "indicator--0cb9efcd-3647-4fec-9ddb-a5c3b92bbdea", "indicator--1611c227-35b3-4e94-8d07-d39e0f03b7d5", "indicator--2a085223-b3e7-41d1-8878-5958dd6edf32", "indicator--c484da66-1fdd-4f82-a9e3-211ee0763a9d", "indicator--2f9c3f15-7d94-4c54-b5ad-22ebd7ed86b9", "indicator--e37c1949-3992-4260-a82d-365aa7e070b9", "indicator--d1fa46dc-1323-45f2-8025-6947be52b7e0", "indicator--3fb9ba99-05d7-4a50-a4ef-e252b233acee", "indicator--791fc5d2-f507-41c7-a997-1bcc8fa43184", "indicator--388e2ff3-08a9-4853-9e92-9a1ac5c72e82", "indicator--67b8b747-31cd-4b7e-a932-cadf01015fc8", "indicator--c54c4f51-2752-4514-9799-24d19b01a117", "indicator--81e46d9b-ee82-4372-adb8-1e6e6cd9a6a6", "indicator--85d94fd3-0ec1-43d5-94c1-6bac4e796920", "indicator--e10ea5f3-edcb-43a0-9a91-27ee69ab1b22", "indicator--aba6ce5b-077b-4026-9b08-3f980cec5e59", "indicator--3bcbcd45-298f-4e67-b3eb-03c88c667525", "indicator--e8fccc3f-7587-422c-b2fb-a60d18a13b9b", "indicator--f7831394-8a36-4500-b513-7667479db8d8", "indicator--44805b4d-885a-45da-a8a7-cb708e9b649b", "indicator--867225c8-9485-4ffc-b5bf-703403b1eb1e", "indicator--899c4689-e697-404a-a031-f0fb553fb20d", "indicator--38cef1fa-f798-4269-b62a-dffc3ef1cd81", "indicator--b70448b4-08c0-41a4-800e-80080372c9e0", "indicator--cb2798f8-da39-4599-a2de-ad5a41a2fb0c", "indicator--b8525829-7d38-4ea7-989f-aab4d0b0dd78", "indicator--9b748a33-0b4c-4420-adeb-64cb1088dfa4", "indicator--5b5de9ff-f3f5-4a8d-b959-e4fc459dadf6", "indicator--096b4750-e566-4255-a9bd-195b4cd9ad07", "indicator--c7187019-bcfa-41bc-9395-1dad853684ff", "indicator--8d4e8304-e164-4bcf-9491-b5c195f1cfc5", "indicator--d0d244f1-f3ca-463b-8470-cba0f13618ab", "indicator--130629e9-4f2e-458b-b289-13eed274bdce", "indicator--dbfb4d1c-0d3c-447c-ae7a-d79f6a867e63", "indicator--b26a9422-9677-472b-8cf5-15e540a8456a", "indicator--c50a28f7-b73f-4831-9ca5-9861a78b6e9f", "indicator--46fc1d80-ec2c-427d-85c7-2c85dbf9906f", "indicator--10422f82-8fbd-4e74-8ad5-9dd0fdf2e9bc", "indicator--22d2f3b9-837d-47b3-9262-b4bbac9716d3", "indicator--5b0194d2-6d73-426a-9a3c-c2f7179221db", "indicator--a297b43d-55c3-480c-b987-39588a25b2cf", "indicator--ccf600c4-31f6-4765-ba8b-1364d6da56b4", "indicator--9d4db107-d5df-4720-a7bf-128ce6d566eb", "indicator--6d5ec004-46c6-4ba9-89d3-fa4bfd4206a5", "indicator--3f523747-f7f0-47e7-9261-0f363eb4e540", "indicator--ce416792-896a-4b06-82c5-6a4edf6fb5f8", "indicator--b3ad3c42-58a4-443b-b18b-dd7e9c0f1b14", "indicator--1d84f7a7-802a-467d-9e74-08b66c77f06e", "indicator--80bd7fe2-ea51-419f-af50-e8929bd6a3ff", "indicator--026e9a9b-ed8e-4650-81ca-e1480022cc14", "indicator--f78839e4-f55f-426b-a17c-3bd558caea56", "indicator--9224759c-6bce-461b-862f-d9474723026f", "indicator--939cc6ee-2e40-4861-906a-71486922c114", "indicator--238fa041-5fa7-44b8-adbb-e4acd761967d", "indicator--f35ce4a1-dbe2-465d-961d-c0dbd78df850", "indicator--9a849803-7f3c-4c84-9024-af4a1db81c0e", "indicator--9bff288c-58e3-41dc-b45d-a386dfb5c598", "indicator--3d208b1c-f474-49a7-9ae8-b1179de3b4b5", "indicator--a4d98392-957d-4af1-977f-d609364ebb6f", "indicator--7fb5f73b-a77a-4eb9-a396-22643adaaaa2", "indicator--e193f684-e471-4246-9cc2-03c211550df0", "indicator--a4721477-4e7f-4d29-8f9e-6a8f00713b70", "indicator--e32f562b-af72-42c5-ac14-98d2a9209b89", "indicator--cea98e45-c04f-452f-9453-e800d9426de3", "indicator--44e2c1b7-ab6b-4311-b052-d2ddb9da2517", "indicator--405e8da9-89cf-4f47-abe4-b5aa092512fe", "indicator--5f7b5487-79c7-49ad-b894-eb32252bbb57", "indicator--3732c3e0-597f-4c4a-9bec-9085c7ced6d6", "indicator--076d9cf5-0ce8-4829-a90e-0d2c437a4ee7", "indicator--e6bbe980-beae-47a5-a915-6415f212b7ca", "indicator--8cb6c5ff-ad28-41c0-994b-aeeccf1179a1", "indicator--568c6e19-e3d4-46f7-8ba6-0c5474947faf", "indicator--51fe1e40-d15a-45a5-ae09-70553511bf27", "indicator--262233ef-d1d3-4f48-9c77-52c77441a416", "indicator--4b9e0071-27ea-4081-b8b4-9d61d6ba90b5", "indicator--128d7193-d5ab-49f3-b386-1c7a822c10a6", "indicator--ae1816cf-5432-4cf8-ab0a-f0122cb9000d", "indicator--1d76d827-8c0a-4e64-9821-f56c962ad05e", "indicator--170b8df4-e0a9-4921-a45f-9658126e3ed6", "indicator--0d73222b-d85d-4f0c-84ac-a886f207356d", "indicator--4d8fe769-e3b4-4457-bc63-f371f6f3d222", "indicator--12991cb1-187a-4a02-b71e-1aa6245e5eb7", "indicator--96b16763-968b-4865-8285-5ab9fa467dc3", "indicator--b3b4f813-ee9c-4b83-9b53-15f1207917fc", "indicator--ce294fb6-1959-48af-a793-523df79e2d6a", "indicator--97e8f881-7fea-43af-9b2e-ea27129efcff", "indicator--0064c91d-baa9-4e10-9e09-5e3cd63ee140", "indicator--9bd4a980-ddf5-4e27-98b6-9325cf022b71", "indicator--4315e13e-4ae1-4b02-9ab6-ce8bdd1a7370", "indicator--a4d6ff8a-bbca-4c67-b19e-4dd0db4fe377", "indicator--398ed752-6f40-4526-a8c5-0681c116338f", "indicator--8094bfef-f792-4e13-b514-c6b98e89fbfe", "indicator--59f46d1c-52f0-4467-80f0-a5be5dba3277", "indicator--b08f5a24-d34d-478e-a7f5-61cb7aa176fb", "indicator--1d27b91a-7a17-49ac-9112-fbe030f1fcf5", "indicator--a1fe071e-2d6c-4555-bd44-d281b9958da8", "indicator--db2ee661-a482-433f-94b1-e7547f78df79", "indicator--4ac709c3-77ca-4cf3-889e-405c9e0ddaeb", "indicator--1149a407-b140-4b60-8ed7-3eef3aff9c59", "indicator--46b24a0f-3234-44c8-bbef-c61c2a9af14b", "indicator--0572fc37-6775-4626-86aa-1e446dd1d3b4", "indicator--548fef9d-2557-47ec-a978-170b5c9450c4", "indicator--cfa8a465-d094-4738-a815-44615cd82b9b", "indicator--e2d6e1ee-dc6e-48e9-9df0-dbda74afd843", "indicator--31f52d57-daf7-493c-9b79-0432c1aa72d3", "indicator--e9d8c3da-4f35-41ca-a1df-91396f1532bd", "indicator--bf0b026f-b887-4cf8-abaf-1ebb2a936f6e", "indicator--d33e41c8-1572-449c-9436-ade82eea1c83", "indicator--4d4c2a47-e1bf-48b7-a449-79846f33d6d7", "indicator--1756ef16-c58d-43d3-b941-bc7004341145", "indicator--b809d930-4832-4ea2-a9ef-e93d35394759", "indicator--cac3837e-34ac-4bac-8c1d-246eb9427e15", "indicator--50bdb22c-e931-4bd5-b1eb-61419a99bc8b", "indicator--18e655a3-bcf6-4b81-b09c-db588c98eedb", "indicator--5e1fe1e1-d5aa-4e43-b49b-bc300e99624b", "indicator--7ee776e4-2495-49a1-b5b8-5f1b5c209a57", "indicator--612a30fc-7067-4112-a32d-337ba302ecf5", "indicator--8640abd7-35e6-4433-934a-12d34d10c720", "indicator--01de5c3b-90a5-4cf0-bff7-2d4b70d16c9d", "indicator--3fae5a40-6b51-41c3-a8fe-0925bc2280d7", "indicator--5143e34b-e5ae-4343-a459-d8828a218c0d", "indicator--3523083e-f92a-4154-9e1b-9d13c93dcc52", "indicator--6fd8646f-d4c1-4d46-988a-f2aef5a3b5c2", "indicator--bd66dc2b-8b46-4844-ac46-7b2012e4b4f5", "indicator--31ce3d16-75e6-4de2-b49d-0b52022fecc9", "indicator--16d7315b-7c55-46a6-b80f-2222639be36d", "indicator--7879bce1-ac50-414a-88f1-337d15e97984", "indicator--056a07a5-e4fc-4b82-bded-00b4df9cd352", "indicator--ce2c06c4-8fbe-45ed-9a24-b6f2e51f73d2", "indicator--0e40d1cf-06c8-4b04-9172-a63feb099579", "indicator--a66840c2-d3be-4e57-999e-2963b05f3fc5", "indicator--8cce3acd-991a-43c5-8f5e-e3ecfba3db4c", "indicator--311293a0-157a-413d-b387-08ec4d42f5fc", "indicator--5e7ebb26-17e4-464f-a233-7d61bb4d6f27", "indicator--a3ae37a5-eb3d-4dc2-89e6-1965c62c93b7", "indicator--d6b7cf62-655c-4a5d-b8d1-477be0fba5f0", "indicator--cc496564-6901-4150-8212-4d81c735460e", "indicator--26e9dca2-dcc8-47b2-a725-e20f9edb295a", "indicator--74ccc614-22a5-4690-a0a2-b30f8cd187a9", "indicator--a8d3c1a0-c349-4dd5-a05f-52628db2ef43", "indicator--ffe710e6-cf75-4cac-a52e-7d34c63f5323", "indicator--dfe783fa-e721-4f6e-9001-0b34e1a365b7", "indicator--84c2c8ea-e02e-46e6-858b-7a7d04d2159b", "indicator--6b9a6475-f686-4527-af1f-6bb30a11e71c", "indicator--906c69bd-8ca3-4f52-a6d6-748321dee645", "indicator--31083e95-8ca4-4937-b642-c16632426d8f", "indicator--377affd5-66eb-443f-bd5b-25c00060c6aa", "indicator--61cb3e6b-0ec9-4e51-8aa9-3074a2d07804", "indicator--f7704a6c-e7d5-4e58-a604-aea7a5743748", "indicator--eb556064-5dae-4432-9dd3-58c14b70cd74", "indicator--4c157729-69d0-4a90-a481-a92a6cf47cba", "indicator--a5b9ac3a-4458-41f8-add0-315a58e23a23", "indicator--7a00e94b-d3c8-4917-8e0e-0a2b200ad658", "indicator--4e725052-bc23-4f0a-bf56-4c9775a22841", "indicator--ac0f3a5f-a943-4372-bdd4-0ce8dbc42045", "indicator--3ae867f0-ce41-4b6b-9742-a6fefd640ad2", "indicator--2ad5e393-5d9d-4ba6-ada9-daf357bbdc79", "indicator--a4a983a3-52f4-4a83-95d6-30426affa2e3", "indicator--ba12a5a6-2cbc-44d1-a7b9-8c77ba2ff799", "indicator--fb15b9e8-4a7a-46ae-80b9-cf860201ad4c", "indicator--4d96a509-c7f9-4104-b3b8-f4dd6b748e32", "indicator--293b7e1a-62d5-4dad-93e3-16771ead3138", "indicator--b0580162-2cb5-4316-91ff-018fa7c4dd1a", "indicator--9443c23d-6cec-4fd5-a9ad-aa50ce3b1590", "indicator--50df19eb-0b2b-4dda-8eeb-ffbe0d92063f", "indicator--456f4488-77a6-45ff-8e9b-ff1c6f3067e3", "indicator--00a0d802-7945-4577-ae09-8df67be1d5d2", "indicator--3ed7c534-053c-4cd7-a03b-dc3e78582a13", "indicator--fe250509-3c2f-45c5-bd29-347d80ae2bbb", "indicator--43b35112-8e57-4759-a2d1-5738fd33169d", "indicator--535beacf-7d90-4d18-8c05-ce827cdefda1", "indicator--83d2e440-0b3a-4cf7-bee7-dad2905f7ebb", "indicator--e12b2ffb-fc45-4498-a60d-681aa9070b7d", "indicator--2e377b2b-2327-4eeb-b847-75973f220d70", "indicator--d1ae7b71-3064-45bd-843b-9a97b236faf7", "indicator--8b764546-04d6-49d7-bf4b-ca6fe1765510", "indicator--249700be-3880-46b7-8af6-20300dbd47d5", "indicator--5366ae05-5981-42a7-896f-8154913f7f1b", "indicator--17f9edd9-bce6-40e0-8e5f-0736bcb58ac1", "indicator--d6acbedc-03b5-4e45-95d7-74563fd3bc20", "indicator--98cfa3d3-8771-40be-9469-5ab4149e5c3b", "indicator--d90b31a8-3c91-4c68-97e9-01f36c3007fa", "indicator--5f3ec5c1-1a20-4b36-b8b5-7f467c5fdbd8", "indicator--e8d25a9e-83be-410a-b961-3512ed638491", "indicator--0e0ef655-6ed3-4c39-9be5-3e416c9ff456", "indicator--417b0ba7-7e13-4a3b-8aa3-076be7740faf", "indicator--aac7b157-b744-41cd-9f3b-9f7fb9b07a54", "indicator--2804f056-8eef-4f84-830e-56c3bf54a20f", "indicator--4716a360-43a2-4a85-a54c-8b776d3f8039", "indicator--a63cda7f-dde7-4bb7-b37b-f57b4621c203", "indicator--248f0475-bf94-495d-82fb-e74e45f96158", "indicator--5d522434-faed-438b-bc2d-16df464377d5", "indicator--3f416686-bdbe-400b-bc00-ee7496f76bff", "indicator--dd59b2cb-5d49-44ad-9206-632d4759ce00", "indicator--460350cf-b955-4a82-9a26-bbbb648d88d9", "indicator--52d2fc4b-e239-41ef-a910-083fb676e22b", "indicator--0a02655a-74ac-4907-989e-2c551751e301", "indicator--5d31eaa3-1da8-4389-8ef1-4dce4a02dd22", "indicator--0c7d25b9-0f53-4d60-b9fa-bd46719d2d9e", "indicator--59f0fc6e-3284-4bf7-a90f-fa97b21bebe9", "indicator--3a45cf4f-08e1-4fb8-813e-7687f66e52dc", "indicator--e58af11d-7df9-4639-a138-24e9579af0ab", "indicator--db753ad6-fbf9-43f7-88cd-f1579ae35544", "indicator--9e21a7e7-a05d-48da-85c1-a2d0d7aef9ed", "indicator--84fd1198-c9d5-4cef-b39a-fe871760220b", "indicator--2f689737-c19d-413a-9cd8-b9bd85ebbcdb", "indicator--81fd4489-2216-4a24-b5eb-dbf57135f120", "indicator--22692cbd-a539-4da5-8daf-7b4aa3d2f11b", "indicator--871d33ea-1223-4f59-b2ca-b8c023fea0a2", "indicator--d24748b6-914a-43cb-a331-1e5869b83cf6", "indicator--bcfcd3af-c930-4f51-9890-55a6c8ba2ce1", "indicator--1adce6e3-94b3-489f-89cf-4cf6c1092717", "indicator--3f17b492-927b-4fab-adaf-7f7a6ec17170", "indicator--c812c7ea-bc21-441d-9a27-2a2a0b841f3b", "indicator--3e41b797-1834-491e-b047-3154d7ede3bb", "indicator--c4b1e08b-0099-4e7c-9da3-cea801c25744", "indicator--ccc37427-a147-4e09-b389-d964a2b71bae", "indicator--35f31d7e-4425-4714-bfcc-2d9bf08f5314", "indicator--32cf25b1-afd2-4c49-ab62-f50f355ad92b", "indicator--a50a7f2c-4a90-4997-8b11-64d6f4bb4b7b", "indicator--ab74f7c2-ab06-49e5-a49f-d7a2e3db0805", "indicator--82cf7ca8-85c9-4e88-99af-be24dbfdffe5", "indicator--d2ba71eb-bcae-49db-9efb-118221beb843", "indicator--3adefcac-c1ad-47ce-9271-2466a48a2908", "indicator--d666f942-3114-4a3f-9556-58b654f69a3b", "indicator--281df473-266b-4f6b-828c-72362e3f18cd", "indicator--d9c5654b-093c-4cfe-943b-f1d4d6a3d6c5", "indicator--39fe68cc-6579-4945-9523-c038e3c46823", "indicator--2314d93c-80e2-4381-a186-1d25b3706f87", "indicator--115d67c9-9b1a-4a95-8bc5-563c13afa2b5", "indicator--3f16ed5c-df93-4e5b-a5e5-8715d16bc0f3", "indicator--681d3e92-105b-4ce9-8eb1-45ca73e9e6dd", "indicator--dd63371b-83d6-4401-bdce-946b873761f7", "indicator--a4e6e0b5-f1ee-4405-816b-2622cb69d087", "indicator--e9fdd431-fd30-4cfe-921a-e1e7f3eb7e9e", "indicator--413d4ccc-8960-4777-9085-4a478f60b6ae", "indicator--5c8ab7a4-85b4-4de3-b307-04ed928111bc", "indicator--d009f27c-e7de-4e4b-a788-dbf3d2197cf0", "indicator--979e9383-d589-4859-b919-24a56190583f", "indicator--1889d55c-42b7-4272-9766-3d62ccc024af", "indicator--cfed5476-e213-44c6-bcf9-0adc15e29b17", "indicator--0be4f2ce-d674-4b63-a420-74dc2f0b2e0c", "indicator--292f4db7-aa35-4727-810a-a7c7d37e9bbc", "indicator--06af8fd4-a1af-4ec0-b9bc-0110622bf726", "indicator--bfb31bec-dc23-40fc-83be-f9ddc21ae348", "indicator--dc624f81-172f-48a4-988e-d7631df8d3ff", "indicator--66756c03-2cef-4063-bad3-f45d9b0fa104", "indicator--81d20f2e-e4a2-4d05-91fc-f79097c2b572", "indicator--1a80039e-e956-4633-b059-70bd2474a8f3", "indicator--883da02b-bb21-46f9-b556-078183d0d487", "indicator--0e81b760-1b9e-4f3d-b7c3-21a3bbf2c9fe", "indicator--14c785d8-e29b-4a8b-8a9d-2362b0175a5e", "indicator--c4f99276-3bb1-4875-a41d-4f0ed56bc8b2", "indicator--15930d89-0e03-4cbd-ae32-a19feee6ea80", "indicator--4b054d82-1b4a-47c3-b607-23b6cd98da74", "indicator--cbc30c14-c251-41a7-8eed-9a673e82f411", "indicator--469e0b98-f9d2-4175-b077-65b9cfe2489c", "indicator--cf3abd3d-ca65-4e30-b492-07c3edb39999", "indicator--42493f6f-27a1-4066-b46b-5367b8df7d9e", "indicator--31527df8-42bc-420a-aa08-b37f0eab8aa5", "indicator--385b88bb-0db2-4c35-b8d4-d7bbc6f3a3be", "indicator--e54784bc-d708-45e8-9097-24ee8fd1fa32", "indicator--9a050c01-3b9e-4a23-8f30-bd07e7ea0c3b", "indicator--1d40fe85-b862-424d-bd53-03f2e32a6fa3", "indicator--50ca8fe2-6a6e-4695-997a-8118d5800fe4", "indicator--58be5b20-75fa-4e4a-8315-8f3ddaf43d9a", "indicator--77d98d4d-df9c-48d8-b0df-25813eaa84ad", "indicator--fa4d449d-ebf5-476c-8ca7-042e7f1cd2bc", "indicator--29bc28b9-acf7-4c24-b8c4-4f9533f2e42f", "indicator--3e227463-6b32-48ca-aaf3-ed8bd434432e", "indicator--d776d3c0-af4b-4be7-9894-d7fbc2b35844", "indicator--e82436ae-9b2d-451f-b954-fc13b70cd190", "indicator--a1d4e427-aa42-4bda-be79-dcb815ab2d24", "indicator--3d991f88-6da3-490a-b729-952bdf568d8c", "indicator--83a46d77-e724-46b6-8932-6ab8c08d5973", "indicator--12e25878-db31-4d41-b011-528a57745991", "indicator--8ae6d620-4702-47df-960e-15f050299126", "indicator--c402ccfe-1ffb-4fe8-8295-836b598db533", "indicator--d5fa152f-aee6-4156-bd39-705f5dbbe422", "indicator--a8e70b65-2ea8-4134-b010-cf4cf8ca95bf", "indicator--2c655a86-c23e-43eb-b724-cccbc8c5a144", "indicator--3f5e827c-f2c6-45ca-9884-ed48cc5ad8f0", "indicator--96dba17d-9b96-49a2-8563-f4d468caf7a5", "indicator--32693f73-77f6-468c-b2a4-12bc0091c185", "indicator--31d6f00c-48ac-42ad-a0e1-df9eab926efa", "indicator--57d0c4c4-e18a-49c9-9981-08b3471d835a", "indicator--d1c9291e-eb64-44a9-82cc-950673f87605", "indicator--691aa8b8-3c5e-46bb-9b42-b8764aea6d38", "indicator--a6da057d-2df3-4b7a-a1ed-c7ceaea3317d", "indicator--47e65ef7-aee4-4aa0-8823-6653264bb9fa", "indicator--d0bf97bb-947e-4f6c-8697-d5751e97d8c9", "indicator--9b64d3cc-588d-49d1-b5a7-fc8609f81149", "indicator--a846e6ad-952e-446f-9c4e-ed7326d423ae", "indicator--770ab51d-b9ab-4906-a681-83cf832e9f98", "indicator--9d7319d9-97ca-4e9b-9477-1fc95db5b6d1", "indicator--d1249090-3302-49cd-b69d-bb3873c26aad", "indicator--b1fb20b9-7c01-4ceb-918c-825e9254f8ba", "indicator--0a9f4843-ee4f-44ef-a19b-7dfc48a158f5", "indicator--aaafd50b-c80a-4651-93b8-1b3cd414ffdc", "indicator--fe591a78-0568-4ea5-818f-19e6bb8fc1ef", "indicator--140db8c1-f7ff-423a-a338-3db69036bb98", "indicator--5bb86e7b-32a0-4635-b66f-15b7fbf429bd", "indicator--715503ff-a174-4800-b52b-75b80fea985f", "indicator--f0f2fe8e-60f5-4abe-9a93-6c57d944d419", "indicator--402e29c1-63fc-4240-b3d6-2ae460aa30fd", "indicator--a6514b5d-d32a-43c6-a819-4766159637ed", "indicator--bb7f8a57-9423-4ee1-9ef3-3622ea1d7130", "indicator--9e523ca3-6038-48e3-add0-87a0be61a1c9", "indicator--cd36e043-48e6-4a2c-a9e7-baec1e97a9b6", "indicator--cf3d9d31-e29d-4d19-9b70-ad8eb3fff20c", "indicator--e1322891-68c6-4640-b467-b0bcab333d80", "indicator--993e5ccd-9ad5-41b8-a2f6-8ad409153754", "indicator--1bd6c717-129c-4aad-94c3-fd5bd386b745", "indicator--061e25a7-577b-4312-a0c9-70a34592bec2", "indicator--367700d7-b6a0-4bc8-b767-464b633f5d3b", "indicator--1540abfd-4eb8-44bd-ab9c-2d4d62b12ec3", "indicator--3f4ca208-73b8-442a-9181-141b60a18b80", "indicator--32065f8b-bde4-40a7-8625-01f6e3d226fa", "indicator--cf6355f2-26ee-4599-9525-1c6577739631", "indicator--ac96a2a3-b345-4302-b42d-77014bb2f467", "indicator--7a1396c3-a044-4e97-851f-4af3b2cd394e", "indicator--e7cc8c54-2268-4fb3-9cb3-28769444cd65", "indicator--657b307c-c9e9-418d-85a3-15a6ccd573c0", "indicator--a181481e-318c-4cac-954e-5ca0d7b0e411", "indicator--89c40719-f291-4a6e-a87b-58ab10108c06", "indicator--1d41784a-9797-4ab4-aefe-d919c6e47f5d", "indicator--edc4180e-8232-4fdd-a67d-ddfdb4d76bdf", "indicator--779af169-b971-46c2-97e2-64a660aff78d", "indicator--daf4c8d4-9e60-403f-9a15-9c55ed8cd5ec", "indicator--9ec3f677-638a-4750-ac5a-438b01f2e061", "indicator--5cec718b-f194-41a2-b971-cc2488767780", "indicator--efd4d00b-b105-46ac-b74b-272a68873e2b", "indicator--d2d53b10-cf1e-41ec-8e24-1dcfb9c3896d", "indicator--5844183c-4a9d-4eda-987e-bf0dc6a81486", "indicator--b55cef45-6575-4b00-acdc-bcb2eeb3cf6e", "indicator--9582ad65-7908-4272-9766-d82eca106212", "indicator--293543eb-80ea-4d33-80eb-3a7b8387fb02", "indicator--6b9e249f-9d6c-407b-86f6-791d7c08f8ac", "indicator--d04efec9-560a-471c-992e-7c2082666788", "indicator--06efcc3c-1cc9-4f14-be09-e481e52fcaa7", "indicator--eee01277-c66b-4f50-8509-9f19d015fa68", "indicator--bfe737b4-f1be-47f3-aa6a-4b3ccc7195ea", "indicator--99952bfc-b0f4-481b-a3bd-84301116b0fb", "indicator--ef1cfe95-d7c7-432b-8101-a9962ad87227", "indicator--907fdae5-7b8d-48da-9693-2fce32c51c2e", "indicator--b3d8b291-80a8-4f9b-9edd-334d9fd6ed10", "indicator--e50473a6-3139-439b-86c7-fc11fc923f11", "indicator--807fcfe4-2a28-4f0b-83f1-467f29d23c3e", "indicator--9af2f5e6-66ff-4fab-9b10-810b2e8861a9", "indicator--72881a33-bad7-4cc6-93ae-e73b86f338c5", "indicator--6dfd4426-39be-4b88-b9d8-bd74383cffa8", "indicator--c8b8d322-2fa1-4f95-975e-928ac8acde7b", "indicator--c7c3310b-8f47-4e61-b087-a907544d94df", "indicator--f63b7fe9-a6d1-4fb6-b2fb-f2b3dd2f6f11", "indicator--f58dfcfb-84bd-4f66-85f8-8b7b466c59d5", "indicator--c9ad80f7-d376-414a-9e29-6a2649f67aad", "indicator--377ffdc6-a096-4c74-a5d9-967b4774b10d", "indicator--687e694f-b2ad-4ac8-8f39-4174c190ce7b", "indicator--6fdabb06-cc58-40dc-bd62-f7bc490b4ffd", "indicator--8a4247f1-1657-4da3-86ee-45e85ce19b85", "indicator--250efa1b-ea76-4d39-ae37-779229288178", "indicator--516da50e-8272-4ce9-887c-5d5461478ed1", "indicator--38a4d6ff-638e-4aee-8739-88c0e53446d2", "indicator--22d97061-ab0c-4757-834e-c0e960f1243b", "indicator--182eb5ea-4be1-4b47-ab42-4d6ab31e2320", "indicator--6499138a-e920-4131-bff0-9ea19d66cf18", "indicator--243d6e64-b330-4eb9-8d81-a43e456550fe", "indicator--fb74b2b2-7d2b-4d64-8b4b-fc1830e010df", "indicator--53a4082d-aef4-4166-868e-a241d8923d37", "indicator--fa5bafd0-f6b8-460a-bb84-0d4d73aa7e53", "indicator--e24c8582-ce90-4dfd-b585-453124c9aadf", "indicator--abb4f618-e781-46b4-a7d0-69d0a8c535b9", "indicator--24853dc8-9067-45a2-955c-f8bc2db5e2df", "indicator--4026edee-3c54-4ad2-8da7-4814956c2783", "indicator--6bb4c1b1-e3b3-44af-aa23-32c520cfe47b", "indicator--b8479bc7-2378-42fb-90ce-a7ad069c1cbf", "indicator--2d380bd4-7b7f-4722-9fe0-0ffc0224ff25", "indicator--d3331a48-1e44-40f5-904b-b080a94ffb04", "indicator--3b15de77-75a8-4dd2-aebe-1558a343538f", "indicator--bdb0ea97-d8dd-45b6-a5c6-370d0aecaaac", "indicator--903bdacf-0aa5-4c3d-8dcb-cc1f6a61732e", "indicator--118878ec-f4d1-4e2f-a17e-78ffa0988112", "indicator--7d480657-a682-4fa7-95c4-99e3fdc6c213", "indicator--0b8fe518-41c7-4c0c-9428-c9b35fed0aa1", "indicator--258b66ba-4a74-408c-9bef-654c7a13850d", "indicator--f49661aa-d59a-43f6-84db-b3136afa54ab", "indicator--ab27d1f9-6d86-41dd-88af-c0e574ea4d47", "indicator--fa13d925-a2fc-4ce5-a281-9e8f164e8dec", "indicator--cf529719-9811-4661-a697-5eb07e312fe5", "indicator--32f91643-bb02-46cb-885b-8c9a29fc5f15", "indicator--9e3a8869-a637-4ddd-acad-e5cbc9a5bf71", "indicator--025d6a10-4944-4f80-b7a2-ced533455925", "indicator--c1eb7fe3-b55b-4c28-9154-7193a0701c5a", "indicator--9a78b8ac-a885-4aaa-b873-e6acb1ddc8d4", "indicator--11b4d878-1865-480c-b54f-3b4e14be9751", "indicator--b317b809-e2e9-4aaa-bf71-4fb2f3d14d7f", "indicator--ab51977d-a008-4a8c-8da6-230ca78781df", "indicator--3bf01d60-bfc2-43d7-9832-dc62ab94ddee", "indicator--add80ca6-a4be-418a-8797-fa306a3df806", "indicator--2a464ea8-ee31-4cc5-8a2b-12eb90c46bdf", "indicator--58e8e2a0-ae79-41ce-9161-1c940f3bb207", "indicator--2afe72b5-5264-4a64-8540-108836f6bd28", "indicator--a336d6b5-be49-458c-b2e7-6928065ed439", "indicator--5d68ab1a-3b33-4f5a-99a4-26b712c8c17c", "indicator--acdf09d2-7233-4864-8e4a-4acee2275d50", "indicator--b170a92e-84db-4aba-ad81-d83b5d34c707", "indicator--8131efab-3425-4ac6-a88c-b76a056413e3", "indicator--9886823c-bcfb-4b16-98ba-e1f9d7abf66c", "indicator--59f6f1b2-c503-4355-9c44-d44aa85c7e7e", "indicator--d7feb2d8-d661-48ed-99c9-ce6af92d67ee", "indicator--8fd64d60-6b29-43ef-adeb-26fd0ced47ec", "indicator--1a653f7e-7a1b-4e49-8b36-7692cc5bde8e", "indicator--ea476371-a932-4410-8712-2b0a6814a7ac", "indicator--ae821841-be53-471b-884f-f6056b79594c", "indicator--aefc6436-ac35-4602-99d0-f53449b86a9a", "indicator--0669cb30-9575-4658-a5cc-30d6b749d62e", "indicator--fea9a1ee-a332-4bd9-b1c7-8678e482ceff", "indicator--2e6d99fd-1d26-47a1-8bcc-91639eeacf28", "indicator--c577f65a-babc-456c-a636-80777c7636aa", "indicator--468a0d24-ee01-41fe-bee3-ce7e8ab10621", "indicator--b1baae70-de60-4796-9eca-53049148d2dc", "indicator--05710aa4-57fe-4938-a9fb-83dba2b4d5d9", "indicator--67c39e3c-dbe1-44f2-8108-7156efbfd7c2", "indicator--12f5c63a-e260-4138-a801-12554454f57c", "indicator--5a26ca6f-8122-4970-93e5-58ada9fc9d33", "indicator--ed283a68-1d16-4995-96c4-88ed7a2a8e94", "indicator--21e135a7-1f45-4e57-9403-c661e618aa03", "indicator--cfcf16eb-5dd5-43e6-bea6-39fb334dc09c", "indicator--517df748-cbbf-47d1-8cbd-97e4deabc961", "indicator--4b53265f-2c2b-4b1e-8f42-fc233bfabe4f", "indicator--938d17f5-b54e-4860-832b-976fb5276b9c", "indicator--af0e8161-22ce-4579-8702-cea06b9d621f", "indicator--112c9047-e32c-40f2-b222-c2856f438490", "indicator--13a3ff5e-7f02-45b4-a815-578bd9cadf02", "indicator--5e4f95a8-45db-4175-aa96-3a0af62311f8", "indicator--69cd2f35-9308-40cd-8041-f5c655c7f2d8", "indicator--26961425-448b-42d2-ad9b-87958bf44703", "indicator--b4800eee-90b0-459b-87b0-22a20d7d8d99", "indicator--4a6a07a6-09dd-4b65-832c-91f0b06170b5", "indicator--052e7874-52cc-481b-9f0c-acb61e91625c", "indicator--4ef3acec-35aa-4fb8-9f44-0aa390f844d7", "indicator--066821ef-a343-4a5a-802c-9873330ccefd", "indicator--07851957-cc3e-43c5-9bc8-8a53e26e1b7b", "indicator--1de1c332-aacb-4228-a2ee-0325c8deacc9", "indicator--b40dfd54-7310-4e65-8a65-24462ddcdef6", "indicator--d382aa24-3816-4143-afb4-9241fe53fffe", "indicator--4c86e558-d82f-40ef-82f4-badbb2fba980", "indicator--92ea75d9-dcb7-465d-bb6e-38647e8e6035", "indicator--cd16b754-e895-4b59-8a6d-aece61debed6", "indicator--0224f60c-7c5e-4086-8f14-b0d292dd863a", "indicator--81410483-ecff-465b-af53-1c2fa9f75801", "indicator--6c66b2d6-24cc-4882-b79f-505d7b8beb21", "indicator--8362ed16-a5dc-4d2c-833b-6aac5e86bbba", "indicator--063f2b76-3964-4e99-a08b-2e8ccb4f6f46", "indicator--60af58f1-bc42-4f7c-b3e3-bc818e77a814", "indicator--811550ab-9abe-42f5-819d-c0fb47161f5a", "indicator--87e18db6-625b-45dc-ba0a-9ca5e86163c7", "indicator--0468e20c-c454-4c2c-a4bf-b67e38135e6e", "indicator--81e186c3-7189-4990-91fe-3320179dbdcb", "indicator--5304b6f5-9d95-4dd3-be07-5ffa56c7fa38", "indicator--fe53aef0-523d-4142-8c59-3d5802e5cd40", "indicator--02bd4ecb-998b-4c5b-a437-a0074456ceaa", "indicator--12e95715-c449-4d46-b27b-0a99edf4b564", "indicator--ebf2f28d-ece6-4a97-b7fc-5c7d2f416c16", "indicator--c98ffd29-608b-492f-87ab-5e9b2709d344", "indicator--200fab23-7ecd-4422-8c0b-63d03236180c", "indicator--bcc65414-b79c-4ebb-95ef-a93f206f9516", "indicator--b9031e6a-f61c-4456-bff6-6e51d362347e", "indicator--5f152132-7650-45ad-bcca-2e8d3d8cfc2e", "indicator--7f82f692-3a75-4b64-bb9c-2ee1b3146a66", "indicator--0e36e753-6b96-431b-83ce-3cf3c7db3e0f", "indicator--bfb3cb40-fec8-481b-b93a-0910ff7b7073", "indicator--c83da82a-9c4d-40a5-92c4-4fa8de7b26d7", "indicator--82f6f45c-1ff2-4385-ace9-4d12f37e5c0b", "indicator--ec1d339a-bf1b-4094-a75d-7c253d723bc5", "indicator--1a49451e-ee85-4493-9349-a7be89943a01", "indicator--12ef6cbb-a510-4d7e-a757-d1cc5c583801", "indicator--0ec23d6d-a292-423b-9a23-e756ff24a01a", "indicator--42cd1ea7-dce8-48e5-9777-b3b89d6e90de", "indicator--76902c47-156b-4a2e-82bf-29e25c5c1833", "indicator--52ec8343-4e82-45d8-aa2a-3784451986e0", "indicator--ec1c21a1-6340-462e-95e4-a8e10c6cd646", "indicator--becc9e7f-0fb7-46c8-b271-58042bc251af", "indicator--b2cc63f8-e326-4ab3-9647-f8c8c0fe6d27", "indicator--4c0a603e-def2-42de-9f77-1f50a8da9aa0", "indicator--071f664e-6818-4827-bd7b-29701ce7522a", "indicator--19c6063e-af56-44c7-a2f0-1a2135c2ac01", "indicator--957d7399-d576-4f82-9e32-6c424f686a37", "indicator--cd49e3b9-bb05-4fe6-9f85-ff2118c944e7", "indicator--8780092c-cf2e-4fa3-b0be-c9bbf2f7e663", "indicator--825e9ffc-a678-48d5-8ba3-25c7ad6bb776", "indicator--824e5549-bfa2-42b2-875f-6bff173f9c64", "indicator--29fbb6b9-f4c5-4458-840e-7f31703c2ce0", "indicator--b60b02bb-4845-4f57-9119-af3e59383e5a", "indicator--108a56da-e289-47ac-9b31-aa1d2e56a5a8", "indicator--0177f777-01d4-4c7b-842a-71764a208ca5", "indicator--9acef32c-ee30-4c58-b724-e302b510571e", "indicator--a02228a5-7c85-4ab2-ae30-1ad479246e0c", "indicator--be677056-b27a-4753-84a9-4a4868d52f7f", "indicator--f7f9e5f1-5d1e-4324-ad5a-19527f18d3e0", "indicator--a91ef7b5-500a-42e3-b8a9-5b62b1aef25f", "indicator--6ee6968b-673a-4e0f-ba7b-46873f90a9d4", "indicator--7c9fab9c-e2c6-46d4-8650-e10564908fc6", "indicator--5a257329-5981-425f-b8c2-a7be47174dcd", "indicator--de5e3042-acad-4f86-9960-6ebdd4617736", "indicator--c042c32c-2dc0-470f-a77d-26f2494b8211", "indicator--b15d95ea-b7a5-42e8-a994-eaac3f9b2858", "indicator--06f78065-849d-4cdc-96af-fa73844afdd1", "indicator--5de4e6f8-d009-4acc-bcc0-35509f43cd24", "indicator--bea0145b-a237-4cfd-8b0c-56fd7908aa1c", "indicator--d08441ad-f78c-413c-9e09-f958637ca51b", "indicator--a4e192f9-1d15-4cc6-aebb-eb055a242fe0", "indicator--cce90448-b530-433e-82c7-733885d4396c", "indicator--735489ba-81dc-4619-89aa-ff167d43d54b", "indicator--4c6bb85c-5eec-4216-b544-124e6f24f9c1", "indicator--50b6086c-d2fd-4ae6-b15c-c28412d5f713", "indicator--ec3f53f6-5c38-4b99-9322-91945e495f49", "indicator--832f424c-62b3-4aa3-8ee2-fdc66615a3b7", "indicator--b5e0a254-79a0-4e3d-a8f5-a1df502c30df", "indicator--f0b77547-6cb6-458a-a2a4-4a99d30fa73d", "indicator--e518c950-065f-413a-9d84-356ec4544348", "indicator--8887f863-f00d-4dc5-a592-05209e655c9a", "indicator--bc4626db-6303-496b-ae6f-e47b8a019caf", "indicator--876db0f4-0323-4a61-a4e1-4f6156de50cb", "indicator--8a1869df-fa34-44b5-b753-20c4926b9175", "indicator--1eb494b7-517d-4c56-98a1-d9513570de45", "indicator--78496c3f-51a4-4876-860a-cbe02fe8d3b3", "indicator--b10633a8-78ec-46e7-bd41-59ee0dd1be61", "indicator--64e44e95-8602-4ea8-af1a-4aacf0bea778", "indicator--e9f0f7ca-4e7e-456c-bf34-c7e41e990c7a", "indicator--b2d8e04f-daef-40f8-b58c-b98e11364c9f", "indicator--e61f7d50-9371-4c02-b043-e832cb1b26c6", "indicator--2390ac5e-0d73-4b9f-9540-bf00535af71e", "indicator--084aa286-d1e7-4d89-b979-60c2be77d1ee", "indicator--e226e02e-0d43-4606-9d0c-9df7895c5e25", "indicator--a40965d5-003f-44f5-864a-80202374db90", "indicator--fb900a95-afe5-40af-8671-a2724b15c56b", "indicator--4eb70be0-c4e9-4ec0-9b89-3f335d5a7af6", "indicator--9a42de47-7464-4204-a4b8-bc985836ba13", "indicator--c7687b7b-8dea-474c-ac4e-80598e277aa3", "indicator--48166a72-767e-4ca1-b646-6e71eb2bec88", "indicator--67c03e78-db1e-4786-a07b-30bc5808546c", "indicator--0907f8c1-bde4-4aac-9e44-bbceb5c523ab", "indicator--7608f101-8b24-40be-bd6c-81ffa6f5af4e", "indicator--89adaf40-aa34-4325-b258-92a3e98b2442", "indicator--b6f3ae1d-4fe4-40fb-a3ca-8c393fcf3a6b", "indicator--39438c9b-9d85-4f46-8cc3-71de2cf26e21", "indicator--7061125d-8df8-45bd-b026-bf1eec7cfa41", "indicator--a1c6b587-05e8-481a-abf8-022275a675ae", "indicator--6402121d-ee6d-4e52-bb53-a711ea22ab7a", "indicator--74db4ab5-57fe-4368-a800-c7ce6590b7a9", "indicator--592449c9-11a3-41fe-99f3-7bf88cba170f", "indicator--ba92f7a7-eba1-42cd-bc1a-36310c1369aa", "indicator--bf1403fb-8d3d-41f6-ba1d-a542448f7033", "indicator--99451258-a7db-48b5-8b71-b0e50a4b6ca2", "indicator--86c708e6-c476-4579-80e5-8d230322634d", "indicator--36031469-d964-4a31-b827-bda2dc0dc697", "indicator--6a91b85e-4f2d-4187-80db-d214b54006bf", "indicator--9edbec5d-e677-4fc6-bb3b-e6ee6a3385e0", "indicator--c5c58994-a4a4-46b7-ba6f-6b7d2b3fbcf7", "indicator--0f0fa7e5-755d-42b6-94c7-4264c0b148e8", "indicator--d9b83610-3d6e-40ec-85f5-f647322e5b54", "indicator--2f543347-7217-4799-ac05-f020e83366fa", "indicator--b5db3aa2-210e-4823-ab24-5ca6233b12f6", "indicator--354db8f5-be2a-4882-80cf-2b039445b49b", "indicator--9d15a294-ff79-417e-b844-fd94d264b14a", "indicator--78b4aaf9-c2bd-4952-ae0a-038403d91b38", "indicator--f6db37d0-b5e9-48d4-837f-044582844e0b", "indicator--8c23a737-36cf-4441-83b1-90eac927afd1", "indicator--a4323746-07ab-4332-b19d-d7731b1b4cf3", "indicator--9210e326-3301-495e-9352-57d79645219f", "indicator--d5e6e935-51c9-4466-87b6-cdb650da9b04", "indicator--decdb41e-941c-4007-9a98-e1f94d06cca2", "indicator--814a0fbd-90e4-4562-b20c-be78393f60fa", "indicator--565f32b6-894b-4ca2-aac2-ea7380ffa8ba", "indicator--eb62f57f-72fe-43bd-9207-d0fe8dc76d9d", "indicator--b41f35d6-2211-49c0-9826-84cd57ead7ba", "indicator--a2cc540e-03f7-4297-919d-fd880482e4fc", "indicator--471a0ef7-c857-4930-92df-a571fc4f9880", "indicator--91f91428-417f-49e6-81af-9ca158bf632b", "indicator--17c82d18-debb-4be3-9bf2-89697e4dcf87", "indicator--e704df51-0a81-4f44-bbe4-96ef2012a32a", "indicator--3f2c2fb7-acbc-4cea-8931-7afcce98f1f5", "indicator--11d58590-6d57-4a99-a248-7b74bd82b9ee", "indicator--5127e928-37f9-43bf-add7-d72c2249b4d6", "indicator--35483242-4735-4441-bc33-e51c2def9e3f", "indicator--ba919975-211d-4df5-9ce9-1d7eca22ffdc", "indicator--95afef0a-4f15-40df-bffa-de9ccf3bd4e7", "indicator--85ff1e12-832d-47cd-b1c5-bcb10f897c29", "indicator--1e7132c8-29b1-442d-b544-c60509bbc0cf", "indicator--f12ce68c-2b92-43bc-9347-e6696108e2c7", "indicator--8067d0f8-25b2-4a78-9ff6-7bdbe7050452", "indicator--b71f2ed0-d1c9-4bbf-9be6-19c201dc7023", "indicator--330eb0c0-196b-404a-b941-3dce50835b70", "indicator--68bc4b19-3f79-4a3a-947c-644564a26acd", "indicator--fe4bf44b-332e-40e1-918f-1df2c4577af5", "indicator--1e3da5f6-7a10-4612-b75f-142ad35be1fb", "indicator--31af0f43-6aff-4b9c-9108-3c8dda4e705e", "indicator--c8edfff9-644c-44f1-bf1c-20c5551311cf", "indicator--cb9d8251-1cf4-4126-8a9a-b80624863f8b", "indicator--348829e7-bb56-4d7b-abe0-3eec31651920", "indicator--6f606cb4-1576-4a11-a201-f50e53e0ec87", "indicator--ee9b5dfd-4ffb-4237-bda9-6c07e12e1483", "indicator--bc1bacd4-4720-4fa6-b92c-757f7da988b3", "indicator--725bf198-edcd-4fea-a71e-42000ff025ee", "indicator--5fc6e5e5-8242-494b-ad11-583bbbde8806", "indicator--fd517956-e571-4ace-8e89-d53e37e6e1e5", "indicator--a646dfcd-0864-458e-acf5-e41ba3cfebe3", "indicator--e86b0f70-07c9-44fd-bf9f-537af4832382", "indicator--243a8a0a-5760-48b9-b445-5962e84cf5f7", "indicator--d1d491b8-0b8e-41b6-acb6-daf62ac270ad", "indicator--7f17f612-63b4-4f54-9799-af80800579a9", "indicator--76d26348-365c-4aaf-94b0-4ab1fef91afd", "indicator--9ea8859b-7a2c-4c5f-a38a-58ef0b5517f5", "indicator--1fdb9766-d2cc-4040-adff-b5e8d761cd8f", "indicator--149f0747-b14f-46b3-872d-b394280f8075", "indicator--9b3f646f-f456-4934-89f5-2f088a277e6f", "indicator--296566d9-4e09-44bd-9006-f886b28e532e", "indicator--ef608cab-caaf-4f45-b821-9c756b114f6d", "indicator--2db7e568-c55e-43d1-a7f9-9f9210c54370", "indicator--c0a8855b-444d-4ba4-b6e0-d098137d57fe", "indicator--20e537bd-37e6-4299-81d7-427bd693d1a7", "indicator--10a34638-3725-4543-8a94-a523ddfc82dd", "indicator--b9d29e10-9718-4717-8fed-5da90b2eec1f", "indicator--bf658f44-be06-4508-977c-ca0ae9a6f746", "indicator--577b8d69-4541-4b10-a850-c5a0bf0a47ba", "indicator--e884105e-1a25-4dc6-9d4c-e208d93d4224", "indicator--c3c720c0-3334-4762-9721-f480e9e8538e", "indicator--1f8dffaa-a940-46b6-96ae-f331bef6ba01", "indicator--63c88e52-4b42-4633-b73a-bb8d74eda51a", "indicator--b0fdedf5-0f86-47ff-ac26-f6be4d2c337c", "indicator--29066055-ab6a-4d1d-9319-e0a528b73ad1", "indicator--7a555b52-c8c6-436e-8345-5e2eb41cfeba", "indicator--8e2c9325-099c-4213-9ecf-88d09ef82315", "indicator--ee42a1e6-9956-4bb6-956c-5b82a9c1bfc2", "indicator--b3c02738-48af-4a9e-9a69-adc71d3c608b", "indicator--53b9503a-e217-4677-8ee6-0830c2c9d8ba", "indicator--b2f05e3e-db8e-4d05-8a1b-35c1b558e6c3", "indicator--146d5d40-d1c5-4163-9745-3c13e862e49c", "indicator--9fa24331-f6a3-41f2-bac2-4574902f232b", "indicator--a6814948-ee5d-4685-ac5e-1d07affe2561", "indicator--1d2794ae-8058-4401-a600-84f6ad16eddd", "indicator--19a9dddc-4cbc-45b1-b6fb-c0eb4f8ead57", "indicator--fee5d8fb-004d-4639-ad09-f54ffb7fc1da", "indicator--c99d9b3a-22d4-426e-9b5b-a842c7d20c12", "indicator--99e92328-de4d-46ed-bd04-473c4e8debc5", "indicator--1810b46c-8961-4c63-9738-70471d030149", "indicator--93a2bfe1-5f73-4f63-9be8-cb0f44ceaf1d", "indicator--c322cb20-2e52-457c-89d4-3af9da67d302", "indicator--dfc0d98e-cd91-4986-8040-fa4e8ec51d5b", "indicator--d5a6f8f0-16e8-42bb-b885-e1bccb8e6845", "indicator--a836ff2e-0d94-47cb-b9bd-b3a14e296312", "indicator--72ff4624-b47e-43e4-b5ab-3c4f4d3c3abd", "indicator--fb65507b-d304-4636-8862-1729922540d2", "indicator--19fc01f4-3961-419f-bd2d-6b90eabf99bc", "indicator--1e2a13ed-3317-4612-bd1d-8bcca6874d40", "indicator--8f905b21-8cbd-42ab-b219-c990a7a9e7b7", "indicator--f92ffcae-fe3e-477c-a609-9038fc97686b", "indicator--78732361-38dc-41bf-9a98-3f452966ddcc", "indicator--2f6728bf-5867-4247-a2df-f6ab3ab2b4bc", "indicator--bc54be58-a4d3-4579-b508-774fe461bbc4", "indicator--714b5e57-32bb-4472-8555-b9bb48c3e242", "indicator--0c1bc181-98ab-465d-9fa5-bb8ffd532551", "indicator--44d8f864-977e-4496-8838-940e02bdfeaa", "indicator--de34eb09-f484-4c76-be2c-b8b828e5b537", "indicator--b433e621-3472-4daf-a55a-a29d1833586c", "indicator--4ecb0285-d777-40b6-ada7-7a7ff4e07b8e", "indicator--48a36da6-1ebe-4328-bfc1-88c139fdfe0a", "indicator--56467ccd-fa11-4a73-981d-31d5d71195d5", "indicator--a3140ee8-3acb-4da3-8a39-4efc02b60d5e", "indicator--bc7474c8-72b3-4479-abcc-7bd5afccc94a", "indicator--b130a4a5-4fb5-4fef-a14b-9302ecba9cd3", "indicator--11392c3d-73ca-490e-b645-883e4a0804f1", "indicator--6f2db612-e9d2-4be8-8b5f-3e1ace47ead8", "indicator--40a0e0ed-5101-4306-806c-009a6ca74bbf", "indicator--8653cefb-e7de-416c-8d73-b96166dae947", "indicator--ad7b5d6c-eaa3-4dc1-bc04-cab25bbceaaf", "indicator--1333b5d4-d58e-4606-aebb-672b0a7d74af", "indicator--0c5e4687-675e-4da6-be2d-c6270731d2c0", "indicator--3b9aa6be-fbcc-4144-a547-b7d209fcc928", "indicator--2867c88e-82be-4406-a97f-bea7760aebef", "indicator--dc9f1c2b-371b-4d46-acb6-90b26e597528", "indicator--6077e083-2cdf-4c03-a8e1-5c05159ca5b0", "indicator--c0ec6a30-7362-4dcb-846a-35282cf145e5", "indicator--66b428e8-d6df-4d63-bbc1-8f80b6f3d273", "indicator--859b1d74-1f68-43e3-af11-e97b115e7613", "indicator--fb2132bb-d59d-41ca-9378-89b70970fc92", "indicator--fa4d5979-7746-4ecb-916e-444634a006f6", "indicator--9796b0c0-43e0-478d-abee-08f3a593a219", "indicator--2ecb1d3a-c8b9-4fc7-aacc-79b70258d173", "indicator--5d0d6288-d199-4769-ac43-25e748fccfd6", "indicator--d2291a30-29b6-4d67-9cdb-468365bb3731", "indicator--cae23d1e-c3c0-40cf-922d-4b19ac97da1a", "indicator--4b39269c-b2e2-4461-8d6f-bc3fb01af8ac", "indicator--da56687f-d7ec-4ca3-8fce-7923d0485d14", "indicator--20e65555-074e-40e5-8811-cecd48578ba2", "indicator--b1f04edb-ec19-4908-8adb-32ccbb222520", "indicator--7cd2135b-a696-4648-98fa-954fcb062db5", "indicator--1250ced7-b9e7-496f-a092-288338493bf9", "indicator--1da71131-6338-4067-9512-ccef20755a36", "indicator--b45edd2d-57f7-4eb5-a563-bfd883026717", "indicator--1cc51ed4-cc55-4ca5-befe-10de9e0bb5b6", "indicator--21147eee-6101-486a-af65-049b7a34590f", "indicator--1c3881d3-7030-4f70-b458-dd4e2276522e", "indicator--ba07d47b-9259-47fc-a44d-3a3d56b1a57f", "indicator--b1b5fc08-5125-4571-a3bb-e1b596dfe363", "indicator--8ecf3d15-5ad6-4604-8395-f020ba20cbf9", "indicator--b60ea2b1-de48-47c6-85a1-b2916a1869ec", "indicator--8a4e975b-1b04-4de4-8e74-f6175ede0855", "indicator--95986e0e-f33f-4452-9eed-74ca45ee9c69", "indicator--a8f9c78b-68e2-4abb-89fe-0cca92f96e56", "indicator--8758e76f-ffb1-45a0-9614-d1f912b704ae", "indicator--a765eede-7499-46c3-bda7-3501e8f60d18", "indicator--52b2407f-fb36-4ff4-99b9-86a94e46f719", "indicator--e67043d1-0c7f-4964-95f4-9f89dcfa1d35", "indicator--df9f554b-1bd1-454a-8f00-10377a7cd0dc", "indicator--0b86549d-5139-4ab8-8f3a-bde4526126db", "indicator--fefe525a-4396-435c-9288-3394fa7dc665", "indicator--24a0af96-733f-4226-a537-4cc2e6901e0d", "indicator--4964a158-2885-4054-b96c-252a99710357", "indicator--90bc8896-438f-47c5-b050-f1fecff5e77c", "indicator--66d044f8-ccf4-4024-84c5-fd4499759702", "indicator--e93e78a9-c5b1-4037-b25d-071e5632facf", "indicator--bf9b1464-dbe6-48da-a25c-e9ea2fe5fcee", "indicator--8a74f69d-110e-4780-9d11-691e2df9c79d", "indicator--316745a1-97bc-4207-8307-27046d8e8d2e", "indicator--ab48af21-d204-4f91-aeb7-8ac31d76a2f9", "indicator--8e6573e9-c695-4597-b838-b4dc313d1d32", "indicator--224354f4-a7f8-4a33-b655-b7f6acf0e7c7", "indicator--77bb339a-d751-4dad-816f-58458e3a0209", "indicator--1f72cac0-43ca-4c1c-ac1d-a3180dbb6c9f", "indicator--af848fee-a193-4d29-95e3-ee8c67d649fa", "indicator--cf4d59dc-c503-499b-9c97-22fec900bfc5", "indicator--9c7ac9d6-877c-416c-8e29-095d700b2475", "indicator--7d4bbed6-d743-4ac4-adb3-3f0553c5dd30", "indicator--760677ed-409b-4247-bc82-881b3ccf551a", "indicator--0f0fdc27-0b19-4994-af16-6d654114b78f", "indicator--ac9220da-9dc7-4d6c-8fe0-8c904924ffe7", "indicator--392265d2-5990-40cf-a79e-223c308ca4c2", "indicator--9c75f7bb-787c-42b2-be75-e65ed53ff5dc", "indicator--686c74f6-3453-4595-999d-d4d9fb35fb56", "indicator--d76143a2-48c5-4a3d-b565-2da1217de739", "indicator--8cc7c825-19aa-478f-8503-3813433d00f7", "indicator--741a631f-cbdc-41d1-9197-23625d10fc57", "indicator--b518fcc8-2748-4135-aa78-93e4a685f61d", "indicator--ffd04f1d-64aa-4cb9-a1e6-b672d52bafa5", "indicator--a82251fa-ad91-427e-a80b-1fc971f1d8f3", "indicator--61c7c021-6255-41e2-bd60-48c51e237815", "indicator--64adc946-a460-4c98-9737-7ee4ef172d59", "indicator--e99923ac-2743-433a-93a7-5225c0f6ffae", "indicator--7be66130-df04-4836-b861-3dcc0a26aed7", "indicator--8db09be2-94d7-4530-a17c-22f0de0a8a7c", "indicator--7a52627e-3017-480a-b18d-0cd0b111a626", "indicator--4e6e1d64-29a0-44ee-8e96-30538347201c", "indicator--fcde7bda-3d5d-4f0a-b370-07b200a297e6", "indicator--fb393bdf-131a-45ba-98c4-d22b7dd591cc", "indicator--7b6b1acd-7136-41d7-abae-564fa1ae498c", "indicator--297592e1-ae9c-41f1-b7d8-584b0795d8c8", "indicator--df20ac4e-a95e-40d6-b4ed-028c5c149ca0", "indicator--2f9eb0f2-6b5e-4854-8899-e8e577badc8b", "indicator--adeec26f-109b-4e33-8de4-fae20bda3b88", "indicator--98054662-152d-46b2-b1f4-6c0eda0669ff", "indicator--1bf70cba-40bb-4236-a75e-72ddafce49fe", "indicator--9ca965c0-81bb-4a81-b5e4-db117484d929", "indicator--9ecd373e-dc20-4806-907d-f25a5235706f", "indicator--69f81641-1d9f-47ef-9257-f25db7e2c067", "indicator--8137a002-a38b-4440-9cbf-426ea4cbc19e", "indicator--abb9689c-b509-4878-95b4-3438f8701cb9", "indicator--28677afd-93a5-4a83-a24c-39264f64d88b", "indicator--8453381c-36dd-4d98-a911-84686001a67c", "indicator--72c63332-805c-4c85-a45f-84d504d2f2ac", "indicator--40d46f01-3188-4996-92e4-7e97c5328d5d", "indicator--3381a047-85b7-4245-af3e-b4b95eb52728", "indicator--bf07380b-b9ff-457e-b090-abd8448ac971", "indicator--ea1a01d3-f125-4660-aa4c-910513678a43", "indicator--1c537ee0-b986-42db-8e91-a4c680d9d431", "indicator--43014124-9a93-418f-859d-bda09c2cda14", "indicator--57a42b5c-c8ed-4d3f-8222-85c8583c6395", "indicator--adafe171-ae94-46c4-9a74-b720be4e75c8", "indicator--4719f7a6-70ce-465b-a263-10157e983018", "indicator--4c6e99d8-2ab7-4c73-8dd2-30fff1260f78", "indicator--3c00456e-af85-4c57-8a62-3fb655ac05b3", "indicator--d798f8b1-2c79-43b7-949e-3d94fc6557be", "indicator--77c0fb11-1c90-4276-bc73-ef4209cbcc92", "indicator--71258ea9-d264-4dd5-a500-5577c2d1fdaf", "indicator--1d3f940f-50c8-4568-b16e-9040d51923b7", "indicator--49de4dcd-7cd6-4580-802a-7e7b22312e7c", "indicator--b52a2f21-7e93-4ede-a2ac-2b30dc151b48", "indicator--7ff2aaf7-05ea-4539-bbad-03043b6695c2", "indicator--7cde36ad-6b9c-4c61-857e-d2aa77723387", "indicator--1976b8ca-4939-4330-81bc-f329aea360e2", "indicator--f938a381-d5a8-46fc-a3fd-a1afacbe5e0e", "indicator--04006077-d6b4-427a-aeda-f956cd64261b", "indicator--e3253cbe-fb27-47fd-843a-f6de50a27271", "indicator--a9dc388e-5d65-4582-a29b-128e4b147ce6", "indicator--e57d3c66-dc54-4129-bf52-440447dcccf5", "indicator--d7fb07c0-2385-4729-aac9-deebe0abfb46", "indicator--2a3f608f-7b78-412d-97e9-42aa6ea7bf64", "indicator--270444de-fe4f-45a8-995c-99bd3bf28481", "indicator--93c0cc63-ae7a-4565-8826-77438948f161", "indicator--f5691ab1-b680-4020-a92f-a899836642b4", "indicator--0094afe6-68d2-4eb9-8642-0fddc4fa90ad", "indicator--d45498e5-0fb0-401d-8bff-f9b97eba930b", "indicator--640e7e2a-5e35-4d5a-9613-726e7d45724b", "indicator--e87a03f5-c63b-43e5-8c4c-9fa1c99b9e6c", "indicator--52846dea-34c3-4c91-8c41-cffe2acacf91", "indicator--fdcdbe5c-b9ce-40a7-90af-5efb8106b18c", "indicator--1c1b01be-22c4-4a86-8624-a97d7199ef04", "indicator--61f39bf6-17a0-417a-9e54-30a0bffb2d5b", "indicator--0e16032d-4873-4b7d-9489-676d6ec55546", "indicator--e027c228-f042-4cae-be7e-7d3829471c55", "indicator--3aa192e9-e8ed-4026-9510-1fc74b8f6195", "indicator--c35b4745-1be0-49a1-a3b7-93acd7fd5416", "indicator--3abfc4bd-a9f3-4faa-bace-bf5a35f11696", "indicator--8accb794-9823-4ece-9776-78e3a475b473", "indicator--c81b53eb-8d5a-45b6-a37c-a3c81409e0dd", "indicator--4808396c-fab6-406e-851c-2e3498470154", "indicator--9215379a-277f-4593-a3a4-450bc1ed60a7", "indicator--bfce42ab-0ada-44ab-aa1f-4c508c30ab2f", "indicator--3f4f683e-b78f-4a69-8097-31702509a988", "indicator--89ec87dd-6bc4-4144-89e3-ca18a96d2f01", "indicator--e57a05bf-5005-4bb0-a833-1265ef80d0a2", "indicator--dff56d46-33a9-40ea-bf4e-7263a05971b5", "indicator--6763768b-0d06-4922-b8d9-0f07726a8bb1", "indicator--6415b68a-7f6d-4bcd-b557-e8af57108c0b", "indicator--d3031417-dbc0-4d2e-b60f-f2e139bbe41e", "indicator--83f429ad-684b-4e72-a5ed-a49e86094416", "indicator--b1d63e23-736f-4616-aa45-b41adf1caec8", "indicator--2c1bd86a-076d-48f1-ae0d-d0d68614b086", "indicator--4805d71b-2f10-48c1-95b2-56cceffe4601", "indicator--7bde696a-eae8-4aca-965f-27e70816c02f", "indicator--195f4c7c-2ac1-43b5-bf2d-e5a0fad1f599", "indicator--85f2e872-b7d1-4b45-ac75-d369ca635209", "indicator--d45c7989-063c-4b62-b15b-498f84ea57cf", "indicator--f3312ee1-b30d-4815-88e3-d35259535682", "indicator--2c0ed66c-c0ec-42aa-a9ff-e533a8e46ab2", "indicator--a1c5955f-f6c9-415a-9493-493f53a1d1cb", "indicator--d5e9ad9c-8a13-4392-af88-abdab56f2413", "indicator--f6e93b6e-3f88-40e4-9d1a-137d3b9fe999", "indicator--ee1a1223-3446-4e53-ae48-686840dd64fd", "indicator--14ba2224-4fda-4234-a2c7-c2126f609cf6", "indicator--e1d33524-2690-4cf8-84ff-2b9e59385cb5", "indicator--15492f11-37be-4c36-aabd-5b615b31281f", "indicator--5132c4c6-5d17-4efb-8178-4c3d389a6467", "indicator--e2aacc40-389c-4c6b-8f92-9473eeda34b2", "indicator--9e770dc9-0056-4ce9-991f-bb90367bd5b9", "indicator--74dd9e9d-4553-41f3-b212-42bc77a6d8fb", "indicator--475e0f58-811b-407f-b170-10fda1265730", "indicator--f80eb649-70dc-4095-aec2-47a82fcd94ff", "indicator--4a7d6943-e4cd-4ef5-ae84-43914dc31cc3", "indicator--ede11cc9-d6a2-4b27-86c4-38a70a920098", "indicator--3ae95948-3cbb-4f34-95e2-19dced4f6dca", "indicator--5a33123e-8f5b-41f1-bd4a-6b5c535bbf6c", "indicator--0890a6d7-8d27-4cd2-819f-f59b73bd9558", "indicator--9bfeee67-85c0-4c46-845a-dba5e56a8520", "indicator--a172c880-d0a0-4654-9ead-f2eb7c6ecfa8", "indicator--cf6a702e-a7e5-4c25-bb4a-53b7dd204fdc", "indicator--95c47c8a-f3d1-4989-98f0-b5cbb8ebe216", "indicator--9699ed24-ffb0-4c1c-b2ef-941b5e3cd1a2", "indicator--3b8407c3-1e7f-4472-8511-1f9a5b14e6c7", "indicator--72f62fa4-9b1d-41a5-96da-513e6ad6404f", "indicator--768b851f-1f63-4281-8a28-f63eac0188ed", "indicator--fd4cdf92-b685-4756-bcf5-6510b339870f", "indicator--a2c17db4-ccc7-474d-a081-92fbf89e2307", "indicator--701b7307-17b6-4fbe-894e-b32bb9515a8f", "indicator--daee167f-6365-4150-9ce8-5a4e052e6b7b", "indicator--5e33842d-7029-4568-835c-8134b9d480d9", "indicator--f42be637-8449-4c37-8f46-3fcb2bc1b075", "indicator--4a18f672-20d9-471b-86bf-b5b4e49198d8", "indicator--1fb36d42-2e89-403c-9dce-47ce7752adc7", "indicator--134eae48-8f11-47d2-9b6b-f608a75beef0", "indicator--e3b98869-511f-4a5f-b260-817cf28b69d3", "indicator--c38ca08a-54da-42f5-91f1-d09109e579f3", "indicator--72682193-b67f-4e5f-8bd8-716777108e8e", "indicator--9ccf989b-9b3f-457b-9c46-4beeb4b7cbd4", "indicator--efe9cca3-c462-4d7c-96fb-201690177835", "indicator--960cd289-2840-4202-98c6-109f0df84591", "indicator--6f0f6f0b-c39c-4c74-b029-dd3341f0195b", "indicator--4c02e5a4-d89c-435c-a8fa-6dc1c83c66ef", "indicator--d3da9cbc-7622-48c1-9226-624a2319e71c", "indicator--c7147f41-55ea-427a-aecc-db6d0c5facc5", "indicator--eea35fdc-3c0f-4ecc-8a81-2bd9f50360b6", "indicator--6bfa9de9-9b07-4cd0-9145-6486cefc61e1", "indicator--c873dad9-7fb6-4a9b-a03c-3e6c21637b57", "indicator--e60b8eed-2aa8-4479-9376-dec8d07d7548", "indicator--b5200ef4-557a-4896-90ff-54789576c48d", "indicator--af184bf7-fa21-4046-a190-e526a6429a72", "indicator--b23c47a8-af9e-46ca-ae0e-69c4d9ad5770", "indicator--66fe44e7-e415-4b50-af50-c86ce8a1123c", "indicator--384f5a20-7e0b-4206-9503-5cc8d771b2b7", "indicator--c148c875-a578-4703-a424-f3bf77d40f35", "indicator--77529691-6608-45d2-a76e-f3f2d3bd404f", "indicator--07ed0363-8df9-49c6-91ff-aad67980cbbf", "indicator--1afffa80-ed0f-400a-9b98-05b42291f5c5", "indicator--9dc3c7d3-8e19-4873-a984-2a235cb026a4", "indicator--57c3eec7-be67-498e-a4ec-65e494ebee0c", "indicator--82f92546-ecf4-49da-9a01-3d0b94b87a81", "indicator--6fbd21eb-6149-4c82-84f0-e78dde31ed26", "indicator--87ab5c66-1862-4dac-b6fc-3042a47b3d0a", "indicator--b029c628-12b8-4fdc-82f8-16f041673f3d", "indicator--1500d6c3-8a2b-4bbf-aace-e614b3f920ee", "indicator--879700f0-1207-4e73-a4f1-5e1c7b04c788", "indicator--7ed20d38-15e9-4362-ae16-d79a9f55c5e6", "indicator--99919b39-2e6a-475a-8715-0c5fc19832d0", "indicator--6f78d6eb-f17f-4e3c-8dc3-f68afe423861", "indicator--5ce81e18-fc62-4486-b9ca-cb229f1bfcba", "indicator--6747472f-20b6-4d97-bee6-1f393c3f8f92", "indicator--b3e80efb-e27f-494b-98d0-5ffe4dbe7eb2", "indicator--c7566941-6187-42b6-be39-ebf1c8035c92", "indicator--3dbfcf5e-418f-440b-81eb-72eea11e2e3a", "indicator--013aec8b-f6fe-4a23-aed2-a2265af4b50f", "indicator--f26efcf8-5fb1-4804-a8e8-c0aefa946dff", "indicator--75b60944-a54d-4f2e-ad29-4332a59946ce", "indicator--c2b7e638-3f68-432c-a1b0-2aac453ed01b", "indicator--e6977ee6-2600-4ba5-aff2-d85c1cd938cb", "indicator--44c845b5-6c46-4686-8aa8-6db1f2ca5525", "indicator--dd554a13-a3e2-4c4c-9b3f-be279a76d9d7", "indicator--f15ecdc6-617c-44f6-8cd9-8264ec4f46a5", "indicator--fe9d61f8-072c-47c2-8278-6e87dbd49db1", "indicator--d18e92f4-191a-417b-86f2-53617cb76cc6", "indicator--1afc4628-58c3-4752-9cd3-cfc1dac0634b", "indicator--0f2b37ae-b670-4e01-b08e-900662cd9ec0", "indicator--02557606-e9c1-45a0-87c8-bdef5bd28b6a", "indicator--104f0f1b-42b5-4a7c-aaef-67b87215bba1", "indicator--8a2b8f07-b173-49c9-9d42-39bed7d485a8", "indicator--c9d4a92e-48bf-406c-89da-e590a33914a9", "indicator--31f3662c-d7f9-4d2f-9f5e-3303147eca94", "indicator--82ab33a6-05c4-49fb-b172-5937c1792d45", "indicator--7ed69ab0-aff1-411e-ab25-154ed9ffc070", "indicator--51305372-4e8a-41cc-ba78-dc86a8b4ac11", "indicator--97dc9ccf-e011-40c4-8f22-320c38c9fa3a", "indicator--c35e019b-c338-49ed-9aef-6a5702ff27ee", "indicator--2f1340a9-3202-494f-b93b-8a44b9337fba", "indicator--4a064dcf-b486-4de5-8766-e229ab2a27b6", "indicator--7e6724b5-1db8-45cd-95e6-26320103ce9c", "indicator--319b7a1c-3abf-443b-82bb-e6a732606571", "indicator--cb731c0e-19c0-472d-87fe-b4280c171b09", "indicator--acf1a356-6975-40fd-b4e5-252dccfcfe13", "indicator--9d234c82-e686-4d81-b870-bc0dcff73fb2", "indicator--1cbc0b09-5934-42dd-945b-973456b3f29e", "indicator--c94972ec-d30c-464a-8d71-86fa11289dec", "indicator--286fb266-258d-46e4-b984-69cf95e55943", "indicator--1f3187e9-50a0-43a5-a018-95bbb44d45b4", "indicator--f3666e36-7bec-4206-9361-af28013fa97e", "indicator--e03d184d-e491-42d3-8465-58acb8e66887", "indicator--d4b6f876-41b5-4746-86dc-8c169871a694", "indicator--9dd81fe8-813c-4671-8639-ed4f5a73f5a7", "indicator--c99614bd-6683-4c70-943b-86d53ec9f9df", "indicator--4c1a26c4-3e59-4030-9711-2fc60f7b1ff0", "indicator--2f3e57ac-ff14-4bd8-acab-b5f949775c56", "indicator--6a57c19b-1069-4e72-b960-1ee5c1235f55", "indicator--e8f4e768-0f35-428f-9125-e97e4bb3ce16", "indicator--12aedbb6-51b0-49e0-8f3f-0b3cccf01c0d", "indicator--3c6a0bf3-8c3d-4dd0-8a30-c7da2f57a150", "indicator--3f143f3c-9256-4d25-b1d0-cfdce0f8c07f", "indicator--c571f06e-1961-423f-a515-d8d358651a0b", "indicator--f841422c-f425-4ea9-b5cc-0f7d0976c737", "indicator--ffc7c6c4-09f7-42ba-b273-5788205322ba", "indicator--fbef3643-1310-4ea9-8f1b-1225923f3811", "indicator--f4dd3bc6-033c-452c-b244-1de2e7da1397", "indicator--4b6db931-a4f3-42c7-a1ee-22f709bb0191", "indicator--de81efe0-0169-4854-94ae-719a3ecfe609", "indicator--32eaabbc-85cf-49d1-9b1e-9e800ca11307", "indicator--7abb2159-28b3-4148-ac58-1ad5ab39d296", "indicator--39541f65-9d6b-465b-8769-d30f062efdbf", "indicator--86d78194-8473-4d2c-9cc6-9035163ef18d", "indicator--b029c6f6-9a6c-4f52-9cea-5454763a7e72", "indicator--72cc5e94-8828-4179-bb7e-b5a5ab80d933", "indicator--048c1adb-f834-46ff-a559-35303a71ad3f", "indicator--59b90f09-5435-4ba9-8cf8-eb214638d26c", "indicator--737529be-bff7-43d6-9e20-42cf1351f3d0", "indicator--516faffe-3b89-4d46-bef7-7dbadaa94b93", "indicator--b2bfe8a4-dd2b-4a67-9312-494257494f15", "indicator--5cf4339b-295f-4b1c-a6b5-b72f1af35484", "indicator--4a11c714-9547-4bbd-bbe3-080be90678df", "indicator--d7ac06f4-e0b6-46d0-b3e7-6fcf42c6a0f8", "indicator--7eb9dfc5-252d-4d52-a2e7-1058d71b7a58", "indicator--d55021d5-67d0-4477-9cc6-49b320124c1f", "indicator--12b23ba8-e520-4b95-b14e-73829da103d8", "indicator--b9948575-3e44-400e-906c-551276d51fbe", "indicator--ba2c1c06-e47a-415c-b2d1-0a48629cc93d", "indicator--cd12e07a-d4fa-42ea-a5b4-04063d27ecbf", "indicator--311ab0e3-85a8-433c-83a7-338400918be1", "indicator--aac5e3ae-ed27-47e5-9584-5da19a9850d3", "indicator--866ef643-11ec-4ea8-b09c-f76dd779873e", "indicator--ffdb13ed-d07d-43c4-9580-fa7f34a1174b", "indicator--2681b02f-aedf-4029-890a-b9b522f7330f", "indicator--730217dc-2ccd-4317-af2f-4432801850f2", "indicator--2a647168-de3b-47b1-bb33-d4a5f98937b0", "indicator--d1f3951b-e6ff-455f-be4d-81dea97c672b", "indicator--db55a8a8-8cb4-4e2a-a8d1-3e3166b7b834", "indicator--4596df01-fa1e-4dd4-af20-1e4528c7b88a", "indicator--7893813b-9173-4ddc-bede-0dd17e36813c", "indicator--97c1e466-5c99-49b5-ac44-1e66c4e5b409", "indicator--9013aa4e-3be9-4a37-a4d2-0aeedc77fa2d", "indicator--1993d8dc-d5e4-409b-9f43-aee82ddf541f", "indicator--8bf24941-e8a8-449e-a1f5-8cf5974d40f3", "indicator--be1a4a5d-7e50-4813-9bff-087ccf215532", "indicator--d36adc17-4964-44e0-b2bc-5a84a0d44396", "indicator--6f1b0480-12f4-496b-95c1-0f9bbb025f78", "indicator--860c5a67-2289-495b-8261-6e6c1c8cdc88", "indicator--55ef6ea1-5534-4329-9e6f-68061b29c9e7", "indicator--c0455059-67ad-4c40-8ad3-e5f236cabe9b", "indicator--290d71c4-ce2b-4599-bf07-2f6743ed75e6", "indicator--41dd60da-34a4-4c54-948d-03d237f930e9", "indicator--53969722-087b-46c8-95bf-1060aaed3a5f", "indicator--13250ceb-7826-4dd1-a4c7-9072e1ae585c", "indicator--1d68a94e-7446-4715-9434-5ba32f3af4c4", "indicator--490701f9-d87a-4721-a316-67a0fdfc96fc", "indicator--73685846-3378-4c4f-8418-d89fbb0c5f47", "indicator--70c36c58-6de9-4644-b5bf-e2463fc075c3", "indicator--41accbf6-08fb-41de-85d4-15959e77f245", "indicator--ca497e20-a7bd-41c7-8ad8-9e4b6a755750", "indicator--8efd6823-467d-413e-b0c6-c7fc02a5cd0d", "indicator--868a0fde-f468-464d-9639-1fe933d2fd9a", "indicator--164b272b-48c4-4cdb-8940-00be4860fee5", "indicator--67b89202-c4f6-47cd-8ba1-fbae7fc9801e", "indicator--e4ff84e6-edef-45c6-9a1d-7138ab42d54c", "indicator--1cbf32bc-83d1-46ff-95ef-3cce119f97a6", "indicator--eafb4e23-5c47-47af-8d34-433e731359db", "indicator--e8efcd3f-c73e-413f-9f53-dc5f02610c60", "indicator--c0fde7c1-704e-4043-bfba-c3d2d8a67806", "indicator--aef32020-1c60-4413-a378-d91eaee3cb15", "indicator--1dd6838b-2490-4562-8b8b-39c3d283d34b", "indicator--d9ed1dfa-6cb0-4ddc-911f-8a0c4978114e", "indicator--c65d4aad-5b7b-45cb-a63a-bfa300d15985", "indicator--2bc8ba4e-d919-4b77-ab0b-41c388c94e06", "indicator--fa7296f4-61a7-419b-9e41-164faf045143", "indicator--49ab8f23-3c3e-4ebb-bf6c-ab3d614422a5", "indicator--81425447-06ea-4942-9dff-25dab33ea433", "indicator--60c84813-3c43-4e07-ae73-ed48323b8700", "indicator--626d04b2-8f3c-4d85-a604-f6cfd7188132", "indicator--87bbd201-057d-452f-a0b4-73bd4412bb11", "indicator--829afd35-f5c7-49d0-a2d5-38da4c175f0f", "indicator--61060482-7300-4c6d-a9c3-84d436470d0c", "indicator--3e4d0919-ba9e-4a89-9b07-615f363889bf", "indicator--932cbe85-d3f3-4130-afed-0e1efb6c212c", "indicator--70e31278-2908-4b82-8a76-ace72c620571", "indicator--24457e34-b06c-47f8-96f5-dd28a918ccf3", "indicator--762bdaf8-777e-433c-a5e2-af924399b7b8", "indicator--279ce310-f928-4df7-8f27-5f27a8a6a8cf", "indicator--6eef18ba-85de-482d-b677-7fcd51a41497", "indicator--5a7fd037-dea0-4171-af9f-604397d49b1f", "indicator--90d98259-4625-4053-820e-9e8fd0933efe", "indicator--59f137ba-9584-42f2-aa01-13be12ece527", "indicator--d99cc3f7-005c-448b-ad9d-9a2559c59f67", "indicator--ba06a83f-03fd-4af2-b9d1-0923c10c5112", "indicator--65f2b3db-0e44-4e4d-a646-d084c3b21230", "indicator--73ed2d5d-f27b-4510-adb5-45cb2922652b", "indicator--a1cdabd1-b8e6-46b1-9988-636976a37670", "indicator--93a292e5-6a85-4786-b9c2-a87e54e08bcc", "indicator--016c51ce-5a72-43c2-8a41-415d229b058f", "indicator--628aaa12-e466-4765-95c0-01e281f520e2", "indicator--34f30202-63cb-4053-8974-3c6f569c44ac", "indicator--73423f25-050c-4a55-9b18-83529921c8cf", "indicator--402baf73-d80d-40b7-a9bb-afb627d9700f", "indicator--d8702561-cb0c-4531-a8d3-68576acf9727", "indicator--c4f22b0b-82b2-4a4e-becb-e7f71d27b7dc", "indicator--b1d651c0-d1ae-4657-a813-a714225a3d4f", "indicator--e220fb66-fffa-4a2b-8346-64d2671f1ec9", "indicator--7c01f33a-3813-4270-bcec-92b17563746a", "indicator--6c79649a-cbb5-4dce-98f9-db340749ea9b", "indicator--e7d5aa54-becc-4852-a678-99c5fa6f7dd5", "indicator--2d372a0e-50d0-4bd3-b2de-9b789ca4121d", "indicator--6d294de6-114b-4639-a50f-526010e7bf3e", "indicator--975caa81-0f87-4129-9d06-2401f6fc2b01", "indicator--8c56d7c4-3692-41a4-97e0-f463687992ba", "indicator--f6554297-923a-4f3e-ac13-28d036bd6d73", "indicator--8b3a2014-d400-4182-8594-503622a3bf20", "indicator--3c5aee08-31cb-404c-812d-a22ffab8d9f6", "indicator--6c843f1c-63bb-4aae-82aa-f4888922e6c4", "indicator--9eb09830-b3e1-4fcb-8b94-0b219afd6850", "indicator--7060932c-2f68-4bb8-a5b3-dc59401f45ee", "indicator--e3a5591d-64cf-451d-93ba-44f9c11bd91f", "indicator--33f3b8bb-84d0-4e92-bff4-132c46630d0a", "indicator--1a5f00dc-91d8-469a-a132-2b3995583474", "indicator--a307fe68-13b0-4bb9-a66b-870201d92972", "indicator--58a020bd-efbc-476c-bb1e-6a578654678e", "indicator--add6fdd9-e90f-4cff-a975-08c7d6b4d55d", "indicator--6821de94-757a-4ffc-a017-c5e33dd0358d", "indicator--4bd332b8-98b3-4dd3-8dfe-38dbe1ef4008", "indicator--1b614580-a2da-43db-9a70-2cadfc5fa7ed", "indicator--7634a72d-c35c-4ae0-a1c8-44295a40ff85", "indicator--2ad28f9f-045c-4f90-94b4-7771c3a54b3d", "indicator--c513ef4d-8b26-4f74-a1a3-a56aad82c33c", "indicator--4399c0d7-ee2f-4a72-8421-ecfd4fb6b482", "indicator--9da13b0e-e059-4e57-8a55-1e86d3d3816d", "indicator--6cb87e4d-e7eb-40d4-b94d-ebe7d37b2643", "indicator--5ad74e03-fbd8-484d-b985-ddb0809aa6cc", "indicator--46654811-1cf2-4710-815b-6b34bb058c9e", "indicator--7f75a2d3-0a19-4a90-a3ef-89d0b1d01776", "indicator--489abb6e-9f56-4988-92bb-4b6d2a6cba72", "indicator--e71c42d2-2e92-4344-a728-a19a856b4f7f", "indicator--47a180d7-cb58-497d-a43c-53e82965ff7f", "indicator--d1e3bc5c-4c27-4beb-81f3-34fbbfb0ca14", "indicator--a2f4e238-318b-414d-9010-6a820bb2c3f6", "indicator--46437cbf-feba-452a-95d4-a5fdcc11ec72", "indicator--c7d82f68-9631-4680-9bbd-2b351ee09967", "indicator--e6fd53be-8ff8-4680-a55d-06f418cbd312", "indicator--25bdf686-1859-42b3-8df4-7b9232b997c9", "indicator--2ecb5e7a-f1d2-4d28-95bf-e936490b8c89", "indicator--31345fcb-085c-488b-a63a-9e37354c9ab1", "indicator--76f131d6-d993-4c4e-99c0-bb5ee0a848f9", "indicator--3cfefdf1-8a80-477d-b70d-d509ee61d656", "indicator--a957c915-f0bc-4655-b26f-771b8501d305", "indicator--8b4595e7-6992-4954-a4cf-448fc8d0146f", "indicator--f5bb2fa2-2b37-438b-bde8-0584c693547a", "indicator--361c76b4-1391-410b-8506-9161466aeef4", "indicator--cedefe1a-a560-407b-a657-bd90fa2c5e70", "indicator--0152d490-e861-47f9-a46d-9d0622452edc", "indicator--5b613b80-5a14-4ab7-9b26-81202c180887", "indicator--759270c3-3921-4fe2-9ce8-ff5cec4b209c", "indicator--9dc65f81-d802-4ef8-945d-a04988b3e23e", "indicator--6dc377d4-6082-4b6c-83fd-78aba3ef5ab5", "indicator--c5cad9b8-1aa5-4080-8de1-dda3ddbd1a40", "indicator--0947afa9-2f73-4237-8258-bf5b0a138be0", "indicator--0bf419e0-2841-41ee-a598-8c3f89f9934d", "indicator--b420cab1-b6c7-4fa2-af03-2d007289279a", "indicator--fdf37da2-a4ab-4fa5-8196-e8bed3f64d0c", "indicator--f807d952-4af5-47d5-949e-35c01b27b39c", "indicator--a60d8283-d8e4-420d-96aa-51630540e3d9", "indicator--8e5043c7-f410-4dfb-8047-b9f76e5ddccf", "indicator--71a30188-73c7-4589-be76-bdb38a2ec4ab", "indicator--018c8c79-1dd5-4cf5-8684-e2cdf684df97", "indicator--550e8ca4-20d0-49f9-abd4-2a1c9e00f132", "indicator--11c1641e-d886-4f42-9960-9a670dce6a89", "indicator--78ac802c-c571-4d28-9504-22ead64ec4b6", "indicator--76b3f015-b24a-4623-ac6d-a4bd05ed422d", "indicator--78432995-f379-48ca-8bd0-bae60a3b6d1b", "indicator--1b48e36f-37e6-4404-bc8f-d454652080e5", "indicator--1372d2ad-6a2c-4208-bca0-e310d1cd03c8", "indicator--82bbc24f-1648-41e7-90d5-6730ac940add", "indicator--064fde0d-f8e2-4902-91d8-f8b69488bb45", "indicator--d952eb18-c17b-43af-a81d-866355511494", "indicator--fa904059-200a-4213-8a6e-ad70125f11e3", "indicator--7b357140-6882-4dcd-a58b-3aa13d8d05c1", "indicator--8d24b301-af4d-4920-b66b-064b031dd578", "indicator--e089e1d0-8f3b-4776-9f64-0401cda28f53", "indicator--86950f5d-7d39-4294-b8c3-22f63366c186", "indicator--65da876f-313f-4b2d-9fea-3e3288c7b744", "indicator--e2a3b7f7-0c96-49fa-8a21-c462b6228f90", "indicator--8df25f5f-a6a0-4386-b79d-8dc0af9bccd5", "indicator--95266102-2657-4067-b739-53b2fe55babd", "indicator--38a67553-df3c-427f-a9da-aae7757e8afa", "indicator--c8691de3-6f8d-48f8-86c3-3c1651fd7488", "indicator--118e9c1c-c1a0-4f06-be8f-926b4381a782", "indicator--2b2748b8-6d61-4dc7-8515-331e454149db", "indicator--dd074a30-62dc-42d7-8e65-3a9c99607b40", "indicator--ecfafcaf-99cf-439a-92da-de007318564a", "indicator--9c663f35-442c-4fe4-9713-8157b5c6376f", "indicator--cf273170-51cf-4280-94ef-6a03d5f4ee61", "indicator--78b331e1-12a0-4e05-9ce9-34ecfe4a2074", "indicator--54dcf39e-8075-47d0-b5c4-505267f3046c", "indicator--51536d61-ce2b-45eb-bcfc-98c3cde8828c", "indicator--3b5f659f-f2bc-4e79-bc77-3338b504bd73", "indicator--bae93885-c9a3-42c4-8db4-577ae968ab6f", "indicator--ce8e5e20-fca1-4760-b3f9-d514ed4602aa", "indicator--5966441f-2704-4624-bec0-76723c665f3b", "indicator--6132775e-ea47-4a81-b8c0-7653089626c3", "indicator--d1b211ab-35e7-4cc5-aab1-ee15e12fc16a", "indicator--51039323-498a-46c8-a1ec-214ec3c23d83", "indicator--73c27475-bd01-4c67-af78-73c26d40c62f", "indicator--78f4ecd1-7d6c-4b8b-82a6-63edf5647086", "indicator--71f883ce-e2cc-489c-9e73-ef0b25179bdf", "indicator--d9e4d42e-0225-4a0a-8c26-17ebe44d0d94", "indicator--efe3928f-8917-4461-b9f8-eac0f83bc50f", "indicator--f4afa9cf-cb81-49af-951b-08f2f90f35d3", "indicator--f1509bc7-8907-4d7e-b598-1911345b5fe4", "indicator--564f88fa-6b9c-4906-8736-d94dc9663889", "indicator--da473394-a760-4a65-96be-35ba45206887", "indicator--d8cd9082-49b5-4e2e-bece-8b709f8f8f51", "indicator--52a74e46-83ad-4901-afda-915d9cf09e6e", "indicator--6f5e400a-d809-4051-9e68-d6c4bac6262b", "indicator--844dcef2-9511-4764-a60a-734a3f1d5b05", "indicator--ab0b1461-c760-420e-a3c5-c5044b9ce802", "indicator--98d3aafd-6daa-4bf0-92ff-cd1a228e0a3d", "indicator--5328ba98-a37c-438c-8543-336f2a4536b2", "indicator--fbf95dbf-26d8-4cd3-862d-144095ef60c1", "indicator--077566f7-00d9-42bb-8ed0-a7d3316a697f", "indicator--e95efc16-6289-492b-868d-3bc7c6c21ae6", "indicator--de9fd200-72a4-42c8-9507-f28d11947c31", "indicator--fc07ffc6-3f6f-4975-b04e-474ffeeeac2d", "indicator--ec2fe9f3-4147-46d0-9a13-30fbb2549d3d", "indicator--0ba95c94-035b-449a-8f64-852e99f4d490", "indicator--7692bd59-cd43-402c-b8a6-5efca4f0188e", "indicator--7ada6cf3-db91-4c53-8ad7-34acba65db4a", "indicator--0488d362-b625-4c59-b462-73d70276b4e6", "indicator--f4b3631c-347a-4f57-9f82-c082232029c0", "indicator--7412cf36-29ce-4768-87b6-d64f787cb1d9", "indicator--9ae2a305-b27b-4df6-a51f-6e1c70b33596", "indicator--0b5d2051-e6b1-496c-ad18-f94f58cd9ed9", "indicator--17d2a5b5-5330-4686-83b0-90bb97562b39", "indicator--d189871d-41e4-42bf-a1a4-05f256d697d4", "indicator--be36f944-039e-421c-8cf0-48199ba8f7c5", "indicator--63d81f32-67d0-40ac-90e0-43edb9703569", "indicator--64aeafd4-d317-48f8-91b6-0a320efcc1f2", "indicator--180f5712-f178-4d89-b88f-cd950a61691e", "indicator--62ae2575-14bf-47b6-b94e-c4dae758b374", "indicator--257b84b4-d181-4e80-91b8-93e581c09e27", "indicator--8bf3d160-2753-4d8d-b7df-2345a551d887", "indicator--dc7ab225-ff59-4fca-a142-6a24dc893771", "indicator--b3a43439-529c-4eae-991d-9f4210401b4f", "indicator--26de3e08-2d6f-4ade-89a9-5e7c0a98e49c", "indicator--23cbfc9b-8a70-4f35-b526-b50f8d19223f", "indicator--c2d9c7d0-4793-40d7-b7d7-adcf677f28a0", "indicator--b80bec03-7007-43e6-a36b-ef426f6a17cc", "indicator--3a81bc45-4aa9-46f3-bdf3-4e8af23028ae", "indicator--d3660c3c-90e3-4495-b746-c6374ecf917d", "indicator--3bc3ba51-1f7c-4d6e-94df-978218fdc9b8", "indicator--83a47943-85ff-485b-ac6e-2a61f66033be", "indicator--9d5128b6-f0f8-4bd2-8976-1de37e4e13ce", "indicator--eea9232d-f0a5-4a5c-8245-82603d1315c2", "indicator--2d3c2bff-bdee-4916-adcd-bde2d88f6671", "indicator--0fcc9206-b435-4218-8c23-cf0e60d82997", "indicator--a7efaa11-4304-44d4-8c63-ea7f94cf5609", "indicator--c6993c4e-51eb-4df2-827a-d65ff58ef38b", "indicator--ed923d8e-13b1-4fac-905f-2aea67e560cb", "indicator--d75ab818-3747-4b72-8994-9a29e838b851", "indicator--1795f75a-ab47-4e49-ab8b-fed0f4909611", "indicator--ba660eda-08e6-43c7-a901-185a7d928945", "indicator--d1159110-cfb6-4884-891c-d7893e48b544", "indicator--58714572-cc54-4e69-aba3-ae1a0e851eb0", "indicator--1e320ff8-6ca7-452b-bde4-a9331e7ffd5d", "indicator--857725f1-c9a7-46f3-9870-9b18b3dd31e2", "indicator--2c59b994-b663-469a-ba89-51665cc2468b", "indicator--2b1daf04-5307-4e48-81f0-9381f5ef4425", "indicator--f67e04d3-417a-4523-8da4-25360f38e5db", "indicator--9e0db92b-2b8e-4a74-9382-aa30c8f400a0", "indicator--93acdc9e-2ec7-4396-a68c-42624a71f36c", "indicator--5abc6580-8d94-4231-b38b-3f7edd3ebb27", "indicator--59f912d3-5fb1-4d2a-a375-efaaaf5fc178", "indicator--de4b1928-ff9e-48fc-a330-00996cff1cdd", "indicator--351dda25-5be3-4042-a2d0-2239f8c9ac63", "indicator--f96bd74f-c91e-41f0-843e-1a1e069dda28", "indicator--39f7736e-41a0-4c7b-85de-9ae1a33cf2a5", "indicator--66dd4f63-2a30-4f27-be6f-6b8821aa62a2", "indicator--a92258bd-7a97-4147-9831-c5a877b3a4af", "indicator--0984b5d9-f234-4eda-9640-967450729575", "indicator--abbaef4e-862b-416b-bf5b-750f14cf0ae4", "indicator--78ab045c-c578-4ac5-8285-c8c7712456ec", "indicator--4530c5cb-48e0-48ba-964f-da51b156df14", "indicator--7c0509f2-5021-4570-9fc4-e10e48508aeb", "indicator--aa10f9bf-8d3b-4283-999d-d243d078932c", "indicator--31805f86-2abd-4c07-a728-bde22fb0836f", "indicator--68c8e0d3-ee40-4543-a167-b78a8803ea5a", "indicator--8c31e644-a76d-4dc6-8ed3-0ed7deeea3c5", "indicator--2a252768-59a0-4731-85ec-60189c142a15", "indicator--3700d7c4-5a7c-4338-a0c2-60ce0d7a1ad6", "indicator--7234145a-62b5-4e03-998c-a9bcf615e255", "indicator--78efd045-ce45-4f63-8c61-d2dffe3de355", "indicator--fb6bc7a3-f337-41c6-93c8-74fdc60dade2", "indicator--b964e54b-e6ea-4e83-9fdc-82e7da0caca4", "indicator--72dec019-e69b-41ef-ab19-3b81e781acfc", "indicator--c30dcaa4-b3e8-4dc9-b8b6-6c1fd4b8a6c3", "indicator--28d8d656-5e82-43f5-bfb5-1d2624d148f6", "indicator--7b0c20bc-4d55-4acc-bd2d-75f753ddc551", "indicator--45fa271f-9c00-4b03-829c-6440bda32c22", "indicator--f719a35f-9e2f-48fd-89b0-dd17f107ac3f", "indicator--22aa9ce6-e84e-406a-9fa5-2fb159c2de8a", "indicator--9494a78d-ca41-418f-983d-932b8c34cdd2", "indicator--b3165671-4b4d-4420-9714-41e11cc17168", "indicator--68b4b14f-200e-4b9f-ae06-37ad811efc44", "indicator--e24e9bb4-3f01-4042-9183-c9b65bf71bdf", "indicator--ec50708e-54b5-46aa-a1c8-d606452bf6eb", "indicator--7b4ef387-7194-469a-b84c-d12f66a01d0e", "indicator--2c7d22f4-f64e-48c9-adac-958daf9f8abf", "indicator--234afd40-d7f1-4cdf-aab4-4213493cf048", "indicator--9ce7c0ec-97af-4970-9c3e-6ea12164a3c6", "indicator--8aa11945-f0b6-43e6-bb64-238bd2d6925f", "indicator--c3d40fcb-c2f4-47ed-bce1-5fcdf4123c49", "indicator--69aca5d5-6331-4daf-80a1-0eeed4ac7482", "indicator--2e7e06ab-f87a-47d5-ae1d-f22a157d3f76", "indicator--66b6c2a8-f462-4b1f-b68f-03cc6e8a5bf5", "indicator--f419553b-ac8e-4a1a-950d-9514eea3592f", "indicator--c94e578c-905a-487e-ac56-a4a0b894b7bb", "indicator--8921d5b5-69d3-434a-949e-2101be800703", "indicator--6d0b856c-26d6-4dce-b735-24021d276c77", "indicator--e42747f2-5d25-45f8-a2c4-8bfa758f8f52", "indicator--629028f8-e09a-418f-aa6e-eeac4fbd276e", "indicator--07dd00b4-1e2f-45b1-8846-31bb62c2fd40", "indicator--f7bdd7ae-2f29-4c00-8c98-2ed926bb6849", "indicator--5b622d00-a64e-4b49-8812-8d26aad57fea", "indicator--7c6d62b2-d496-480d-be4c-9e3b290f57c6", "indicator--1aca70ac-b74b-4ea7-b58a-b092d17886ca", "indicator--40ce6435-10ac-4292-a7da-d00e2c2810ab", "indicator--5a0d4bab-3ea0-4fe6-93da-3743499c577f", "indicator--29ae3e91-1e2d-45f2-ada0-4d5b57d682f4", "indicator--6ee21bcc-d30a-4714-81d9-a09f2eb5ac8e", "indicator--049ef0a0-920a-4a2d-b0ef-5563e5dae8be", "indicator--5c040568-76c6-4646-9988-6b0a5cedf91c", "indicator--1111972a-cc3c-43df-8059-6c0bd91c0554", "indicator--850d73b1-fe6f-4757-8a51-07c32f3cd6c6", "indicator--16e126f5-4b4c-4a25-af44-3caf4942d446", "indicator--3afa2f4b-e055-4a6b-ac05-bb71de9ee79f", "indicator--21635278-81aa-4f27-a64a-50fbd4ca027e", "indicator--2f733360-c328-44ca-be4f-3554d5f4fdca", "indicator--14ff86df-bc6f-4df4-8c66-bda4ad814100", "indicator--8556f1c4-1628-46c8-af44-a37dc528fe9c", "indicator--ef091bfe-df21-49f7-8842-cfcf9cc5d864", "indicator--3609f416-5a08-4092-8d6d-306cb934e170", "indicator--d8277d5e-2542-430b-8833-650211ce8358", "indicator--234fc8bc-cb11-4385-b3e1-bb1095372fb9", "indicator--567d25d4-08ad-42a6-a344-6d322bf0ecc4", "indicator--a2300412-1c9e-4d05-a690-d2ff3faf0e04", "indicator--13baf0f0-5a7a-4184-a228-5d817495291a", "indicator--29388602-b6bf-4778-9710-786da1cc2a34", "indicator--6521f2f7-7dcd-4845-8615-bf58b696918d", "indicator--5909f73d-82c8-4e21-b116-d7847210b014", "indicator--113f02cc-f798-4e33-907f-08c8855e17f0", "indicator--7c2d9a3f-dc5d-4b5f-99a2-846487889f14", "indicator--ca7a0d9c-ad5f-47c1-9bc2-014d6b764f1e", "indicator--c77575df-caad-4ebb-b36d-41d2ac3db6ca", "indicator--d8cf277d-0e6a-42df-b176-a05fc844a31b", "indicator--c7cb8cae-8576-496a-a5f5-36cac09bac3d", "indicator--c0606797-dd98-4cb2-b20b-5ca0723c716d", "indicator--1d8ebf44-6062-422e-9f80-040662c112d0", "indicator--608843f9-6246-41af-9f51-ac78a3fda5fe", "indicator--fc453656-2f02-47d5-bda8-0d9aacb735a2", "indicator--5afc3b57-3310-4294-be14-6bbddd8091e4", "indicator--47aaabc7-6056-4119-a05b-157b95f924e6", "indicator--cfce1016-fda4-4a52-8c55-429006be3a51", "indicator--f0fc63ed-5359-4392-9be3-c8c758a67e89", "indicator--32cd1711-3ad1-4f6a-8d73-423fdae52676", "indicator--0a80bfad-14a9-41ca-b027-0ffc5aae5023", "indicator--f3052d88-3f44-4631-b06e-69a718dd7bd2", "indicator--a1700987-5085-4e96-a0a0-bbc0e76bc777", "indicator--4dd8868a-6c15-4a1c-8781-5dc186e82a2d", "indicator--31793d3d-00d8-4ecc-b3a2-f6a0a5def347", "indicator--33f9db91-d3e5-4d90-9b7d-91aac3690226", "indicator--f5af9a85-419b-4e3b-8018-f4ad40a267d9", "indicator--b988eec0-07a7-4043-ba31-bab7a8322e2f", "indicator--b11d1a42-20f5-4820-b09d-cafe4a67907c", "indicator--404b4400-0772-482b-b6aa-c674caec56b5", "indicator--f1e3d134-0555-4f11-9725-46b0a4dc5f6a", "indicator--cb1a3d4f-14d0-4a51-964f-4ce388ca3613", "indicator--ce1a34ce-ba28-42a4-9a8e-d0c1f030efc9", "indicator--3310e2c3-7275-4c72-b4cd-7e94380b0414", "indicator--62e42972-a6ef-4a3a-94ea-a2d5e42fa4d4", "indicator--f305d4f8-06c0-4367-9d8e-9ce200e74b82", "indicator--c02d57e8-9dcd-43b5-afe8-0e90faf6228c", "indicator--f4f175e0-3164-4f8b-9da7-a08b89bfe937", "indicator--7d2e6b2c-8919-4bba-a7b0-03ce4ce4d80f", "indicator--6c37529a-5bf5-4b72-8c94-885bcb479583", "indicator--95a69705-0d8d-4b6a-aa0b-f05a4c3dde2f", "indicator--77760915-f004-44f8-bda1-b732d78eab43", "indicator--d643c66b-64ab-4de7-89c5-2aefc0d79a16", "indicator--4b3f7582-4a9d-4025-bb23-a29f3471bc0c", "indicator--4b6f1ece-3aef-4ac5-841f-2678c1ba043f", "indicator--8005512f-9294-44b5-b988-ecc02f9b0669", "indicator--ad269240-790b-4726-8c5c-64aa37055eb2", "indicator--96900891-3e47-4147-93ba-0c6b8d8419e8", "indicator--e2df8b9d-d114-4387-b0d6-fce85322d0dc", "indicator--94484e05-502e-4088-a97f-419bba647891", "indicator--efd47004-1146-4717-ad3c-7849f4931d4d", "indicator--6fa12925-20b5-4390-8c53-1153f036d239", "indicator--980c2394-5933-474b-a05f-4c1bc087fe88", "indicator--c293b86a-4c11-4b57-8db1-618f70c4a045", "indicator--79eeeeb3-5401-4ae8-9c5c-7473f9f9f91b", "indicator--8ee652d1-ca38-4b99-90e6-7f50ad828ee9", "indicator--e6b13c52-7797-4eac-b402-1bb00dc7513c", "indicator--d8899469-749c-4e92-a9d2-a6446e787bc3", "indicator--05d30dd1-2e65-4ef9-83d1-093777f34b69", "indicator--ece2ef37-5d63-4132-8210-fae7dda56f32", "indicator--25ca1208-9f2b-4a16-99ba-014520d00929", "indicator--8d6116fb-0e6a-4d77-9d1b-1cfd1b92f672", "indicator--e5c898e9-1768-4d58-8186-2048fae79153", "indicator--15dc63d5-3d93-4550-b88b-3e66ab633ee3", "indicator--9559523f-4ad0-4784-858b-637a4f2720e7", "indicator--0e353d80-cc63-4eca-83c0-304c3e0e5f39", "indicator--948fd01a-f76a-4d98-bd9f-900444ab412c", "indicator--0c8a14f1-bcd3-4388-8339-d223ce5280b5", "indicator--8bc3f711-f9c8-4ca2-a22c-6a59f0d672ce", "indicator--a588829a-b1c6-403f-a1d2-6581a11312a1", "indicator--7023d047-c304-4017-80cd-45249a370bfd", "indicator--e030b07a-0fc2-40a6-afc6-de819a8c64fd", "indicator--9593c96d-bfeb-4af9-a94d-47b623d0cdec", "indicator--6c558433-1ef2-4ddc-922f-e317a7c3a9e0", "indicator--2e67937e-d9d5-437d-a799-a7524d8e37e6", "indicator--5984badb-4390-4575-86b8-7686ba0f049c", "indicator--4432719d-66ec-4cbb-b1da-238064c2ebe4", "indicator--8f6f2c2a-c062-41ea-affd-014a7f115c58", "indicator--9dcf2e06-e880-48f2-996e-4977493c6892", "indicator--6f3beb28-a186-40c8-b254-84046a8e2c26", "indicator--5bb0c469-8ddb-400b-8785-af9f7568eccd", "indicator--791e9d54-347f-4da8-9c01-16aeedcc94b0", "indicator--f9059035-41b9-4ec1-ad28-bde1cb92e839", "indicator--81e51049-09a7-4546-ad1a-6cd86f5440b4", "indicator--f6cf5603-f20c-49d4-ba69-d5ad32bffc4d", "indicator--31447cbc-ce48-4d9b-85e6-03f08581faa5", "indicator--1c13501a-bff5-47d0-ae9b-295458be9cb7", "indicator--24ebbcee-12c3-4e08-99d6-49635c53b71a", "indicator--174bb40c-d92c-4945-ad0f-3aa4046d9d43", "indicator--c9830420-551b-4f61-a65f-3b46278f3192", "indicator--bf1991ad-3f3c-4ce9-a125-159c34defdf3", "indicator--46803a70-a425-4861-bbb2-d2430d1a4300", "indicator--08b0d761-11d0-45c0-962a-5d06df71bb3b", "indicator--f590e631-c97d-40cc-a690-bd9e2c3b8448", "indicator--19c5cb5f-2305-4afe-9974-f8d09f36521f", "indicator--61e7dc29-3f6c-48e4-b238-901a19d77ac5", "indicator--869166e5-36b0-44cf-87d2-c9b3c6838ee0", "indicator--4a6e7bd6-70eb-4468-9ff4-e311ec7d9a6e", "indicator--788222bf-db4b-4d0f-9107-f0e0582fe694", "indicator--e4184376-de62-4b60-91d5-0b0022e8686d", "indicator--2aef2207-42e1-4ce8-a59c-6c8f1b522891", "indicator--3b89d52c-c873-4f70-b59d-ce0848184cca", "indicator--96571183-bb82-4933-b470-a2fc28a252ca", "indicator--38c611d7-ff43-4c39-8514-f04317824ee9", "indicator--cba8ab22-40b6-4577-a4f2-f55312233c76", "indicator--cbc60971-a53b-4c3f-89a3-9b7d7acdd3aa", "indicator--a35a5bb8-3a91-4d12-ba97-d88f01bcd62d", "indicator--3069ebaa-fd09-4685-82cb-a9940b5277fa", "indicator--58060653-7441-496c-a76b-22bdeaaa3a6e", "indicator--700f4f6b-6df9-4e77-8763-2c422a30f830", "indicator--f394518e-e055-4fe1-9505-d03457c2d946", "indicator--55a541ec-7bf0-4644-bdd3-90b4fd7dfb0c", "indicator--d0cf57e5-ab3d-4774-b0f1-1bc85398b8f0", "indicator--caacbbf0-1ebe-4dc1-90d0-9abf0a941491", "indicator--b9c47705-b338-423f-833d-445e08565caa", "indicator--71c95828-2ab0-4344-99fd-1f7831f28689", "indicator--e799e216-9b12-4f9b-8c43-e320869687d3", "indicator--a5004f5d-8557-4a09-8962-36c2473791b9", "indicator--31440561-f66e-425c-a90a-238c67f808e5", "indicator--3c2c8312-3dcf-47ac-af47-61523d331ef8", "indicator--29158497-69a4-4d13-9bd6-cbf857903ae1", "indicator--9a4c0776-238e-47ab-8b7c-aa9ed05bc9f9", "indicator--448c4925-a5f3-4d81-bf13-8257f96b66a1", "indicator--e525ad92-0142-4253-9134-3ed7893c2fa5", "indicator--28f60c9f-a02a-42c4-a50d-0d8495eb20a3", "indicator--6707d5aa-b798-401d-9b40-9ad255b76af6", "indicator--cd336939-1217-4962-acce-ed2afbc0434e", "indicator--061d02d6-1f5c-4074-a9bd-360f4e9e0fce", "indicator--75e1183c-3d80-4de6-bd4a-752a02e6eead", "indicator--a87678f2-4aae-4dbf-bef3-172fbac3cfb0", "indicator--a4540ef0-f97c-4a67-ae5c-74217d92da79", "indicator--10015366-8e64-4d02-9024-fca9af280fec", "indicator--b80374af-f964-46be-9dc3-045c5673f47a", "indicator--da995b6e-060f-4383-acdd-5278fdc223ae", "indicator--de7b637e-99dc-4bed-a708-f1a332837ab9", "indicator--7571491a-cc4c-49c7-8e04-874f5f6418ae", "indicator--6e7fc472-752e-4653-b23c-d434a2e78517", "indicator--e480b83c-e281-4832-92dd-7a7407c27443", "indicator--da7bffa7-30dd-4489-9451-30c966fdd921", "indicator--d78a49b8-f352-4d0c-bbf8-85a8deb763d8", "indicator--82c5455f-401d-4a60-9dcc-8cdad1e16128", "indicator--5320f3a5-088f-4a35-ad0e-f5af21aae55f", "indicator--f75a2230-9e9e-4233-a9f8-1bc548bdbd1b", "indicator--07be22fe-9f30-420e-99ba-83a73307d2b9", "indicator--751c503e-b858-4480-b7da-66b36bd23bb9", "indicator--385de410-b69d-4328-99dd-2c82c2b89929", "indicator--8cfe4ca9-b026-411a-84fb-78e6d3e89560", "indicator--c5478163-5ef9-4beb-b8d8-f7b26d922e88", "indicator--0b09008d-75af-4c7e-b592-38f6a0dadbce", "indicator--a3748a21-9f93-48e1-b929-7206ae1cfdb3", "indicator--2bf261ed-2adb-4cda-89f9-db668771c885", "indicator--fc237904-9282-4618-a5a3-47504af4fb7e", "indicator--4ae9beb7-8caf-47a1-8b43-0c565cce86c2", "indicator--9890f469-02f2-4a57-87a8-7ca90e407f86", "indicator--fbc97bc5-5205-48ab-9efd-760ce6e96224", "indicator--32292e30-f8bb-4bd7-adc0-5b55c5c4f16f", "indicator--c0c5f2b3-7f6e-4e35-af03-5b95f34c8fb3", "indicator--2ce1ab2c-fde8-43b0-b8df-e82e517c12b8", "indicator--0711ae8c-08a4-45b5-8e89-176b1800a5d9", "indicator--e0f5f0f0-1cf9-41cb-94b7-6dc6b84a7de2", "indicator--858f0828-7e26-4461-8e3b-88c27fcee471", "indicator--53cd1084-46fc-410b-b7ef-64c61231bf83", "indicator--1b6f60ca-53f9-40a3-85f9-97d86f38fd1f", "indicator--9699a527-e962-414d-806b-e4176177ece1", "indicator--44be4d3a-f3d5-4356-82ab-01fd58646db0", "indicator--8096fed1-aade-440f-9d94-b77ea3db8adc", "indicator--d9144961-9688-429c-94ce-d440af031fa9", "indicator--9396ef46-a6f7-44c1-93e6-e2a4e6242ddb", "indicator--096f67de-dc14-41b3-83d9-c8037386b95e", "indicator--cdfbe3bf-902d-4991-874f-29b0fae0ecab", "indicator--c1b7f268-8820-4209-bf4f-0be74e18843b", "indicator--7a044f41-5eb6-488b-8865-4fb6d2fb5a97", "indicator--fda12dfd-2dfb-44a4-aba3-19bc412ba23b", "indicator--9a1182fe-8c41-4fa4-87e4-0dcebbd92afc", "indicator--9f7fc442-b695-4294-8c26-0a8ec43e57d2", "indicator--9bbc9901-fc37-40e9-af93-c92b40b4cd87", "indicator--7ca885e2-dd28-4cff-83ab-aa22207cdab1", "indicator--2b48355c-e392-40b2-80d1-fb0d13aa14e4", "indicator--22204001-942a-4a07-a33b-b2535aeb7a47", "indicator--4e54cde4-2481-438c-a379-d0dc15e7be0f", "indicator--6bd881cd-13e3-4858-815c-0161a883d92c", "indicator--1ae98289-5e46-4aee-81a9-498041d99edb", "indicator--9bc0e876-e069-4549-b849-842cf527ec09", "indicator--94550339-df1a-4f92-81f1-ba872a46b00f", "indicator--7143793a-aacb-4a64-b98b-b9a4aa1ce3c8", "indicator--545b6659-749a-4da2-aecc-c2ffaaa1bddd", "indicator--a0cb2027-011b-4c41-9d3e-68762cd323e6", "indicator--fa8f7f5b-31ba-4d10-bf3f-49f38a197425", "indicator--7efe4546-e68a-462c-882d-e927f86ee02c", "indicator--8205bd8e-0672-40fe-aad4-a9559b6cf6b8", "indicator--47080bc6-f5c1-459e-880a-a2a7d311e510", "indicator--8915cd46-5435-425a-b416-c740bb491eed", "indicator--35741d53-7a7e-4e2e-bdc0-bb01859a7cd3", "indicator--779ecc6a-797a-4eff-aa0d-10e2b2c8542a", "indicator--daeead2d-33f9-4192-9ca5-3b6cecbf56d8", "indicator--b07d56e0-c1ae-46e1-a944-3145f2013917", "indicator--739e0d1f-e2e2-406c-918c-4a24d90ed0ca", "indicator--8a32c520-cfb4-4ca8-9607-6bcf809842db", "indicator--f6b3f224-c6a5-4a5d-800f-95b0b8bbaba2", "indicator--d545dfa3-f327-4e7a-987b-5ee9a80fd5c5", "indicator--200424d8-161e-4fb6-9dc7-f92a4e659009", "indicator--579cf7f6-8025-4d08-989f-6b88632d0f65", "indicator--0f9e3497-aac3-4ba9-b91c-642d56d93b28", "indicator--41a217b9-9b5c-439e-b72d-ef32081d8c67", "indicator--87eccc8d-cf3a-40e3-8a41-87339a0188c6", "indicator--26e8a869-77d5-4592-9675-e947a965e775", "indicator--4132efca-634b-408f-bf71-b48c0d21239c", "indicator--597300ad-9ac9-4f74-8d54-740f9429a828", "indicator--cb342cbd-6e33-449b-8ba5-da08add30d0f", "indicator--64172a7d-eecf-4d6f-ad9e-6c8ca63ae8e6", "indicator--6e98a838-e3f4-4770-8531-47f136a3da41", "indicator--ffee1503-5846-4cc2-bff4-db8d2b997581", "indicator--f6b72d21-efcb-43ac-b010-95d33d3cf8e3", "indicator--fe7a0ab9-d39d-471d-aee7-fd291a54a92d", "indicator--5ace2b75-ad1e-436c-bd20-d9e3f6d94886", "indicator--36b5df53-2084-48fa-ab17-9d6c49a226f7", "indicator--fa828f95-eff7-437b-8e95-9ff7235ce795", "indicator--061dec61-824c-4912-9d27-50667aea87dc", "indicator--d133a16e-5c3b-4239-85e9-84edde47e4c8", "indicator--688c6276-7d4b-41cb-b66e-356ae81214f4", "indicator--79e5823a-3c57-479f-8e55-1acc2c46dfae", "indicator--a6b8c060-cb92-493d-8a0b-6ad59c65b4dd", "indicator--1164c193-5e67-42cb-950a-80a09d07f600", "indicator--af4c0cba-9e3f-498a-b8fe-b51961006e6d", "indicator--7e017b8e-8db3-4f9c-8633-8b9cea0d8f34", "indicator--ea623407-83ce-47ba-a40d-de9187ac733f", "indicator--a2b1daa8-d826-4a3f-a157-06693e642069", "indicator--1cba7219-ef24-4839-adad-416be3f781e2", "indicator--6e297bdc-92b6-4566-a556-1b239fce98c8", "indicator--17f55400-d417-497b-b1aa-2e7452641e78", "indicator--5a3a3c67-0ceb-41be-8a1f-631ec1d6bddb", "indicator--024c2ac3-884c-4bb4-990f-72c9714963d7", "indicator--3d6b4875-c45e-4bba-b418-ed74f6a121a5", "indicator--e17494c2-c21e-49fa-b95d-bbe2b87ddefc", "indicator--36b0a3e4-55c7-42d6-b266-ff9d0af2ab07", "indicator--619446a1-efa0-46cc-88b6-27e50bb80627", "indicator--9cdc5f23-65b6-4770-a5d5-4b023baf1baa", "indicator--97ef3827-0754-41f9-aa5d-db960a3b3d03", "indicator--ab5f7153-8660-4592-a306-e1dace554d10", "indicator--61ec8088-5533-4116-9466-57dbf75554aa", "indicator--253cc6eb-5c1e-420c-9266-ddaaed1a6652", "indicator--65c185e2-96e2-4314-a425-a7d8aff22ed6", "indicator--46c25778-dd75-4c8f-95a8-fce9b33e1f81", "indicator--7cba1109-620d-46e2-bda9-c32a363878e3", "indicator--43139594-9f91-4f78-b910-fd24e53b8dc5", "indicator--3a2af368-0dea-40f2-89ef-6472a088d928", "indicator--7c6b065b-4a63-4af5-9cc8-1da6c7f9c49a", "indicator--5f3b3271-e2c8-4cfc-a7bf-01774a0b4934", "indicator--52ba488a-0000-488b-abdd-97b7c7be25b7", "indicator--154be45c-7a56-445f-87c1-b54e4072afa9", "indicator--b7bf63bd-f50f-42af-a474-d4715e05ce49", "indicator--469c9bc8-01d1-4c88-b9b9-546a70cccbc0", "indicator--8845a0db-4032-4b3b-b2de-0f42d56ee936", "indicator--02dc62f6-1d47-4e22-9d3c-0c90f957adf3", "indicator--f2cbb82a-ef3d-4649-979a-a5984c93db09", "indicator--d3033be7-3a5b-4a29-8972-a5dd2d78fa25", "indicator--11b874f6-147e-4666-ac95-770cb7e40733", "indicator--fc0afd25-4f6c-4076-a679-f066fc7aadd7", "indicator--504d29b1-b50c-4219-8efc-4ba728d9f754", "indicator--e56193fc-eb06-43f1-8dbf-866532195ea2", "indicator--5e72efce-0b35-410d-8678-0fd4ed4154be", "indicator--94801e28-4098-41d4-ba0e-39fa433274ec", "indicator--ed654b06-2a7f-42ab-b480-75a85b390196", "indicator--64344892-1670-494d-9b63-a6992d701878", "indicator--9d8ec5d4-6722-42ba-bb12-bef767530b1d", "indicator--d400e5c6-fa93-4fb4-bfcc-e3a816bbf505", "indicator--40527ee5-d204-4c38-b78a-6ee85ea102de", "indicator--0034f501-8afe-40e4-b9fc-91fc66d9e351", "indicator--c2153999-1244-4c8a-8b2a-c9431f4e70e4", "indicator--0ac6b649-ae90-482f-bb1f-b1dd832bade0", "indicator--d019c08d-f5c5-46b8-8fbb-a0496ceb4d15", "indicator--5ce0c742-779f-40a4-a03c-4b1e61c63f19", "indicator--615f582e-5ea6-4ad4-9c4a-7db5661a352b", "indicator--06527959-fc85-4855-bf86-dd1b808b1e00", "indicator--22b6ed29-0c0e-498d-9809-a1472f12ba0d", "indicator--c6beeb26-1b9c-4a60-97d4-ce297a0a7be3", "indicator--05fd11d6-6512-441f-a0b1-81c19794aca1", "indicator--05dfc76b-e939-4fe7-a743-48cf93d33cb7", "indicator--a7b22f10-4417-4ec9-8b68-42672258865c", "indicator--362d1604-8afd-4ab5-953c-db479c4168d4", "indicator--2f36b108-a2dd-4c83-a0c3-61962de0efc7", "indicator--c1c647a9-b537-42c0-bcc9-c3da7da7b396", "indicator--513aa445-8799-4ba8-a317-81f03450112f", "indicator--7cc6cf37-7f2f-45d2-abce-234048f590a0", "indicator--bed42f86-b9a2-4af6-a605-a3a57f023355", "indicator--ccce0e7a-a790-4f00-b2c2-60ee990e34b0", "indicator--fa78e23c-a255-424a-b3b1-afd430d8ebe3", "indicator--24110b95-b062-4e2f-9b1c-3316284403e5", "indicator--a0347565-3bfe-4515-9610-cb929b779410", "indicator--00649da8-258a-4f82-a48c-90c3b2be15fc", "indicator--3386b851-5e1c-42d6-af69-5caa2254f7c9", "indicator--2a8120c5-de29-4757-95d4-ce7368a41511", "indicator--ebcac80c-9f67-4a92-8166-bc484c4a53b1", "indicator--34a86a7d-1f39-4a27-ab06-f4ff800f8c85", "indicator--ff170d06-8e2b-4ef4-83e8-3bf8d0265013", "indicator--cf5e11b6-fcdf-44ee-b79b-e38a29feed12", "indicator--79199d37-f4e6-44e1-9127-b343538b489c", "indicator--435b5feb-f4d3-4038-9327-88f510e0a914", "indicator--77f2a8e6-9bb1-41a5-90c8-8f4a4b20e0f3", "indicator--aa8b3017-bc98-4f49-8a7b-f98b3b94e4c0", "indicator--f5cb4b01-b238-440e-bb9f-27fd0583dd2d", "indicator--555fe364-5c02-4369-b0b8-7bfc490c46ab", "indicator--59248d33-ec35-48d7-95e6-44921debc7b3", "indicator--bd2fcd62-df72-4298-b05a-e332bd411c9b", "indicator--17f0151c-a1c3-4830-911c-6eb69c15d924", "indicator--0dd41eac-5ff5-41a0-9d92-549b1678dc95", "indicator--4d0db0eb-4c1b-4c0e-8518-9913f1f9c347", "indicator--b1643502-8e71-4198-a989-654ee4c741fc", "indicator--65a129ca-4ea5-4dff-b578-67b0154d51fc", "indicator--53d26ca4-8cea-4098-94a0-53233990da6b", "indicator--cf5197c4-7389-4238-a902-57fc111613f5", "indicator--f15a5ba9-5429-4c70-97c8-fdfc8f2aef15", "indicator--728ef960-afa7-46e4-a679-828df1dc88ba", "indicator--6575c736-a3e5-4e65-8c50-8560521e0ffe", "indicator--b388b227-f14b-4db4-b050-c40afdfe6ada", "indicator--b77eff33-418b-472f-b2ea-b0b6a30ad9e6", "indicator--116d293f-7403-4e2c-8abc-b36e149552bc", "indicator--b46b3851-7c0f-47d1-ab83-9e094fcae219", "indicator--54b9ffd2-86f8-4979-9f86-0951db854154", "indicator--c0912a0e-c66b-4e79-bda3-8fca9b06b98f", "indicator--51d40ff7-8b5d-4b6c-86c4-403a96b86ab6", "indicator--0a0dfb51-b56e-4773-bfe1-6632a442bff1", "indicator--df79ad03-5e0d-4501-b8ca-ca36cb4e7b83", "indicator--9737b217-6476-4bea-a41d-dccba8109107", "indicator--391d6f9a-26ea-463f-8bd4-7acc046de3ce", "indicator--e77254a3-a7e3-4975-9f38-a0cf4bdda1f9", "indicator--fc905e6a-6d52-4f1d-bde5-17431bd93876", "indicator--7a73c223-10d8-4399-9084-41e790818b06", "indicator--7e3dc1dd-b511-4e78-907a-2e63b1007a4d", "indicator--38f2f69d-a031-461e-96f9-5a6c3d94636a", "indicator--8c4cae9a-d34e-430c-8baf-7d4f31c8d5d0", "indicator--a9ed6d3d-e789-47d8-abda-1cf0d30c26a4", "indicator--c9b4d01f-6bcf-43d8-9a96-9a97d7d10d23", "indicator--49887c85-6873-427a-8050-b712037a4f0b", "indicator--83719c04-c06a-4d9b-a638-29e1bb3fff72", "indicator--93b7d919-caf1-49c4-bf5a-7c08b1b59115", "indicator--2521b3f3-efe9-4501-bf6b-900d710b0fc5", "indicator--501c543f-8826-4b62-b1c4-0a3127397ca2", "indicator--b1ed1a09-f9af-41e5-b183-bef358abea7b", "indicator--00f938a2-7140-4cd6-982b-6013b25e0bb5", "indicator--98bfced9-6fc4-437a-8b9b-5c3726476a9a", "indicator--8ac73514-a56a-466e-acb2-a70dad72b880", "indicator--b52c65de-22a9-407c-8bbd-6e3c243a86f6", "indicator--8c7e1ec6-a1ec-4a17-ab72-6d65d9606739", "indicator--0bc64dd1-2835-4a00-bd02-f3ddec5bf1fd", "indicator--81851385-7770-4750-b812-5a15b7ac1b8a", "indicator--3dee4de9-b5d6-4e95-9389-dcefe4715779", "indicator--dbaec5ad-13e4-4518-a036-660ff4652ae2", "indicator--94c4bb9d-5968-48d3-94f9-bcab4b02ac72", "indicator--e772aa93-1b97-4ac1-aa3f-8758f855aae6", "indicator--e1a60d97-9443-46f0-bc8a-4d9f9570fde1", "indicator--41e59c7c-8a42-4021-94de-3a04fd4d6b87", "indicator--5d865289-1d1f-496b-bc66-ca88ebf63bf4", "indicator--613a1004-03aa-41e8-be36-6fbe712397f6", "indicator--314b5d64-75e4-4cd2-b59f-d63155372a9d", "indicator--df1a23cd-3ec8-4898-9821-25e4667d384c", "indicator--f328e6f6-e517-4f39-b8ae-aa7d9888ea20", "indicator--51860354-022a-4557-9d29-62ed6df04206", "indicator--cd89ea0b-8f5e-442a-9058-443dfd224c87", "indicator--dab116f3-bb6f-432d-8827-cbbb5f799100", "indicator--e6f427a9-c6ed-46bc-afe4-ce27feb818c4", "indicator--f6cc5bb6-af9b-40eb-9471-1740ac0cf0d2", "indicator--9240dffb-e06a-43be-8da5-5c406bf33ca5", "indicator--09450731-b52c-40e4-b195-e5452733a361", "indicator--30d7af4c-f09f-4e6e-a3ef-0cbbe1820954", "indicator--32e4b25e-7718-4b49-a780-40582d64cbe6", "indicator--f263dbd3-f8d7-4808-9c40-de5d53d743ea", "indicator--e1c88078-6a10-4685-9295-f10ce9762f0a", "indicator--91ca3630-6ff8-40a4-b4d7-66a27b00c9d8", "indicator--7425d053-d14a-403e-ad28-d7a3ba9c4ea3", "indicator--03ce5fd9-9fc5-448c-95cf-d6e3bf41b334", "indicator--1470be48-e970-41ee-9400-b714943c95c5", "indicator--92df88d2-9834-40d5-afe2-b54867106260", "indicator--791d7bee-ff7a-4139-8fb5-595d4ca39f67", "indicator--636ee8d2-972a-4cb7-b34e-c3d7094af62b", "indicator--5a24ac6f-de5d-443d-b51c-321d9e69ba96", "indicator--d92ddbbf-e3a9-43b9-b1a7-b311f28bc132", "indicator--1f4081b8-7237-4b1a-9880-34c3a8e7eb49", "indicator--6973aad0-6e19-4f3a-a0bd-ac7f7f6c97e0", "indicator--e6218152-a76f-4f13-952c-ef7e5e92670c", "indicator--4086baf1-bf1b-4ee0-8fc3-497e8ce49ab2", "indicator--7b796dca-52bc-4281-9adf-0982ac46ded3", "indicator--cd86e381-0a31-483d-9b76-7cb9d88fbe04", "indicator--2e851a74-5dee-47db-8c46-5ac572210bff", "indicator--c25c31d5-8062-4cc6-8fca-8a494d250d2a", "indicator--8b9dbef5-0616-4633-88dd-9ae7f93d4dcb", "indicator--6c45f08c-62e5-458f-9be7-55f5907b2611", "indicator--83ae2a1b-f30a-4b2d-b945-8d43acab77d0", "indicator--daee1c4b-fa6f-4d58-9cbb-06715443d1e6", "indicator--76e568b3-a0a4-4c2d-8de5-f27802303d82", "indicator--e810d880-1dad-40b7-99ea-7d2dbac9e142", "indicator--de07af72-c784-4f2f-bc2b-d70dc42d20c5", "indicator--6842d58a-3b7b-4c20-9109-6e73e433c0a7", "indicator--65c22dd6-749c-4988-8903-ef9e96cf75b7", "indicator--5c31b139-3fcb-48cb-a27f-eb102b40e937", "indicator--e5a769ea-b617-4a65-8329-48ba7c44fc9a", "indicator--0b997a38-2497-4c56-8127-de34be8b8881", "indicator--6a403e0f-5f61-4112-9dfe-23140ba0b9aa", "indicator--59e1da5d-98fd-4051-9891-fc7805b07bb1", "indicator--d8a847e7-7a6f-4a0a-9e09-8518ce7beb75", "indicator--b35cff6b-4f85-4782-bda2-d8eb630a099c", "indicator--109093fb-8269-4483-83e9-8b2358ae968a", "indicator--4d7e38fa-6dd6-4cc7-bd05-ba7727acf8c8", "indicator--bf9638de-51c5-47e4-b711-adcd5f5b3ff3", "indicator--a7182b79-b393-4793-b4e4-e88b421fae1b", "indicator--7352b8a6-ab66-4f76-bba6-159287cd2c83", "indicator--3b3d4763-b103-4679-b0a9-3d9f8441d72e", "indicator--3879162f-d287-40b7-8f3e-15014688e75b", "indicator--7c61ceac-60e1-4f56-81f6-6f33ca4f942f", "indicator--be87cba6-068e-4d87-a724-c0bec8d283cf", "indicator--6e8e24dd-c968-4f56-ba25-f5f81400f8b6", "indicator--7eaf816d-a01e-4fb7-8fdc-9e5cf33ac360", "indicator--f906a852-dedb-4f93-8b8e-2bc96052bc6f", "indicator--e8277d28-bc47-454f-9d6a-35ebd5b1b12d", "indicator--fff80303-f450-44fb-9dd8-9d5a8f1d5b4a", "indicator--14bd66db-7332-41b2-a80b-666307acfee9", "indicator--bba1e469-0eec-4ece-a75f-1df1e0d5d11c", "indicator--d98b3a11-1757-42fa-b654-365daa188fd2", "indicator--b34a010c-d4f4-405c-9358-edca8440a241", "indicator--bc30a491-8483-46ba-a956-a0330d8faf43", "indicator--eb17edc8-1bec-4a00-ba56-07ddfa03f81d", "indicator--253e02a8-7a48-4fe3-beac-c52548122f0b", "indicator--46f4dcf8-e2bb-4210-8614-28610fc45cb7", "indicator--f1c5e22e-7d93-46ad-a271-d6ab9393be4f", "indicator--af44b128-44cd-425d-b297-b99fd00fa666", "indicator--96bfb5c6-6b89-4b11-b7ae-c443981f1b7a", "indicator--c9111bfe-cd41-4f5d-b450-86d076667d4f", "indicator--654113b7-6169-461d-8fe1-5cfc2dbca852", "indicator--2eb248a3-1a41-4aad-8767-b92a3e8b4eeb", "indicator--f614b635-687b-4f8e-96af-a4df9c62b273", "indicator--e7ad9c5f-930c-4673-95cb-bfad5651fcd0", "indicator--3c60bb3c-1ad1-49f6-b32b-03673cefd2d2", "indicator--62b78ec4-4e03-4678-9ec5-5856f0d9566d", "indicator--58e27b06-07e9-4602-84de-958f94009153", "indicator--400b505b-24db-479e-83ae-10607fcffc75", "indicator--097d68e0-5191-4976-972f-66d3fcaa1e15", "indicator--b0466b4d-2165-427f-80e3-2565a3cc9e7a", "indicator--766e229c-c477-4619-9304-2da73609cb30", "indicator--324299bc-87bd-4366-900a-5a36b9c2235f", "indicator--1deeaac1-b013-4ac1-a1e4-70f756864181", "indicator--b9d2c98d-7453-4e0a-8102-a50fabbbb8c1", "indicator--38520eff-aa4e-4931-a1cd-4480d21f22f0", "indicator--909079e2-b71e-4018-9351-5e7e28004022", "indicator--3e37014f-9120-413d-8a6e-1f0d470ceca9", "indicator--016b3495-d95d-49d3-a1bb-9ba49843d988", "indicator--9525b78d-5b98-41f9-8abd-2d307c3ce23f", "indicator--0acfe996-9d40-4945-b763-00214868a4b7", "indicator--b420a533-0bf2-4ae8-b65e-0ed65e44d25a", "indicator--83fd782f-8e22-4ccd-917f-531d870c9949", "indicator--36f82fb2-503a-4ab8-b0df-09f92c9741c9", "indicator--75b0719c-6115-4d70-9085-0e0661c7b001", "indicator--784722b8-03c4-4fc7-a8c2-a3b6f544036e", "indicator--29164365-8f75-4a07-b9d2-e32944da9ba5", "indicator--9a385891-814e-4f90-b067-da406e48261d", "indicator--dac4939d-b4cb-4970-9875-f416ac837d45", "indicator--b9d47f41-e37b-4571-9f52-a5c2c361cd70", "indicator--e06f3126-0c7c-4b1c-af65-ae19241e1f4c", "indicator--c5040362-80c2-4655-9dbe-d438614ef305", "indicator--98760255-37cb-46e4-b75d-7a98249cf861", "indicator--6ec22fe4-fc89-46bb-b2cd-a632b28fb6e4", "indicator--7c225602-0dc3-4985-a84c-5657000d1f83", "indicator--be0abb60-359a-44f4-bce9-2829f3b3a8e5", "indicator--fcd308f6-66b8-4bc9-a367-393752553536", "indicator--ac53a736-0a71-4c29-9c5b-1a03b40f0144", "indicator--227e9d81-672b-4b7d-8e90-90f464dacfc5", "indicator--0dd4cb72-73fb-42ab-98ef-afceeaa468f6", "indicator--b460cf68-5455-411f-abe9-47bc96a673b9", "indicator--c9cac3ff-6a4a-4c31-87da-fc386c92d486", "indicator--9419f5fb-4c40-4afc-a6fa-4b7299d0589f", "indicator--9201e28e-d3ce-4862-9e16-ee69a5e1a73b", "indicator--7487cf75-333a-4694-8934-d70a9d78872d", "indicator--9bae8468-0bfa-43ea-bc6e-d8e9dc94da9d", "indicator--33f219a3-548c-4dde-a9fe-8d9bccbb19e4", "indicator--06955bcf-22c0-4841-bf62-3e1b2e5c6d12", "indicator--eddae511-458c-4750-ac59-fef8a6dd6157", "indicator--016cdf27-fe39-4203-bcc2-7e32ae45d71b", "indicator--9549570a-289e-4b8a-b19c-6806b9ebe5b9", "indicator--9d6456fe-62e3-4724-a82f-c7247aaad3ca", "indicator--16698542-5b19-4c28-85b4-763f89332f39", "indicator--b763d057-a275-486f-b5d0-30fd50f8c7c5", "indicator--63609883-c4ca-475c-b1c8-97fdf49bec72", "indicator--1c06461f-4b4f-4aaf-a382-8182310f6393", "indicator--69376d70-74e8-47e6-b4e6-478036ea0a31", "indicator--61eac961-242d-4756-8e57-a0d4e5972ad7", "indicator--53a3df75-6807-4aca-b33c-a23090ad1aba", "indicator--82c6a13e-a554-44d8-ab3d-5c91321d4c05", "indicator--261e72a9-0c61-4d0c-b427-17ca33818b82", "indicator--7ff6e48a-c6ee-4fc7-9c79-747a3ac3cf84", "indicator--89f41efd-a4f9-457b-8b62-0a8ffa1bf696", "indicator--2cf30db8-ef80-4b7c-8ec8-1f6b5c0c24b6", "indicator--1c099b3a-4f37-43c3-8100-dd493472875a", "indicator--982395c1-bb8d-411a-8b26-9e77e1f36fc5", "indicator--ce4ba5b1-77e1-4fae-b111-aeadf8aca844", "indicator--344ad339-1e55-4171-bf83-2ae7e3f4934e", "indicator--496c0550-8014-4195-875d-b37a872544d8", "indicator--977f7658-4f19-4f2c-833a-5918a32544a6", "indicator--e61ee588-3e8d-4460-a14f-0e422e44a80a", "indicator--b5c6bb40-4af3-437a-aa50-bc5279eea610", "indicator--e61fc42f-0309-49a1-bde5-563f2785d92e", "indicator--270a5f5f-3624-4f1c-9d7d-4259f6400f99", "indicator--8a335fa3-eeeb-4f39-acd8-dc37a29d890b", "indicator--16d91d54-3a18-45c5-80c1-7d3e191ae7dc", "indicator--2b20797f-9d8a-4985-9e3d-87ad238be578", "indicator--3e6ca3cc-0bf8-487e-97f7-96b48b9a4af1", "indicator--f6e80ff5-bc1a-444f-b686-950ada405d99", "indicator--3727b1db-799a-4c12-8a2f-875ddbd78cca", "indicator--78fada88-9150-4fe2-ab59-5cdde97622d2", "indicator--892eb46f-3c71-44a9-b04a-b247cb10f9a8", "indicator--0bcaf47d-e55c-4b2e-952f-57ff75b95df5", "indicator--66aa9e7b-1b55-43f5-815a-3948f466f903", "indicator--21f19c1e-aed0-43d3-9ead-a910a80d4407", "indicator--184d7eac-88e7-412e-ba2e-6028ff548aed", "indicator--25669ae9-89fc-4b83-a064-26df26ce9260", "indicator--3ba51e8a-4c93-4f65-b800-64aba848bc72", "indicator--18f37b48-224d-4252-af58-925b36d02fa9", "indicator--52a061ac-bf98-4746-accd-e92829e605c9", "indicator--a4410c17-bb9f-4cf1-a4f5-726fdabe2b5f", "indicator--3aa06bce-d32c-4b5b-97dc-d19e4c95d539", "indicator--36a6a0b0-aed8-4f35-95b6-3e8f5b6e3741", "indicator--b86fe0d1-bb00-46d3-8036-7f104bbd39f4", "indicator--5bffafba-e930-449c-bc58-c73b2b464674", "indicator--e7f493f2-48e9-483a-a767-b0024d2494f2", "indicator--65236d0f-143f-46e0-b56e-92d55cb117e4", "indicator--bab850c8-f51e-4986-9dec-f9b8db5b2f32", "indicator--5130e9fe-5770-4981-a641-60c9d0ca2813", "indicator--e91f1775-d2f1-4533-a1a0-b706c2b4b933", "indicator--c1635500-adbf-4cc5-ae17-aa395271d511", "indicator--e12f20e3-f421-497d-ba9d-ec6e4269a05a", "indicator--e53dce08-9065-4c58-8a8a-098fdc3cb756", "indicator--b277ff98-5281-426e-862f-651c0526d5a4", "indicator--0bbe39e2-efc0-455d-bb0a-0eda1fcee981", "indicator--e9ff1c22-ae43-4bd7-83f1-a9b577df8ed6", "indicator--1beab517-1e3d-45f5-94cb-78e4e7ff6a87", "indicator--7046e6c9-5852-4ff5-bf47-bb467b644619", "indicator--627dfc34-1c18-454d-91ad-49dcf4b5cbf0", "indicator--05a9f588-78e1-430b-bbc2-836f2ac3ce65", "indicator--6d9adb83-9ebf-44d0-807c-98edb7f2f15a", "indicator--b2a66355-f5bb-4af7-b067-9ffce598ef1e", "indicator--b5c0b964-0227-4c67-9edc-c2624b984615", "indicator--3c412c8b-2c01-4e02-bc3a-b00937116759", "indicator--6d9da05e-9350-45e8-8852-9cd802b8ef44", "indicator--0200d91e-9838-4adc-bb32-92d198fefde6", "indicator--2477b19f-100f-43b8-946f-f281f4177009", "indicator--af9f9e8b-9c47-4a03-b674-cb44566c96ec", "indicator--0fdc4a0e-c884-41f5-b142-faddc7f59baa", "indicator--2978b30b-fc2c-4222-8361-24e2b28db395", "indicator--9c272c5c-6322-4044-b76a-d91af6ebbaeb", "indicator--99b1cc88-b090-4dea-85ae-7d496707c569", "indicator--a2463960-9b3e-4b3d-b0a7-2b58bf403f11", "indicator--22a93b40-9503-4e04-a079-5f1a0d4b8053", "indicator--f631c66c-0383-435f-9386-0f331ecff096", "indicator--e17ef630-49b2-4ced-b135-c5d3f57dd3a1", "indicator--16af3608-3893-4f97-9980-43bb83cd0517", "indicator--8db48b1b-899c-40cd-8b75-e6f71a50c07e", "indicator--78359d38-7cee-4a6a-813d-b3b5e5909d96", "indicator--103bcdc7-7acf-4048-8c0d-938fc246ea90", "indicator--a7642fb1-90a1-4d8a-bf3e-a4e8a0078a76", "indicator--4359bd7f-682c-4089-b024-4242a11096ef", "indicator--b7ca4923-625d-491c-9df6-5a78e8a0356b", "indicator--b000dc46-ba69-4650-bb03-9c0fb633a1b0", "indicator--2a087ebd-2ad9-41de-aebb-1a1258b39aa5", "indicator--ce7619c2-2b2e-4367-ad22-c1c7ec5b190a", "indicator--78a82cab-4ef7-42df-9b0d-805a090acfc5", "indicator--420097d0-ac41-4468-b188-91e0d6998208", "indicator--4ed47dc6-f781-4893-9809-8e76044eeca8", "indicator--1bf87508-f115-4a82-8920-d7bdea97d338", "indicator--01ba3e26-2edc-4f09-9066-31a7a99c36b6", "indicator--acabc3ff-61a3-4fac-9152-30b13e84bbc7", "indicator--8b5d94f9-47b5-4051-b5bc-ad4cc30928e0", "indicator--accbad40-9b84-4f74-80ef-9ac14203c652", "indicator--301d36e5-0aa4-4c22-96dd-50e23b6b6ea9", "indicator--1dab9c42-4d03-497b-904d-60359b6bfc45", "indicator--54e3f65f-4f9a-4dd8-821b-2b0c4d648cce", "indicator--a9e0d1a4-0351-4bf9-86d6-66c23dcf6b1d", "indicator--b639b34c-4249-4d8c-bf1e-3443bcce3f8e", "indicator--60f2a8d0-7471-4381-93d8-55fc33515d2f", "indicator--35e70f7d-c98e-4350-b226-899f1e478435", "indicator--9b6e2cac-aed0-419a-97a2-052612f6f3af", "indicator--95609879-61d8-4515-8cd6-868523b78284", "indicator--aab1de49-abe7-4c0f-a077-b12518fd6078", "indicator--e9dede83-29d4-4de4-91a1-791c0e1fbbca", "indicator--f16307d4-a9b5-4189-830b-f46c75165835", "indicator--3d28449e-9268-401c-b878-0a5cdc89f19a", "indicator--733bc3b0-6fe2-4ccd-8c43-62e6be87c927", "indicator--0b5777a5-5061-433e-8624-51e5c9ffc187", "indicator--fbfa8fb4-087c-48ab-949a-109f5ac16df6", "indicator--e2f4b95b-b518-4c09-ab34-844601a18969", "indicator--af8969b8-f0ac-44b5-a00a-b357cc604fee", "indicator--3e2bba66-9dbe-4fec-8b84-5355d1d9353a", "indicator--259f1e9a-fcb5-458b-b1b0-daf4afb203ba", "indicator--12eda723-46b8-4025-85dc-ec999b04a4c0", "indicator--f0d74821-e7b4-408c-853f-c2e1e30896a2", "indicator--46fc0a5f-8a4d-4f19-9a13-2c4e5ad5a138", "indicator--8622c7d2-5c7e-4f51-8d52-fe7bc26067f2", "indicator--16292377-67ee-4ef2-a485-09911c82c325", "indicator--49e81e72-dd7f-47aa-84d3-f1c87c82e349", "indicator--201ae476-d57e-43f9-b7d3-ffe95f56a512", "indicator--fa5152a7-2ece-4de7-b7a7-ebb3479fa1fe", "indicator--5b552efe-84c0-48bc-97f3-823d9677bb1b", "indicator--490c787d-6bc1-4952-9770-fd2ae29a46b4", "indicator--ec3bea81-86b2-4b98-acbf-70ea76a7db89", "indicator--b918799c-9d5d-41c4-8144-b241bca6cc38", "indicator--91d6741f-f38e-4c3f-b39b-6c7eb52ec9bf", "indicator--c3842cf6-26b4-4c1f-8831-ee12158802bc", "indicator--5ea1c92a-7d3d-4d7a-95ad-447b68af8b66", "indicator--9e29ecce-9c9f-4c81-b536-e5af58fb7a76", "indicator--a130cda8-9545-480a-8e8d-56b386425d56", "indicator--9e4c9117-fa0c-4745-8245-7dc0abac455d", "indicator--f9566e7c-32ad-48f4-b9c3-60959dd0fc80", "indicator--e6f8c588-f44e-4c13-990a-2512bd5a93f7", "indicator--be484230-51fa-43a5-89ba-171ae585ff3b", "indicator--265c3693-890e-4572-adae-bca26e01457c", "indicator--d7054ac6-5832-4656-ac1a-e1e476562c84", "indicator--c322d86f-0697-4708-8e22-a86ee9844744", "indicator--f2ccc8ec-df20-4a5a-8cf0-7dec6f622a35", "indicator--4ed9a80c-1413-4476-be81-394c710e20a4", "indicator--570a8726-2217-48b4-bbdb-8ddbfff1aeab", "indicator--c9a30d0c-8fba-469b-9401-fc704539a0a2", "indicator--797959d0-1110-4175-bbf9-181bf04ffb66", "indicator--00807e73-b6ce-4561-b0dc-6ae34b9892ee", "indicator--6a1b04ec-237a-46e1-9cf0-cb1964542ba0", "indicator--fe82b4d4-e97d-4f93-9b1a-d82593cbbf15", "indicator--043b7ab0-47dd-4214-9f79-a1b179f82991", "indicator--8ceb4472-8f33-4cfe-9a18-588e193f6b07", "indicator--0bea6218-585c-4347-806a-0e31b4d29fed", "indicator--2ff4763a-3571-4aed-9397-79554c8c7e66", "indicator--4491ae86-50b1-40e6-801f-0c22f539869f", "indicator--4bd045f1-2a4b-4233-b191-8fa84f5fdc48", "indicator--388f589c-f460-40a5-9f6c-0210891cd3e1", "indicator--655148ca-4d2c-4cf2-acb9-30e242220b87", "indicator--3747f85b-f10b-4c46-8334-1f756c057c38", "indicator--a4e3d726-f216-4c25-95eb-63f6dddc6e54", "indicator--d281d574-462e-47ef-a9ca-fd5ac7d1d34e", "indicator--47f2b7a7-0005-4317-85c0-f6079fca1aaf", "indicator--b97e7331-0a6b-42f2-903a-892691177283", "indicator--20e1efcf-3791-45a7-bad9-ae939275ea93", "indicator--6e663a1d-febf-43e6-a279-fab9e21cd144", "indicator--b98607c9-5ca4-4550-b537-715efc9fa7a6", "indicator--27c5595b-dbfa-4274-b8b3-092077d3db6f", "indicator--e449800e-d65c-4852-8b4c-799d01a15e33", "indicator--040e23cc-e085-4a17-9416-ca9bb3655505", "indicator--d6cb5f41-4209-4517-9420-181e9597c64c", "indicator--9587a7ef-7f97-46bc-8007-ca2da8754b2b", "indicator--8b1a3401-4c97-4e26-8898-3acf03bca255", "indicator--1ea6375f-67f4-44a0-b874-f1b6e81c8aa1", "indicator--2e2215de-2bd9-4dc2-a483-4e1c48770b6b", "indicator--1743ec5c-5a89-455f-836c-980e69b07da3", "indicator--a4eb89f5-4bf8-41dc-bc46-4fbf920deb48", "indicator--931feae3-fadf-4736-b108-940cbb78d573", "indicator--72ef1574-5c80-439e-a166-6e26f2bf9636", "indicator--c6a519c5-7b5f-474d-8299-dc23664944bc", "indicator--7ae7c875-7789-487c-ac2a-6d04a81eeda8", "indicator--dda9a883-8f73-4840-89c6-79ae99e251b5", "indicator--a40c6d7e-874c-4fe3-93b3-98cb607b3fc9", "indicator--0c504642-1bba-4e6a-a152-30ce501801cd", "indicator--8159ade2-3ab5-4ff6-9c77-63963a68f128", "indicator--1fed474d-a872-4dbc-b782-5bbf9f1036cd", "indicator--6b413288-4b68-4c32-92e9-c5548d483fcb", "indicator--273ba259-ea7e-4e1e-8193-f10a6ea3097e", "indicator--273b1692-e19d-4cd9-874c-32e5c6e413f3", "indicator--5f0e1741-6b77-4457-ade9-367f849ce81e", "indicator--13628cb6-fbfe-4cfe-b247-895da0095961", "indicator--7179eb13-5d18-49cb-ad91-c849b221a74a", "indicator--c31bf11c-a82e-41e9-988f-1e08819db1c1", "indicator--0ad2c631-a8b6-4866-a798-8daaf8beff1b", "indicator--8712e4ff-1557-403d-9f15-ff180b530299", "indicator--6214a0e2-2683-42b2-a89b-d3d432b968e5", "indicator--fdc068e5-9f87-48a1-863c-25de03bdb749", "indicator--8102442d-85f3-40f4-a1f5-c11b81426ce2", "indicator--a27ae5a3-f163-4227-a15f-ee86717e37c5", "indicator--add50a0a-9d35-4980-ae25-30661155bf34", "indicator--05bb35a2-9877-49fc-bebb-417907b0934b", "indicator--3ebe6aef-d595-42b9-a7af-c52a91c8aa80", "indicator--cef08a07-a00c-474d-a324-1030070e0ee5", "indicator--4341f9b1-efff-478e-843e-dffa0ca0f4f0", "indicator--4f58b704-24ff-4d45-8267-05df0311908e", "indicator--5888f36e-4614-487b-bce5-a5036b9b2011", "indicator--138fdc90-ff20-4a49-8364-f80a2067e1fe", "indicator--5ccb979f-3e6b-496e-b170-44e61e49177a", "indicator--3a718454-9c73-437d-b989-9a4fccded27f", "indicator--aea1f3f8-cdc7-49e2-a083-78f5f833cbc7", "indicator--a4b363ab-bf59-4aa8-b220-84e962230ab0", "indicator--a29f0c80-9dea-45e1-bae5-a0c53b5403de", "indicator--9f6b95f1-2b54-4e93-884c-0dbc0be3423f", "indicator--27baa731-3deb-496d-8a22-77f9f3de8823", "indicator--f93496ce-ca6a-434c-861a-08bc7111da33", "indicator--18dd8572-6871-46dd-b8d3-7ffd3e57111d", "indicator--b3195eb3-fd70-4ffe-9704-8965dbee2e82", "indicator--c2a25a5c-f37d-4b12-a63b-422030898458", "indicator--a552dbdc-5e8c-4f17-bc29-bc7ae7de7d47", "indicator--68fd0f30-ffb2-48f7-a569-7090de32607e", "indicator--6983d987-3326-47ae-8462-34f4263766da", "indicator--942a681c-e9ca-49a0-ae8b-f3d3bb037a3e", "indicator--e29bf462-41fb-480d-b737-95ce6b080caf", "indicator--f4c9a199-e7ed-49dd-91e7-e6c91f8d5841", "indicator--c26a96b2-b043-4121-b925-ef7efe83bac5", "indicator--912ac84d-c0fa-460b-ac4a-be883b62dcf8", "indicator--c2ad6d23-4a7c-453c-8fb9-6d5494bb11b0", "indicator--43daa117-7c92-4650-896a-25142c402c55", "indicator--85a763c8-2f2e-4778-baff-79782b3d4fb1", "indicator--4102aa4b-6f1d-4bec-9532-5975fb405695", "indicator--8c88ca6e-3bce-45b5-8288-5ec2073ca74c", "indicator--e1557283-4cd9-4e9d-b443-4d51d6a0de15", "indicator--6cf76aa4-0645-4c26-bbc5-af23228ade9d", "indicator--0d28b1b9-4948-48a2-9010-40b234085de4", "indicator--d62e9707-b6dd-40f4-aca6-4b1d041afb33", "indicator--1c9c6ead-ce6f-475e-80be-08b353644192", "indicator--aeeca2b0-4125-40d8-83fc-9904f0de69b9", "indicator--abb60219-60f0-4754-820a-3651aa537bd3", "indicator--110a2c18-4cdd-432e-83b5-7cb7e9e52a64", "indicator--850cd84f-aedd-418a-8d8a-2d52f2f5bcfa", "indicator--468a107e-b754-4b0d-b036-49107d0b5d2a", "indicator--c8f1099e-ff19-4471-99eb-0d5fda6b08b8", "indicator--65b701cd-d187-441b-be3c-e1dee356329d", "indicator--71691d07-d537-49a8-8506-b69970a91b71", "indicator--e3cdcd5b-fba2-4a78-9882-715788bd28ec", "indicator--dc224b90-6310-4b53-b270-879f7f57d228", "indicator--32a4a8c6-cbcc-4a66-ac1f-e4c945892710", "indicator--74de03e4-87ab-49a3-b020-47f26cce4f6e", "indicator--a21d4aae-f0eb-403a-8e91-e4e933167558", "indicator--351ea565-d9b1-4d68-a66b-ad9f7c5f5aaa", "indicator--a669ccb6-7b9d-4c04-aaba-c013803e77c8", "indicator--3b9e043d-af02-446e-b9f9-3f8a3f095f05", "indicator--44b79479-ce74-41e4-8006-2a2d5915de12", "indicator--63981661-482b-40cd-9897-5c25238d354d", "indicator--0c78a039-b35c-47e8-b86f-2a7b75e53edc", "indicator--e3d42990-82bf-4ea0-aba1-8ce0be517648", "indicator--be9ba35a-7d21-4619-8b47-36754b511dc9", "indicator--953b7806-d874-4efa-a333-19166fa1da2e", "indicator--a97eb313-edff-4bb4-a9d9-d08b63f268f3", "indicator--bd23ebc2-01c0-4285-beab-a1ee11481249", "indicator--474c9a8f-3c27-44dc-9d75-aebe9b8e9bd3", "indicator--595e4920-9c23-4950-8879-bd015832d235", "indicator--f5419948-89d7-4497-89cc-1be918d018dc", "indicator--c6d2da39-b46c-4484-ad7b-9dcdb743a1a5", "indicator--817252fe-4d86-49c2-ab74-9b524ddd92ca", "indicator--db43ed05-d2cc-42b3-aaf5-7617841847f9", "indicator--4b56f064-9b7a-4a53-bdde-33cb4915d390", "indicator--fb234559-72e6-44e4-a0db-f6933b16e0dd", "indicator--49cb12e2-a7d1-47db-961b-c866294f748e", "indicator--8a1ef949-7f17-49a8-bb40-ddd2fceb79a9", "indicator--dd0373f2-dccb-49e6-a503-09663414b0eb", "indicator--30f17b91-4644-474b-aa1a-b0b90f443bca", "indicator--10a76d58-4e09-4dd8-924c-e5b110ff2f71", "indicator--275aac3b-fbe8-4d18-9485-f94c5eb505d5", "indicator--b952be94-bf88-4a7a-b331-54c5d8b22276", "indicator--7df69daf-7b37-4fae-a1ec-bc3c965b9461", "indicator--19f3305c-b1f4-47e5-b6f9-e6c884ef34de", "indicator--05e46336-9e90-4060-a846-a9c5a9a7297c", "indicator--481c2108-88f4-4dd4-aeda-6500773055eb", "indicator--aa25331c-a2f3-4b9c-aa50-bc5fb5ea332a", "indicator--514fb2f8-1479-4f4f-92e2-ec987dc98e84", "indicator--9549c9c5-ffab-4158-82cf-caa777c0a38a", "indicator--22a35dc3-5e1a-445f-9df1-55ed5eeb78f4", "indicator--9199dc1d-1dff-4826-aeed-793ea0f656bd", "indicator--71a788d9-842a-43df-bcf3-fed7dc4b7be9", "indicator--99845198-4876-473b-81f3-2957dedf0533", "indicator--b80a119e-9123-4efe-b93a-4c8e3b38449d", "indicator--29c265c7-f1fc-4f34-be25-a2a3f29608ca", "indicator--63d77560-b41b-474f-a8a5-c85915f93e0a", "indicator--cee8b424-0aef-4393-a273-871a39efeefa", "indicator--d22093ab-2d57-40fd-90e9-e0e5fbd9b8b5", "indicator--3baca2a4-c26f-4d7e-b4ae-26f14753addf", "indicator--662af4e5-d5be-4be0-8cf0-dc7238c080d7", "indicator--f0c5f6ec-2967-40e6-9164-6bee41a037dc", "indicator--87d8171b-ddf7-4dd9-acb4-8a329632cf28", "indicator--079e62ed-e926-42f7-92ac-2ac51c22d183", "indicator--ac0233dc-c412-414e-9341-e99425d9b943", "indicator--e3de4c92-93f2-432a-a843-6e83c398c1e5", "indicator--5d1fab7b-7b40-4058-8c29-e8e41aa839ed", "indicator--aceed085-8a81-47ae-9443-6d2ecec2ed49", "indicator--123d580d-a172-4e05-9d42-be72d2b32f6b", "indicator--580aefc0-f4b8-4c3f-83cd-dfcd351557d1", "indicator--16181074-0fc7-45cc-997e-ed852e749201", "indicator--70e98531-f810-4a4b-b69d-77a82d334689", "indicator--b901638f-435b-4400-8684-d958b3346e1b", "indicator--8ec130c3-bbb0-445f-b9dc-de5c33532f6b", "indicator--9a33d218-bbd3-4531-8bba-766d6158dfb7", "indicator--d7dd138b-dc6f-4a45-a444-9eb82898c420", "indicator--94979dcd-dcf7-40b9-a552-692be77381da", "indicator--2d11cfdc-f38c-47c5-a920-d462aead4c8d", "indicator--0bc2bbef-4cda-4448-8afc-920e10b3a24f", "indicator--296f4c02-efc6-4bd5-92a0-70d94141be08", "indicator--120c7604-1970-4c6c-a65f-4295c514a84b", "indicator--6f9933e4-0c61-49c5-b9d5-fe175c784608", "indicator--c2d3c4d1-9a61-47e3-bd97-61a1ce6c9e8d", "indicator--1bce114a-1642-4961-a501-df5b49e6f669", "indicator--cb85161d-8010-44f4-9926-f4194ff3db0e", "indicator--670a82ac-976a-4ef9-8bf9-450d69fe1017", "indicator--b6bc6a36-5c9e-4dc1-af37-0b52c0304188", "indicator--d6f2d0de-eefc-4caf-92d0-848add281fa7", "indicator--4207a4f4-b860-41cb-a314-cfd2038b2ede", "indicator--8f718da9-4e97-44cc-be23-8c7b6a2af6ee", "indicator--fa9a0f94-3dac-41f8-b2b9-36caab5e3a0f", "indicator--79404d0f-7315-4475-8e67-16531c3a0917", "indicator--9bfe6cc9-0133-49c6-b8a8-4defdc14eeea", "indicator--d9ac050a-b87f-4ef4-b672-f91b77481ca1", "indicator--c686ad44-d391-4b79-a166-96435c5320c3", "indicator--afc6f3a1-dd17-4a42-95f7-04e51ef4ccb8", "indicator--153922a3-a2b7-410a-8731-8e227f2a0d1a", "indicator--e42f734b-8986-4fe2-a9b0-9a8180b85636", "indicator--baacd8c7-5fdf-40b9-87ae-30f1ea05b729", "indicator--31df9e0c-6814-4db2-bb3b-166bc31adea7", "indicator--482bc116-7d0f-4dae-b744-ef66fb558809", "indicator--00a82113-e728-4364-8037-6af6d5a09cdb", "indicator--5fa59400-49c4-4323-be73-fa558ca13837", "indicator--1425bbec-ab7a-4fa0-a6ec-f2c8272abdbe", "indicator--a8c884f0-1dbd-48e5-be3b-582f4d5199e7", "indicator--104850b6-282f-41fc-81ae-e323bfaaac3d", "indicator--e695e127-c828-48cd-a76d-37e7df231848", "indicator--857dcbae-5edd-4f6a-b5bb-7ff20a652961", "indicator--61fd247c-62e5-4e51-ab55-acace9d89c5e", "indicator--271dcf6d-d95a-4053-96f1-a1293f69d07b", "indicator--8e3e620d-c313-4c1e-8a6a-8a216041c14c", "indicator--f5173ba9-a58b-4838-ad7f-fe8f1dde8938", "indicator--ddb80aa4-50bd-4656-bbb5-e4e2e12144fe", "indicator--8b353217-bd42-48e6-9aaf-3b7b8c48e60b", "indicator--f3315fe4-aaef-4e8d-b94f-2a7ed348935a", "indicator--5c2bece7-e278-409c-833c-05a2424389d1", "indicator--7832197e-1516-4d3e-86c7-672c1a6e59a8", "indicator--29c08ddf-ace0-49f7-a0e5-425240715cd3", "indicator--1f272e3c-7eba-496b-a640-b681e8dbb768", "indicator--834f8b09-c99f-4798-8fdd-050e0595f331", "indicator--e2d76be9-9992-4850-84f8-e47fa31803f1", "indicator--05524fd8-9a00-4e58-bb4c-62e9209b72de", "indicator--9ae48e5b-6fb8-47ee-b352-712759c564ff", "indicator--853274c7-3a7a-4e75-91f2-2785baa3f8c3", "indicator--5478c813-918e-45ce-bdad-936c6749957c", "indicator--2ad846fb-3d5f-4da1-aa77-dbab711bfb2e", "indicator--9cec61e7-72c5-4426-8571-fab99578e578", "indicator--32fd2494-a027-4e57-80cb-9dc82c1ff081", "indicator--c4ca43b4-9ae5-409c-816a-87937949c5d8", "indicator--b7b537f6-ae1c-48c4-8bf6-b93e393706f7", "indicator--581f18ea-3a2c-4402-aae9-cda3d73b488a", "indicator--871cfa9e-9679-4a82-ac7a-f480b0d506d7", "indicator--06cbd488-8890-40fc-8f32-50e678b8b176", "indicator--a362b66a-5d31-4f50-95e9-b37ace69e41b", "indicator--7c38e934-fc5c-4b4d-a6c4-6d51fcaf072c", "indicator--73a35c48-00ee-4aba-9de2-f9877caf979e", "indicator--fe430aee-6fce-49c7-b3a6-15667b50778b", "indicator--86cf6965-bd1a-4258-b1e6-d69c930ca5dc", "indicator--193ecd0a-de27-4566-a9e6-cdeca8877759", "indicator--f327b7fa-c8db-4bd6-9089-0df667713373", "indicator--bb91bf91-4693-436f-8c91-169b65198e0f", "indicator--8f825c13-889a-49c6-a8cf-3a6e3bfc9394", "indicator--b5a43f49-bbff-484b-b2c3-132d37ca8ca7", "indicator--fc85b02b-3ea1-48a5-86d4-90b6a43118f0", "indicator--0dda6f56-fe4a-4c6e-8131-738130f5299b", "indicator--56780140-35b6-4330-8e79-15825736256d", "indicator--042a1206-ed6f-427c-9c69-5d208cfeab7f", "indicator--61fbb546-b45a-4c0e-ad29-0abd39aa0def", "indicator--636d0f2e-1c5a-4ca2-9dd1-92c8a45852c7", "indicator--2cf30699-6744-498d-b14b-850778505345", "indicator--085f146d-912c-4113-8f37-071bb1346ebc", "indicator--df171548-c30e-4132-b8ba-fb9e48f2c99a", "indicator--c81eb776-59b6-40ec-b8e6-ccaab168f59b", "indicator--8cb821ee-eff7-476f-82aa-2297d24e85a7", "indicator--c21c4482-645e-439a-a6d6-3d8c04b682c9", "indicator--31f5dd40-1ddb-45c9-8721-6caf9801d94f", "indicator--97acd949-2f76-4c36-bee5-fda61bccba34", "indicator--528a208a-1ed3-4c1f-bc8a-9efe17f80d7b", "indicator--c64b10e4-18e1-4ec5-9d4c-c93fe4b8bb4d", "indicator--ce0abe7a-46c7-430d-92bc-0e3410b26729", "indicator--2d49e515-f018-47c8-9fe8-3433d03a2893", "indicator--b6b8f52d-4d59-4488-bcac-4cfc91faa2e3", "indicator--799fcdfe-0e8a-469f-8541-b062884b84de", "indicator--374f3967-478b-4f4f-b6de-63e4e5375a33", "indicator--4c6ba52e-5817-4463-ae22-522256081e5b", "indicator--403b9752-3b94-486d-ba66-cde2bebc13f7", "indicator--733eaef9-f3aa-44e2-9ee2-d4e8cfc8ce85", "indicator--8658d6e3-c4ae-4aed-8a28-3791a9f06d3e", "indicator--cdad7590-4b14-447d-95ec-dcaadc4b1170", "indicator--318ddd77-2925-4396-9ae1-6c8c23ac0ec4", "indicator--8d5392e3-ddd8-42e3-acfb-da7402691a5f", "indicator--77cfb1e7-8323-410d-9424-66201eb41181", "indicator--e809cba2-4c98-498f-9ef4-01cdb4337e1f", "indicator--3c27bff4-5b6e-4495-bdae-a75721558ea3", "indicator--fb862ec7-828d-4d07-9821-24ce3d07c1d4", "indicator--3dd6db5b-2a2a-439c-a225-97e90916047e", "indicator--5c8d53b3-efc4-4023-a85c-55be6761f710", "indicator--6fe990bb-11e1-4894-bdea-b4ff0f255f9a", "indicator--d288c5ea-e668-4a73-b986-bce2ce8c7e00", "indicator--22e57fd6-2a79-41cc-a5ad-e81d848bb57f", "indicator--619e7438-9fab-4e70-858c-bd78da7e8ba9", "indicator--5bdabc37-ee68-4251-9bb6-0a41d58ee2ce", "indicator--8934719a-b1f6-4ba8-9171-fb71d63fe956", "indicator--9396e151-0943-4613-82cb-08c4a9cecf94", "indicator--ada95f60-df5e-4a98-8752-115f9940424a", "indicator--8909af10-5d24-4995-98e3-8257364e4c3b", "indicator--72cbb6fd-d426-4dfe-bad3-8c282ff39c96", "indicator--2f196c17-fe11-4519-b904-14f67c6b5b7a", "indicator--f3081d7e-43e3-43ea-9ac1-d878c75c5136", "indicator--5006e29f-3d0d-4cfa-950a-fca78c930874", "indicator--5ffbe941-897a-42e4-944a-79ca3c6cdc61", "indicator--ae1d2e0d-f00c-49d8-b4ad-80e1191304e6", "indicator--5ba2cbcb-3d2b-4b51-ae09-8ed8b7b31fb6", "indicator--77717a2e-9ba0-44bd-a96e-0bea92e18196", "indicator--c059bab2-06f8-4c69-85c4-dd4b6e7ad6c1", "indicator--90d02afe-e734-4286-bcde-9f7510545260", "indicator--8163062a-c278-4aa2-b5fb-d4c5e4f53004", "indicator--c8ca3d42-66d7-45e8-8e1a-755b33fca256", "indicator--667755e0-e29f-4fc6-afbb-bdfaaa39cc29", "indicator--13334150-d53c-47f2-a1b9-5bb7718fef93", "indicator--9d8af83e-67c0-4836-8843-fcc443b116fd", "indicator--8cde7a85-c154-47df-a50c-4914068e06a4", "indicator--dc71ad29-250a-45d5-bbe9-c2928f36729d", "indicator--aab79e79-bf40-4a59-aa11-cf88f59ba670", "indicator--9fbff667-a5f0-42bc-aacd-ba05a5c8e626", "indicator--d35b4209-f2dc-4b01-804d-85fc2d837f5f", "indicator--466e707d-7643-4cf6-9c8d-0e0aaf411326", "indicator--4579e056-2707-4d3f-b2fc-5eb337a36b70", "indicator--a125e8f9-e19f-46a3-a832-a6650a05e6d3", "indicator--117a7025-9731-466c-b9d8-10f38ab6a6e7", "indicator--d6fb688d-3fb6-4269-b42a-9e558ee760ae", "indicator--c8e671cf-34da-4fd3-b98d-d5acaee5a3e8", "indicator--0020c2c4-e185-4c3c-abdb-c7640bb7d357", "indicator--314717e1-0905-4fea-9d62-5f23d53e3452", "indicator--3b497ee0-5522-4a56-aabe-9b731f020002", "indicator--11ac7bb6-3bd2-41cd-9b1a-ae361c5d1a1c", "indicator--1a0d3b95-63e6-48d7-9229-24ac7d550e3c", "indicator--469c90cf-9918-4929-8237-881af85fa06c", "indicator--28dfde6b-282e-4f14-bba1-46b3ba4367d1", "indicator--b473d4d6-fc89-4fa1-ba61-e7f8f192a630", "indicator--377f6289-34ae-443e-8a4e-861cd8459ae8", "indicator--430c6b66-982c-43fe-b5c1-0cfdb44b8da7", "indicator--78d46038-ab6d-4d30-b2c9-8470faed9f8c", "indicator--a12018ff-29df-48f3-9b38-3f6e93067f6a", "indicator--14792cbe-eece-467a-87c6-8e196be31c28", "indicator--b7e7ede7-10ac-4f39-805b-66b615cb6b9c", "indicator--308acf48-ee75-4a64-bb6c-03339bf3cb55", "indicator--dd23b512-5aef-4d74-8a6d-2789018e5958", "indicator--23b0a5f9-7e94-40b1-96c2-93bfca95d1d6", "indicator--d0d809d0-13a2-4368-932b-97ea8c9b8aa0", "indicator--07734ab0-0036-4060-967d-b3fc2190685b", "indicator--13e0d0f2-018d-4803-ba01-0acbe6ae17f0", "indicator--a5b5611d-f5ca-4c46-9088-9f72b7e0e49a", "indicator--30518f48-8822-4453-b059-a07a6c41fd90", "indicator--03b4e8b3-02e4-4ced-9041-7579a03272a8", "indicator--7c8323dd-9c12-4088-8f91-b0cc6e4faa84", "indicator--8186f4f0-611a-429e-81ae-1793657fc446", "indicator--ff848256-2cee-4467-b7a4-abff793a5a8a", "indicator--9b655502-1bd6-4eda-9c50-d982ece7f55e", "indicator--39629ce0-25ff-4a64-b8c9-1585c61570ae", "indicator--c4ee9207-c7da-40fa-a61f-fb7ea17c96ce", "indicator--37d259b4-847f-42ac-9e1e-87eaeacb2ccf", "indicator--6c19f825-d696-406c-98f0-687b30c8dc8f", "indicator--0c39a128-06ec-4395-8f91-374b3b023334", "indicator--305c26ee-1734-4ea8-a73f-a236637c7465", "indicator--9987173f-7ec2-4f39-a81b-1fafaf20ac68", "indicator--82bdf208-0de0-4607-b13c-e5034b120ee7", "indicator--4c9ff1ae-4307-4999-95a6-bbd53ca9cd0e", "indicator--9a8fbadc-c9d1-403f-b48d-f07c26480b96", "indicator--fd0f2705-551c-43bc-a3de-78ea0a9bd027", "indicator--6ff24297-d3b4-4ce1-b94c-b908e4daa8cb", "indicator--6162694e-af5f-4f24-afb8-24dc71383612", "indicator--10a599b4-9d59-4861-8c37-41238ef6b111", "indicator--e3384623-63af-4b93-abcf-82a8028bac06", "indicator--1d0d4610-01a1-4562-8ac3-90edb37647db", "indicator--ca80db7b-62f7-4e40-9283-f5779864ae17", "indicator--006d7d7c-4d64-4918-9434-ec7564738ccc", "indicator--2b1077c2-2cc5-444b-9dd4-2a678dfa1939", "indicator--64f7c6c7-a70a-4b98-ad6d-331c2d0ef70d", "indicator--15630838-1786-44be-ad26-b1e383714549", "indicator--14dd29ef-5d72-49e2-8312-8057ad7f2023", "indicator--0163abc3-fdad-4745-8238-9ceb6755b8dc", "indicator--4a5bed5f-1312-4c04-932c-4cb2a67225f1", "indicator--d8138637-f41f-4ab1-906c-9fea1c64e461", "indicator--5ab846b8-94e4-4494-92b0-8023f6d29176", "indicator--5bc1b14e-ddd0-4aa4-bb87-801873014d60", "indicator--2f4ed3f8-13cf-43f1-ab13-815680bee628", "indicator--b1dd28bf-1d70-417b-8d9a-eecc529eb276", "indicator--75b49cbc-c7a0-4090-ada1-7b7bb2c607fb", "indicator--28e9a6bd-f04d-49df-b0f7-3d8f80fd0afd", "indicator--503515ce-b17b-49b5-9774-ad4814ebc5b8", "indicator--32139d39-8478-4e29-b5da-c28a6eb70343", "indicator--ef6bf13f-a3a6-4b6f-b285-75087466f42a", "indicator--c796de1c-b6b1-49a0-9f62-28902112b7f5", "indicator--2a164d25-694a-45e9-8e62-2efd21a4b4ab", "indicator--8fcf0db8-348a-4848-9e88-b4fe44669dda", "indicator--dae6b604-edaf-4e40-abd1-5a2a91929911", "indicator--6b688d9a-0018-4fea-891b-a0071c2952d6", "indicator--86289787-363e-4154-a251-6c1883062de6", "indicator--746e914e-dd91-4e25-82f4-d5292074c229", "indicator--c904332a-8f68-40a6-8662-0081aafdd9a5", "indicator--15573c08-a404-4784-b699-5cbd3d00ecef", "indicator--7426d928-49af-452c-a829-40d812772b78", "indicator--ae923093-6afc-457a-aac4-de242d5e2695", "indicator--5aa92809-2a1d-4ff4-a6b6-7bda0317bd08", "indicator--3f6b0778-6fb2-4918-a955-81a4be596567", "indicator--a3acf143-d280-4ee5-b67e-b6c859c6aa4f", "indicator--d2b4b094-fd35-4f56-8025-3d6b32147222", "indicator--c3841b04-aef7-4ce0-b8b7-c267674ae9dc", "indicator--082ecf2b-6c4e-46a4-a53f-f20532cda2fc", "indicator--95ccc8e7-736c-4431-a5da-48265303756f", "indicator--9576740f-174b-4f18-81f2-f4985dd5b1d6", "indicator--48ebd3b5-6c0f-46c5-be07-c6af2a9c3172", "indicator--d0ba15a6-4bcf-4214-98c9-dd1c5ed9e130", "indicator--989ec830-2539-470f-a651-ae966189a2dc", "indicator--85102ad9-7ebc-4af5-8736-524a5274f1f3", "indicator--de510a68-01e2-4ddd-8b35-e0f979be6674", "indicator--78cf19ee-1834-4cb2-847a-7ea6fc2e54ba", "indicator--36423658-4eba-41d2-8073-f1a834965eb6", "indicator--360ecc9b-e4e6-44a6-b777-cac2331c673f", "indicator--07b64474-c518-4833-88ca-41e81f60ba41", "indicator--2cf07b7f-a2ef-46fc-bb63-996a2905aa3c", "indicator--c9dbbbbc-0cfa-4685-a13c-872e3a8a4da3", "indicator--4733bb6c-51d8-4bfb-a9a5-c18517592f22", "indicator--1f885335-a2bd-4d43-b8c6-97eba64e063f", "indicator--c3181851-ed34-4d2d-bfd1-73c3f1430d01", "indicator--c4159399-07a4-4399-8ea7-27aad6574568", "indicator--43041712-6833-4612-8f32-b39177b36496", "indicator--6a62095c-77a2-42c5-81e7-04a38de1206b", "indicator--2febd0f6-ff71-4aad-9943-35a40fbae00f", "indicator--db6ba19d-4cd0-424f-877c-5cd180b21218", "indicator--4e95a5ca-fe8c-437f-b204-cbd6ad474970", "indicator--69dd5177-3bde-4d9d-970e-159d2c0894ff", "indicator--9c7151e3-5cb3-427c-b229-23355b2b7ba5", "indicator--f79a7911-97cd-4643-9dd4-84da5d472585", "indicator--a6b4e6ac-3152-4606-a818-ee2ce8f264e6", "indicator--687ae011-4bd3-41d7-afab-b70f9ba67389", "indicator--b2fc6281-eaf7-47a1-aae0-7958f6b8f274", "indicator--ae5a5778-197b-43a3-bdbb-caa51ec77f07", "indicator--1d0d92ec-400a-4d71-a76b-b66e94c1da95", "indicator--5cdead70-73f0-45fd-8b3a-4bcbafd37a04", "indicator--bda9ea94-a449-4d13-8ad3-79e886aacee9", "indicator--357bb7d5-940c-4eb8-9e36-59c4463653d5", "indicator--010df7ef-f472-4df8-b884-de212d483abb", "indicator--cbda18b1-3539-4d61-8c8f-a445ff0379c0", "indicator--fe4e876b-f50a-40cc-b451-4b14d65684aa", "indicator--55e576b9-04bd-4391-82e2-9b27a87895db", "indicator--224b030d-429f-425b-8d5d-fa7ed090232f", "indicator--e5796185-c7c3-4bcf-9c95-23217e16bad5", "indicator--1ce1d87d-ceca-43ad-81da-911dc4bd3f96", "indicator--fba38993-ea3f-4b76-91f8-3f77b1e2319f", "indicator--1fe70396-37b4-45d0-acb5-7d1d65de2caf", "indicator--6101176b-a1a4-4540-b0b5-0a80c2b7922d", "indicator--eeb4653f-1623-4dff-97c1-094526531042", "indicator--f4b80652-7411-4688-a440-74a758d734f8", "indicator--67bc62a6-7eba-429b-b94f-ca40c24892c0", "indicator--0e482be6-f89c-4867-8bf8-d11bacce03fc", "indicator--75301ca8-5a6c-46d1-af08-0065f8c5d7e6", "indicator--c3ffffcc-0d3d-4e78-8195-7fe8e7dc4732", "indicator--5c5e3498-7146-4066-8612-81ae9cae7594", "indicator--adae7714-0666-434a-b4a9-d555270bcef7", "indicator--0cad641a-616f-45ab-93d7-c97babbcbe4b", "indicator--25f81963-c245-4cfc-96fa-8c327c497ea4", "indicator--9e1a6c54-fe4d-4a9c-bbee-0365c6839cfd", "indicator--a0607c63-4f35-4e10-9ac8-36b38668e875", "indicator--d3521017-5e68-45da-845d-aac1f17af542", "indicator--e98473d8-8198-4216-9dc7-14eed560bdc3", "indicator--f537eea6-e744-45c5-b297-b6d8b05a5869", "indicator--49f21cc6-09d4-48f8-8f4f-ffbe928c5ab8", "indicator--bbff357a-402b-41c2-98e6-4230647cc160", "indicator--3b9c0195-1995-4edb-b55d-1bd5e8192c87", "indicator--929f411a-0149-43e9-8739-7587c1763266", "indicator--3ffe0506-1a38-4ae9-aa89-889bf6dedc74", "indicator--7c0c7805-9d3d-4678-a2e7-868b03b2cb83", "indicator--2acb14b0-6362-4116-ab7d-09621999b261", "indicator--142ca4ba-17ce-4a4b-889b-d50214cf53ff", "indicator--f340ace6-1e17-4373-9672-a3536790cca5", "indicator--493a856a-8d39-475f-9d76-1156c2dc7e3e", "indicator--829440c5-1b37-452c-ae31-746bcc3e3ad3", "indicator--563c971d-0aab-418c-93d5-fd77d3c7e187", "indicator--f2b2b7d4-75b0-4c10-9a09-eb612bbf902c", "indicator--5b4096dd-f70e-477b-84de-b8b8dc6664e3", "indicator--2f03f055-8b72-412e-991d-eb694b1818ca", "indicator--eb7768e2-9834-47ab-8e6c-a7a345529d65", "indicator--cc7a43e3-ff40-439d-a6d0-4d2821e1527a", "indicator--00c663a1-0f17-4aa0-903d-5597072fc6de", "indicator--6573351e-2fa9-4337-868a-2cc62799595b", "indicator--4cc9c498-e117-4ff4-9f78-e85f6294cf8f", "indicator--7a0b09d3-1f70-45f5-8a86-3d2cbb3b276a", "indicator--d93bddba-8880-4815-847a-1fb0aa5da18a", "indicator--dde180b7-fef8-4af1-81e8-651a47d5797c", "indicator--e809e8f1-d19f-4748-9bec-1688d17eb8da", "indicator--e9086695-d57b-488f-a098-9db39fd16ccf", "indicator--d3f8f517-8277-4e9a-adc4-1626918cb6fd", "indicator--1f340933-3b2d-463f-8c37-0d58135acc70", "indicator--9e0bc0e8-ab4b-40d1-bf23-9f7884584ddc", "indicator--bd1dfdb1-5b06-433f-ba25-696ad9800f0d", "indicator--50167674-c707-412d-be77-c8f12a6fea24", "indicator--8c24d06f-d06c-4fb3-89f1-bcf688045eaf", "indicator--35b6e2d7-0d3c-4722-8ced-366882d265ae", "indicator--08414f66-ae87-4c12-8f23-c058c122e67d", "indicator--4aec01d9-750f-42e2-9e5a-edbc793afe21", "indicator--5c14352d-90cb-4e6d-bc63-89b00d874038", "indicator--c58dd175-1c14-4329-8ccb-4f1074cfdb13", "indicator--bcc6a983-7569-431d-9c1d-7c509814bdcc", "indicator--8bf9c427-8307-4ea0-b78c-72e0c52d9863", "indicator--4c1ce51b-7f4a-469d-80be-4286e8a96b92", "indicator--3703f2a2-7fc6-4b2e-83c5-de3478330300", "indicator--a9086fba-2faf-4eac-bb6b-8f0d8b8d04cb", "indicator--361f2aa4-6e24-4c47-b810-2b08442ad862", "indicator--98303871-0851-46dd-9a0e-0f8548456631", "indicator--85f36ad0-f207-4872-b53e-57226be228cd", "indicator--e69d5b55-fef2-4ba8-b408-7994e5468509", "indicator--914fbd1a-dd8b-4d2e-9c22-7b79a7021b5e", "indicator--ab91649e-03d6-494b-93a6-1e0a2368e141", "indicator--e852b042-8ab0-411e-aca3-e35a2e433055", "indicator--dda2e3f9-4d3a-4706-aa83-c45ed0ae654a", "indicator--2aef706c-7e5a-48de-a118-1980e4ea8456", "indicator--c9c01231-8ca8-4748-8ab0-9cba2a987939", "indicator--59201008-0c6a-4228-8c97-07a8318b9153", "indicator--2cc4bf6a-94b0-4683-a796-26660996e57c", "indicator--ceed4408-9b58-46b0-9d44-f4600a0487bf", "indicator--04e58fd7-d1f1-4b52-9a61-0b848077e442", "indicator--e872dbf9-dca0-4d04-ad09-10d98034023e", "indicator--82775a96-7c60-483a-8fd3-6af8fffa2393", "indicator--f43641fc-339b-444b-a290-a06b16a6edb6", "indicator--9527150d-c253-4519-b95d-70a7ec75e2b6", "indicator--17438f8e-471f-4318-b0cf-0467412e7b16", "indicator--bbadd146-0d2e-4950-a165-3b7b0b4d0c4c", "indicator--55c28d56-32c4-462c-be1f-f8bb8f68ee9e", "indicator--15f96811-cff7-488e-8a6a-b98badee3eab", "indicator--ae4751c3-53cd-499b-bb4b-7bc8f5adbf7e", "indicator--37ed05c6-e7af-4498-bf1b-bf4fbb9c8731", "indicator--9c730532-6b7f-4b44-abf6-ab40fddfb5df", "indicator--7a0bbf4b-ee35-413c-af39-635d187d6fce", "indicator--bd71015e-6fa3-4ff8-80f2-4b3c8a056279", "indicator--2e4b002b-04fa-4365-9e5d-c973cc25c3d1", "indicator--8c682f2b-f4d0-47ee-a79f-dd3cdf292d50", "indicator--44ba3feb-da89-4acb-885e-cf039a8ad9fb", "indicator--289f1334-bd70-4711-81dc-c9f327a085ca", "indicator--c6c8141d-da4f-4c70-af92-ed0c2b53bc69", "indicator--9dae29ed-0e82-4b21-a6fb-7a3d91f73f43", "indicator--b97563be-cd6a-4af4-a625-0d14db106458", "indicator--e58d21e4-b25c-449c-89dc-96fe2c8f7f1e", "indicator--97e0591a-0fd7-43bf-b1c0-9019ae1678eb", "indicator--19cd98ab-eeeb-499b-a9cb-478d524ad04c", "indicator--c7e0ccee-8415-4c0e-b1f2-88218a4113f1", "indicator--3624b349-676a-4a15-8ad5-4ebb76e7f0a1", "indicator--77fbb19a-7419-4d6f-b452-240a63408d38", "indicator--7b155147-a6dc-4171-a8ac-92c1eff2982f", "indicator--36b3c0ab-fd36-42f3-b027-366ca3ce2ae2", "indicator--d3b9d77a-416c-48d0-8c7c-c506575fdef3", "indicator--0f6918d8-0b61-4a46-977f-7523a977b7a0", "indicator--6307622d-6684-4da0-8e51-41270cbc9f0d", "indicator--e8734692-96d8-40f7-83be-63124c715582", "indicator--1efb82b8-6852-4b6c-bf9f-13d9b2e8cb09", "indicator--6aced94d-ba7a-4138-9818-154e55e787ec", "indicator--5405b2dc-ece3-4ed7-897e-4b806126f8e7", "indicator--3badbee8-a7a7-482b-9755-ef98d7f79ab8", "indicator--d5d22a90-b6ee-456a-807b-1d59f5b69045", "indicator--2f042ca6-7491-41e3-bcbf-4394dd21e58b", "indicator--240fc54d-4e4c-4e1c-a9fb-31d963322721", "indicator--0f17c491-daba-4c0f-85ed-040ec7faa954", "indicator--1e18e764-359a-421b-bb58-9d93f88b2fe0", "indicator--510aadd7-d6a9-4373-bacc-af73aa591026", "indicator--789a0385-bc71-4eaf-9279-b8b0249979e2", "indicator--52e9e680-7ed7-481f-a218-87d9c0d5cce3", "indicator--7e3b6b77-e4bf-4df6-b329-6ceaba122107", "indicator--394ed078-d11e-4678-9935-8fa161fe2c4e", "indicator--465add24-8494-4868-be68-92e7334b282f", "indicator--fdfdfc4b-fb61-4e95-8459-0aaf766a8b08", "indicator--bb5f5de1-6f01-419d-bafd-4b4dc34233b1", "indicator--3cc48fa1-2878-4cb2-a337-33b5af1fb382", "indicator--7d3e7640-36da-4fa4-9b2f-7c521f4fff0f", "indicator--0a466b06-3451-41d7-abd7-c6fe1514fe32", "indicator--b280f776-0b64-4c43-80de-9cb36ba775eb", "indicator--3d617f6c-079a-4c27-a1f7-f18866a1e380", "indicator--719f204b-99a4-4971-91c1-fa64b0973fdd", "indicator--be6d4460-8d33-4c5f-9a2e-6649eb14e9fe", "indicator--f51a9e28-3e9f-4e74-a098-7bf717479e9c", "indicator--70ca1bc0-c100-462f-b2ff-ed1f45ab2dd2", "indicator--00aa728d-a5ae-402d-b39c-80fa7c71bdc7", "indicator--5742774c-d98d-4cca-895d-07dfa78e988a", "indicator--905a8078-c567-4ec7-8950-c952fbbfcb04", "indicator--aee1d68b-d2bf-44d6-a702-a08d053f8927", "indicator--b1521516-55c5-4460-8ba7-4d289d23934b", "indicator--b11a3e2f-1be3-438a-be3b-18f575387ab9", "indicator--efe7d50c-9c97-4df5-af1d-6bb018c1cd46", "indicator--d8612900-82cb-44f3-8359-ca361b27cfed", "indicator--f541b821-08aa-4294-b11b-e9ad36576312", "indicator--632bc50b-5171-4dd1-8eef-14345835ad0c", "indicator--3c244080-bc04-4384-8134-0e26efd01e8a", "indicator--8c8f25e6-35da-4399-b7e9-d9bc88acbbcb", "indicator--e4217be4-3838-42d7-9a10-4c1695d44389", "indicator--588cc1dd-0483-4775-856b-2252d96b0d16", "indicator--d248c267-e24a-4ed5-838f-7a4f20c189c4", "indicator--d35f1f69-8c6f-45c4-a64f-88b6fac7a2c3", "indicator--e993eced-257b-4108-9795-2e8f900f73fe", "indicator--72ce0a3b-200b-4f71-ab0b-020110b762b2", "indicator--ac38a8d1-b638-4511-8162-03e83130ac61", "indicator--e33c278e-2391-4e50-a60a-db5519eccde1", "indicator--f83596df-4618-47ba-a31f-4e3d9aea198b", "indicator--47482ce0-021b-46eb-b992-214cb35d8048", "indicator--15fbaaec-2b29-4a01-a834-166a7ba7919d", "indicator--7a907b83-ae65-412d-adc6-c181ae592e96", "indicator--f9daf914-5bb0-4f85-9851-54fec4a52ff5", "indicator--83807259-cc77-48e8-a171-1fc07cbc8807", "indicator--4d0fe6a5-bdc3-42de-88f3-e7f0171fbee4", "indicator--6e0746d9-a166-4ba0-891b-adab912075b7", "indicator--8ff63c27-84f2-4599-b851-e6b7df026f16", "indicator--48eff00f-1124-429c-b3e8-5541f2a85646", "indicator--f5634cda-246d-4cfb-898f-1bb02f135555", "indicator--8c9377d2-8d63-4f30-be9b-786526d924b9", "indicator--a9f7ec1b-0127-4011-9261-ff48fe478c52", "indicator--384e3605-e148-4f38-9ee8-c724d64365ff", "indicator--7fea7a04-c7c6-4a0e-b63a-c7ddd7bfd2a0", "indicator--29ea2270-4300-4bcb-a8f3-9d5f58d9cfc6", "indicator--6bf08d20-2011-4563-a8f2-2379de168355", "indicator--6d92d576-a4dd-4077-aabf-260d30f55502", "indicator--c28d2bf0-9577-4802-af93-30a0df5b455e", "indicator--0d5ebbfb-db16-4d06-a5f4-f52bf8ceccc5", "indicator--c0bdf2b4-43d1-4232-aea0-3644589f9aad", "indicator--9eed6fa3-44ad-4eae-9ebd-ebd04fa93e49", "indicator--b19bcc74-91a0-4482-a3fb-63fdf7eb67a6", "indicator--9f7a6079-a66f-4539-bdd2-85a6614a0ea4", "indicator--d0e74375-ae8c-4db0-bcce-f38425abefe2", "indicator--74c4f361-8057-4bde-964a-76cfa6112ab2", "indicator--b1e5566e-c4df-4b66-b98c-38c1c75925aa", "indicator--588bf02a-dd36-41a2-b0a5-bf9078bd0cc4", "indicator--57c5b731-c515-4ed3-8993-182258617b6e", "indicator--72a96b6d-932a-45dc-a648-d5f294cdb690", "indicator--46d6e9ab-aea1-4084-8ed3-02b6ae01200a", "indicator--6398dc82-c8e0-4a01-94c3-a794d8b1b064", "indicator--4f26d295-2484-469e-afcc-263b234e780e", "indicator--3b0b9260-226c-4475-84e5-b6fc4b761dd6", "indicator--22fa1d91-b03b-4472-baf9-91a5e341c17a", "indicator--6ea12b00-8789-49b5-a25f-924522365553", "indicator--965ff165-d88a-4c69-a120-83c62c57b32c", "indicator--4b22161e-22f0-414d-9cd5-1326687cf885", "indicator--c0f8f808-750c-42ec-bf5d-3bffce8e5b26", "indicator--93d1825e-0523-4750-a7b5-83236e802112", "indicator--52f627c8-fa2b-4c4c-be2c-0a4a66282b0a", "indicator--622d41a8-e2c2-4ef3-b84c-592a31a36077", "indicator--6e56b8c4-1bde-41f7-975d-e8c4040dc1d8", "indicator--8437cded-2c3d-4e8c-9665-895eba844b40", "indicator--64dce2f5-a131-4204-bed8-dc31ce6d5409", "indicator--4e2227a0-2340-4f8e-9941-39ec085d7607", "indicator--0db1f2f2-996c-440f-853b-19ce1e904161", "indicator--85ace150-fa14-46a7-8c1a-948a0fe9f588", "indicator--3c2ed68d-7f1d-41e5-a924-7e9b17c96d35", "indicator--da9bfe80-5314-4692-a2f0-d3e7a4f325aa", "indicator--30d7190e-9058-48c6-b20e-de57dd8eab58", "indicator--94e3e497-aebd-4c64-b3b3-bde5b2ff33af", "indicator--a6ecfd68-dec0-4dc2-aa7e-c00d65085f44", "indicator--e56a9f16-1ae4-40d7-99d6-a1cf413e92b5", "indicator--b4577418-3357-4504-bb39-ee1c5cf78187", "indicator--b4a0f9ba-7d62-476b-9834-1e22c7b5533b", "indicator--c595bfa8-b473-41de-b83f-c1d863716b32", "indicator--9ec70170-0c72-429c-b111-75ff089b39eb", "indicator--d3619cf8-5e61-46d0-a0fd-49bda0907608", "indicator--5ba8166c-6930-4af3-9c77-f09c71e105a4", "indicator--145525f0-03b8-4fc0-865a-2b33b61200a1", "indicator--4f2de6c4-1568-4ac0-b293-e3e6af5739c4", "indicator--ffd82b86-47db-49d3-8dee-b78e5efc9a9c", "indicator--e061c705-9418-4573-ad58-471dc0e27e3e", "indicator--d9e65d5b-d813-43f6-a8d9-c61f25e8a8ed", "indicator--34ea3dd5-406b-45c8-9a6a-27c988acbd52", "indicator--1603babe-eeac-44c5-843a-2210df9a512c", "indicator--40669684-f0cd-4565-b7bc-ceec29665a3c", "indicator--0de74b3a-d3db-425d-b9fc-ce7379754c5e", "indicator--6757c641-ce1d-485a-b2ef-f527fb03f263", "indicator--30547a31-1d0d-42cc-9e12-12ab4ea9ff9b", "indicator--b3428063-43f1-4c9a-af88-9fb97884e9d4", "indicator--9fc7a395-f7c4-4e41-be38-66fab7d82a19", "indicator--cf4362f7-5fc5-4244-a1be-73649aa7b98d", "indicator--176f0279-00ba-4019-a18e-f9686eb4d138", "indicator--fcc35458-8218-4339-a1ef-529651f65f4c", "indicator--cb067a02-9d39-4add-95e9-0b35f53bf02c", "indicator--24eb7d17-b071-4876-8168-a9b2b023130c", "indicator--77bad9aa-6c40-4206-9c99-c7c17e0c94de", "indicator--df567e9f-3352-4770-8e64-ebf7c47abf36", "indicator--17f8a88c-17ef-4944-bf37-0ba5a21cb06f", "indicator--c9a5da72-9328-4d95-8f40-886ba88ca150", "indicator--c3b11993-241f-4a6b-8a18-0cf6576e7a42", "indicator--cfdcaf46-fbba-446d-8cd7-7e29bd30150b", "indicator--afa38091-46c5-440a-8b8d-4068de30d185", "indicator--83e144d0-081d-43dd-9c16-813da22896e9", "indicator--c1ca3e5e-8d0a-44f2-a3d3-8ddfd221d5f8", "indicator--4e20928d-1574-4d27-bda7-caa71a9f33d4", "indicator--ee1e49c0-2424-4904-95f1-00f036c621d0", "indicator--99633ee8-cd14-40f7-bf9a-8dee4560b8fd", "indicator--c292778f-57bd-41be-9e67-cc3455195951", "indicator--0da3325e-0624-4881-9353-3668e4446aaa", "indicator--aaaf2af7-56d0-488e-b836-f67400d566ca", "indicator--10c3c62b-788a-4681-bd35-690603f5e0d1", "indicator--e54a84b5-000e-4b73-9c70-9d071391bc25", "indicator--aebc66fb-6e97-464f-ba48-e430d1c31d2b", "indicator--ce62f954-a03e-488c-936a-d8e52e816962", "indicator--b98a061a-d555-46e0-96ed-03c89127316e", "indicator--5272b022-62b6-49f4-92b0-b6c6aa80468e", "indicator--b15265dd-a79b-48e2-a0eb-8461e226a4ef", "indicator--5de5bbd6-7596-48ba-ae01-43e86ed9ba9f", "indicator--bd34d9ce-f1a8-4fd3-9cf9-db9b98e6b135", "indicator--3657776f-6236-45a1-95f9-b863957b10e3", "indicator--6c4c3bc4-2895-4f94-aa2c-78c34bf3e4c9", "indicator--9bdb39d4-314e-4628-88ec-de379724dcbb", "indicator--3cc60f61-eb0d-4a7e-ac91-20692c4d0900", "indicator--75d98347-e7c2-4081-8861-b3c976f61329", "indicator--5b924917-6a60-42dc-afa4-4ff561936438", "indicator--dc384600-f2a7-4699-a298-f511f0d61326", "indicator--49462070-3626-490b-ad04-3f2764215e2d", "indicator--7857a141-b36f-44f2-8232-cd32d250f0c1", "indicator--8c891b4f-50bc-424f-a62a-6dc704a1fff2", "indicator--328fdafc-64ca-488c-96e6-ad1184c2eb39", "indicator--88f9124a-0a53-4548-91b7-29dd11cdd810", "indicator--f6ea06bf-dfc3-409d-bbf6-3510852557bc", "indicator--e6a4436a-3d1d-43f3-a568-e888e6e98031", "indicator--9fd51e71-d99b-4712-a65f-cc7c455970e7", "indicator--7ffbce04-75ea-434d-b5e7-ea4ff11c1d18", "indicator--a8d187ac-beaa-42a2-982c-8e6ec18b4d0e", "indicator--b3708dff-7505-4616-b903-1c08cc854531", "indicator--1c5edad4-7744-4c23-8383-2f4a76975a12", "indicator--3e3ebe76-4351-48be-b30e-ed2d92ae3a75", "indicator--c07cff2b-b7eb-4bf2-a241-792bf4cf69d5", "indicator--59dfc06a-b159-43c3-a4ff-1455f56d9f80", "indicator--78681625-1c91-4bfb-bae8-83c993574066", "indicator--e06dc769-6af8-409f-9a8a-5d0f00c393d2", "indicator--cfff5a38-3004-4110-8d43-c69d1da9ab6d", "indicator--c5b5f469-1a73-4082-bfb4-e9ba3cc46157", "indicator--4b608d7e-25fe-4e6a-89b5-bce11af62b1d", "indicator--a152992e-1d38-4ae6-82bc-6bf30e3e1b66", "indicator--304c7d1d-ff10-4a00-96e5-1c032a6ddb62", "indicator--99f37c05-284f-46dc-9eb4-5dd17acb753e", "indicator--c4df93f9-2da0-4965-a51d-e52c74b46980", "indicator--be21d337-d22b-42ce-8f35-3317e043a842", "indicator--3f853744-9908-4167-a250-d90ad0e3e362", "indicator--dae2c167-5798-4cf5-a459-9fe3300c65e1", "indicator--1850cbdb-1b50-4337-b51f-e347b2eb6447", "indicator--67ec01f5-02d1-486c-a5c8-9ae3a54f781f", "indicator--8d6dbe21-4c3d-4d25-9da2-d48f25772dbc", "indicator--16e96050-1c98-4917-9685-29b976ba4566", "indicator--22d70535-4f37-44df-8835-265d455278dc", "indicator--4a67d718-3f42-4fc7-ba15-4caaec28b561", "indicator--d8c8a6ab-1dfd-447f-bd7e-57e13c34eb58", "indicator--5794783f-6b56-479b-97e5-07fdf2cc1da2", "indicator--56e373a1-2d01-4d24-8fab-b1f23b8d3c12", "indicator--1f3eea7e-d987-4adb-b51b-92a659186a44", "indicator--654a8faa-27c2-4213-9b68-0a8d6fdf281e", "indicator--c72bbb10-1d49-428c-bbc9-88419f15d6a5", "indicator--a56390f8-a7e9-41d2-b774-083370861b7b", "indicator--77c391a1-f7f7-49ad-a271-300118517d08", "indicator--01201e9d-7250-4608-a7af-388788f8adc0", "indicator--d27a73c0-af79-4f12-a350-88f501a3cdb0", "indicator--eb6a0ec3-7869-49c5-9d3f-6385304e95e8", "indicator--0d04df5e-9edb-4bc9-bf7c-2ae0a536afe0", "indicator--5f078289-af9c-4463-a5b7-2fc9b06aea1a", "indicator--164cceb5-bca2-4a96-b5bf-7f883e28aaa3", "indicator--c7319e2c-3e1b-4d5a-bfdf-fb4982e1b5d8", "indicator--62ec6924-2a7a-4db0-a9fd-2f43e93d5a2a", "indicator--bca93d44-a6dd-4419-9456-aad9c7c20ae9", "indicator--3447e6a7-e772-4722-a664-18cc70a29f59", "indicator--e4336db5-16bb-470d-a075-7a067c87b2f8", "indicator--17f06813-4513-4555-add2-5adc8f2ee22f", "indicator--f39ca354-4ed3-4d22-a6ed-9191d374b29c", "indicator--3608af9c-d18a-4377-9d85-1ede06daa7a8", "indicator--01f1f21e-112e-4a66-8f05-315100fe1492", "indicator--0f4ccf2e-7606-4313-a6d4-695d3aa0a85a", "indicator--d7111afd-7f3c-459a-a9ac-869a0835259f", "indicator--541fcc50-c98f-4e4d-9863-48fdc0552438", "indicator--dde70a07-afd1-40c4-b0e9-19ee22e2f3f6", "indicator--09362d4f-7679-4454-a8df-6982b395212f", "indicator--5a608c19-640e-4181-9256-8b1db91b22ba", "indicator--bee0fdd0-6164-4505-9c92-a5fa76481334", "indicator--109f4124-ba8f-412e-876a-e375ade995f5", "indicator--fb90b07b-edb5-41e5-a9c8-3a69b5531ef7", "indicator--98fca973-74a4-4446-9875-5d82d5ce5146", "indicator--51cd4a0c-8799-42b5-bd12-d63c06f7cf1d", "indicator--7e1d3ad5-3c48-4673-99d7-da73026f9d7c", "indicator--89439f9d-3812-4406-9e81-710647c5b5ae", "indicator--ea853917-4f61-4d95-83df-be344030f3f3", "indicator--ce1e94fc-7986-41f7-bb67-28a9539dbbae", "indicator--f9675b68-64de-4fc0-a269-18b58222d1fd", "indicator--1c54f2f9-b387-4b9b-ac64-296ba9d724c5", "indicator--bb01a049-80d7-411f-aba7-5301014c25b1", "indicator--5e247d17-e1b1-48eb-bfd6-09c60394742d", "indicator--3c908bff-0fea-4051-9d39-b7c2efa47b49", "indicator--0e957e29-1c1e-4569-b018-b11b3317572d", "indicator--1572096c-d2f7-450e-9d86-10b30c1f4231", "indicator--b72711d7-06b6-4335-95f5-1944abc32b04", "indicator--ead676a5-dc15-4389-a8bb-ac8444cac92b", "indicator--c99236eb-bfcb-4ea7-8b14-ab21e0b176a0", "indicator--5697d623-45fa-4c69-8932-e7379f337f52", "indicator--6ef73436-f9a9-4cf2-b4cc-215aa4c2fa68", "indicator--f50e3968-0d85-40d0-9f3b-3cb4f280e341", "indicator--2fc6a9f7-be45-4f2b-a403-c6117a4ccb73", "indicator--3d3fb423-7bea-4493-a347-9f66610fd91e", "indicator--c183f1a8-5a1e-41bd-93a7-c713c1368848", "indicator--b369c98f-6ea2-4401-9ff2-f1ed83bee5cb", "indicator--6e3bbe78-072e-4492-af25-02d8636b44f1", "indicator--a78660c8-0913-493e-a5cb-475d02733fbc", "indicator--9deb8150-964e-4056-a3c4-0db6123914e6", "indicator--9cc68b2d-b4de-46a0-824b-c61daed9baeb", "indicator--c0412b4d-c53e-4d64-bf0e-2ce11258fb71", "indicator--4e1d1cf2-f3aa-4f80-8efc-e2da02e687c4", "indicator--b448fca7-7c9b-4660-beaa-81c1d1d9eff4", "indicator--8c4fcf7f-47d0-4bd0-a77f-b537924a4774", "indicator--136be829-5398-4b2c-98ea-0c630e79753b", "indicator--6c68c6ed-e6f4-40fe-8404-c0cb008b8e91", "indicator--f296a298-6955-46d7-9974-6024303061d9", "indicator--b15b5fea-929b-42b2-af70-655682787d3f", "indicator--a463b2c8-d1eb-4fe1-847d-86f5b77333a5", "indicator--0c30cf0b-a477-4f96-8ace-945d83256466", "indicator--b063920f-051d-4ea0-a027-82d7a4ef996f", "indicator--27c97afd-5e61-4ef7-a44c-767eb36e8878", "indicator--bd618f26-d9a5-471d-9bca-d92f4aa9a7fc", "indicator--eef6f363-1b10-4ef7-a6f6-d3681dc71399", "indicator--9811042d-2a20-4e91-a196-f4c174c6ac11", "indicator--2e572075-bf5a-4a87-b8a8-4e34cfacd148", "indicator--9a2a69f7-181c-4183-9113-208bad1c04bd", "indicator--f0c20893-9512-4428-8fda-ec6b4f9e42a7", "indicator--2518b88b-7fed-400b-adbc-7ce3c029a64d", "indicator--81868c41-0f32-46b4-aafa-2b2cfb60ffad", "indicator--469b8466-3e2d-4335-951a-374adc5e2596", "indicator--d8e592ae-239f-4a5e-9195-84dcd111148e", "indicator--73665397-da27-4e32-81d0-6d0038c0286b", "indicator--759e3fa1-7c09-4e6e-add4-71d1423672d8", "indicator--b7b1cb79-b9f6-4531-895c-a36c555bd8e2", "indicator--8d144c9e-6cb6-4018-823f-3e6fe99295cb", "indicator--7b29c3fe-510c-4115-8f27-cd3f763f0a1c", "indicator--1b94b992-7de5-45af-a800-2d6990072436", "indicator--f25fc978-30ce-4532-89b0-db900aaee9a7", "indicator--97db0190-127b-4cd8-b74a-b2cae98f536d", "indicator--540e794d-053a-464f-afaf-e63a0d9dc1c9", "indicator--ac7fec39-5475-49f6-bb9a-687e5029638e", "indicator--bc576c71-d409-4e73-9d01-01f15f9bba1b", "indicator--e59ce2b5-477c-47c9-a882-20fbf8cb7ded", "indicator--dc08d198-87f1-4893-a582-b34f4536b94e", "indicator--d4dfb33a-d571-4101-adde-58f350616225", "indicator--c759a430-b1e8-47bf-b272-234d2f1f5a47", "indicator--fa66e451-bbb2-42a1-9ca9-ff5d61dfc8ab", "indicator--0286ddc6-eea6-4518-9bd8-3772d365321b", "indicator--2aed24bf-37b8-4a9b-8f63-5648b8a72fad", "indicator--08a003ed-f384-4084-aaa5-7d963a560a61", "indicator--9e60a85d-9dde-422d-b153-b9f5a1fd55ca", "indicator--14bd20eb-a0c5-4ceb-a09c-25d4fbe648ef", "indicator--1bef46ac-3fd8-4bc5-99ca-bbcac2068a35", "indicator--1d96ee6c-2bf7-4a6b-a1f5-8242218da5bc", "indicator--6564f274-e1be-4ec8-a9db-c5cc2118d37c", "indicator--350cdb8c-dff2-448f-85aa-bea2ca8cb24a", "indicator--f1367b89-9cff-4659-a7c9-e45763b2af5f", "indicator--a91f3d59-1a6b-4282-9994-cc3553be51d3", "indicator--e2ea3c0d-3ffa-4da5-a235-810a3f06b3e6", "indicator--9931bcf6-1cdf-4210-91fb-c2cf281672aa", "indicator--68917e42-c4f1-44c2-a5c9-5d91f992763b", "indicator--5eb646a4-2406-4af3-8a96-b013a7fa9a32", "indicator--23b872be-1b7a-4992-a58e-0851e51080b8", "indicator--6c563db1-81f8-4088-a8cf-84b282e5dac3", "indicator--a1a4224a-6a38-4fce-87ce-c7b1e0b216bf", "indicator--2c9180a4-239b-41ac-802d-1bc0c48aaeba", "indicator--2757e942-513e-46bd-9dc8-b5d9f728dc16", "indicator--db00d9c7-b654-4cc2-bccb-0803a03b3df3", "indicator--b6bfcc24-254c-45a9-b597-b52c82830bb8", "indicator--8d743ec8-bc75-430d-8c84-4f1720a01e62", "indicator--d198dcd6-e167-4670-8d51-ace5897487fc", "indicator--4e852972-e986-4f93-ba6e-be6e537f4cfd", "indicator--9a63b5cb-0eaf-45d7-b074-7b58cd2cea28", "indicator--b6f36fe0-7b0e-471d-b794-218769ea4298", "indicator--ce536d66-d385-42c6-8451-2aa10ceb064b", "indicator--c644ec52-3363-4d67-b0a3-5ced5ddce28b", "indicator--e498ecca-14ed-44b4-944a-ac6a286beef4", "indicator--cdeda458-2e30-4bf5-ba23-e998df20bb0c", "indicator--a30e9a4a-ee55-4f3f-a426-ec61e20a9530", "indicator--5aa66d38-9f8a-44bf-a0fe-e0a53326f46f", "indicator--696989f6-2b12-4727-a015-aa4d15e67853", "indicator--2d86291f-b7ef-47a0-8ac2-205dde696df8", "indicator--f1ad8dad-d9db-444a-bdd3-ba2e0313fd2c", "indicator--438af053-ec15-4445-99ac-0f1472aeab4a", "indicator--ff30003f-6805-41aa-a276-b274605fbfe8", "indicator--f381ec9e-fc7e-45c4-8543-233dfe898d99", "indicator--ddf6ea30-9ef8-4094-ad9f-d7c4fa021369", "indicator--820e4d75-551c-4d34-9113-24a9f098f5a0", "indicator--75694d9a-ec6c-4fad-ba34-d62dd008e15c", "indicator--d8a20bb9-e258-4132-9438-ddf46306af66", "indicator--13ef20a1-b240-41f7-9fe1-a6697a0cf588", "indicator--c89bbaf1-f592-4866-bed8-af300ed481e7", "indicator--fff70c7e-91ab-496c-b4ad-b63c1c6b74a7", "indicator--bd980adb-5fe8-44f9-afbd-8a4c907ded05", "indicator--7ab4e871-ffbb-463e-ab71-6e59f95470d0", "indicator--bd7323b3-a8dc-486c-a2b6-273fd463ae60", "indicator--e0d23834-eb04-480d-b60b-edb155b3280d", "indicator--8a1b3978-56a0-4ef9-bb9b-2642874432e9", "indicator--066e9324-87fa-49e6-a562-724d563aa574", "indicator--445a19b9-f333-48e3-bd3e-97a5a7fa1bc4", "indicator--f9687925-7131-4e03-9bda-9426112b7759", "indicator--5587881a-de66-4ef0-94d5-1c596a9ee08f", "indicator--092605b1-95b1-4c8f-be12-2d119410d1dc", "indicator--ad13cc17-ec0c-4a0d-b2a5-1fd6f3569ff1", "indicator--bf4e82d9-e66a-4a7f-b024-0d1537158307", "indicator--ad9b16e3-3ab0-44e3-9686-1038d3fbf863", "indicator--5d3020b6-97c1-4322-8ff2-0f2ce3022b22", "indicator--3ce269fa-5da3-4e06-89ee-6159af53397b", "indicator--8f96a941-ec05-4318-b5dc-d2bdcb376e83", "indicator--318e40d7-a90a-4c21-8cb1-1135c78dda56", "indicator--720a6b6e-5cca-4f5d-bd03-f659e64acddf", "indicator--5219016b-b7c3-428b-b90c-2702d1874edf", "indicator--ff800941-a3fc-4fb6-a403-6e14be612324", "indicator--0effcf27-8e82-4a03-a7bc-d58cb001bb54", "indicator--5ebae34c-a713-412b-88b4-905a96b70db2", "indicator--c0562a1d-0605-48c7-8ace-9d57718678fc", "indicator--f88275ba-0d8c-43af-b658-ceeb89091c5d", "indicator--591e4125-6ca4-46a6-bf3c-b81f1d0b8312", "indicator--3bfcc25e-5c51-45d4-90a5-bcc44a6f9278", "indicator--a069ea87-c160-456f-aabc-225529dafb0a", "indicator--c0d15ee1-3f96-4d12-a513-9ba55e0ff31f", "indicator--177347a6-1751-4151-b752-d4b119dc13a5", "indicator--8ac948ca-9f70-4c11-ae8b-507ef4c15396", "indicator--7d6bfa7e-7fe7-49eb-9778-546d7f830e42", "indicator--e02c2fb3-a8d0-48b9-94cf-d5690cb6d66f", "indicator--e702b9e6-7c09-4b85-8f8b-3660e5b4dc9b", "indicator--df98ce8b-45e2-4c93-89ef-03c5ffd8ac17", "indicator--8386c464-47c9-47ca-bb34-27ae026e2e6b", "indicator--b9080602-1502-40dc-b0e5-b97a22885a7c", "indicator--14dc187d-827a-4a2c-92bd-8f15c7f52d59", "indicator--f051a99e-ce63-40f8-a9c7-5cf7af8c70a9", "indicator--f34deb40-55cf-4ae0-a715-24b46f398ed4", "indicator--2a154591-7ffe-4ed1-b08c-a230278abcfd", "indicator--ebd81158-06c8-483b-bc1f-9dc7f21ab6a1", "indicator--35c4620c-c516-4499-867b-89393882416b", "indicator--611511ef-12f5-44a5-9ba2-1a7629f7564f", "indicator--66723c0f-d3c9-410a-9c6a-6f677d3db009", "indicator--ec158bef-e5e5-4cda-aeb2-2e927ffee80a", "indicator--5511ad27-4dd9-44d2-bfcb-123a15fbb2f1", "indicator--92025fbb-a6f3-4cdf-b9da-2ab30e280ab7", "indicator--70790f5c-9415-4aec-a41c-4902d9a7f2d1", "indicator--2475bac5-2205-4de9-ac7e-1d472d02f34f", "indicator--7f6752af-0bcd-47d0-8f87-6b6c0f5d58bd", "indicator--542e5ecf-200c-49cd-bfec-e70373e4ac8f", "indicator--c7415fbb-47ac-462f-972f-6eb10f4f4d03", "indicator--58f61253-7ff7-4af0-ba82-a2af816a8861", "indicator--4d07c747-3f50-4d0f-8647-1fbcbade4f67", "indicator--9d1c1bd6-8985-461c-8444-52a5e07c4ca2", "indicator--38dcd7ae-45bc-442a-8943-5b3889e509d4", "indicator--5aa00198-8228-4ce3-be35-bd110e950113", "indicator--e8aad02c-d296-4740-b6d5-5845419151a4", "indicator--36c0a305-77f6-46ce-a794-868fa70f58fe", "indicator--15098b9c-b6f8-4f9d-ac4c-f818c18de266", "indicator--b7c8dac4-d5fc-4c3b-b1ac-5f9142c4f001", "indicator--724343b5-a700-42c9-aa14-7dfa41d3a2f4", "indicator--513af323-f2d9-4f83-8ee8-5a9056ec4880", "indicator--1aab433c-720f-4172-a747-e89e8fe6873e", "indicator--5b97ba36-3a83-471d-ab9d-58c6e8e8aacd", "indicator--962aa79c-d132-4374-9cf8-a3388d9013dd", "indicator--cf712527-85f6-46a4-872a-790270f22cb7", "indicator--a945b234-dfcf-44c6-8f1d-dcfc748b0d78", "indicator--90225b05-d00f-42d5-b6dc-cb0f07dacf39", "indicator--a3c444fb-00a4-4238-82e9-f97c6d82e015", "indicator--61c478bb-3783-4591-a3aa-c3be450d90a4", "indicator--1c73097b-8afd-49ff-b23d-5f1f73927698", "indicator--70083927-cfe9-4eda-9e19-1f0af8c4f78c", "indicator--83b67f05-d662-4cc9-a70a-626c96cd4af5", "indicator--efd217c5-2336-4c50-b606-679077dcbd73", "indicator--20d56efb-30f2-466c-9013-30beebae3211", "indicator--2583480d-7ef1-4afb-a53a-2dc5d38a4499", "indicator--f0bfdc67-f0d7-4649-8f8f-b71d5630c2c6", "indicator--532c957e-91b7-4158-b3bd-18634505036e", "indicator--bf165e44-9cf2-4ed3-9a2f-11123cbb622d", "indicator--df2779b0-d7ba-402e-b78e-75e06d865cb0", "indicator--b423616b-379a-4d13-b3f5-978af5236e46", "indicator--67e0d173-77fc-4e92-ab83-612752ef7b78", "indicator--6d329d89-363a-4635-900c-aca40abb06e5", "indicator--c6af013b-bbe8-4691-89a0-55b5dd0b465a", "indicator--a061e2f0-02f7-4c38-b30d-95f1d4c4a8b9", "indicator--ea4c51cf-28af-459e-bf40-33a80e7354f7", "indicator--9f47edb9-75b2-44b6-81ab-a93af3ba7faa", "indicator--38ade7a7-8e6e-4679-8815-507a7397f82d", "indicator--2b222ab9-d64c-4f73-ad59-13bd27e9fca0", "indicator--b59cd587-9e94-49a1-9a64-ce5bcff82d7d", "indicator--f9d324fc-a7ce-4c3d-9799-7ec26344c9da", "indicator--ddb0fb80-dd60-4052-b870-9bf39ee2ce24", "indicator--02a9d19a-0b58-4fe4-a3e6-037b8f04910d", "indicator--30b977de-2df3-4dc5-a5d7-c77f61858fb2", "indicator--fe1f7f20-5638-4b00-ab59-4a73c2abe9d4", "indicator--755fbf74-7795-4a08-bf17-2c1ec20dcdd5", "indicator--e0d9b857-3843-41e3-b7f6-96fb873f9b56", "indicator--2176f7fd-fd82-4af1-a718-af109ae9cb5b", "indicator--a02c0d6a-4abd-4d20-a3e9-0619f97d1ca2", "indicator--4a21158f-9cbc-4f31-9d65-4c263578d3c3", "indicator--5b02ef29-67d2-4684-b699-55906b10b089", "indicator--96a4ec16-3fd7-45ea-b001-74d9d02fe39c", "indicator--dd9c4ca6-3799-4e1a-8a91-fa0f117a088f", "indicator--a3e24601-2838-4243-8650-22d8f9ddd72c", "indicator--59e29d92-954c-40c0-849f-4950f3a57c7c", "indicator--38ebb75f-a410-4a01-a02e-6a7ae7e4f6c4", "indicator--3b02884d-3856-4452-830f-b86bc81cfbe3", "indicator--db62d341-8a7c-4678-ac6c-4711055519ba", "indicator--59dc352e-6cb5-4006-816e-6f899d06cff0", "indicator--244caf1a-0a54-4b0f-a87d-15ce7d1ef0b8", "indicator--0bb9c723-fec7-47d2-a788-16290dacc0e5", "indicator--480b63b7-eb20-4634-9005-b4c95d10d4ee", "indicator--f2bee72b-1bf0-44e3-8ee6-58312862b4db", "indicator--6eee9a49-5e45-4edd-ba96-529816b4462b", "indicator--d2e3e0e8-da37-4636-81fb-11cef4542cf9", "indicator--c6668334-3a9d-4d9f-bd13-2597b3bd6c6a", "indicator--8b599cf7-e24d-422d-b4a3-e33b672023c7", "indicator--67e5f278-08d8-4d7b-b632-ff4b9dd95932", "indicator--9446207d-1901-4814-b1f3-04d567cc46be", "indicator--be08467f-95fe-4266-8369-be3e1ed41a18", "indicator--a00f8174-01ec-42d4-9428-7a496b5a56cd", "indicator--da552a29-70ed-479e-8cb0-f0f31e7b2817", "indicator--5091b14e-4c26-4f3d-b5ed-a75bd26fa2e6", "indicator--27d92b08-54b6-4381-a428-9a3fe8295608", "indicator--f3ea51d3-ed1c-4dec-8175-4feff8de2c38", "indicator--44e10c4e-ebb7-42f3-b7af-d9b46311ce1f", "indicator--b3dc445a-8c53-46fe-baf0-90ab40ca8028", "indicator--d309dd8b-0963-4ed1-b4b3-d8359d1aa062", "indicator--13a34c22-6d0e-41cc-9a09-03f65ed65a8d", "indicator--92792bd7-1cb7-45bf-aa48-6f8de86f0bc1", "indicator--83eda269-60c0-46d0-a1fd-e3e2d83306ce", "indicator--58e12c44-5b5d-4879-96c4-d829175dc28f", "indicator--f0aa5805-ad4e-4fce-a512-a468fe724a53", "indicator--2a6eb6af-1264-4991-979f-0e0791722186", "indicator--3f21aab0-b85e-4de8-9f21-f3691d89a43f", "indicator--e96be5ee-27e6-4441-ae75-82232fa2599f", "indicator--9e3dc488-cdc7-4573-82ad-d4d8ea8fa2a1", "indicator--cf357f57-cee7-4e94-9e4f-3846dc0e8a72", "indicator--057f200f-e80d-4f25-ac76-9ba3d43cd779", "indicator--c36ef06f-c271-469d-87d3-a78bb90193a1", "indicator--f2b8eb4b-e5ea-4c41-819e-766ba3dc124b", "indicator--8b3c8232-e9df-45fa-b6c9-f32873476034", "indicator--436bcad5-ead5-471b-ad48-48f34aa09750", "indicator--bff2cb6f-7d4a-43cd-913f-6f6cc49a2482", "indicator--d593cc37-2bea-4fb5-aef9-daf7606ee07a", "indicator--03b97213-6048-4aaf-987f-5ad9c21d5c06", "indicator--e9a0a7b9-53ed-4806-8ca6-9329203d9875", "indicator--3ea3d661-ba7b-4af6-9cdf-4250e8568222", "indicator--d5bc242b-4be7-46f2-9869-e93a8bbb086b", "indicator--f95ae08b-3579-4e6d-b843-70466a49c17f", "indicator--257f587e-056f-4148-a148-56eefc560a03", "indicator--29389025-f97a-4786-9bb4-82ca5f88f87b", "indicator--80a08419-f790-4f4d-bc89-bdda9bb97e1c", "indicator--d434c95c-e380-40bc-a350-58e35d3f25c2", "indicator--6cae4873-fa81-4aa4-b42b-e9596aa35f2d", "indicator--85a58ae6-aff2-441c-ba3a-b993f8e04dea", "indicator--53b0e73b-2263-417f-8881-e016a75b26ee", "indicator--66ff861f-e3bb-479b-9728-655bbb22f053", "indicator--31505e58-d7b8-4b58-9805-a866775bd156", "indicator--12f44996-0980-4fab-92ff-211382b1c496", "indicator--ed9c3c8b-7dd0-407f-a619-efcc721e5bf2", "indicator--8d650641-1ffd-4a85-9a69-d3d5e8cbb772", "indicator--6d4bd06e-6d28-4ca8-87b5-bbf4a1528e1f", "indicator--ad0a182a-b4ff-486a-874e-e7feea58887f", "indicator--57255ea6-1c23-423f-8033-1f29424f361e", "indicator--75044ce3-9c60-4dc9-8638-171835685710", "indicator--7e392167-460b-43ac-b50b-20d865eed635", "indicator--51d4b899-ae0b-44ed-be16-a31c1e3fef9d", "indicator--acc96bc8-c484-4b5b-9ce7-4e46d8688e15", "indicator--da093a5d-f5ff-4420-8261-066fc6c766e7", "indicator--e1b503c4-e0cc-48c1-9ecc-24196c94cfee", "indicator--abaf0b2b-7f51-4175-a11d-0d0bcceccae8", "indicator--8d1c4b86-caaf-44c0-8ac7-a4a068bef511", "indicator--cd82bd46-8c97-478c-b9a6-fd489fddaf29", "indicator--1e7e29ed-f72d-4ff6-a810-03cb59e69f98", "indicator--7fcc6b62-fca6-42ba-996a-82a6cc32f6ab", "indicator--96835919-1335-4cfe-80cd-ca3d47600678", "indicator--35e1fa16-8b3c-484c-bd0b-1065e34b868a", "indicator--25889d8c-f0e6-408f-8b01-607fcf466695", "indicator--3bdf9927-41d1-42cf-80c9-8d663cbf1ff2", "indicator--d030f913-d0d4-4efd-85e5-8f1ae377ff2c", "indicator--f772669c-188f-493e-96c8-bf7dba7698fb", "indicator--52b9d7ac-0465-4b54-9f01-c9d97d04abfe", "indicator--372f1980-b357-45fa-b846-8087d5fd51c9", "indicator--dd2a7033-02be-4e24-b862-9758c40efbd2", "indicator--70c4513b-230c-4a4f-9806-253f9ca713ef", "indicator--dcc2187d-73ea-4ef2-b984-b21a3a4ced78", "indicator--1d65277b-bee3-4bef-97ca-58af6ca22130", "indicator--b56d3d08-aaa9-438d-bd26-7c4ab060fc8f", "indicator--1c43489b-4698-4f3f-a04a-3c971894e79c", "indicator--68d8b1b3-8cf1-475a-aeb5-fb7a79eef499", "indicator--a2da2ded-695d-4d71-86a6-fcd665dd1e2f", "indicator--a7378ca7-d933-454b-a2f2-ec65cd90da95", "indicator--1d1cae7f-2625-494c-887a-7809f7478d47", "indicator--78c1b59a-2878-4f10-a5dd-bc8032cd40d0", "indicator--b43ac4c6-f2ed-4016-aa4f-53f30a2246fd", "indicator--0cb495da-3687-48c4-a2ed-15468e2ebe3f", "indicator--54d86a4d-f6ca-40c6-9d46-15cd4cc6a35b", "indicator--f3424401-bf36-4f32-ab1a-0f6d32be1c80", "indicator--2a0042df-14df-4d0f-97f3-1b2507c745b4", "indicator--10d15923-7f70-4a29-a189-13e81eec1ce1", "indicator--b70c6faf-62b3-4716-874a-5c1e8d6be4da", "indicator--57e9d834-ca66-42e5-8040-2b69d4d039ff", "indicator--676acdf3-3896-4bdc-80d1-6755d82b46ef", "indicator--513d2e75-5246-4b4c-92bf-6531107f1ff7", "indicator--27c9de20-290e-48bd-8889-140761e3dda2", "indicator--355655dd-566b-44d5-8793-a8cbabac9ec6", "indicator--8489c4f3-7aaf-4413-b138-463083397f77", "indicator--f517132f-6837-4d2e-99f1-aed2cbc87b8f", "indicator--6f334a7d-826c-4bb7-8192-7ee1aea4e500", "indicator--dd6a94e8-9d4b-4d56-969a-398f354a7302", "indicator--dab6e1eb-0abd-4fbf-b5c7-bd0aa03b5693", "indicator--62312548-aeaf-4662-b15e-512019d377fe", "indicator--90376865-aa80-48c8-ab7b-bccbc94142d3", "indicator--a3a63bd7-4b99-433a-9a56-8967c7bc8665", "indicator--e99fef13-a313-450e-9417-10be38fe6c71", "indicator--0e210c9c-36ca-4b7d-b79a-431c65b04394", "indicator--8f6db2b4-f941-430b-ace8-169f0e39a47f", "indicator--8e6e2048-91cd-42be-a610-f7c1d240c31a", "indicator--204618d8-fd01-494b-a0d8-977e9d094bc4", "indicator--ee17ca64-4fd6-4727-bf95-a42cffc745ae", "indicator--f44b3f5b-a286-47d9-b5c6-4e7043b7a56b", "indicator--fcb8ee0b-520e-43c7-a014-87b7ea842949", "indicator--7ca6eed5-474f-4db9-8af6-69887b56eb06", "indicator--6bcc8ba9-3588-48eb-ac53-a19e92b7db5d", "indicator--c4ab2a00-4d9b-409d-8938-3ff4bf2f2b8a", "indicator--8e2dd099-915f-45e2-a92c-b6705dc5900c", "indicator--6bc6fdf1-e52a-4a44-9911-cd0f9f17cb0f", "indicator--fe1f1b56-2cce-40f8-aecc-8ff809830dcb", "indicator--f6981d63-844e-43eb-b552-810ae3d5d8b3", "indicator--67b37f3e-46cc-4bf2-8ec3-c9573b5a47a2", "indicator--3bc2d7b8-a4fd-4a9f-8eef-907b6e311a08", "indicator--ab0898a6-ba63-4f30-9b98-d844930907a4", "indicator--fc6d098e-7168-4159-885c-fd6195844454", "indicator--9d56e09e-035a-4261-9b82-ca438037e04e", "indicator--4ff6a078-ff8a-4039-beaa-1a3d1b56ca85", "indicator--bd882e8b-6cba-4ec6-82e9-1217aee5d98d", "indicator--83bb3c73-4dbe-4269-b8f2-d93f59907385", "indicator--dadf8c58-3d03-4eba-99b8-5bc9bbb10bfb", "indicator--c0865dfa-7bd0-4827-ba5c-e1e2912bd733", "indicator--f017b415-3c8c-4671-abe2-3fc9bb7b9645", "indicator--5290e3e0-0ec9-422a-ac40-b597288a3c07", "indicator--4ed663c8-2405-4cda-8292-9b73eea676b6", "indicator--0e5990e9-0a1d-438b-85d9-94e0c25deb70", "indicator--7be8d287-ebbb-4a61-8bfa-7944d327bea0", "indicator--e8a9d768-edf1-4ac1-816c-02acb7c738c9", "indicator--a27f61b4-3657-40e0-bb07-7996a8c24f0b", "indicator--ef2b63d0-396d-45ce-9a59-91c6a11788d9", "indicator--834300cd-f774-42c6-81eb-cd89425a10b8", "indicator--eb3668bf-7ffc-4c24-afaa-175123349c40", "indicator--35fb3a92-3ef1-48d9-b0b7-70df1081c244", "indicator--7142b572-af2e-4ea5-acc3-bb2cef9987e2", "indicator--e0de0ff3-d54a-4d82-9b0f-a70a9e469d69", "indicator--ccc5764d-90da-423b-b838-f54bc7d90ae9", "indicator--a69588d2-6d94-455c-b171-14acc3e714d2", "indicator--d475010f-a619-4c75-ab6a-d54595bdde21", "indicator--1113dfd0-5b55-4b64-accb-153c2c552259", "indicator--4e176aef-2bad-4593-a879-d3f11c35431e", "indicator--2b3ed18c-7181-439c-b6a9-444b71196be9", "indicator--c932dc1d-2bd8-494c-ac4b-5c62ee3797a0", "indicator--45bcf59f-242e-473e-ab67-5b4ac412913f", "indicator--89d9bea4-cb75-408a-ac22-71a717f0be09", "indicator--f9dcb5e3-7b08-4fc6-8d57-f88f430ed809", "indicator--873b00ab-3b4f-4273-8ebd-d23e7a02f0b7", "indicator--3f299f50-3a58-4c25-94b3-e6c026af696a", "indicator--12f27075-4ab3-4325-829f-218879aae4b7", "indicator--ab583868-19f3-4be6-b8f7-2a727cc800a6", "indicator--43b6a299-9f59-4c67-af93-ce928a2a023d", "indicator--c453d64a-ddf9-44b2-a8a3-55f3f54d16c5", "indicator--241c6d09-b914-410f-b42f-c8b1b84358f4", "indicator--9281c546-62ae-4dee-9f50-01193203420c", "indicator--4e13c359-8683-4aa5-b6d6-0da2972a81ba", "indicator--4db18759-a28b-445b-8150-34d5545372d0", "indicator--5bd30f35-010d-455c-91e7-703635503c57", "indicator--d1c8fc77-34be-4399-820b-f57917d8433e", "indicator--6f4fa9fd-3dfb-47c4-8fd4-04c8b12f0a3f", "indicator--0e84187b-81b0-4f3f-b1a5-431f39bf08da", "indicator--8ed1cba6-1eb5-4fe4-83bc-84ed78ee7aeb", "indicator--88363399-8587-4a85-ab70-1f25ec446d67", "indicator--fb961f60-732f-440b-8dfa-6a3de5630f86", "indicator--3be0ea7e-3618-4eb6-9034-9dc8dd6b7ce6", "indicator--9d83a1de-29f8-4249-84c2-c2a0eef14d32", "indicator--d7bd50af-05d8-466f-a1fc-62b56a3880a3", "indicator--80b18c84-b046-44d5-97cd-5ac12288012f", "indicator--77e9c2d7-3c7d-4c90-98d5-48afa0cec545", "indicator--3e4abb24-0919-4641-b28d-6238705bd0c5", "indicator--80b6bf02-082e-4a89-b6fd-eb3e01080c03", "indicator--ed8a78c7-e8b1-434f-8a8d-82479fb5aeff", "indicator--1af58615-be31-418f-bfeb-c4487eee0ad8", "indicator--54ecacc2-3c5b-44b8-9407-2918d358a84e", "indicator--66b36576-abaa-4e8f-87b0-1bfa4de02f24", "indicator--d6c3bb96-31ed-4ffb-8dde-6f95a51bfd04", "indicator--9853c9f8-059b-4ac3-91ca-3610f388a434", "indicator--c0f28cb0-3611-43a2-bb39-6a17095eac65", "indicator--12173943-80e5-4598-86a6-09b5bcdc85ee", "indicator--5baabe65-1522-4f60-ae59-4fcb7f54fe8c", "indicator--dca30d05-4938-47d5-a371-0360ea9ba672", "indicator--072a56af-208c-45d6-aacf-15c4790f0643", "indicator--26f98b56-3d94-4e3e-ac52-269b20777baf", "indicator--5a5d0a0b-56a3-4dbe-9ee2-b7dff88258c2", "indicator--d2bd93ee-759b-4864-a16e-a3e3a8bd2f04", "indicator--f8429d2c-2d19-476e-8aa3-abc49413724d", "indicator--5fff0042-fb6f-48e8-a8b2-1e31a029626b", "indicator--8afde51c-ed07-476a-b317-ce871b3d1c81", "indicator--8abbd0d3-f162-4949-85ac-a437a6d08268", "indicator--5aa990ec-2b56-494c-b436-43a56986ad3d", "indicator--944add49-f243-4a03-a6a4-0dd0e82b498a", "indicator--f71b0205-53ee-4b6b-8db3-5f958fe8733a", "indicator--eeb14917-108d-439f-b183-6636a406b338", "indicator--221009bb-0c52-410f-bc60-d1dc510088f9", "indicator--b08840cd-1868-4e24-af85-0140d5a6c050", "indicator--f3c21e77-638d-45f3-b6ef-b7f265fa18e5", "indicator--896172af-7203-460d-b68b-2658e2471b8f", "indicator--5e1a5a9e-b3a6-4718-a7bf-b0b9315c26c6", "indicator--235533e0-aa8e-405e-9610-05e7db397ca4", "indicator--99335ec0-9b4c-46d4-b909-ca86ced0fe7b", "indicator--bc241373-c027-465d-9992-e51500eb7134", "indicator--c75a1385-f170-49e8-948d-7c864ed5c2a6", "indicator--2eef0f4c-464a-4a0b-b906-e9816e7d7eeb", "indicator--f8cfb84d-b1a9-4337-a3cc-36b9b2ce4cb8", "indicator--4c05584d-f7f6-47f3-bcfd-afe88e44fbae", "indicator--98d47289-d00f-43c2-80ff-3b07025aeb75", "indicator--91c86ed5-5b62-46e0-ba57-74e5a0b40d8f", "indicator--50300135-dc9a-4d5e-80fa-4bcb13594009", "indicator--03234b21-adf0-4156-9fb6-6c5e39a6b5db", "indicator--790e1c93-f2dd-49ce-847f-78f4a52d923c", "indicator--4e89edc6-0174-4bab-b07b-37ab87e28e74", "indicator--a807c4e9-bfdf-4656-93a7-c46a00bac627", "indicator--95d0a269-da57-45d8-9c9a-80d4935673c5", "indicator--f3d9d94f-6231-4775-a1a0-cb94d08fd066", "indicator--25a3ff80-a3e4-4b8f-adcd-4d54f92cb7e7", "indicator--c3d476f7-6f18-4630-9e04-4352150f794f", "indicator--54bcf0e0-3213-47ad-a75a-5d96e0920891", "indicator--106ece03-5dc6-4850-8556-c6e9d5306555", "indicator--d9f421b0-2648-477b-8c8e-78a0105e9473", "indicator--70c08b56-b580-48dc-8c94-3c702bfc3cd3", "indicator--c91d72f8-9fe0-4a31-ac23-7f969ea4ca82", "indicator--2658ddcf-5545-4744-8e28-350ec80a409e", "indicator--3f089542-944a-46d2-abc6-cf0a255e38cf", "indicator--cc2fbef1-f852-4cd3-bdb1-594af31d8f0b", "indicator--d3ef8a6a-7247-4b2e-b832-6d71213378f2", "indicator--9ab4a4a1-f87e-4a0a-92c9-db525f8a673c", "indicator--dab72727-0762-4128-b4bc-c164a7d8ad42", "indicator--c229ccf3-872c-4cfd-823b-5c2571781d57", "indicator--760af61e-0d9f-4d32-ad12-18f6e5947030", "indicator--1c0c3129-ad8d-498c-8125-590279062852", "indicator--d0cbe7d3-f97a-4633-8a90-a2a889abca84", "indicator--6cc3576c-1c27-4576-b612-05778968dd40", "indicator--5381d5e1-f957-4972-a866-78763ecbf096", "indicator--7f968136-c517-4119-ba7f-602cabe79ee3", "indicator--0ca86353-3bf8-4e24-940a-d7b8714ba8ef", "indicator--2ccce016-36df-48e7-8be9-feb5a2b6dd10", "indicator--e0035684-b816-4dcb-878a-d7833406f8fb", "indicator--158e8f26-9d1e-474c-9fc7-220590b71cad", "indicator--aac3fb9d-50ff-49ff-906d-196e0435a07d", "indicator--fd02f12b-5ff0-47cc-8b05-5355107dac81", "indicator--464723ee-0a8d-414c-966d-55b9801d84c2", "indicator--33e116a8-a402-4b45-8f18-06d8ea4fda45", "indicator--ff7acadc-b183-4d5c-9bd8-fd942a13c5a9", "indicator--42a8bce5-eec5-43b4-883c-627d213a57b0", "indicator--821255ef-b9e7-42ab-b2e6-1bc507e7351d", "indicator--663d160c-fdce-46d3-bb7b-4545c8c09cdd", "indicator--d4a2c88d-8a05-4a88-b77e-a9ac498f0b46", "indicator--db9fdf21-280a-4e31-8d92-020312e17c5b", "indicator--2aa0f198-6374-47f8-9ec3-0484859d252e", "indicator--d1f8f02b-bd9b-4b74-ae56-d3985a12f723", "indicator--4a2d85a4-1f8e-4180-8ab0-cda03155df9b", "indicator--176a0cab-6486-4403-a40b-12ec80d33742", "indicator--65434ce3-41f0-4242-8559-9f5a3fc65158", "indicator--ad9c487b-5d5e-4c44-a88e-cbe57767cdca", "indicator--64d2a79c-e963-4eae-94a4-1606bb943ae3", "indicator--67b84099-086c-484f-8c8c-28fff1f8d2c7", "indicator--511e0062-25d3-45f2-a53b-9f98fcde8a59", "indicator--b9225c84-a697-4729-b454-2f0ff3796717", "indicator--13db6c39-8c11-4a78-9729-03f9f305c1f7", "indicator--ffe49b4a-58a9-4ef1-9a09-9f148a3b6643", "indicator--349c047f-f4e2-4437-8c9b-3baace8d698f", "indicator--e606688b-7ccb-49c5-a9eb-f41582b40e10", "indicator--778b12a6-571a-4506-8634-30bfbec7f032", "indicator--5f3c9c04-1b3d-49e1-932a-be19ea8f8028", "indicator--96bb5cb8-03ed-4b79-b2cc-550d49ba129e", "indicator--5f84755f-a352-43e8-bd4e-aeedca180353", "indicator--97760fda-6ebf-45f7-91dd-7f3b7d9f7ff7", "indicator--8c136b55-d550-4c03-9eed-1df8f9f16ac0", "indicator--f28d51c9-218c-4229-911c-c205df051a80", "indicator--73b8d980-d265-4ad5-90d9-8eeae7bc7c59", "indicator--019d69a4-990a-4202-b43c-f3f60fa09e76", "indicator--26d67373-b19d-4f09-b220-9c8fef675bd2", "indicator--7f613613-507c-4aee-8966-c2ffc6b91b8e", "indicator--da2666cb-2cee-420e-9943-de87bcfeb81e", "indicator--0b8d9676-7fd2-47d6-87f0-bef573762404", "indicator--ba0b6bb5-f1a5-4c20-9e0a-b30d9ebefae6", "indicator--2c7bf56b-7b93-4594-ac82-63a8f7415126", "indicator--1f5c5a1f-f977-4d00-ac2f-1069b85f6b7c", "indicator--42f3bec8-3a57-41d2-85ae-68b27ca707b9", "indicator--496779b2-3d40-4668-ba00-ffcbb9d71877", "indicator--5c500fa2-cdf7-4409-b496-14efff3ed8fd", "indicator--3ed27800-fc07-4793-9c17-2615f962e4ca", "indicator--957b5f8e-6692-420b-a781-6a0770309b94", "indicator--a0c2c4f9-3a5c-40c0-ac22-b2ec4ce8b62b", "indicator--b589a91e-da63-4450-b6be-b70960a0f7a7", "indicator--5d978793-86b2-4128-a2eb-42658459542f", "indicator--187b5e8d-9b60-477a-8a27-030cd4e19137", "indicator--56396518-c9c8-451a-8f15-3f2322c26bab", "indicator--7594a29b-f1d0-4edc-9cea-cf018d0c4656", "indicator--cc25b467-1633-4e52-a69c-f4a109760e35", "indicator--707f954d-b692-4665-9ef7-0cdfc4479363", "indicator--7c0e4bc7-f2a3-4812-88df-4e5cbd08410f", "indicator--cb1ea6c5-1fd4-4f66-9702-92c089e534e6", "indicator--5876147a-c1ad-4d2c-95aa-c1666b56675f", "indicator--a3fc9aac-fca5-4274-9980-618caeb18dda", "indicator--5babde22-7936-4f53-b44b-f811c3fd7ce2", "indicator--2e0c0186-7a61-4530-844e-75b28c31ed67", "indicator--7f103536-057c-4229-9b74-a2a9490e5153", "indicator--b9473431-3f64-4b5d-b777-c0a3923d5d4c", "indicator--fb6c13f0-1a90-4337-b2c8-fc7539710cb3", "indicator--13a2e37d-667f-44ec-bc14-cfe725a590fc", "indicator--f0caf68e-41c7-442e-b8f7-5c0737d2c7e0", "indicator--f0cb0647-9086-4fe3-b4ec-6ae0e108ae26", "indicator--a1109058-04dd-4259-9fa8-7f294acc7edb", "indicator--404982d7-553a-4f3f-8321-46ef83c754ca", "indicator--186263d7-f221-4d7e-a74f-0826be11ed79", "indicator--4f6b2ea3-3847-4bdc-8cce-d3fba06fb89f", "indicator--e28d733b-1e7f-415e-bbe0-8d631df12bb4", "indicator--ec4e74b3-dad2-4460-af55-d6a62a8da93f", "indicator--4969fc3a-b1aa-49e0-adf9-df3ca03320d8", "indicator--727100c6-69b1-4130-8333-d701767acac6", "indicator--eff41d28-e41b-4fbf-98f7-3eb7a71816bb", "indicator--5bdecdca-f233-4a0b-b3bf-745b698779c9", "indicator--424dd3ae-ba90-4711-9c20-214fd599b5bd", "indicator--1910b080-ba50-4755-92e7-f3a9b7b2bc30", "indicator--208b7da2-7f17-4ef6-b475-766a7aa7d821", "indicator--71a5b5c1-5973-4a3d-bcb4-fc60a7164b2e", "indicator--28b8601f-c8f2-4e19-b65f-830ab5560f82", "indicator--0b5ef2b2-3ba0-4dcd-8815-ed72a2474005", "indicator--c78e7858-91e0-47ab-a3e5-9582555b13c5", "indicator--c5cfb581-3853-4740-ab33-087aacd1e62e", "indicator--ac2c6ea1-866a-4f9d-996e-9d8a8715377a", "indicator--e2ec001d-1746-46fe-92b9-654174ba6480", "indicator--332eff58-ed96-400c-b5ab-afba55deba9f", "indicator--6865f4b7-f885-4ed3-81c3-3e6e98ed7cae", "indicator--b7245a37-bea4-4af1-8581-fa95b612aab2", "indicator--1cc1064e-9686-4283-8ed2-38bdb53d9e74", "indicator--13d1d2bb-e90a-4f41-98d7-60510433a23a", "indicator--bd5d5d27-9bcc-493a-b76d-ad36df655290", "indicator--fbc40149-7b0c-4752-a15f-c860f0164f4a", "indicator--14d92325-8d9e-4e8b-9cef-714ad454a87c", "indicator--0c999930-2282-44b9-9bff-6e91ad3ad9fa", "indicator--1d0a4970-e1fa-4966-b7e4-208223962527", "indicator--dd25d7ed-6f8b-4841-b0d6-c74be9a7cf2b", "indicator--384fd48a-602b-48a8-a4c9-6dd4e2c2b8aa", "indicator--30b19c61-32ab-4d7a-9f3e-de08ee0b3818", "indicator--9798bd97-5f48-4ed3-9830-c852c6de328b", "indicator--0c0057c8-158e-4272-9036-c88425a8d380", "indicator--bdf777ef-aad0-46b7-9f3b-305d37fe18b6", "indicator--f828b48d-1137-46b4-a596-9240cce542a2", "indicator--e661e196-5a9a-4de9-9ecb-fc59ef65c4f3", "indicator--3482015b-f9c7-4872-b058-aca78bddf65f", "indicator--d225a4e4-9111-49ef-b815-c3e2fdc9f64c", "indicator--282bff33-9711-48c0-8462-c241a9833a21", "indicator--3cea9b4a-0255-471f-8366-c6e942cc0d5e", "indicator--7a502e69-3c0c-45ab-b1ba-b1444e844520", "indicator--8dc3ab24-f1f6-4bef-800f-88bb0dc677a5", "indicator--e405e7e1-2c22-4466-902d-9f5fcb12975b", "indicator--a65256fe-970b-4aaa-bb7b-cac15b2e063a", "indicator--e5e110b0-6a3e-4915-a239-a950ceb4f75e", "indicator--e454014b-dd3c-4d72-b9f2-e09455c6ca4c", "indicator--333aa5c2-b9f9-4e3f-9a3e-59a370feaaef", "indicator--9cf26e27-2215-4232-b18d-6e2affda94ed", "indicator--2ccc4459-2f70-4a03-9d75-039e18dc30ec", "indicator--db3df185-d9c3-44c0-af4e-60258ae6ff08", "indicator--724ac6ea-f11d-484a-a490-a37ddbd1de47", "indicator--d671d816-2aef-47c4-96b7-3a1ef0b7cb2c", "indicator--1407eef5-156c-40c4-9b3d-271ee30811e0", "indicator--e489587c-81f0-45b9-8c8d-a4775371220b", "indicator--562c82cd-1ce9-40b2-a53e-25ef0c578b79", "indicator--cb809ea3-82b7-402d-9dc5-ad5dfbad8093", "indicator--4d6681ee-22cb-45c5-a5a0-034788874c69", "indicator--716d2486-59f3-4cf2-beec-182bf76245d6", "indicator--e8694d48-5639-4876-8835-557bf038fbb7", "indicator--88eb1f54-8708-48b1-a9cb-43d4e434cb4e", "indicator--52fe5282-1ff5-4aaf-b0c3-bdcb20473b31", "indicator--445fb3e6-7a43-4406-8114-ba7fee221df7", "indicator--c359318c-599b-4a86-ba78-98811d9e8536", "indicator--b23ba3c4-6926-4d0b-ab5d-3836330c5398", "indicator--dc666d44-6120-45a4-8597-00769ff6b351", "indicator--81a68d01-e2dd-4a0e-b0b0-c7b26f94100c", "indicator--9c3b1002-068d-47f2-a009-5cc7806a9587", "indicator--44032310-ce4a-4565-8912-7d8aea7db340", "indicator--bdaf335e-ca5a-4f9a-a5d0-0eee063c6223", "indicator--4da9bc5a-e266-4a36-b064-03e71ae27d72", "indicator--6203cf3f-f823-4ea4-a30c-f3ae9bfa882a", "indicator--e266ac96-f3aa-4de1-8acd-bef158eae2c1", "indicator--a4d3b4bf-a56c-4550-9a74-0a8399adf3de", "indicator--bd7a74a1-ebbe-4c47-8b96-d1bb043116c2", "indicator--7bbbe954-cedc-41db-a0f4-23ecd3818540", "indicator--d0c3827a-0f2d-47e3-843f-734ffb64bd11", "indicator--874b6494-616c-44e7-9953-bd374c5575ba", "indicator--24dc82bb-9f7c-4a39-8fe5-6cc7779afe03", "indicator--bbe71135-5d27-4887-b344-d147ba8ac2c9", "indicator--a235a965-a60c-4e3a-846a-795402aed948", "indicator--88774897-7249-4346-9610-89d8c0e7aa7d", "indicator--b9867e9a-504d-42d6-a466-f9549ff5856d", "indicator--bc892807-8f35-4a6d-b3e5-e53d2b50eea2", "indicator--2d9019bb-deb1-4b47-89df-8fa0e4fa2e95", "indicator--a43d3e0c-157e-42e8-9058-5e91e7d604dd", "indicator--1c2c4404-b724-4fab-a41d-af75ec0e7cd1", "indicator--3e6b4896-4cbd-4a17-bafc-70b3a7bff41e", "indicator--a2d841ef-7a17-4b8a-8e41-dd3dae6b872f", "indicator--bb8f2b1f-d66b-47fd-9654-63293593f139", "indicator--96fbce76-449a-4167-89fd-cfbd0228f545", "indicator--e2cc78c8-b6eb-4568-bb29-b33f073a1ea9", "indicator--91044dc7-4371-436b-b284-b1ed1fccede3", "indicator--40d66161-7dd6-442c-b5d0-e5d3f559d119", "indicator--05c46b97-b90d-4929-9a8f-e11f7a5ba111", "indicator--e6b48b53-348c-4910-a478-e38b3986ce93", "indicator--5e0c19c5-f94f-4e25-b122-d0ceec88ef34", "indicator--83096432-a59d-4372-9008-c3cf59782936", "indicator--0fc01e9b-b255-45c3-ab1f-9c7dcb71471c", "indicator--8f393bdc-3102-40cb-9aec-7cec9ca054fa", "indicator--7587488b-f9cd-42e3-a8fc-e2440a8ca994", "indicator--a76c095d-241e-4dc9-b669-62eb4a4e197e", "indicator--1b1eac05-54b1-4623-be03-533582f592e8", "indicator--ca582617-aabf-4162-9acd-f811e9f1a4fd", "indicator--84f1e509-3a24-4b78-8b7d-cd76aa5d6b12", "indicator--2d963139-78cf-4a21-b0a7-3be953339561", "indicator--653d7088-ad03-4456-b06d-c1ee42b98928", "indicator--dcebf8ee-be5a-4fa4-a6a2-ff73591df4c5", "indicator--77116c93-004a-4e67-99ed-67b5e20dae0f", "indicator--f6d2040a-7033-403c-a229-b94241332891", "indicator--2d2ed9a5-6359-4492-97e4-5aae93720384", "indicator--ab7ba3f5-771e-48e6-b032-a90f53a1b985", "indicator--5952c5ad-0d8f-48f3-9f8c-af2f36930d96", "indicator--d036ae2f-aed3-4c4b-9df5-5a1778973ab2", "indicator--0f423c52-1dfa-4cff-a10b-df8a388be76b", "indicator--31f58d16-b32a-4908-aa7d-eda5cfbe7ee0", "indicator--53e75486-d00f-40a2-a9c1-0b36841ed642", "indicator--4c7a524f-6292-46d4-89a0-471d4364d642", "indicator--2dae40ac-7a24-4e00-af47-9fa9dc1fa7ff", "indicator--88661a13-3702-42ea-b750-2d11fe86b033", "indicator--6f8c5f71-fa5e-4773-aac8-e5acca9395c3", "indicator--76822a0e-c442-4425-abab-0457044b0e69", "indicator--4c7f9ef1-94ae-42ac-946f-5d7fafdf1a2a", "indicator--84df626f-b813-44c3-8016-07a589d586ec", "indicator--32066375-9e7e-4102-941c-e11cd04c67a6", "indicator--d51a477a-72aa-4275-a6c3-a7b4397c204e", "indicator--cf7b02f4-d6dd-43a0-86fb-347c0d71563e", "indicator--86ed6af2-a415-4cfc-a091-6329519dfc94", "indicator--d4604c30-8b68-4cfd-9c7c-ff51bbf8dda1", "indicator--17ddddca-393c-465a-9aa4-bf40fc50527b", "indicator--1c17bc1c-95c2-415b-94ad-0f84a0c12edf", "indicator--33c6cb7f-2a6c-4bf5-a2ef-ff4180953eb7", "indicator--4bdce4c9-808a-41f6-8068-feef623f21ef", "indicator--98aa9712-8992-429e-8e1c-8fa957659370", "indicator--44b58086-a6ae-44c3-8194-baa7ca4f42e1", "indicator--0a7b8e72-22df-4323-9c39-d63d054c461b", "indicator--192932ab-93ea-430d-ad50-6115b85fd052", "indicator--0d8ef690-02be-4cf1-b923-51bec914367a", "indicator--84fe3454-655f-42c5-a50a-afd04665853b", "indicator--870c1292-6295-4039-a63c-c7e839d83586", "indicator--e94695be-a779-454b-beb5-f78417f19f16", "indicator--4be0d8cc-7f16-4ae7-a0cc-bb89b4a29806", "indicator--49bcf41b-979d-44c3-a7f8-a0e64d197332", "indicator--f4f6ccc2-79e5-402e-8a23-67cedd83b9d4", "indicator--54e7db72-f4a7-480d-abd7-d3da770524c1", "indicator--6321b4af-41f9-4d42-9ee2-69cb2ad086c3", "indicator--7966ae01-fae1-4eaf-9390-b1ab625d2938", "indicator--a6701aff-9b02-4313-93de-0cdf9c4c84e7", "indicator--69a9376e-ae63-4867-a867-b7a987221994", "indicator--6dfc8c5b-8c11-41ac-ba35-27e3364bfa40", "indicator--fff71f80-ec69-45a4-acc9-2ebb0c14289b", "indicator--898e4a74-50d0-4055-9311-7dedb8a7ee7a", "indicator--629c8a76-0861-4c9d-adcc-2bad0779c065", "indicator--f2cb2e2c-779a-4b6e-984b-252941554f37", "indicator--00fa0173-bcc6-4c6e-a012-10fa9c61398e", "indicator--98e29382-05f1-46b4-b1dc-7366985c7e79", "indicator--782871f4-656f-46e7-957c-7a828462fbfe", "indicator--c27f8e43-2cf0-44de-8cd2-f1e24c439d91", "indicator--de7b2c5a-d2db-4fed-8ae1-872bb2be1f8e", "indicator--08985c57-b492-4414-b6d4-34ce7ae53bc8", "indicator--eef07141-0157-4e46-8d18-cf3dde4367e3", "indicator--357df79a-8d49-4800-98af-a5b2fd0ae0d0", "indicator--c6c4605b-e05a-4b36-9f2f-389200a80106", "indicator--7d4b3cd7-b36c-4fe9-91bb-c9f5476f777a", "indicator--88b72e32-01b1-4ea9-a4c9-f6ce8ecee3d0", "indicator--948cb3ed-152d-4186-9deb-642475e6bdac", "indicator--790f93e1-37b5-4e2b-9a58-98d527619563", "indicator--0afea125-235f-432d-b7d1-b7442b345251", "indicator--4764ea56-1548-4a2d-ba87-97af153b3969", "indicator--43aac4ee-fc69-4ca4-bef8-8d952458fd9c", "indicator--162780b2-4d2d-42e9-8004-cb7572be87b2", "indicator--feeefc04-2c60-423a-9f3f-28417c7027aa", "indicator--eff0a139-4eb9-4373-a28f-76f6fe8ffe8f", "indicator--a709366a-9481-47e2-841a-22a9099cfbde", "indicator--8918fa41-336f-4bfd-9ea1-0e3d7f5ec7ad", "indicator--9af7a5f9-5988-4814-a140-b34a9849d7a4", "indicator--7f512469-c23d-4037-9749-13de531e9e66", "indicator--66e3f981-e2a3-43c5-b110-d3aca3b77c9d", "indicator--ab5b9e70-34f4-4ad5-90a2-63973487416b", "indicator--41b67e46-281c-4957-b518-de869a40852a", "indicator--b55ffe3f-c1c1-43f5-9549-d7d0abc661cd", "indicator--16bdfb0c-146d-4542-a5bf-798803f30e31", "indicator--0a251877-8b43-4b67-93b8-a15afac301fd", "indicator--e226305b-304d-41b7-a80a-804094ca7937", "indicator--f30c3879-2553-4998-b61c-c6ee343cee42", "indicator--ff575483-f9a0-4caf-825b-5bf3ed507a9a", "indicator--95525f51-3a9e-4662-a140-ddc91ccecfa3", "indicator--a40b0ed4-8c0a-4e9d-b3b3-20e38428a339", "indicator--05ccb678-0107-40cf-bbd6-b0a7921fd9d8", "indicator--55fa10e2-f323-41e9-903b-87b2404e95e4", "indicator--eaac8b93-e153-4997-b204-bcdffe09c505", "indicator--5678d531-117b-4cf3-91ba-b6bff1235b56", "indicator--4b881617-aad1-457e-becf-bf6097beed2a", "indicator--e9eb2af0-d05e-4675-a17e-6a4700ef6c9d", "indicator--3173e19e-587a-42e7-b586-0ccd0c48ccbe", "indicator--7b20bf1c-30ff-48bc-8dae-1facb7f3fe79", "indicator--9bb846d9-233c-4bd3-afe6-e206ca8baf2c", "indicator--6a1e9046-2b5c-4167-b02b-bb855de19605", "indicator--8a51579e-b380-4048-818b-a50d21b1ecec", "indicator--a4b282ac-1acc-46e2-8ed9-704f6d22afe8", "indicator--d98ff594-32b3-49f4-982c-efc5419d368a", "indicator--f540d9af-a594-49a8-96ea-d3c7bbf177d7", "indicator--648c3f7b-b82d-4411-9677-64a74abf6d70", "indicator--e6a9da3e-f480-4203-b202-c2dae05f0cdf", "indicator--b64ff364-d829-4340-b771-17862c0eb537", "indicator--806594ad-d2af-4df0-9dcf-fb770e320fc4", "indicator--35275474-77bd-4722-939d-61dbf1c1ff16", "indicator--3b14e67a-658d-4c47-8d06-6301675c22be", "indicator--fa79f7e3-afb1-4fee-b240-32e0512f2577", "indicator--e3a6c957-5590-431c-a39a-fcf7c2d2f26a", "indicator--0fa9814c-a74e-4b0e-bb1b-4baef9b89b9d", "indicator--27e7ff63-e698-4862-badd-5b6ebdbee65b", "indicator--fadf51e1-1787-41c9-a940-efef17586641", "indicator--c55fa6a4-494f-4ad3-9c05-bd59f0bd611e", "indicator--f24887b0-3c68-4058-b08a-2cfc8bf51553", "indicator--beb5e2a4-2bfc-49f5-9318-b0bf7f624e12", "indicator--d6745dad-20f2-4371-be79-c1c3332289e9", "indicator--715320e4-af7b-40c0-80ad-49e17b360b32", "indicator--dbfe6bda-3cce-4ded-8812-aa20a47a9724", "indicator--ab391457-96a9-4c95-af85-4faa981837f8", "indicator--87d7f428-13da-4b06-9b24-ca00229383a4", "indicator--507cd162-4084-455e-893a-e17b54fe25c7", "indicator--d03aecc4-a61e-4fb8-8049-0ad2a26efca1", "indicator--bb44752a-d929-46ac-a75f-9b15943402e3", "indicator--f7bcd115-d3d7-4bb1-b05f-802f03308709", "indicator--cbd123ba-fa3f-4155-ba0e-5c6277818e6a", "indicator--d56505e2-e309-4bee-97ff-10f16f401d88", "indicator--29b2a82d-402f-464e-bc9a-072dc32b9fde", "indicator--c11c8b9f-df2c-476c-836f-033add7e1316", "indicator--1af3c6f6-3152-4cc1-bcac-364d7ee4164c", "indicator--fbeb0982-ee51-4c5b-b0e0-25b123e9e994", "indicator--3765b724-e564-4f66-b3a6-c4c928944f84", "indicator--18b6066c-e323-41fa-a905-431b0bc1b490", "indicator--4b8965b8-ca97-4ef3-909a-e8433ef7a2f6", "indicator--1b8c4b0d-1c19-4d35-968c-8e15eeedb2db", "indicator--0cb581fe-18b9-48e3-b63a-9e711814242b", "indicator--dfc5040b-9482-4d06-ba34-829ca435da04", "indicator--30f0c566-e2f7-4735-9447-ea327f9a5277", "indicator--c75d4bd1-1d1e-48c5-a7d7-addb39d11459", "indicator--ce736002-b242-474b-82c4-fb1f336ba312", "indicator--53de5300-da16-452f-b327-24408b92a14e", "indicator--60cbb555-c857-45b1-a9a0-5c57989db18d", "indicator--ee5d0bdf-ccd1-474b-9f79-99dcbab4feb0", "indicator--4e0b7651-9aaa-4e71-84a0-d924e2a35178", "indicator--2a74bbe3-0140-4e12-b7ce-6add04642bb2", "indicator--d33b2111-06dd-4342-954e-98e47911f0a6", "indicator--a15dfbd3-0372-4d43-aa2f-3a45c8b32795", "indicator--79395947-c8f0-4c13-b2a5-a20a5e4fb27e", "indicator--da1c3521-f92e-4d2b-8984-c99a9f23fb30", "indicator--d3619cb2-6160-4eb0-b7e6-5ceaeb5ab869", "indicator--662faddc-ce12-4667-97af-ef4181b44d91", "indicator--bd869e3a-8bf8-4e18-9587-b9aecab11352", "indicator--c61af695-3033-40af-9f26-f1c643b95975", "indicator--2fa88002-8ea3-4f11-9d15-7a2d6e6a8d38", "indicator--e032c0de-f315-4ced-9527-f1986844bc54", "indicator--6d4591ec-d48a-472e-b084-70d46145627e", "indicator--9550a007-50e7-4036-98a5-c15eb6645d2c", "indicator--c5afb5f6-5f9f-4681-ad5e-af3057864b79", "indicator--35290a71-9e11-4274-a275-0e7f587ddd05", "indicator--e0b21f5a-692c-4182-84da-7cd1a61ece8e", "indicator--6eea9bd2-7f2a-4b71-a598-49b52222afff", "indicator--64b6a75d-5516-41ac-bf4f-6401b6293789", "indicator--1d06b3c7-e3a7-4dd8-98cb-694259f79b49", "indicator--21f13a7e-6dd9-4cd4-af92-831b7619c655", "indicator--13395166-20e6-41c8-8dcb-c69302d0a8c0", "indicator--207ba9ff-0116-41b3-843b-51e7039b5465", "indicator--9f0e35e1-7d88-4d74-b3b8-4fa563a87de6", "indicator--910f5778-f8a4-4127-8261-0e207f49b123", "indicator--16fd4338-c8c6-492c-a66f-3fe8c62b9bf1", "indicator--5397b006-53b0-4026-a287-407ade3ab394", "indicator--ef7a3445-0d67-4127-b8a6-ce542e12a617", "indicator--ad927398-3d0e-4d1a-9b1c-104be50a92f1", "indicator--76944c46-6fc9-4cb7-860d-844fd1f07879", "indicator--6baf59c4-826c-4b34-86f2-93fc11319e21", "indicator--ebb81c7d-b300-46f5-8957-c0633cd62836", "indicator--62c2499a-99dd-496b-bd4c-8f06f902cf09", "indicator--bac49c22-5fa8-4e36-8940-c20b5c411ed4", "indicator--669f8958-a24a-4926-8cf3-340a2d727929", "indicator--87c61731-036e-41d6-a3ad-4b6dfc358a59", "indicator--763902b6-28de-4343-b557-715199cfa626", "indicator--eaecd551-38b3-4f6c-bda3-904081ef0b9f", "indicator--9ab51fc0-eaa2-4fb5-82fb-c01b5737b254", "indicator--043a42d0-f98a-40b6-9571-8bb3157fce90", "indicator--a53059ca-c1e6-4bb6-8ae2-ac896d067ff8", "indicator--31254fb5-c121-4127-8cc2-b8a6b6e45403", "indicator--0e9235ab-8f03-491c-8091-2fb8c2c438b0", "indicator--cc138dcd-3360-4a60-a6b2-78500b37c453", "indicator--41d5c243-50ec-4154-b7f8-5e08e5911015", "indicator--8f835d60-0d85-43e0-a366-40d8a02e136f", "indicator--3176a487-9914-4c2f-8063-8e525cbb88b2", "indicator--425cf3a0-5f3a-4f8a-b0c6-0cae59fdce81", "indicator--673d827f-5a85-4bea-a512-2c4013c9c4f5", "indicator--5710c265-3dc0-4f98-8791-44312b24633f", "indicator--7b7b4755-5889-4d5c-af0c-e9b17db72a19", "indicator--54d7b3d7-9819-4cdf-a8c4-e2b92a8b2008", "indicator--be394f11-33d2-45d2-88db-a8ca960d90a7", "indicator--f7cc9e43-f77c-4669-9758-c7ba77ff1ca6", "indicator--f71a5ef0-e03d-4f2f-a79d-b41355ecc4b7", "indicator--874d723e-88c5-4daa-a64f-44ebde5db4de", "indicator--340f67da-adf8-4b1b-91f0-3838a28620ad", "indicator--ee98bc9f-bb53-4d41-a0d0-0c079fef799d", "indicator--b87e286f-ecd3-4b03-ad35-2792373f2b8b", "indicator--c12fb08b-5055-46f0-b37c-3fed6d6feaac", "indicator--dcd98565-50fe-4187-9b10-81e6f0035ef2", "indicator--09a5d99f-07f3-4c1f-800f-452402d4ec83", "indicator--c42d2785-f3ab-40a4-842a-d410330e89bc", "indicator--765f00fe-4c7e-4d88-b5d1-ec0768954b05", "indicator--d1a65cae-2430-47d3-bb6b-5681fe59404d", "indicator--7ebb6a40-9fab-4b51-bf0b-c4227d646770", "indicator--81151cf9-79fa-4dbd-9678-d95c29c678fe", "indicator--5ab779da-252c-4bcf-9c37-5b97d2ba23e8", "indicator--45764e18-7124-4f62-b6a4-0f104df15505", "indicator--631fa6fa-b0c0-4174-b7ee-e4271b46133a", "indicator--31c7e30e-f49c-474e-892d-ae1bc56d35d3", "indicator--cd3457f5-19dd-4fd5-94d2-c8c6c7be3a54", "indicator--9bac1857-50e9-4e5a-8178-c6eaadcf0905", "indicator--aacb28c8-960f-4e52-972f-3577acaea8fe", "indicator--07d01e5b-28cf-4e6a-8197-8d02c9b8c4f7", "indicator--1b295757-93b1-4988-b41d-0df25854c8dc", "indicator--7ad7e929-2ceb-420d-9817-55f8d7d99c96", "indicator--bfdf941d-360e-4cc8-bc7c-0721b96249d1", "indicator--aed9f5d8-c7fe-48a5-a968-996963b59f91", "indicator--a8c76b94-d5a3-4b17-b66c-0b05a3cdb44a", "indicator--c746c844-2579-4f28-b537-6c9374a91a1e", "indicator--a5b99cbb-08f4-466f-a981-4d3e96bf8a7d", "indicator--d594563d-8605-4ee1-8626-e7c7e97e026a", "indicator--5ee931b4-bbc7-4fd5-87fa-eb4b5930df72", "indicator--5ecc6bb5-d882-4693-8017-5f1eeeb28e7b", "indicator--1ad5578e-6718-4bcb-8a2f-24bd4f0dbb3e", "indicator--f66b695d-04a4-4788-a9c9-8498b4f403e5", "indicator--d7aab70b-164f-4bd4-95b3-977da623fc83", "indicator--08024714-b253-4f32-a196-8035948f6eaf", "indicator--3c46221a-d29e-44cc-ba5d-55383fbf3eb9", "indicator--9e9e65d9-3ce9-48d1-a325-bc9e4b8e53a5", "indicator--b2ac6e22-ebb4-4c5c-a43e-a1ae4ba32623", "indicator--b7387103-3f97-4aa7-a6b4-4d3f6db48d30", "indicator--6d12e2a9-292b-40a8-95f9-55063cbf4556", "indicator--460fdd3d-0bde-4090-ab9d-fe346644cfdb", "indicator--ed8f222a-8848-45d5-9db2-4e13f991bc6a", "indicator--959476f6-d53a-4c1e-b439-8b22a8be9070", "indicator--d462d89d-c1f2-4722-8afd-7d24224c0951", "indicator--632fd963-23d4-467f-b335-1d6854d2f40b", "indicator--361d737e-6794-4ec6-82dc-df27f8272f31", "indicator--309f6cee-66d0-4abf-8522-c477d8476f88", "indicator--b3573f03-5fee-4b60-81f1-45c64470b897", "indicator--c5a7dea9-052a-4cf5-a2e4-302950a6761d", "indicator--2639eb64-a1fd-4d73-a270-a9d34af687ee", "indicator--0ef463a0-37f5-42c5-939f-559cab275047", "indicator--9ebd34f0-96f9-4a63-9484-577d51249c7c", "indicator--068b18bb-9fb5-4542-9447-b5c92d9a5537", "indicator--b7d51341-f163-416c-960e-515025b99688", "indicator--93b1e87e-9f43-4920-be65-1ee18c0187b4", "indicator--4ab7a7b4-0a94-4ba2-82bf-d70e04ac5200", "indicator--3b7fc443-d741-4962-a2b8-e4989e12ba18", "indicator--082a86ae-530f-48f3-8072-4f8f8ccfd002", "indicator--160d9b3b-394c-4fdd-a4ba-c79d1d154782", "indicator--9182fd82-874f-4325-ae1b-ae79c7227209", "indicator--079ce841-71b1-468f-b4e7-986fe5b9e532", "indicator--10a02110-f7ac-4846-b44f-4c3bc8c4b709", "indicator--1d208652-e361-4be3-8c24-76fb35eb00c7", "indicator--75226512-7a2a-4ea0-8613-b24c8e582d54", "indicator--aae13f0b-4ed5-4d13-b071-34dd54ebc114", "indicator--867b27a1-373c-4e44-9332-0b456652324d", "indicator--7bf2fbdc-e0b1-4189-b611-7c7c59d9de06", "indicator--7fadc4ff-c048-4b36-9aa5-13b889f9afa5", "indicator--fd3d7a3f-8f5c-4f75-ae91-590a80028d4a", "indicator--73a19177-34c7-460f-8a07-19b8b049b142", "indicator--7d2c077a-14a4-49af-886c-5de5b5e317b5", "indicator--ada50d8a-c34a-42a5-969b-4fae5a24a10a", "indicator--8299724c-13e5-440a-a78a-7a1fd7c75d11", "indicator--69f0bcde-dda4-4758-b4f2-814d19a7e1b4", "indicator--9592de82-404b-4cea-9543-2ed3cd847dbe", "indicator--247a3693-501f-4e09-834b-24a856ad8345", "indicator--7e661198-e7a6-4135-97bb-3ee7c4078342", "indicator--5e400e7f-e4be-4f5a-af9f-c6e42848eca0", "indicator--b56313d0-e12f-4f54-ab3c-a9852756af71", "indicator--e078043f-6e9c-4d15-93e9-f3a4710499e4", "indicator--bf747cd1-247a-4dd9-9e64-7c45590a7ef7", "indicator--7d83db08-852f-4590-a5f3-5a3b5819b951", "indicator--72fdb0de-9df0-4ac2-881d-08a2543a3683", "indicator--3658b7a4-7f93-46f9-a470-c0959e6ab4c0", "indicator--6b75a80c-972c-4ad0-b004-0dd9dba822f2", "indicator--4b9d6861-4aba-4fd9-a782-1cf20b2f872a", "indicator--94332b83-190b-42d3-ad51-854cb6c288da", "indicator--8d1a4749-6227-4a02-a480-5f746cab7857", "indicator--f52cce83-e033-401c-b2ff-dd738cecf5f7", "indicator--7abc5510-68ac-499e-82ed-9e3e4b2dd3d4", "indicator--309dc227-7311-4ee2-b5bd-51e0703b1338", "indicator--5ef82019-04b9-4ac0-9d31-aaf0f6be5b55", "indicator--ca405661-43be-4fe5-aa4c-073222577c79", "indicator--f3ed504a-19c6-4891-ba17-6cbaeced1825", "indicator--ef54b92b-9452-4d37-aa36-fb9185c641e5", "indicator--04ff07c1-75a3-4850-8281-2be5fe015861", "indicator--68348cfc-e01a-4741-be1a-f1c5d6a993c7", "indicator--0a7d28a8-f777-4f64-8cc4-e3a490105d30", "indicator--e4625ec6-22d9-4631-a897-264e1a853a83", "indicator--843111c6-9970-4bc5-bd08-59ae42a7ddb5", "indicator--a8d3df26-db03-4c57-9e69-b4fe9e3f2132", "indicator--47229ced-a918-4c77-b431-7f5372dcf01a", "indicator--fb0ec4c6-8d36-42e7-94fe-3550f45a6cba", "indicator--a8e9c923-1bcf-4d86-98e4-a2614b19e9a4", "indicator--3840db80-5447-476f-8d4c-6dab0547c6ac", "indicator--4dac29ac-be13-4f7d-8ceb-fe7bcc0402b2", "indicator--342b3499-853a-43f7-8bc5-a66314512ecd", "indicator--ae7909b5-6cf9-43bb-8411-c10fc276b7d7", "indicator--0cf2fa70-1b11-430a-a019-507283efa1e1", "indicator--edc29321-b30d-4072-afeb-0e4897d3f17e", "indicator--c2951c43-1709-4d44-b8d9-867929f182b9", "indicator--fc5967e3-6d84-45d5-8118-1fb697630579", "indicator--f4ee2c86-904c-4cac-a79d-a61d0733061e", "indicator--61c9ec16-9ab3-4334-8108-fac05115890d", "indicator--6234a493-6683-438b-9f83-41ee4540aa7b", "indicator--4d62ebd3-bd00-4a23-97f5-3f2e32b0bf93", "indicator--f46ebab8-fcad-47c9-b2ae-402de52b5aaa", "indicator--8a5cdc28-eddd-41fd-a3ef-043a00e8dc93", "indicator--fde19308-f435-4331-b884-0743dc9cd4b3", "indicator--a5417ff4-fbc2-4d68-8705-e7872e6ee9d8", "indicator--af31b64d-a0f8-4b60-bc02-c7d5d9d8f270", "indicator--8249edfa-301a-4a27-aaf1-216b63dcf6f8", "indicator--c7f9848d-62a7-4a2e-875c-a03c451629dc", "indicator--d77a82d8-c9a8-44e1-a6fc-76de91482cf1", "indicator--fdb1769b-c8e1-4e6e-b39d-65ab6733848d", "indicator--0697686a-502c-4c91-80b4-c747fa88d83a", "indicator--7f70d941-e270-4871-ab6f-3ac4b038a035", "indicator--425867c9-931a-4f82-a28f-666dcfd11c41", "indicator--46dccec1-9bae-4537-acd2-9776c1b6d602", "indicator--3ee00dad-1bab-4171-b5a6-e2f9878594fa", "indicator--229be937-a61e-4564-a48b-6f9bd6f5dbe4", "indicator--e33f51e4-84e0-464d-b421-e1cc6933a3fe", "indicator--459209e3-645c-47a4-aea3-59645167c389", "indicator--bcae2bae-8064-4c9e-9f98-4e0cfe796219", "indicator--3d687a2b-ee2e-4105-a0f5-e9f6429c4308", "indicator--fd8f13c1-0963-4db6-a743-3a5a758446a3", "indicator--0968454c-2978-4792-9234-ca91d7c040f9", "indicator--206f2afc-5365-4c4c-9634-c5b4e433ea1a", "indicator--6d7cfcb2-498d-4a1a-beb0-c4ad4be8cbe9", "indicator--9f302b37-c563-473f-8e7a-671d9ab43917", "indicator--0c32819c-fd5e-48e4-a06b-127e9e9219c8", "indicator--c9df406e-1097-478e-9626-f864334f2843", "indicator--d2bb01e5-4618-4d86-87c8-5ace3448f658", "indicator--0f2d8032-be2b-4cb9-b7d3-1fa68572a3f0", "indicator--49b6b28e-8f81-44d7-b40a-dfd96e24d8a8", "indicator--73822a34-038d-4e49-8e5f-162fe69ba482", "indicator--6df4a420-7b7f-481f-a64a-d02a49833928", "indicator--22c5ac95-4329-4244-baf6-a0ffecb8e6fe", "indicator--453ca4be-5510-4f1f-808c-50f134e3811f", "indicator--541aec23-ed2d-4de1-a285-f36f6487bcf8", "indicator--d99b28e4-9bb8-49f2-a045-162da1dda914", "indicator--c28a43f3-1913-4079-9b07-d1544ddfe4e9", "indicator--eb888eb1-6f6e-45ba-8aa5-7c6dbe14ae82", "indicator--b15815bc-f9af-4c19-928f-4680f26017ac", "indicator--84009630-25e5-44f5-a93f-04ddb7ad1000", "indicator--3f154157-8bf6-4b59-b214-81790363e8dc", "indicator--d26a9b50-71fe-437a-97f8-b926cb35156f", "indicator--3e2de172-bc9e-4b8f-b662-40030af6805a", "indicator--c19e3aec-38fb-48c5-b451-a1c2b7f48537", "indicator--099bd722-2877-4a47-a36c-fed76310c1fa", "indicator--bd7e52a5-1b34-4f27-8e96-0a76d6a3eed1", "indicator--11f02661-cd1d-43a2-b09a-d01e8dd0ec39", "indicator--663216bd-b3c6-4fe0-8970-1f113552641c", "indicator--2949c0ee-63a7-4d71-9d1e-bf9f2cbda8a4", "indicator--14339976-9802-4cdd-9be7-efde4b015bf5", "indicator--2f62cf68-d70d-4a00-a9d0-469a8c49faad", "indicator--34597c48-b286-42ce-b010-f2dad6ab2c46", "indicator--086416cf-30d8-428a-a5db-dfdd9a95b801", "indicator--baa25b88-c525-44ee-bb10-e71021783b58", "indicator--1f93fdf0-5c06-4eae-ba61-3839e6702e83", "indicator--d6d045bf-5e54-4b2f-8c86-06944fbf64cb", "indicator--551a6166-c221-4211-8148-5a6da1f2fd69", "indicator--1f808255-f407-44e7-8beb-de2c371f8495", "indicator--aa7f4b84-f27f-4b3f-bfe4-9e546848d6c8", "indicator--22526fa9-0279-43c0-8fd5-935e75bc3a23", "indicator--63dda1fa-18c6-430b-8b62-a44617e9c6f6", "indicator--fee32a87-b439-4cc5-b2fd-55ab68312372", "indicator--5edb6e6b-8263-420e-9477-74a213ab3021", "indicator--6086a3fe-8739-4f3f-ad62-19645228a13f", "indicator--8787b436-8727-4a18-8166-4a0991dc9014", "indicator--1f771529-0fb9-4448-afba-ba4cdf43dfff", "indicator--c78655df-512a-4f7a-870d-120e098846c8", "indicator--c25b0004-fbf1-4cb7-965e-ffc00ac4eb25", "indicator--b54cb25d-ef83-47ce-9188-279f76bf3386", "indicator--293ec79b-ade8-4d0e-9c17-1af057e3e047", "indicator--1e7e03f5-2600-4338-aee1-c3d2ddf41d09", "indicator--5581c1ee-eab4-4d17-b252-15405cdefe90", "indicator--ed057a77-9901-48fd-82c1-ba23084727f7", "indicator--15fb458c-cc06-4b5d-91ee-c4690d1dce36", "indicator--494d6f54-bb5b-4d48-8097-f5aa07f9d19c", "indicator--4ec20f8e-0f1c-4092-bb10-8099d59e4853", "indicator--84134d6f-7ad2-400f-8781-9d1ebc67ae4a", "indicator--7fe44cbc-dc43-4c5d-a391-2046375d16d5", "indicator--b0e9e2ee-d010-49f4-b6ff-c1f6bc478081", "indicator--2419b29a-6476-42d8-88bf-cd7868d000f7", "indicator--26b9a3b9-3a6c-4a50-85ae-ef81de1c2f46", "indicator--e49e43b5-2b20-42f7-91b6-c2221768066f", "indicator--05ce49fc-b7aa-43a3-8bed-d12ec58bace5", "indicator--28c3abaa-a637-4319-9bf7-bc625398597d", "indicator--c2d6e806-2cb0-4ba8-b92c-48ca9bb1b9a0", "indicator--fd343e0b-1513-4696-8a3e-ffa82677b95e", "indicator--9630cbea-0b4e-4179-9706-e69f61dee7dc", "indicator--9b3bb2d3-e8a1-4ed6-82f1-dbaf98b28457", "indicator--0b365c74-b035-4c5f-a70d-584d85d8e664", "indicator--aeea253d-1e29-464f-8cd5-89797d7c7193", "indicator--f677fdc4-2459-49f4-9106-2a7702dfa6ad", "indicator--f241e984-fcf3-42b9-904d-58f402df0c16", "indicator--9b7b3e7a-8b12-4520-8657-db2de0069f8b", "indicator--e505e999-5520-43ca-ae6e-46290cb154b2", "indicator--aa6f4dbd-e73b-488c-8c3d-bd6c58a3c560", "indicator--a69b8e95-68d1-46ca-ab45-faa76839c19a", "indicator--6fa33849-900b-4f6b-96a6-c504d8cf8097", "indicator--56e7c8ea-b1d3-42a2-b942-a1b3b622ba70", "indicator--2a1e2a98-3a24-49db-bf71-550003ae7521", "indicator--aff9fdf2-be82-47e8-9ff1-0a8e8005e17e", "indicator--1884da03-f3e1-41e4-a244-297f375936b3", "indicator--5bb471c8-85cd-4336-978d-986221d5843f", "indicator--906fcac4-a01c-4ba2-bcd8-0063c6595b50", "indicator--df0faa21-4c18-415d-9c7b-3fe0e92edcf8", "indicator--187f4229-a89c-42b7-b61c-692ae194d9fb", "indicator--a03ddc1c-c9c1-4297-bfc8-2a4625ddfe3b", "indicator--a813f834-796c-483b-844b-e73732cd5efa", "indicator--878707d1-f296-4249-8e81-f0d8f71b50b3", "indicator--67379183-3843-4da5-bb2a-ebe2c7c1d079", "indicator--aafe8eec-6c66-4645-ae52-370a59107d7e", "indicator--1549710b-82c5-48ce-851b-ea345371b62a", "indicator--5fea47ad-e343-4f9b-b6c2-ece6cb3e2f42", "indicator--0779ede0-adc5-4aac-ac11-24a9904cda5b", "indicator--b4f7268e-5697-4126-8510-06d7efed2d49", "indicator--132b2576-f2f0-4952-8b40-a92309ae5e69", "indicator--7d3380c3-d6a6-454a-9be9-5a0672b77ddf", "indicator--a71a224b-f216-45d7-b25f-dcd2f454b686", "indicator--6e18f825-ec79-48d6-b857-fa3bdfb2db56", "indicator--47636d91-4958-4d0e-8f6b-72cda94f4c69", "indicator--40432383-1a0f-47b1-913a-d030132744c5", "indicator--3a80acf4-74ad-44f7-93d5-6d1c12bf3155", "indicator--1f4a9f40-162d-4846-b7c6-ba964cb0ba9c", "indicator--70fb328a-ce24-4811-8cd1-0e286bca6814", "indicator--d718e43b-03a7-4159-906d-e9346848c04c", "indicator--d03f85c1-f9fd-4071-b4a6-bdcdaa2577bc", "indicator--7a4299fd-9b67-42f4-ac71-640ff07e9d74", "indicator--e7e08809-3ed5-45cc-bcf0-1076ad334203", "indicator--26f57f6e-0a9d-44e8-827e-23c8eaeacb45", "indicator--478ff11b-71c1-491e-a8ed-d7cf8c480be2", "indicator--1132ba83-3f77-41b5-971f-9c1c3f7ce286", "indicator--3ef5f6a9-46f5-4042-a4df-bff246b2e1a0", "indicator--c3c08650-9933-4a59-982b-469fbab2d943", "indicator--ef5747c1-3273-454f-89a7-2ecb4186cc34", "indicator--36e2594c-94a5-4a76-b2f6-e447f38c9ca7", "indicator--d1cae03c-e2fa-4976-8570-897b14111c7f", "indicator--796f1612-3a77-4125-81b8-0ce759b38351", "indicator--c6a84e2d-6f31-476f-b55f-8f576510a433", "indicator--aff780cc-21c2-4895-8aef-227becf96e71", "indicator--f1cb2e11-6bf5-4e76-a3bd-9bacc71b866e", "indicator--85281a8e-8fec-47e3-893d-567dc06aebf1", "indicator--2ac64b7a-471e-4c3b-ac7c-e6f8e9212d7f", "indicator--88e4f154-df27-493d-b0f7-bce5e84b7718", "indicator--58a1760c-e9ab-48cc-8a77-0aafd9ae4677", "indicator--94c4891f-5cd2-497a-abbc-1c957430ea5e", "indicator--88e21871-197f-48e0-9f9b-961f71ed2326", "indicator--b7a05310-b6bd-4fc6-89b5-254c62ee8e7b", "indicator--b976036d-5b34-4751-9e92-f7545df432e9", "indicator--511b070f-7d61-4d49-8705-3dafb1be0dad", "indicator--0e185056-85f0-4c2d-9949-ef8958ccf061", "indicator--6bbb16d9-dc89-4b84-8507-01c36f2d93ed", "indicator--5f804cbd-d513-4cd3-a6e6-fa955c880752", "indicator--5561dde3-bf9b-4270-adc9-7450674a70a0", "indicator--c4df5dc4-9036-4092-9a57-dbb5bb6b89fa", "indicator--0accd374-3ba6-4f70-a7c5-7d42635bf3f9", "indicator--3ba0b798-8d45-4946-a917-e61cf138c4f5", "indicator--df0fe462-e92e-49ba-b491-50e1130035ef", "indicator--4cf1eedd-1de1-4bf3-b2a8-386f96ef42bf", "indicator--490b9b2a-4951-4c0d-b9ae-031a14172479", "indicator--b422c7be-181e-4a5c-bcc3-88958ea72dfb", "indicator--118027a3-b7db-4ecc-8917-2d301a49b9f2", "indicator--d69da562-e8d0-458f-bdc7-8097fd0b4cb2", "indicator--5c75716f-3f1f-4130-b63f-6eb05be458a2", "indicator--22df5f45-4fda-4e7d-8a23-de962fb1a3d3", "indicator--133f77ec-baec-4649-94f9-eff5ddfe2b97", "indicator--3c2ab3e1-890e-4615-a1be-88f51ab24363", "indicator--bf76e079-fed3-4f68-9fb4-d482d70b73ff", "indicator--ea908323-5f68-40f5-8611-767536da4bcc", "indicator--db15df18-1b58-4a62-a43b-f1f8936bacb3", "indicator--e890ca8a-774b-4c62-aa24-30f013f60d3a", "indicator--bd2d610d-cb65-4891-8214-64936ef16e02", "indicator--534016cc-5aa8-47f9-8803-a3fd9e91205c", "indicator--20797ff7-48b5-447a-a772-90414f4603f5", "indicator--a91228a1-fb4a-4cc9-b98b-9082ea70daab", "indicator--ae9f072c-76dd-46bb-a020-976d4da17762", "indicator--6d9fed28-d346-40e9-af3b-39e58a997a53", "indicator--bbf492bb-cf4b-4293-94b8-b8693eca6272", "indicator--422b65cb-8893-4b0f-a4a7-a675ad1dd63f", "indicator--544edf11-11c0-4038-a027-533f326d98db", "indicator--cbcfd687-e5d7-490c-857d-da275c7c12d9", "indicator--10ed4ce4-1d4b-4a05-9b87-837303749c83", "indicator--95a9b5a8-9ad4-496b-9537-588437ed56ac", "indicator--e94c6bb8-4801-481d-ab66-22c3394f558e", "indicator--0aec23fc-538c-4514-89c4-94bd06db4e2a", "indicator--c0abeeec-f8f5-4919-9599-24599acf6fe3", "indicator--4c27314a-51a0-4769-8780-60acd7bbd4f6", "indicator--64094669-d150-4da2-a4f0-f25e57a12001", "indicator--a87000b9-5726-4c2f-99ef-cc0dd098cf3e", "indicator--de772def-dfae-499e-abe3-0ffe1a8fa517", "indicator--421f891e-528f-4801-b0c0-1424cd9b8898", "indicator--d9a19ef7-e25b-42d6-8fee-59fb395b9165", "indicator--283c4c89-12f5-441c-9d78-57ab708ee152", "indicator--538a8c2e-8250-47b2-a532-96cad876b1ef", "indicator--55e6c3a4-f0a7-44da-82fa-abc3de02ee9e", "indicator--7a86a4c1-ac03-49e8-bb2b-94289f93316b", "indicator--0d1910a1-e4a3-4d57-ba5f-b85ab97694a8", "indicator--a38bea65-ddd8-4713-beb9-066670e281b3", "indicator--18e2dd70-a4f2-4b71-8361-21c459eceaf8", "indicator--8a843de1-b0d1-45ae-9b76-77a0e2c97729", "indicator--84a0caa2-5134-493e-bf71-becdc71fb1d5", "indicator--13ac0ff0-b89e-4677-806e-1a204edf7cff", "indicator--eb797e2d-bc5a-492a-9056-d3e70fe466e7", "indicator--8d8accd4-679d-42d3-a41d-0b19ccba9939", "indicator--409d627c-ea4d-48a8-89e1-400f3e24c563", "indicator--eec20c91-e461-40a2-8c43-6e9d53652beb", "indicator--e6795236-a360-40de-9ff2-cde67e762f74", "indicator--9125495c-ac48-49c8-880b-9fc31dc07311", "indicator--041909cd-1bff-4917-acd1-15da37f5ab48", "indicator--e3dd9c70-941d-42be-92a2-6f9c9a01fd82", "indicator--2877959c-58f6-4136-b06d-0bf3828e525c", "indicator--f44c44b4-8e92-432b-ab26-a16e03874d53", "indicator--92df6acd-e2af-4e13-af83-dc5baf675ae2", "indicator--42914005-6684-4ef7-b062-7c4ae8a28b27", "indicator--c66b5c88-d4f3-4ae0-9f16-8b18a90cb804", "indicator--f60ad903-4290-479f-83c0-e6b7ec87b413", "indicator--5557c023-a7d1-4c8c-8b20-1ffcd6e70edf", "indicator--934c6e11-7b84-42d5-84cf-4a1f2b0327f2", "indicator--181ceb1c-9dc0-4508-96fc-2b3d83b963e6", "indicator--a4d39a66-8804-460f-a8e7-98c50f5bcd00", "indicator--9895c87c-c2e0-43f5-b690-fe0865b0eaab", "indicator--4d18ca83-17a5-4a3c-9518-2380ee7b69c2", "indicator--14a45be6-1a91-4387-90da-de7eae13a577", "indicator--440f737e-88c0-43fd-93ab-fd8e7f5e3439", "indicator--f061d8cc-c02a-4e60-a437-7d37228d48d3", "indicator--d5d148fa-b4b3-435b-9994-7413524d4554", "indicator--b083a375-87c4-42f3-a495-3e20c1cc32a5", "indicator--6d3e8d16-6d38-48a6-8ef7-5254f1feb1d1", "indicator--69db73d0-d730-4b9b-9c0b-6cef6f96df3d", "indicator--c1588e55-00e1-4692-b31a-693ba817e8b3", "indicator--a93ec8bc-e94e-4e80-a580-f795da63635e", "indicator--8c459e5a-3c4c-4c18-8e44-651955f5b15f", "indicator--efd1364d-a4e2-4bb0-a7a6-ea1d7eab31f0", "indicator--b8cb23d3-aeb7-4115-bdf3-034630c6a4a9", "indicator--f19a3e25-8949-4d3c-8c03-8945f556ac7e", "indicator--c01128f8-0c02-4e2b-b766-26fdb55b45c7", "indicator--f5920e09-f513-4ddd-83af-4f36c5e02bb1", "indicator--3da5d464-21a1-4b5b-9f89-d3a79ebd441c", "indicator--dafc7863-5e61-42f3-a23e-5caa6422a11c", "indicator--b190af1d-d3fa-40d2-9940-2512b1b9cdfd", "indicator--9ca6bc5b-e027-4840-b8af-75e9af243001", "indicator--a2dabe5b-725f-4d9d-89de-2df11a40ed50", "indicator--2771180e-ef55-4410-b058-5a4bd7d44523", "indicator--f4721844-0456-4840-acb0-3a8c71e309d3", "indicator--7c470844-608a-499e-981f-28c48921f2ab", "indicator--3b00bef2-cef3-4629-abb3-9ce7cc56d7c8", "indicator--0584a0d0-16fe-47e1-8b8e-1f01bf0949e1", "indicator--fb3355d0-5b48-4137-84e2-13d3265fe4b6", "indicator--735889d8-f003-4be9-b2a5-8821a3830f2f", "indicator--2d1931f8-5d9a-41bf-b463-050d345be8d5", "indicator--32c9eda3-1762-48f3-b296-9b4a3a05d0ae", "indicator--a7eb9280-589d-4c75-9411-8358b1f22485", "indicator--4a4a7bc9-08e8-42c2-a0b4-ebe1e33d0c21", "indicator--4b850459-be14-4fa7-95f8-e095f7f0c5f1", "indicator--45a8f898-b3f5-49a7-a05e-a1607d471869", "indicator--7b09a5ac-0fdb-43e1-8593-0b97842039aa", "indicator--30839477-d06a-4b12-bd76-4a05c7b48360", "indicator--aaaf8b2a-adec-4207-9921-eb4ef27c61ff", "indicator--964a0dd8-48bc-40a3-8dba-9ddb345496a3", "indicator--1bfc66fb-a218-4924-9dc8-d0114f7d2680", "indicator--2f158e5d-7b7e-40e3-9b91-9e380fab8f97", "indicator--b900b6e6-44ec-4f3f-a130-b2f70744b345", "indicator--e8e117f0-661d-4380-9a3a-b46cec36e09b", "indicator--ffca21d3-7895-4986-924d-02eed0fb8e61", "indicator--7e516787-e923-4169-b09d-9c829325f57e", "indicator--0316515b-ef4e-434d-89dc-6983db2b5b33", "indicator--29509b95-6520-4d76-9c47-bcc8a54b5874", "indicator--23a032a8-bb0d-40f2-8a99-da738dd7c6bd", "indicator--2e506477-1010-4b2d-b991-80cd5f527b8f", "indicator--2b6087a5-f94c-4e17-821d-9af01855e884", "indicator--1e8c9c86-bb9a-47e8-8e62-467905716500", "indicator--0e88c896-b9a6-48c0-87bc-67242b16466b", "indicator--5ab177e9-7651-4afe-8502-eaa112d19bbe", "indicator--15371d3d-85c0-45b4-8e09-eb8117b17ab8", "indicator--757ce897-83a7-4224-b094-4beb235e53ae", "indicator--a4a95373-a5eb-47f9-b994-b1fdf8cc3ad7", "indicator--0fa08d58-a6de-4030-aadb-53a1639c6ccd", "indicator--97e3bb07-5745-4002-a46b-90f19558e533", "indicator--f3a2ee2e-cb24-4481-9fa6-a3e4f73a5df4", "indicator--5120149d-59cc-4b82-894b-b78f2f0b6acf", "indicator--0e1b5257-678e-4105-ae02-1ed4e9bd8edc", "indicator--bb2f46ba-e36c-48a2-a00e-996dad22ae11", "indicator--bed18278-46a4-4b2f-b4f9-e2b7a921eed2", "indicator--6e8cd19e-8a75-40e4-8963-8e053f717824", "indicator--b36383c7-7656-401b-824b-729db2cf3477", "indicator--bd379aab-dac4-458f-b6da-e482ea4f2715", "indicator--2ef6d13d-afdd-42c0-86d3-5e451376e799", "indicator--74d6c5fc-94ff-4a57-8a5d-6d6d1fa4ccd5", "indicator--afa3c6ea-f53c-490b-b7d5-8f03b7921054", "indicator--04631a8e-db78-4d71-9dea-84ece2c9c719", "indicator--a89611d6-35cb-4b4b-88f0-d84ee785f1d4", "indicator--1e250924-2d65-4e84-b3ce-d4a26b468773", "indicator--f50e0d0c-f01f-412b-9717-6d9e319bd355", "indicator--27eb2070-7e44-45d4-a0aa-145e9a7dc8b6", "indicator--8a89da67-8546-4fd3-b2da-29a0ff05aa56", "indicator--34f88da9-5fe7-4bba-a18c-dfc015ecc4ba", "indicator--406b1272-5ebf-4db9-8b74-adf3ca9e5306", "indicator--fa8bea82-00f2-4a91-b98c-59b2661ad832", "indicator--a475fa7d-e6fb-45d2-a397-71e84d98b453", "indicator--4597f1ac-4943-432d-8f79-3550749dae4e", "indicator--5210d083-1dfb-44cb-b54c-7973183618d9", "indicator--221137a3-8403-41bc-b35b-5b18efb77509", "indicator--51c821f5-9d65-42ef-b26c-234654bacc8b", "indicator--fa7daa54-b887-4938-a8ae-02a5d54e109c", "indicator--095ebe59-1126-46a0-82eb-3a1e0fd45564", "indicator--f76922cd-814c-4c12-aa35-1028dbdd6bc5", "indicator--ff341106-f014-4fff-a3ce-3ddd384404c1", "indicator--64c48aa0-2650-45a6-b5b2-682acad2fb1d", "indicator--3c560539-2170-48e5-b459-df0b046905e5", "indicator--8704aa7a-a517-4ce7-b188-8a1f89e84b75", "indicator--c0d82ad8-8447-429e-8643-41f34a204e26", "indicator--4cf62662-edcc-43de-a441-4e999edd1264", "indicator--f717f9d9-633a-4dbc-ad19-293e836f9cca", "indicator--39208edf-0fe5-41d8-879a-41f8573897b8", "indicator--2aaeac4c-d8af-4840-ba0b-cb10feb44744", "indicator--021ce25d-ab89-44ff-9a32-abcfb1e1f08b", "indicator--5581e06e-7e59-4ce5-8d6e-21636bf5d59f", "indicator--97ba510d-78cf-4f0e-8b27-85b12c2b9a80", "indicator--8252fc3d-8972-45ab-8144-4c3a111766f5", "indicator--44d918de-2e89-4169-8ef5-f00d5e2be5b1", "indicator--fdffd56f-0e81-446a-968c-12ef897a1120", "indicator--18b0ae2f-7aca-4ee6-ba3e-dc3c352b5036", "indicator--c591634a-d1be-4dd2-9c2d-1ce675f894ba", "indicator--58c6648e-2bd4-4c9b-8cfa-102a05067193", "indicator--194b49c8-ff2c-4a8d-91e0-3251f13ea83d", "indicator--f36bddb4-cf76-46a9-ae97-6085983be766", "indicator--eb0e72c9-6c98-4ec7-8656-ddd3f303a247", "indicator--2518e7dc-de9f-4443-b9fd-eb00cb30331f", "indicator--72766df3-171b-4b04-9027-4cd26d996368", "indicator--76f5be4f-e802-49e3-992f-b53f2a0d24a1", "indicator--bd86e82f-bd82-4413-bccf-7442e6ccc7eb", "indicator--b0bb1e3c-baa6-4bdd-8f31-886da99b8cda", "indicator--b33c5444-adc0-45b1-89a1-0317134ba7b9", "indicator--73a0776c-59b2-4bc8-bb69-f7108b00b0b8", "indicator--c05b5707-5efc-4157-a567-7b58d734085d", "indicator--66248843-843e-411f-b736-5fb09989f865", "indicator--f894c4f1-7cf6-4f86-976a-cb5d44a0c95f", "indicator--fc84c9cc-a957-4e92-9ff3-15ed860d5638", "indicator--800230a0-9593-4fca-b536-bcd5c5d7d1f3", "indicator--e07c9ca7-b52f-4107-9626-cc17ce32469c", "indicator--2518fe72-fb9e-41f6-b14e-7166df4edfb6", "indicator--df451815-c53d-4986-9cb9-8eea6b02b849", "indicator--fd7f5a36-622a-433f-8fd7-df6839d9936b", "indicator--0cf421cd-4d1f-487a-b912-28264343a843", "indicator--c2c6e124-1605-4660-96af-1363c1756534", "indicator--3ad0d7ab-bb79-47b8-baee-457147e4d896", "indicator--7b7ee8ff-7926-4dbe-bade-992c5500c3ad", "indicator--fc50bcf5-ee8e-442f-99a6-36610c511217", "indicator--6c461edb-1c3f-407c-9e41-43e6fcb1c8dd", "indicator--934e04bd-abb8-4f1c-b5fb-8cbcf1c02dda", "indicator--1daa965d-1c0b-4b2b-8017-e8af9ababe70", "indicator--6a07039c-e734-4d97-92f8-753066755668", "indicator--fb6a69d8-17d3-4b23-8d88-9f782db91f65", "indicator--5bf24e0f-5d9c-44ce-964f-cd09e52c2ad9", "indicator--39cdd23b-5da6-4b2b-90fc-db4e4311d3af", "indicator--0efb1626-59a3-4d92-b869-b6910f8c09e4", "indicator--35554554-3c91-4a08-83dc-31a61d8fc7bf", "indicator--7bebd552-315e-4dc2-8f93-21afeb5fe732", "indicator--975352aa-cb5d-4fc9-8f7a-e720c18b89f2", "indicator--dbd30988-dfe7-460d-8208-f44c252a9793", "indicator--fbfb6dc3-cfce-4342-83ab-1d0c36b2c4e2", "indicator--dbc045d9-fa8b-4625-8839-db14d2a4b10b", "indicator--a9bfc349-acf3-49a6-bbd5-dc23b797df89", "indicator--8e1a8283-5aa4-492e-b49d-c423a4c018a4", "indicator--662be27c-bce4-481d-8cdb-7e335ef6d9b1", "indicator--382c9bc5-312f-4b3c-b17a-d6e93a4eb03e", "indicator--94717e05-9c3b-4c07-bb7f-656bc4561b4e", "indicator--9a7f7875-f1c9-4a9a-992f-f2cb42fc6a66", "indicator--bd29d740-5b08-4f9c-9a0a-8481f69d8a5c", "indicator--aabd012c-c7e6-4cc5-a7fa-d43891aa365a", "indicator--8946f797-cca1-4d68-b161-70ce416809f1", "indicator--d1d54bb4-8942-4f3f-93b5-b543461938cc", "indicator--02fd8b41-a0fc-49ec-8531-765c754995cf", "indicator--d92289c0-fdf6-4316-bfa8-4c3720204923", "indicator--78eee8de-bc5b-400c-be0b-81df266a5aad", "indicator--0632872d-f847-4915-b589-7645448a283d", "indicator--0ab131e6-b138-4d22-b643-34664d3adb15", "indicator--e08cf948-efdf-49d9-89c5-62ae1e4714ee", "indicator--b032e096-ecb4-449d-b1f4-c621ed2ae3b3", "indicator--a52b02bd-aac6-4c48-99b6-14d9edb1dd34", "indicator--2337ba84-3057-4606-9f2d-6a7658e1fe11", "indicator--e49d2364-541f-42d3-b443-279fee247696", "indicator--288ab1b2-913c-468f-b407-0bbf184405ae", "indicator--59904f3d-620d-49ae-978c-1f1b1f458480", "indicator--79e87bbb-2cb0-4fa7-812a-1cf8b87db0fd", "indicator--2e280c4e-cb53-4662-b8be-b487498f9c0d", "indicator--0e3217e0-297f-4c4c-a8ae-f344cba56bc6", "indicator--e7ad64e7-4e11-453c-a8a4-3eb010d87a42", "indicator--345df9dd-7949-4bc2-9e83-0c3e25d1bdac", "indicator--d7e79a81-94c8-442d-98ee-e0a80f41ec50", "indicator--e110cb39-013f-4f50-b8f5-dfba57f62440", "indicator--efc3c29f-3df8-4d14-a70c-605bcdf1f5d1", "indicator--91528b9c-612b-4c06-b5fb-043819b86cce", "indicator--8b14f7a2-ebbd-47f1-8285-9476627bc470", "indicator--2d589e40-a53f-4b2f-9a98-f970dd59274d", "indicator--f50d6566-a888-41fa-9db8-72a4a778ef65", "indicator--44ebadca-8e74-450a-ad8e-9f3bea197043", "indicator--b59b87b6-b954-4457-b004-5856e1724a8e", "indicator--23a05cff-4cdc-4a4d-bbe8-ee37f593ff7b", "indicator--39f42b87-6247-421a-ae7b-0862c25ebf67", "indicator--a461d488-56f7-4df3-bda1-7b5d8b03ff6c", "indicator--d4dcc3ee-0969-4180-9d19-95aadf3c405d", "indicator--f5acd671-b81d-4ef1-9e56-9ea29691c6c0", "indicator--14ff7e5b-15f1-4ee2-9e62-9331fb209d53", "indicator--5e75833f-45b6-4cc2-aa24-9560e83eab05", "indicator--9123eff8-cddf-4870-bebb-3ce199969e67", "indicator--2552f262-749f-4484-bbde-bafa7f19dbf0", "indicator--74dc2c52-2860-43f7-996d-677e358db220", "indicator--321bd4b3-2d9d-4c5c-9ddc-199a09162afd", "indicator--7292e6cc-7823-4f6b-8ec1-d27ad9a908a1", "indicator--a81e0236-ead3-4adc-a46a-d66c9189c6be", "indicator--8681984c-4fc2-4d07-803b-d4249e0652ee", "indicator--8513f407-031c-46a5-94bb-bc735cc44cba", "indicator--1a995bc7-4f18-4664-8357-f8484cc7dc4b", "indicator--7b075095-85b7-41fa-8619-f5103870af5a", "indicator--b9f1489c-6790-467f-843d-45791f16aed3", "indicator--62f8ab8d-4103-44ca-bb25-1786c74fb19c", "indicator--b46567b9-f84e-4469-88a0-11e9eb25eb69", "indicator--bfefa227-085d-49ae-a558-f4e5e9376660", "indicator--2038f51f-7f20-4803-b199-31fd901e1867", "indicator--de136d53-b292-4840-ae38-424fb098e70e", "indicator--bbe31c20-e7cc-4126-820d-87364dd1e48b", "indicator--12f6128f-ba15-45a6-ae34-d25b90a02082", "indicator--cb459ee2-94c2-4020-864b-a98b1d82c83f", "indicator--a6c29c79-d00d-43dd-b441-07902c5811b2", "indicator--e66aaf9d-3f9a-445b-b752-def0d8a5b336", "indicator--c06022bf-9729-4cac-882d-8167628d1cfa", "indicator--ab93fe23-9068-40e2-b8f3-e1e0f3d81ec0", "indicator--26d1dd9d-406e-4a6e-bb28-515b9a732665", "indicator--ab16f4a0-442c-4524-ba6b-901d3c5a6333", "indicator--4aac07f7-257b-441c-8d90-68e1d661ef6e", "indicator--7611339e-760e-44d7-8dae-6e6c82cc33b8", "indicator--6b39b90d-0a93-45b8-8d9f-3298b5d6311d", "indicator--86ce90c7-2d8f-4641-b758-9504ca23a709", "indicator--53edc4dd-d0d0-46c9-9384-d9575180d4e8", "indicator--0515925a-7119-4d5e-9663-be4035cb1d9c", "indicator--c682d94c-dac4-4575-a5b4-36648d43aa95", "indicator--0b368124-241c-4346-83fd-accd8cf4fe73", "indicator--5b0b119c-83f0-4074-9258-617ca632d4bf", "indicator--8298a03b-4945-401f-a580-32556f5944a5", "indicator--fd246546-c81f-4821-a70f-db2d49bb3b4b", "indicator--f89f9797-116f-412f-b9ae-d590c8151253", "indicator--a600e95c-ba92-4f86-87ca-a022eac01580", "indicator--bd5d7429-060f-42fb-91dd-5cbcd02e9919", "indicator--42a476d8-c349-4a54-9ff9-ea804d86f4f2", "indicator--755cc844-761a-46be-80d0-f80edc0ccb73", "indicator--ba5d9b61-42c0-4e16-8d9a-5dc48de73586", "indicator--2180cdee-f240-4dd6-8380-c568b8be5d43", "indicator--30ef0c2c-1aee-4a86-b7e1-4ebd032fbb10", "indicator--f6022c1c-a0bb-40ca-891b-13f3fa7e2c5b", "indicator--5f918947-6265-4d8d-ad58-8b635876957c", "indicator--24009a5b-d276-4099-ad36-f52e0cc9fd1e", "indicator--dfb48868-1d99-4933-82ca-2f1e9c4ab4d1", "indicator--ff0becf4-5387-41cf-b0bf-e3262c96e7c3", "indicator--1ead0ca0-1145-4264-bb9c-21c1093c9276", "indicator--34214aa3-907d-4851-aeda-4990f495a45d", "indicator--87ef0e7d-ff3e-4f5c-adca-43701f53a759", "indicator--2780b07e-a463-4b2c-94d0-dceaf57cc6e9", "indicator--d1411937-e324-4de3-b5a1-6659192c324a", "indicator--a9fe07b6-d904-43e9-a14b-039df035ae57", "indicator--57755184-0c2d-4fd9-a59f-1e215a15e973", "indicator--97919c5e-a896-46df-96c9-9d8140d3ef99", "indicator--b8b93fc1-f76f-43b4-aa48-1ed3c86f0195", "indicator--0d442f44-e3ea-4520-bff9-944705681cbf", "indicator--fcc476f5-8a82-4020-87ec-2ed7b9b94614", "indicator--be5b11d7-ef41-4cbe-b5d0-f0896b032f95", "indicator--e4b5ffd0-2f09-4feb-a614-604d06b4856b", "indicator--27f1cf3b-a6c2-47b4-9e77-029ba869d766", "indicator--3bc89312-7e61-435c-ac23-d2d91cf4f2c3", "indicator--c8870981-17df-4145-b748-574736eec174", "indicator--f5fe5beb-9bdf-417c-b756-4db2f3dc9c2d", "indicator--9715bad4-a957-44ae-8184-c14f58fe0972", "indicator--e7de529d-8f94-4945-9377-aee7fd8f4959", "indicator--824f0f34-5f23-4315-876a-69b69ae9953c", "indicator--17ff8d01-ae18-479e-bc39-9e648560f75e", "indicator--a48e9be8-2b3c-42fd-b4a7-c7809823c4d6", "indicator--98f91412-667d-4e69-b8a5-b14eccc13ef0", "indicator--38678522-750f-4992-a1d6-a8b61d899a33", "indicator--3f3b695d-a3c6-4e96-82ca-8dd5b19bcf41", "indicator--a91c2b68-3b81-4095-b26e-035180fad50f", "indicator--927e5e58-5967-40b5-aa3c-9854fe999f39", "indicator--786c14c6-61d1-4e2a-b2df-4cafb074ac73", "indicator--310538e1-5c76-4964-8e06-b62bb83b14c5", "indicator--51944248-353b-4953-a5f7-656066780b1a", "indicator--0c9a8d7b-4957-4816-a311-49b7200c8168", "indicator--3c44fd9b-b4c9-4eeb-b810-5d034bbdc5e3", "indicator--c2025586-c696-4e69-a5ad-c869f9b9ceae", "indicator--25002213-804b-417f-8745-675aa7e00322", "indicator--730e9385-9641-4895-b55a-1605243c37de", "indicator--515bcd43-4490-4176-b8e5-4c15b41c3326", "indicator--4c000f0b-a5f6-481c-9422-c6f5448bec41", "indicator--30f6057d-ca0d-4f30-9add-753e3b5407e9", "indicator--198d5ffd-dbe1-4bd0-a576-f5e12745aa4d", "indicator--7d793067-1c93-4849-bb5e-ff2d12d9bf2f", "indicator--175a6bac-d203-49d0-8a09-889967703e42", "indicator--5829ec1f-d075-485f-b842-15bf269c5b2c", "indicator--14c750c4-5c5e-4cdf-b606-9a4048d235e7", "indicator--c5aacff3-a33a-4a91-8d95-95549a3ab2e5", "indicator--e424f923-11f1-4c9e-933e-b47571fc0eaa", "indicator--3a62a808-978d-4579-a2d6-751e8be2181d", "indicator--9f97e989-6358-4799-80ae-8d13de576d6c", "indicator--6388e064-3fbe-4141-b932-87b991b4440b", "indicator--0003dd23-e6b4-4b27-b89c-bb2479c013b1", "indicator--a7a001fa-ecec-4e8a-bc59-a4d1a816e94c", "indicator--4b78c14f-83e2-4003-a784-f763b0efcb16", "indicator--59f2fa36-5f3e-43fa-8ab9-d43138aee1d6", "indicator--e698f89e-421e-49db-9585-54183118eb66", "indicator--467423bc-8dbc-4769-a818-4a7a1f88dba6", "indicator--bdf2961a-6931-48c0-8ba7-e8b93a4e8b8d", "indicator--ff312566-0794-402b-a223-1b615dbf7ee5", "indicator--f5ed9fd4-42e5-4ae6-80a9-611fdcd8fe01", "indicator--3f75b85f-2915-4743-9967-2e8ed7e97c54", "indicator--fdf90a96-1321-4c9a-826a-0c02672a9607", "indicator--1538970c-e8c7-458e-9e72-8d82f95f317e", "indicator--46612174-ea7a-4927-a329-2cedaa759822", "indicator--4cc8850f-5016-4dc5-8849-6073303b56ce", "indicator--0b09f468-a382-4172-b1ee-f3587b8782d6", "indicator--c9523288-1880-4c72-8596-c1cb6ca93aa8", "indicator--43c816e3-ea6a-44bd-bcd5-c165638065ae", "indicator--3be384f7-0a05-4539-9c7e-ac15dbe6e0c2", "indicator--1744e046-7ce2-4caf-b137-4153f6468508", "indicator--427f887e-3138-433d-815e-67efcb10a52a", "indicator--a7df2661-c63d-4b0a-bd4c-4aba5e8bdc2b", "indicator--7b4d19d6-ed1e-4691-90d8-e6b72718930d", "indicator--9f7f7e7c-68dc-4cc5-91c9-079cd3e7f34d", "indicator--0c067889-5db7-45e3-88b2-3823765d76df", "indicator--14a0ea15-c45f-4146-95cb-13179cf2af90", "indicator--56e85992-e0ed-47ac-a331-ce6b314313b7", "indicator--d3e3591e-0c84-462b-ba86-d5618fc47682", "indicator--8e67d6a6-b13e-4401-9cc1-06ab8a1e61a9", "indicator--b5572628-175d-4cfa-a99e-1d839936d0d0", "indicator--9795116c-e5c7-42b1-a64c-ea5d27d8879f", "indicator--f7865464-66f0-4450-b8fa-15978148c4e7", "indicator--bd657f07-921f-4f1c-a251-0df6ab2cd3f7", "indicator--458f1a22-de91-4f1b-a611-1ff453156cb5", "indicator--a32eeb07-5777-4ede-a702-41edcaead943", "indicator--6bdc36e4-a44f-4b3c-8d6f-af379f637f45", "indicator--70d99494-6774-44d6-aca5-e3906aff04c1", "indicator--ef803036-0215-4bde-9d24-e01bd8a205ed", "indicator--6da73369-1339-4488-8252-836daef8d5ec", "indicator--2272fa63-f23c-48df-93c2-f97592224cb6", "indicator--707a45c4-1ed2-4ce9-8cba-07430e5cf26f", "indicator--bf30144c-350b-4afe-ba16-fe8af6cea3dc", "indicator--757d3d28-f7fe-4f99-96e8-d94cde5784f6", "indicator--81c7eaa8-ab56-4bb3-81f2-f643afc438ad", "indicator--f2e2db09-71db-43d2-9e3e-a7fb4b5cdf06", "indicator--8e3db4bb-e71e-40b7-89ff-c9fc69fc6e0a", "indicator--4f2d26ea-a0eb-40dd-9aaa-f9d36e93c581", "indicator--f7ab3876-4635-4be0-9b8b-6543b1af19e8", "indicator--87a2d902-a6b5-4eb1-83b5-c82fc6647b51", "indicator--96c51c69-6820-41c6-ab3e-d27291c67940", "indicator--d6a97651-daf0-4b67-80dd-d9cb50117ec3", "indicator--55a8e10f-d45e-484c-9efd-6a7de63dfd7e", "indicator--6be449d9-15c1-4a5b-a24d-f075bcd4f394", "indicator--52404a3e-7a7e-46c3-91a2-1d416a91b2de", "indicator--6d92c661-8d88-4b70-87a2-8b12047b0813", "indicator--53edfd7e-da07-486f-bd4a-10415e41aa20", "indicator--5ea7709b-b0c6-4089-a10c-110865d05443", "indicator--d0d7b340-0080-45d7-abe3-803a69adec74", "indicator--ac8502d2-170e-4d4e-8bbe-8c141cd72bce", "indicator--d6db4e6a-7305-41db-b4ec-e409db6e0552", "indicator--072bd267-c763-4333-9c42-e4d3825c2da0", "indicator--1ff106c9-1b8b-46de-9ec8-895299d1408a", "indicator--c5b0993b-ee29-48a5-ab33-7a1de9c17a93", "indicator--bfdfb66a-fdea-4804-b6e1-c475386c64e9", "indicator--0b79b20c-9945-4c1f-9240-2070cdc52abb", "indicator--4adafa6d-9591-420e-914e-82d6fcd0aba6", "indicator--993a5289-5f32-4e51-980c-26eaafbf27fe", "indicator--39f01dbd-8061-4879-bf26-b7395add5b3e", "indicator--562fa2b2-5593-4ec0-b23d-2848925e0bc7", "indicator--b4aa69e8-93c0-4fdb-908f-bef8eaa39193", "indicator--42b9d8a4-7e6a-4683-83b2-8192c48f7e82", "indicator--db34e2a8-e01a-4bf0-858b-da0bfff6d09b", "indicator--014ff9d7-d734-4c47-92b1-1aad35965aed", "indicator--56f6702e-e70c-4823-a090-5b1d224e19e9", "indicator--c1bb42db-f38b-4a3f-b217-709939faebec", "indicator--732a241d-1bf6-4a65-adab-370a79f9a724", "indicator--89860c12-c15c-4d00-910b-387e21f2953a", "indicator--d8c3d6a1-0a51-4be3-8c56-d943d1d7f37f", "indicator--df8d5ef5-a3b3-4670-8afe-5f3be2bc35b8", "indicator--7133b62c-edfe-49e7-a4e7-3dda01370846", "indicator--ac355815-712a-4fd0-a73b-4e06fdcb591f", "indicator--79362537-c0b8-48d2-9d59-39dfa49231b0", "indicator--e11daff9-d085-428a-9203-a7b4e873145a", "indicator--262fe997-dda8-474f-98a8-7b3849b9e1d9", "indicator--7480d6c1-1a3d-4e5a-b7e7-f126df1ee58e", "indicator--7c470d5a-bb2d-46b2-b5ec-423527362cbe", "indicator--b446430f-5902-4c75-803d-c2f33a268342", "indicator--985328d5-258e-495e-86f9-c6ef53e0624b", "indicator--9c352e27-cce2-4429-803c-0e8f0a4e6503", "indicator--ba02d4db-da60-40f4-bef7-188b6c2f3ee2", "indicator--a056a24a-f04e-42ee-9b41-deb1f963af9f", "indicator--854714d7-e043-4822-ac8b-34db2bb258d7", "indicator--7a0d456f-d4eb-4ba4-abfc-468f60a368d3", "indicator--0ff7c643-36cd-4b81-9674-ee14c0957885", "indicator--5df4eacc-5af7-4145-b7e8-e5da7ca38105", "indicator--47dcdc78-0360-44eb-adf8-454981bded9a", "indicator--0112337c-3abd-45dc-8df8-3eb6efaa1363", "indicator--158eedbd-6f7d-43f8-ae6d-443a6e595a57", "indicator--0aa64383-6589-41c6-bc75-91ab27a3846a", "indicator--748746bf-1eac-4115-96bd-38dab08fbfca", "indicator--4a395e8e-8758-4708-86d3-327c6cbe7c8a", "indicator--5eda52dd-010a-4914-a2ee-a496974eb2b1", "indicator--29e1b911-60b9-4425-9f43-eb0e7dae978f", "indicator--ec2a5804-ba1b-4636-bdb5-035a5fe8d4f4", "indicator--6efe54b8-d94f-48c3-91f6-512110341e01", "indicator--d9b28a80-5cb5-44ac-9504-b08f6a005ee9", "indicator--bf165f2c-6446-4fb4-9bee-9785e8c71691", "indicator--319fc993-af3b-4291-ba5d-6680fad0d5e2", "indicator--26813d97-58b2-4765-abdb-ad8da6799d11", "indicator--2eb8ee0c-9e50-4679-8607-3487679103c1", "indicator--4306b748-8f1b-40c3-b532-4e231b27eba0", "indicator--ad9a0a5c-d990-44e5-b01f-93c01c25a329", "indicator--420487a2-fa54-4fcc-878c-6d2821e5dca5", "indicator--8a9aeddb-402d-4f61-9c32-5fa65f678580", "indicator--c33b7e2b-127f-4a62-a3e2-5221ed688d97", "indicator--d0be67ae-0a2e-41ff-bb0d-0549ffbf6cba", "indicator--17052526-8965-4fba-bd73-ddfd105c2397", "indicator--413c9ff3-f118-4391-9512-6af559ba3663", "indicator--e2bf8b2d-8ec2-4fe1-b9c1-a5d2da209d52", "indicator--d1ea728e-779d-4762-acaa-56538b3d841b", "indicator--43295f12-7c23-4dc7-a64d-6f2aab71c4d0", "indicator--3f9f9bd0-f9d5-4a4c-9ba5-b8115d49ddb2", "indicator--405e6c41-e6f6-4b60-af3e-5ad09ebd37ba", "indicator--ae78d98e-1337-4a92-8e3c-f501b3de9aa6", "indicator--580283e8-e56c-4d6e-8481-453e24656f17", "indicator--b226f624-7da3-4048-856a-f89870674861", "indicator--92084c20-e4c0-4b49-83f4-9db3072c20a9", "indicator--55759d5e-9dc1-4ded-b630-b78cd13fb918", "indicator--53c07e41-708d-464a-bcb0-a82ac786c2da", "indicator--d079c3df-4801-41c0-b449-a2b9b8e79ab8", "indicator--f5898d07-d972-4998-b2ef-447b12c1dce6", "indicator--c57ef6ae-396b-4560-955e-8323ce322a84", "indicator--1c211b4c-bed3-421a-b1c8-44a0fb80ae2c", "indicator--7322936c-c227-4458-856a-8130e40d2778", "indicator--e6d21829-a473-4f67-8684-7845c72ab00d", "indicator--b6954d17-d500-4319-90ef-4317dc4aa718", "indicator--a782bc97-4a92-4d2d-9424-a52a65dd45c1", "indicator--340c5fbe-d824-49a4-9013-ac3d23cfc729", "indicator--941fb9a9-0bb0-44e1-81cb-6b6a74e2b2b5", "indicator--437f3054-f521-4518-94b1-fc070bf93626", "indicator--82062b92-d6b7-4b4c-82e6-27d1adea4129", "indicator--360b6ced-e5f7-4bed-bcc5-6c1919893be0", "indicator--688578e4-5b1f-4d00-8120-21a5aef78e25", "indicator--af0a27df-5a65-483f-a088-cd106a1c6fff", "indicator--d728503c-54a6-4a53-a797-a1864559a124", "indicator--586ac4f6-ccac-4c84-b2a3-395e11fdfa41", "indicator--1f129d81-b64d-45ee-8e17-5f015f348814", "indicator--f5085560-fdfb-4c4e-b809-4c342270a524", "indicator--4ce93c2d-e11f-4a1b-aeb1-f34603acc5e7", "indicator--0c619f4b-9502-43ab-a4e4-a502ff135b62", "indicator--69ada390-a358-40c8-83a5-0f93c2bee1a6", "indicator--563b02e9-0fb1-4a9d-bffa-bd0317aa5710", "indicator--86f2c2d9-eba8-4267-af57-16f083ab035c", "indicator--5008d87f-29ec-4f7b-9b41-dd1be6a92a03", "indicator--60e82a8f-362b-4a21-8adf-be8848af2809", "indicator--360c5fcf-3884-4069-bc7d-98de9a41a7e1", "indicator--8d7d2238-502a-4921-9ba0-12ff78f14843", "indicator--ef04ab71-c3ea-4276-97e4-8dacd0b7f30d", "indicator--30facff4-7407-4dac-98ea-4413f9eb2064", "indicator--73c04423-1e78-4777-9824-cec0b63b5b17", "indicator--585299b2-82ef-4436-8572-a199f1632353", "indicator--c0a9f0e5-0277-43a0-96e8-689b3ace788d", "indicator--5410c9e1-3deb-4375-9e39-f82e454af8d2", "indicator--7dd2991d-00db-4889-b7e1-e4cac0bf06e5", "indicator--e36e526c-64b0-44fe-ba7a-089e5721a37e", "indicator--57475a85-72fb-4db2-bbf9-1618313f8ec2", "indicator--0cb0de50-d8e8-4122-805a-d131c5d7bd01", "indicator--c269c64d-a653-46d4-81cc-a5c011f84e6b", "indicator--e72e002a-2fe2-4407-a145-4f2b98e74360", "indicator--c91444ce-988c-4fc9-8cb0-a3cdaf9982c6", "indicator--4fc60cb6-5e36-41b7-81ee-ce91d26030ba", "indicator--d3cd5f32-681f-43ca-bc0d-a67aa0afa412", "indicator--9866b11e-c808-4b53-8305-d47a0614de51", "indicator--9f2a942b-c340-4285-bdc9-55e72a1a4420", "indicator--031bb86f-3f4f-42cd-b41e-e20a02033046", "indicator--00ca28fd-6fa2-4f33-bc02-916e7ef65404", "indicator--6e0727c0-b2c2-4674-a79c-8f9845a44482", "indicator--b3f0cb54-e2b5-463d-91d1-1f14244434c4", "indicator--d72f1298-1910-4bfa-8402-4f9f84b117ac", "indicator--7ce99f12-8818-4ae0-8022-4cb0967fce25", "indicator--bb393357-81a5-4a73-ac37-cd9d793e209b", "indicator--25c21782-37a6-4894-8c55-c87d37ed0b9d", "indicator--b2cf8258-8bfc-4834-a0ef-973a0b8e6318", "indicator--fb8750ba-5032-405f-bbb4-ebe21025afd9", "indicator--62dfb58b-3afc-4c40-8b6f-ecb52b9d9a17", "indicator--1315d158-b1ff-4800-a47b-3ed979d2c93a", "indicator--476147df-e8f2-49db-921b-70cee78acefa", "indicator--b70ae716-bdb5-4d02-a789-d66cc6b6884c", "indicator--10c8a951-ba3c-426d-9e58-9e170dba1851", "indicator--2cb917ce-39b8-4a9a-86f9-9bec7956303f", "indicator--9474b130-69b6-4b98-b233-3b714818518b", "indicator--b76a5e00-3374-4976-9e67-48a0660de025", "indicator--ca7eaca6-f85a-49f4-8215-9995d43a2756", "indicator--82901eca-ed26-4107-990c-4a31b1ae881a", "indicator--c0ad6927-55ca-4049-82a5-d52864786fb5", "indicator--14643dc1-08c2-4c66-866a-aaaba33f86f1", "indicator--0998b092-59f0-4c0a-8146-90511856c753", "indicator--17164a01-d76c-440c-bf0c-6a800d4f0716", "indicator--5d1f7744-c591-46f5-9dfc-82b56ad7dbd7", "indicator--b511b4b4-ed4a-4e2f-bbc0-201e4844e36e", "indicator--dca0eee8-48a7-451d-a50d-02928d346c43", "indicator--da6e1601-9893-417c-8894-afddcd03ddcc", "indicator--a4997346-5d60-45ea-bc38-257e706b546b", "indicator--2c9bce39-32ae-46ec-9b51-316d42fd9d1f", "indicator--840bfec0-6274-4cc9-afba-2ba4cc294088", "indicator--5c5313a3-ca1a-4fa9-b734-308b9c115b8b", "indicator--80055fbb-1e73-4920-83df-334d510b9257", "indicator--24e63a4a-a95d-4233-8efc-772ed44cc94f", "indicator--e7bc9f13-63a0-4b27-a187-4a1a6c2a2597", "indicator--47c3a182-e3a3-4c70-81f3-8dfeb3bc681e", "indicator--8adde943-cc26-4d85-a885-123356881a52", "indicator--5125d6ca-09aa-47ba-b2f0-e191bd9898fe", "indicator--ada552db-4b93-48af-9215-f543a0748ceb", "indicator--4c01e12f-1938-4f50-b9a7-08bc4eb5464c", "indicator--f6aee560-f0f1-4b8d-aa50-143327db8d0c", "indicator--e3c44121-70b4-4e53-b0ec-109a7464753f", "indicator--70a237f8-9579-4d21-8f3b-82fae1b939d9", "indicator--831cfda5-177a-4ce5-ae23-948173d083de", "indicator--82f52b37-8f55-4327-b3ed-e1bef7db580b", "indicator--ffc1faaf-dea2-4e22-bc25-0c7a0e63898b", "indicator--df0707a2-ed57-4935-9d37-2181bba3b8f5", "indicator--ff546597-fd3b-4b10-ab5b-1609eeb2489f", "indicator--80285edb-c63e-4fe5-94c0-ddb47a392801", "indicator--2886a72d-675d-461c-9edf-0d3078ebd32f", "indicator--1ba6bae5-1608-47ba-937b-1579951609cd", "indicator--596e2353-a073-4045-9718-f5068c9a9978", "indicator--f3f5c8ac-f07c-4020-820f-a282c364abf9", "indicator--4f983a4b-28c4-443f-9ad2-fe84635115f2", "indicator--d1bac226-8237-416e-89ca-c523ba289754", "indicator--13e388ab-0cf9-415b-82b1-476be4996a1f", "indicator--e3e1c907-93ca-4bec-9bae-3f6797bac74d", "indicator--f49c97c6-0193-4060-b944-e340c7388bd4", "indicator--568c3592-d23f-4c60-b5a0-3b3638aae936", "indicator--9cea9f15-f06a-485a-adbb-7a6a14ea781f", "indicator--1ebede19-3d53-4e08-99cf-608941cbea8f", "indicator--c24fe85f-6817-494a-8d76-a6aa66c0c6d5", "indicator--52d16833-a931-44b8-98ae-3e42030e4dbd", "indicator--7d6be314-4741-49b1-80b4-a41a26f7b7e0", "indicator--e39e5997-58a2-453f-88ae-931ebc9e7ed2", "indicator--67df987f-df72-434e-9f57-9e4407f326b3", "indicator--46bcf532-e53d-4a93-961d-2ec08ff9006a", "indicator--5c9d5c4f-3e7c-4dd8-985c-37218c2e9275", "indicator--46bff813-4eae-44cc-bbcb-59e4ef5f4d78", "indicator--59131d1a-6805-48e4-8257-0161211b5cae", "indicator--33fe66a6-466f-48c9-b263-819c7a08c7c8", "indicator--031edfed-99bf-49a7-835a-5e94eb1892b7", "indicator--79288470-c9ce-4da0-a9a3-312752df3b92", "indicator--4fe48c71-7c77-43ab-ac5f-22efbc2cb88b", "indicator--b3bac63f-eed3-41d6-bf67-85abae231c70", "indicator--d4b18089-5774-4f9a-9585-74dc8c3ea6d1", "indicator--94d7d28b-59ef-4af9-a9a0-4906053dc0d4", "indicator--d312ecc6-cf14-43da-b166-96a1004f9bd5", "indicator--0a289066-84e6-4f19-bfc7-f278d7926d13", "indicator--05e118df-fe81-4399-b727-2121184dd251", "indicator--3087492d-e3ef-4d8e-be7a-29cf0dcd223f", "indicator--221c76a3-4472-4bad-aa02-2631dae2abef", "indicator--f2b07119-b511-4c22-a672-312d57398248", "indicator--e40e9dc0-6ae6-49f2-8a45-051337d79336", "indicator--b8798ba4-e318-4e71-b673-a892b2acd692", "indicator--0dfe3a8d-f65a-4fb8-9a25-0840f1c77d63", "indicator--f692fe17-5cfd-4b41-8653-8705b0ee32db", "indicator--222a2ea7-d277-4c77-ae49-f4485c4bbaa2", "indicator--82003a54-4a72-4404-9811-5b7f9bcb4cbc", "indicator--dfe6fd6f-e4ad-459b-afe3-af85f87bff37", "indicator--6a5797c0-db1b-4d89-9870-2a33c8a6fdca", "indicator--0b4d8a4a-b450-4178-9fe8-b26f024f01f5", "indicator--d361802d-2175-4e76-9a50-b9664e53abaa", "indicator--32cb16c9-5ab3-44d3-a5d4-a8d87d26ec2f", "indicator--1577fa08-6981-47ec-af2c-be0336a23a3a", "indicator--a5b938e8-c69e-44b7-bfbf-e727f53fbab6", "indicator--2636acb3-3b89-41e7-9de4-c837c44c5734", "indicator--53ea0931-5c33-4adf-8d0f-148586d1d12a", "indicator--a1d88d22-1bf3-41ae-9442-8a97d4440cf8", "indicator--5c0e68c0-9697-4219-93fb-2fe14144d2a2", "indicator--063c84f9-4605-4ea5-a59e-cabe2f8d1ffe", "indicator--8c4e2e1f-a03a-4fce-9255-87e0be4cc185", "indicator--e4af6db6-d070-4ff0-afdd-5a9bfc7e0a01", "indicator--4e14a3ac-e63a-4593-bf5a-107703ec637a", "indicator--e5e96833-6411-4a3b-a573-732e21140a75", "indicator--df0364d2-f55a-4cf0-adf3-2df03249fba0", "indicator--6e66e3cf-3a0b-48f2-9bb4-bbcca06b963a", "indicator--6bd7170e-b425-46bd-bbc4-0e54b5d1e6ed", "indicator--550b90e7-76a3-4495-8766-bb3b6951d2a3", "indicator--d15b3390-5961-4062-8fc7-c6ed8c64b15b", "indicator--684483dc-d3c4-4bbb-9084-56a4a537ad54", "indicator--e2416e63-42e9-45aa-82fc-6d33aa2c1d91", "indicator--3823e43b-3939-4d61-90f7-4f8d04f64fb7", "indicator--9e91d54c-fe70-44aa-bc4c-7e4d961a8cd0", "indicator--fc23c4fd-1c05-4476-a6f8-c2f71d306bdd", "indicator--5a263157-28e8-4a3b-a898-369b0d629c67", "indicator--6ff5fb21-7300-4043-bcf9-0876ddbe2ea3", "indicator--3ed250f6-38e6-46d1-a41a-fda6a1cd917e", "indicator--88715a2a-db6c-466f-aea4-ebe72062feed", "indicator--3dbcf6f6-ae3c-43be-aa2d-cade6f1f1554", "indicator--c741db8e-52a8-4099-99c2-11a62a4f65df", "indicator--0c6c16a5-e723-48d6-bb2a-0d0abc847e40", "indicator--8e8c3d7d-75da-435b-84a7-20c814df5e22", "indicator--eacda392-8250-4cc5-907a-3bb5173dcee2", "indicator--a86e03a7-df30-4c3d-8d7f-cfbe143eee81", "indicator--ad5b858a-b139-45cf-89c9-5f6d2059ae85", "indicator--28ff33bc-7252-4f8d-9849-1039920f0af6", "indicator--a67805f7-7469-40a4-b7fe-f807c9e5bac3", "indicator--106a3779-35ce-481b-a5eb-ff283d77d25e", "indicator--8979d15b-15ed-4aba-9fbb-1994dd871185", "indicator--8f5ae2f6-0cb3-42be-a6a2-aaab60862011", "indicator--e823705f-1ca1-4bde-87c5-bcbb621b05dc", "indicator--0572af64-f98a-4d21-97f1-d55a475e5965", "indicator--05f6ac1a-93d8-442b-a696-4c87bc2d007f", "indicator--277cb6e3-6254-4dfb-ad82-a9b150cb930f", "indicator--33cc16a3-2b68-46cb-94ee-8fc9d3247f03", "indicator--d244a367-09e5-4764-81f7-82940e81611d", "indicator--568dbb59-f69a-4c64-b22f-eeadc81872da", "indicator--65ffb80c-1e8f-414e-9a4b-713135b23662", "indicator--efd644a8-a642-4bd4-9223-d8f075233898", "indicator--c5a6f3a1-004e-4544-b4ff-9389fce04ca5", "indicator--f386f956-28e3-47dd-8e96-b4e1995bcbd6", "indicator--7480b78b-1fb1-4fe4-967a-d97576d25d3c", "indicator--869a2fe7-9931-499f-a642-3dd010f3b9f9", "indicator--31e02c0d-c904-4884-81e4-4a1b9a91f819", "indicator--61d3aff3-6618-4f8a-8609-68613709a7b9", "indicator--e8167747-4faf-4605-80fb-b0dcab2fad1a", "indicator--273756af-9937-479a-8f86-41ceaf09cced", "indicator--269103c6-efa8-4218-a2a2-ff154bdb03ee", "indicator--29d42203-614b-4876-810e-e5c7c7f6df8b", "indicator--f6dc2cab-0242-4293-bc57-ff06090f4988", "indicator--aecbcfdb-3551-4d26-a4cf-7540266d73d0", "indicator--5187d8c9-5dfe-4108-a2af-2530e28d7994", "indicator--8e5d2753-3d7e-49e6-bdb4-bd644b5f272e", "indicator--ce042c2e-cee1-4a9d-9b61-3ec6bb72554e", "indicator--db50621a-9cff-4c07-95f7-16ff25034cb0", "indicator--ed7d4763-d027-4154-ac2a-4af9422d63f4", "indicator--bf37cf4c-062a-46b1-833e-bbf7ef506c85", "indicator--11007989-a399-43a8-8df0-7e2aa2e4c102", "indicator--fec59f5d-8280-481a-ac73-e94475d567ff", "indicator--a8d5cc41-1722-488d-a6df-d4bc74be76c3", "indicator--5b7c4eb1-0c4c-41fb-b005-0fa215245107", "indicator--46eca97a-8548-4164-97ec-2b158dd430f5", "indicator--d6ec6167-72b6-431c-a7d4-43565928d35d", "indicator--0d8cbd8a-1402-4dc2-bfcf-7757ec281a48", "indicator--a3e6522f-500b-46ef-9350-0c68cf7bf538", "indicator--29021c2e-ebbe-4cfe-95d0-4c128f82ec5e", "indicator--d7cb86ec-fdc3-4da4-b65d-0f3b9b42eadd", "indicator--edeb1e46-7c49-45d7-a240-560a153ac0ed", "indicator--f814a3bd-74df-4af8-a2ab-c441764cd36d", "indicator--1ce677d5-cd27-4b75-a967-96236b5c7e6a", "indicator--eb43d4d0-fc61-428a-b3c7-8507c6b3b81b", "indicator--97443da1-72ac-4c51-a5ac-7789e17683a7", "indicator--fe8633b5-96c1-4dfe-8d41-eef758988496", "indicator--a2fbb2af-6324-47e9-863a-05c98cad4da5", "indicator--bd60dd67-43d9-4002-a4dc-fbdfee1f8624", "indicator--4ea10abe-72c4-4233-9374-5a6f83f8d37b", "indicator--2caac11b-9246-41cb-a672-4a08b684737f", "indicator--87724068-46bf-43d8-b1af-39ab8bcd7758", "indicator--84256278-51e3-4eb0-8060-f81ec2bb753d", "indicator--b59a48a2-36ec-4b87-9a8c-88796f9dc039", "indicator--a34a0e71-4162-41f2-81e1-895d5e08f2e6", "indicator--1e97c741-3660-4476-bdfa-bcc8ebcbd1ea", "indicator--edec1790-cb67-4f0d-84e8-3bfc55e73bbe", "indicator--837e5d4a-9437-4247-a354-78b7b5847f2d", "indicator--da9bb5e1-c3b7-42c8-8a6f-b76f1b235467", "indicator--aed73931-7974-4ce3-aef2-3d980b599168", "indicator--04f5cc60-8f0a-4108-9b5a-1ae5a9c22a35", "indicator--b030704d-8e97-4aa7-8fbc-f55911201b30", "indicator--99f66452-abd1-43b0-af57-bbb2e305e7a2", "indicator--21a48824-6fde-4456-bd26-c41c3e2598b6", "indicator--d140d29f-e2c9-424f-8809-fd77d9abc780", "indicator--13b0fbae-902f-47ba-9f13-7832e26c1e43", "indicator--5237e946-de54-4a71-b654-618518fa0827", "indicator--717ac3d2-0893-4192-8bad-6bc58763bf8d", "indicator--10a09498-cb10-4f54-8a51-1919330d0fea", "indicator--4a27c1c5-d080-4e0f-8604-490f4e5db402", "indicator--dbc77fa2-ae42-4662-a8ba-ba88ec70c31f", "indicator--a563722e-6348-4791-91f8-6a5ebe6da966", "indicator--9ec19688-b23a-4b85-a982-532875f6d60c", "indicator--15ee9659-c475-46cd-8774-c12512774a48", "indicator--85057f39-054d-4660-9c22-f28ad504663c", "indicator--81409caa-28ed-42b2-984e-4ef669b7d790", "indicator--4d229d81-de1b-48bc-a999-8404773365d7", "indicator--03f89d6f-0daf-47c0-90d2-2dc22e541a7c", "indicator--de348e46-a595-4ad7-a012-e7f93cb7ce34", "indicator--0af79e4d-c63a-47fb-973e-3cdca788dfdf", "indicator--50b57d26-18ca-4ee6-a3df-5832a005af4a", "indicator--deda2832-63ca-4136-b5cd-5310f9865f5d", "indicator--1fc1d7a9-eb8d-4373-89d8-3589118ac0e1", "indicator--63c7cf00-aa8b-4eb0-b4b8-72c7ee9ef739", "indicator--8d9f66fb-c3da-4780-b384-d5dc506ad3eb", "indicator--b5d9349c-9594-43d4-813b-ddd27e57ee48", "indicator--bd1dfb3b-9a81-48c6-9545-226a349da26b", "indicator--63ba8bb1-10fe-424c-b905-2541f0bf9e7d", "indicator--265f29a7-d3d8-4b6c-a3b6-d9e742636b8b", "indicator--38a91479-68f2-459f-ae69-af739c119734", "indicator--ed32fdf2-953f-4075-abe3-3b638064bc53", "indicator--33ea0413-e660-40f5-8843-1970d0898729", "indicator--3c910505-7b76-44e5-be52-53092ad21456", "indicator--43791e5b-90ca-44ef-b835-0a26eeea6601", "indicator--eb24da63-320f-4f44-8524-587a8e20e17f", "indicator--4a84fa47-c8ef-4c39-82c0-71108ba587c0", "indicator--0ced9f4d-0dc8-4b84-bd93-0502d35f9aa9", "indicator--17f48cab-cd96-40fd-b056-dbcc171ca547", "indicator--78785c12-f2ff-4e5e-9df2-caa485e3068c", "indicator--b738810e-d71e-499c-8290-4b108c47ed49", "indicator--d790eea9-7ad9-4e3e-a09f-0da079fd9aee", "indicator--4b229a6c-1532-43fe-bad5-81cba124dbd4", "indicator--aa9663cd-9fc2-4e09-9054-084632818d99", "indicator--7461b7f6-3ced-4182-86ff-9a9025f1b965", "indicator--61fb3132-7d3d-4619-80db-b818219bd914", "indicator--3641222b-6136-450e-a801-3e672ef636bf", "indicator--35379fc3-3a09-4a85-9143-bc5891140f33", "indicator--29b8989a-e6e2-4af2-8628-a2d2ad1a4f57", "indicator--fafceea4-73d7-40a7-a169-b5e30a9bb6be", "indicator--50a9646c-0030-495b-bfcd-a22223800976", "indicator--0a262d94-15dc-4953-803c-f2cce0bb38fd", "indicator--dc97d95e-3a8f-4c93-b7fa-5931a0bbf551", "indicator--00987114-c65f-4dd2-996a-efd7f3d3d9f9", "indicator--1422299f-5bf4-4392-a077-cec814d82c48", "indicator--46fbd81d-f810-45a3-8b5b-74c2718d2460", "indicator--27db0978-7265-4c6c-acbc-48fd5cabd145", "indicator--5b4a4157-6594-4692-bb5b-95cba0fb7876", "indicator--7efd2baf-f984-4efe-9a64-28e004b2ea3c", "indicator--ef8be08a-9d98-4b6a-9c0b-17fa83dcf714", "indicator--49567220-0504-463f-b638-08ddd06831a5", "indicator--0ca7eb7e-2cbc-4b3c-8bd0-2ca136125601", "indicator--3b9a7f90-7db3-476f-ba52-22373563ec9f", "indicator--7547f43c-0044-48d5-a6f9-810b027f5a02", "indicator--bdbc4361-7263-4578-891c-cfb498b714e5", "indicator--ef38a136-c21f-4f9e-9984-fd39de6ff4ae", "indicator--9b1edd8a-a808-43ad-9185-4dbb896c94d1", "indicator--07f8844b-28fb-401a-a120-dab742ae6184", "indicator--2f58ef32-d595-4139-9a01-8cad797c6c4a", "indicator--1b6cff9f-81c0-4998-ba88-fc5ba059a3c0", "indicator--32aca2be-17d0-4ae0-a144-352f9b7e5038", "indicator--09024fce-0d7c-425e-99da-8c3140a31bee", "indicator--f67ec474-09b8-4294-863b-1c572c250f94", "indicator--7014f9de-b086-4968-bff4-f21f009f6c6c", "indicator--6af8caf8-b97a-4066-a58a-0a8014f94723", "indicator--9579ca51-8c1a-4807-a071-4f8de63765bc", "indicator--6565e899-b346-4be5-8ae1-db9b70b8199f", "indicator--dc119c90-234e-409a-95e7-3ceb9f3522b7", "indicator--6273596e-1dfe-45a1-a30d-d0b489a49938", "indicator--fbb70d2e-d08a-4d4c-a32a-c8538de6a422", "indicator--df641c1b-04de-4337-9eed-5084313beb7c", "indicator--d70a1072-4307-44d1-a66c-2af51b384fe2", "indicator--7bdd9ddb-3725-4217-8502-3d9b5171b67c", "indicator--c9a2ee5a-c274-456d-9704-3028f4b89458", "indicator--15d9b81a-9e3f-4e1e-ae76-0e1b9d630f37", "indicator--14f04740-eddf-4774-96bd-2ef7e7671ff5", "indicator--94577d06-1a45-4d0b-86dd-9d23565154bd", "indicator--db549790-fa14-4312-8b1d-0f72bec8643a", "indicator--d52285b1-e407-467b-a816-8f1674a04d76", "indicator--e33f405a-9507-401d-91f4-825a725f5cb9", "indicator--ebe05c03-325b-4179-a365-7a9f062e6cd8", "indicator--40c383fa-1506-4856-b972-319cf3e39da9", "indicator--a1235630-9672-4078-9eb6-66f44af40251", "indicator--fc318f6b-04f5-46a1-b88e-8cd23d74d91e", "indicator--5fb5fa83-0893-44f8-82a6-64077984a8c4", "indicator--d59b5463-3ae4-4928-9e3d-701eaa79dea0", "indicator--342e9db8-ee5a-4c87-8c3b-367738b2b925", "indicator--9967a9e5-a69c-4ba4-868c-088477b29c56", "indicator--68104615-b3e9-42c7-bd65-1c4e8891a4b2", "indicator--86ed6107-dd06-4959-a0ea-93970737f530", "indicator--0f1401fc-d2ff-4bd6-ac65-627487fceb37", "indicator--18927273-9732-45be-a48f-975bfae7e853", "indicator--5f1d7f91-4612-4393-bf30-38849704d6ff", "indicator--807d1433-e891-4dec-92a0-ecbe0ffe06e8", "indicator--8b6c58ef-4356-4e66-9e1c-ea3db96b7133", "indicator--97af4f45-9c09-4c9d-aef4-073c58bd2522", "indicator--f28cecd6-acfb-4ea6-b031-de50b093983e", "indicator--5ed23548-6efe-4b7e-8bad-9291a1d64022", "indicator--8f2f31db-2462-4861-ae2a-a8ceb9b7cc05", "indicator--6508a3b6-0c56-4ac8-b5c2-7651c1a3e659", "indicator--aa2c5eee-cc86-4ef2-af19-d9ca99fb6130", "indicator--1e5fa85d-fef7-47f2-a1ce-028719596fb9", "indicator--635f1a82-8f0a-4daf-911a-1139fa346e2e", "indicator--8b5c0dff-f5dc-4450-a9ce-db5c4117ad63", "indicator--fa8eea5e-f605-4c54-beae-82f4a70497cf", "indicator--cd358d75-e4d8-44da-89cb-674b2ce073e9", "indicator--d0f3d214-0642-4b13-b63c-4fdcd5f01778", "indicator--a1117844-936d-4874-b49f-204992fc6963", "indicator--1a693e1c-5c97-4985-9bd4-a52b0e588388", "indicator--8dd64885-ed8d-418b-baf6-90ca13aa7f28", "indicator--498db2f0-5b26-4383-beab-8503599cc711", "indicator--47712252-b804-4559-98c8-ba173deceffb", "indicator--c8babd4d-d1b4-4778-b8dc-cb4562dadbfb", "indicator--53a9b419-483c-47c6-870d-6260a57d1dc8", "indicator--64d8bf53-d73d-424e-9120-d202333d72a5", "indicator--e7fcb2d1-0f1e-4a13-84e7-177c0060fa51", "indicator--5e0b4f06-00d8-4e22-8d9e-0eeaf667b4e0", "indicator--e77b4086-5e09-48d5-94c6-056ded419fca", "indicator--0ffa5547-2755-4559-b302-5d37dbbd34e2", "indicator--f36063d8-363c-43c8-8d79-c2f7af965753", "indicator--422a698d-6712-4938-ab35-c5cb860237e5", "indicator--0c754d36-d450-41e1-8fc7-eeac0602c8e6", "indicator--c3d1e76a-24ac-4fdc-a897-11ca3d99e322", "indicator--30dada45-c6ab-42c5-a77f-ace5396636b8", "indicator--e8947ef3-5a73-4f3c-a849-27be4c09f052", "indicator--a44b8eb4-98ed-4229-825e-ac3a27f7cf46", "indicator--b65f9936-e7cd-492d-9239-7bbd26ba35ad", "indicator--f2a5c75d-88ac-4e46-8cf6-c28eae1ab471", "indicator--7b40f679-cfe3-4e66-b211-7d5822eed260", "indicator--38f561e4-1d04-4c75-b020-1bcbdb4c85c3", "indicator--34aa685a-dbc7-4399-ae0c-faf38b267e37", "indicator--b4917006-76ad-4e71-bcbb-a3558b67c59b", "indicator--4ed83c9c-cce2-4813-b1e9-a37ac6b4fefa", "indicator--cd73f2d4-bee0-45a9-8b23-191c51562061", "indicator--1a5f32e2-81d2-4949-be70-55a7b86eed6d", "indicator--3d9c0a8b-4582-48b3-9d52-fa4d46053cb9", "indicator--933647a4-3fd9-4458-a873-bca297361bc8", "indicator--c0084ea7-f225-4f07-9d14-1d0238664370", "indicator--f92055dc-a05b-471c-8b75-e78fb8cd2adc", "indicator--366a09bb-006b-4e3e-8264-afcda8d32b3c", "indicator--372e8768-8bdb-43d2-9ae4-5691a670abac", "indicator--ffc7ad3b-332b-41e5-bc3b-51801cc4991f", "indicator--bb61aae7-d884-4cd8-a141-cc77242bd4f7", "indicator--6c51e68b-48b9-4aab-bf27-9a33bc0f1bd3", "indicator--ed6336fb-7475-4f52-ae5c-b11b6e656c73", "indicator--674aeb4e-c920-4b0a-bcea-8be0c245ff79", "indicator--a970b593-6d9f-43ba-b5e5-308bc19e23ef", "indicator--e0c1fec6-4091-4017-988a-e2938239c547", "indicator--d2ee707f-db21-4658-88e7-b4ef30ad3f48", "indicator--813a2bba-b0be-41e1-9f11-7c32b64397d1", "indicator--75636f4f-e7d4-49c9-8df6-8f68e9823283", "indicator--083027a8-fe64-4d1f-877f-2a4a7c49f00d", "indicator--7e3dec87-d12d-4af8-b9ab-677889395b46", "indicator--334e1eb0-7af0-439d-85f1-3b1a7c582543", "indicator--d0965a9d-f9b4-4009-9fd0-022fdc47e998", "indicator--89a72e2a-28ad-4a19-b31e-2753eb617c24", "indicator--5152bf61-3ebc-4196-953a-436293c69aa3", "indicator--3b0b9f47-0c78-43b5-9649-93efb7428d04", "indicator--37638b51-4ca3-4fc9-a81f-6b44db27ffd8", "indicator--db338e7c-0ad6-4c94-b06d-a5a8a127032f", "indicator--85305a82-db65-4c0e-8a21-8c0a845794b3", "indicator--74820c13-d3ed-42d7-a4bb-568af2c02a7d", "indicator--810ff15f-d2b7-4b8b-bb39-8f9d9cae2693", "indicator--e0ba9b6b-befc-45d2-a59c-bd68280577bf", "indicator--76d4dc20-3089-41a2-8d37-c60f930ab4cd", "indicator--9051bc51-7151-4afa-a13e-2c708a8513ec", "indicator--9e1d03e3-7f00-4143-a0f9-24b27f3d6e17", "indicator--caa44b10-b52c-436d-9fea-b608ecd682c7", "indicator--555dd34a-bae7-42fc-8f1b-180276a8e385", "indicator--c15469ac-62fa-410d-9738-26b0e23203b7", "indicator--739b2d85-fb55-4675-be3c-1a0c2a23d90b", "indicator--ff894f0e-2ac7-4901-85bf-45ecfbee8917", "indicator--380b7e89-6fad-461a-b83e-81e2fb00fbf2", "indicator--098c35a3-e19b-42a0-83a9-04305329270d", "indicator--951bc735-b62e-4c3a-b57b-2d3086e361df", "indicator--907c2075-09be-4052-96d7-d7ef132440e9", "indicator--819554c3-4227-45f3-8103-686f4509ffc4", "indicator--cc9e6e53-5911-4c30-bc92-4afbe2f2846b", "indicator--2fb1c370-cd78-420f-99a5-f0093598b8e9", "indicator--708166db-6ac4-498e-827c-bb6902240388", "indicator--791a6661-8e4c-4e00-9453-14af7d5ec6df", "indicator--bfa2b5df-a087-4e64-9488-344004fd6756", "indicator--879e14be-52b3-4653-8e15-bf6080b8b237", "indicator--084269c0-365e-4052-b603-d3b4f3c0fdce", "indicator--882f2086-adb9-49b5-a47a-d7e6e3a5a9eb", "indicator--cc5ecfa0-fc03-41a8-9527-f8096f04e426", "indicator--b5363951-7f9c-4b42-9415-b79a42c6a5df", "indicator--62a74e9f-a7a8-4c38-aff6-f649184e1d1e", "indicator--b1b99d5b-07b7-45f6-a463-01d71ea2c9ea", "indicator--ad529eb0-569f-4b45-9bc7-a834a3139c75", "indicator--f418b026-093f-4144-9a6c-c57220605f93", "indicator--86177672-fbfb-4a15-a933-ef1d7a35228e", "indicator--0f22a1d5-9b03-43c9-a18a-0f437d562ee3", "indicator--8d126c38-3737-4572-b1cc-f1afc56b377c", "indicator--8e385749-6c27-4f66-8020-cfa9d13aa6ef", "indicator--100ee625-14f7-4627-9ac0-1d7fe7f37e28", "indicator--6746b973-4c06-4dc4-9c75-e03c1d75bdd3", "indicator--b6252bf3-ece4-421d-8f16-b2ef3cbdeffa", "indicator--bd04e53e-1d1c-4406-8826-7f68cd7cc70b", "indicator--2d4a4c98-2d39-4fd8-a338-8dc502d05fbe", "indicator--fca4ae4b-a11f-4ea1-a33c-04212638ec85", "indicator--6981896f-4e70-4159-aa33-80ee6c3a41ba", "indicator--16bce865-f5c9-45ca-aa6a-9b2d780eb04a", "indicator--03fcf078-37fd-4f4e-a93d-4b7cb7aefdbc", "indicator--a4e22b16-2bc7-46cf-9857-bc736aadb3b8", "indicator--255a3391-8709-452e-8f8d-dc04c296df97", "indicator--3a6f85c9-f0bf-4f62-ac97-e3d4740aa544", "indicator--3f5776ee-7855-4c4b-bbcf-bb3fb619f146", "indicator--9a463b04-a167-4e51-aa70-50a7727056cd", "indicator--91575148-114f-4990-9be7-e0126a29cac0", "indicator--aededbea-b323-4ffc-a6ba-8bb7a02fc93b", "indicator--e15e5cd5-a166-4f19-a583-fe2247c98291", "indicator--9675d3c8-ca3b-4eaf-a8a0-a6c123e1224c", "indicator--ab122abe-a1d7-42b4-b9c5-9f18cdb792cb", "indicator--bc3873da-9ec9-41a1-b747-96d1d67cc6f6", "indicator--342b1a61-493a-4b2d-b6d3-6b375d30b86d", "indicator--b0974413-9f82-4c13-a999-3d44780d5486", "indicator--6f6fbf74-a34f-49b4-b9ea-3622d7716567", "indicator--ad415ef3-f3b5-4e9c-aaae-abce428ff40b", "indicator--8463bb0a-7fa9-463a-9d1c-a024751a27a8", "indicator--a1ac5e97-be21-49d1-afae-564e2000cb77", "indicator--017cd6c7-3716-4d14-8b25-9b81618aba3b", "indicator--e4a7350b-9262-45fb-83c2-e916682b1680", "indicator--017cd1ee-83fd-43e5-b8f0-6f14544d0453", "indicator--673cbfb4-39bf-47cb-8f87-c2c00a65f6d3", "indicator--d83d75c5-7ed0-488f-a105-cfdc3d4f1746", "indicator--654e5164-57df-442a-a082-12516fe96b75", "indicator--789ddfd6-ea61-4542-ab90-d7d24da99b29", "indicator--ec0a32fd-6437-4262-9416-38690e501f63", "indicator--db5851ab-de0d-4423-8201-2a7144e1961a", "indicator--d28f6be1-b99a-4f0d-877c-ca48047f5045", "indicator--7c0e7a75-f35c-49f6-b58e-94200c0dca4f", "indicator--72fe0fca-8541-4d69-be11-6ad55a441d81", "indicator--d1085e0b-6461-457c-9f5b-a4247adbfe5b", "indicator--bcd0f9b6-accf-4c8d-9600-8689bb289b19", "indicator--df303b48-074f-4305-9429-e26db81a23c3", "indicator--7dcea41b-0b33-42cd-9f21-d34e7806a65b", "indicator--e3a2a42e-0a7e-4d1e-a98a-27b69e87c3d0", "indicator--8b173436-4020-42fb-987c-81690e93ee4d", "indicator--c1ebe152-08a2-48df-9b01-5fb3f56016e9", "indicator--6d800da0-4f69-4bf9-a6b2-32e2e1dbfbf2", "indicator--2366d3a1-7893-4b08-8ebc-4d9b237547ef", "indicator--e7597dad-2d5e-413c-9fc9-1f4587f28a53", "indicator--4fc51e4b-a721-416a-b413-58a9052f17ad", "indicator--21f39b55-654c-4244-b193-a13873ba6778", "indicator--a7fe6e21-3819-4551-a7e6-df2fa0adbf52", "indicator--510bdb11-6a17-4e8a-99ff-ab8b7939954d", "indicator--0152aaea-3dd5-493e-aca6-08b107fec009", "indicator--9ba04d7f-4ac3-4672-84d3-f6955a1b7b00", "indicator--edac7585-391b-41ee-ac59-3ce2a0cebf29", "indicator--fbf84699-715b-487c-b8b1-19339a3d9015", "indicator--de23c343-7df5-4467-8f37-4ee000a9802c", "indicator--ad7e4665-0210-472b-8d30-410891c3d486", "indicator--e2713e7a-091d-456e-bfc4-93b38140457f", "indicator--1acac36f-4679-4541-abc9-2d9969a58093", "indicator--0be745b3-2c0b-4e1e-973a-7ddbed12641a", "indicator--2c1990df-cd4b-48f8-9fcf-4f7116effec0", "indicator--ff939ca3-c2fe-4e30-846e-2bec7d9eecff", "indicator--953097c6-3a2a-462e-bbed-19619bfa8b23", "indicator--2501b786-ae69-49cc-9b0f-50d14edcaf71", "indicator--691649c6-0f1a-45bb-b6c5-2bbcecc33bcf", "indicator--a985ac07-0224-4e8b-b027-24a45eac5adf", "indicator--fb759d5a-1c2e-47f6-9939-e62c578a81ce", "indicator--572b2b34-73fd-413c-a4c6-f3339867ef66", "indicator--bd3401df-52f6-4330-b6ff-56b8ca5c2f7b", "indicator--ca15ef97-02bb-469c-bc62-ae717880fee7", "indicator--2e174175-07ad-45e5-a007-870c7b1521d4", "indicator--d2e7c64f-1181-4cf2-a1f1-3552438d72b0", "indicator--718593c5-a6b1-4b1a-91ca-629022e23b29", "indicator--e326a46e-97a6-4bc8-94f3-e9454c000f80", "indicator--7ce6b908-ee9a-43ac-9a13-86ef7de339b1", "indicator--8e569d2c-c2f1-4326-97a6-1ec502267816", "indicator--179593be-d545-4996-ae32-be2a103d22ea", "indicator--063f152a-f026-4a4a-b314-4afc4d27667e", "indicator--7c180b6f-1c3c-46bb-bfb7-cf32240ba985", "indicator--a7d24edb-d9cf-4945-8c99-8a3025b40e05", "indicator--33b9eba4-99e6-4869-a3a7-cc180ee22c4a", "indicator--79490c0e-0b59-4142-9148-e5654fbb4e24", "indicator--c61b2113-11b2-453f-892d-db54206ab220", "indicator--5f82ed20-13a1-4851-bac9-a39169c52111", "indicator--0d927349-1ec3-476b-adcd-604d7eee730e", "indicator--82e6c77a-3b34-4d15-b882-498de386c5ec", "indicator--1db2a1ed-3022-4b4f-8f9a-014c92078975", "indicator--8bbd1d60-853c-48c2-882a-457007e92c79", "indicator--584fcdf4-b814-41bb-a8e2-fbab1fdd5bee", "indicator--fc452112-3ccc-417b-a0d3-1c9d2d67803d", "indicator--ebaebb5e-cc6c-4882-9a4a-32e841dc8809", "indicator--a5369d51-5890-42c2-9c7f-9342d3b5ef09", "indicator--9227e751-41ec-4f56-b9e0-8303e34ed501", "indicator--5c024304-a4a8-40ba-9f59-573f555d16c6", "indicator--65d1ec1c-495c-418e-a4f8-ac914fd40591", "indicator--2745d513-5d81-48cc-8d53-eb3ec44f5f7e", "indicator--b90336e5-3820-4f55-a42c-bc1b939cac80", "indicator--0340827f-1cdd-43cb-919b-bbf585f1d090", "indicator--79fabf86-fff6-4ce8-8fbd-8e8a05688eed", "indicator--aa45c0e5-6c8c-4799-9d4d-203c27cc2839", "indicator--baddefa0-5082-4f2c-9a2b-281227227938", "indicator--90a742f3-b96f-430c-8e36-97f8ed230762", "indicator--c3100bae-504a-4c5c-9382-5a4f72e851c8", "indicator--82056353-8627-42de-9a15-247237b67e14", "indicator--1f0feaf2-e3a1-442e-8fd0-0982c70840ff", "indicator--d6176a87-6fe0-47c3-ad4c-90b0d5aab06b", "indicator--2ba9ea8f-b666-4743-a7f1-c60c568e05c4", "indicator--9762cb3e-5431-4567-abe3-b9ba81d2777d", "indicator--3327e172-5b2f-44ab-ad6b-5e56f675ddad", "indicator--fdb62c0c-c902-4d42-88e9-e7af744c7d79", "indicator--68149593-6df6-4ebe-b805-58dc4171f4a6", "indicator--22a799ca-487b-4ae7-b9c2-ec94820078bf", "indicator--466a2635-330a-40a6-bc12-a25fdf50d29a", "indicator--05b1dadf-f9e8-4874-9938-0c0461986641", "indicator--0966d542-53eb-4090-af27-c4219c761b4b", "indicator--110c4599-ab78-4c01-a045-74abbc53a4b7", "indicator--98616687-feba-4779-8ce0-9eeb929d98a0", "indicator--70d02964-ddcf-41d2-b4f0-5b2ebe067513", "indicator--8f0b1c6c-26e2-4b80-9950-a64239255f92", "indicator--ffdd1da6-3d6a-4c35-aac7-b57100bd6c77", "indicator--9c2050a8-215e-43d9-b5e8-35842373e273", "indicator--6dfb9c9c-867b-471a-8e72-148f5e9ca35e", "indicator--65a4a063-0899-4361-b0f7-5f176faf045a", "indicator--e10886ca-7c15-45a5-8a29-f93c63a1650c", "indicator--be00130c-36c4-4af1-ae87-0846806b97a7", "indicator--74da9730-0fe5-4d6a-9d9d-85c28f404fab", "indicator--cb40480b-eae5-451c-93f8-ec157940f736", "indicator--40a81652-cd20-4e6b-b934-991653199c42", "indicator--9eee2542-0330-4873-bf8e-55352c94be76", "indicator--6d363910-e485-4fe1-83b2-06ca679ca3eb", "indicator--9063beac-f56b-4fef-aa18-610b93db7d52", "indicator--c1408bb6-6f44-4a03-9cfe-bcd94949747a", "indicator--f7dfa062-aded-4167-bc86-4e931d0b800c", "indicator--0bc269f9-258c-408a-8ff3-8a1a2ffe2ac2", "indicator--4a2af5e1-9bfd-4144-9a81-5f755b1cdff0", "indicator--603f2c89-059b-4251-9c33-9018462fd411", "indicator--b68d9e3c-b1db-4b22-affa-848629379a8b", "indicator--70d26226-fa6c-4c69-99f3-fc7a4cd9fb91", "indicator--75db5979-3a15-4917-9958-27ed1d2d4dc7", "indicator--f75a4d0e-3b72-4e44-8665-fb1d59bde02b", "indicator--88f8aa70-5fa3-47b8-95b6-6e03cc87f8d5", "indicator--05f06286-cda9-482c-997a-96f098f7b789", "indicator--819cd92c-4203-477b-a5c4-21c51d80e543", "indicator--cfee4cb5-6cd7-44c2-80a6-56d0d5c6914b", "indicator--d114e490-a49e-43bb-81d5-d9d841a7e715", "indicator--a14b8a9e-e0b8-420d-b1b7-c0d71b5087c3", "indicator--9ba8b8c4-5218-4e13-bf2f-2aa134770d75", "indicator--8671e987-807d-4b8b-9cf0-fe4ffb0c236f", "indicator--fbc9d4b0-3438-4546-a08f-f74234581a35", "indicator--0a609b89-f0fe-40c4-b238-523847b15f4b", "indicator--a5340d23-921d-4a24-920e-8b19dc5bb3d2", "indicator--3540125d-696d-443e-994a-a4d038f5aa72", "indicator--3f047f68-77b4-4617-bec3-a1579ca4881f", "indicator--1d26d63a-6b00-4627-b47a-47870f221f0d", "indicator--df9950d7-d293-4e4c-873a-d0077b36d814", "indicator--fd62a07f-d878-4944-93d5-ad52c4e670be", "indicator--d37e3fde-dd15-43ce-8721-18819ac7c8c0", "indicator--7ef9b2e9-db51-4c4a-8e33-4602b9f13c3d", "indicator--99bb4785-30dd-4a50-a689-bb668f1ae3f7", "indicator--d30e16fb-0f0c-43bc-af49-42d914d11bd6", "indicator--c51f1970-0fb6-4957-a864-164bc47d3431", "indicator--9e29e581-d2c9-43c2-a005-9fc1341811ec", "indicator--c6e66fe8-49dc-4f0f-bc19-cb67f2f2cf69", "indicator--28981d03-a08a-4ca6-ac3b-c9d0e05eb82a", "indicator--2c33139e-4de2-4de5-9ef6-33547d104051", "indicator--958eb4f5-741c-4e35-b9b8-5f9d0e63e440", "indicator--cba14932-7a9e-42d2-927c-832bfd456fbe", "indicator--2e8d3dfa-8aba-403b-973b-f5fa0b2c310d", "indicator--a79e4e0e-b898-431a-bcda-812086b1c590", "indicator--3722e9e0-1c72-441a-a222-d598dfdf2bbf", "indicator--c6ab39b6-ce79-42ac-bcf0-21e42b06fcb3", "indicator--ab2a0f5c-76eb-4296-af79-eae9be5b7063", "indicator--13eba955-c0fd-423f-a18b-25f9b520ce80", "indicator--455e48b9-2819-4836-adb2-b000e0b64d1c", "indicator--f5951992-9709-41d8-bc64-3eaf33be549d", "indicator--2fcb8a5d-def2-40f3-9904-8e49f466768e", "indicator--6f8c31ab-add1-4971-a81a-e4bfb644a1ed", "indicator--94604bb3-ef67-4415-8c48-31122991c1ab", "indicator--85aa330c-dea1-4610-886e-5f2de00811a7", "indicator--b9dba2e8-a9a2-4dd1-ac39-bbd532ab8c3c", "indicator--0d56f040-2367-4a2b-8f87-af38e1cf5f68", "indicator--2946aa28-362c-4e7f-a729-545bd134c993", "indicator--82806408-611d-4c7a-8bd5-8ae6be606685", "indicator--76d822b0-209d-430c-9e08-e48e087f7f8f", "indicator--14db25f3-41d2-41e1-b0b9-28a40d855495", "indicator--33cfd08b-ef6f-4222-8791-c03095780957", "indicator--f1d257a1-814c-440e-9c95-5a4079a90948", "indicator--b9bb859a-16a4-4b47-a615-b1e8e690ffd2", "indicator--d59bda6d-5315-46d4-bf64-776cc71fa75e", "indicator--942cfb55-c582-477f-96b6-f646343078d1", "indicator--50a9a0bc-735e-4325-9325-35d478ab4b91", "indicator--df7b596a-ea4a-421d-b766-6370303cb662", "indicator--ecd51f1d-493f-4908-a17f-768965a10312", "indicator--10697234-23b1-4258-9fa1-5427b10f2c42", "indicator--70c5918a-2856-4080-8019-39d32da777bc", "indicator--c56465ff-ced2-4938-bbb3-af1a7cd458eb", "indicator--079580a5-5fe4-45a7-9084-b7f7a0ab343e", "indicator--76f83ae6-2dfb-4041-8074-790d6993160b", "indicator--38c518c0-6142-40f8-a9bb-499ac8c0c416", "indicator--60ffc112-b292-4127-863f-212fc281fef9", "indicator--1593911f-64fe-4b82-9eb9-a01a74f03d87", "indicator--7b16c5a8-e00c-4f33-b1b2-61dbfa41fc7a", "indicator--82e694da-686f-47c6-8dd4-4bf0f1d43990", "indicator--90d89cb0-0fca-412e-a6aa-248beb1188e6", "indicator--f3cf2a7d-ab12-4ba1-baf7-31a74b1bba86", "indicator--d7c6a4f9-5dec-4606-9981-f8175d53bd57", "indicator--ae427e34-1787-48ce-b391-f99013cc1af8", "indicator--8c410cc2-e591-4725-9f33-bf7cb9cabe2c", "indicator--0bb3cd59-dfef-43a7-b509-b3cff66fcc8e", "indicator--5941c007-b46f-4987-8f37-bf0b7aa52efb", "indicator--81d027bd-b28e-42ec-b9be-ce7cfaf303ce", "indicator--d4f87e34-3212-4fbd-8021-b2db6c9e69de", "indicator--e6af3e28-6e66-4925-8207-64c87fee64d0", "indicator--ddb6f26c-bb4f-40d6-8e25-695535c3c6ab", "indicator--6a267dbd-a365-4e5f-b59e-5a02cdbc28f9", "indicator--9a27e0c7-0209-4835-a310-0ac82851d9c4", "indicator--fffa8468-741d-4151-9ebf-3fb6602caf6a", "indicator--c102c684-6966-4725-843e-1ad3f8e12dff", "indicator--53130fa8-a84c-4d85-816b-7071bb564884", "indicator--6d783b08-747f-4d1d-9c3f-eb226219cfab", "indicator--ee9a2c46-4443-4c18-83fa-feda92b5d0a0", "indicator--15741b62-1183-4784-b8b4-3e0889301e10", "indicator--4d6f69d9-f975-42d0-a190-8e942a41b02b", "indicator--9a30f965-190f-4a63-abdc-d0469b8f0281", "indicator--5e251800-1c32-4ebc-95e7-2813ac79a199", "indicator--80c3afc8-b8a6-4204-9d8b-5fdcb10aade3", "indicator--a60e27e0-0e5e-4bd4-b1be-5891964696c9", "indicator--751d4c5f-a5a9-4c22-84a1-8fa466096a04", "indicator--fc35f8d1-328f-433a-8d64-4dbbffdc588b", "indicator--bc6d7c4d-0d5b-4c4c-b6eb-0dc460257798", "indicator--ee1bbf8a-2282-46cc-9f9c-d376793d35c3", "indicator--dad7bcc4-6a59-4ea4-878b-66bb527f71e5", "indicator--4819e5bd-c8e9-4347-9fdc-6b11611b88d4", "indicator--af275f7a-64e1-4e24-b269-de7f17fc6dce", "indicator--59532a99-824c-47e6-9b96-5a26b851eddb", "indicator--689ca4ca-9d7d-49a6-9a37-87768e2dfb85", "indicator--9e39f312-1fc8-4cdd-bc76-2d125dd22615", "indicator--fe3c9c89-723f-4cf7-9f35-e48571a1fd5c", "indicator--9457ceda-25fe-470e-9be7-a70f488a6d86", "indicator--873f3d12-d2c5-4896-af28-497752357308", "indicator--88eb691d-82d2-4a9c-b052-a4b68f96c775", "indicator--f1a04eb6-fc52-48c9-88f9-add317e81c73", "indicator--3851b5b4-078b-4093-b36c-dd7ad338a28b", "indicator--da83dbff-2f72-4e76-ab94-e3b7212c3cf6", "indicator--1ac28d11-cb02-48dd-b301-47e7c8e36f3d", "indicator--e9b3a696-5f39-497b-8ff8-0ff654fa197b", "indicator--0a205552-1ad4-4526-9ad4-ef6f85f768e7", "indicator--ceec36c8-b36c-480c-a81b-910f3f7bd563", "indicator--acceed19-bc40-4e6a-862d-54fcc807f9cf", "indicator--28ee0087-d610-4cf2-b782-c0a1360517aa", "indicator--991d1566-b2ae-4ba0-8e36-a8c9cbc48807", "indicator--3ff8d405-15e7-4623-a8bd-7b1b669abb43", "indicator--ec555e4d-a91b-4921-98e7-16e1b2f2aa35", "indicator--d39853e5-29f3-4d66-88b0-afd9edc0e14a", "indicator--1ab0991c-ecae-4eef-b0db-08af1df5dcda", "indicator--39025630-5831-480c-ae65-d3c5ae73111d", "indicator--1590c680-e07b-4098-b0eb-60c59936612c", "indicator--adc9febc-cdca-4699-9510-23ffa580824d", "indicator--c60161f3-4b8b-471e-9466-dcea546de30e", "indicator--5f15e9a5-54ae-4e5c-ba24-b53f9df6330a", "indicator--095ee270-6962-4ef8-b780-5450f305f441", "indicator--a896b0b9-26c4-4e30-9dd3-35208b69d088", "indicator--a67351db-5ebb-41a4-95fb-1e01d553695a", "indicator--18d2a181-dd0a-40c4-b97f-f8a626173c8a", "indicator--4f383577-6ae2-4865-97de-75127037aaa5", "indicator--667dcfb9-1678-4736-8781-6ab5625c8159", "indicator--da66fecf-476f-4f05-9c4a-3a4f91eae78c", "indicator--d2840276-0743-4aea-867c-c193b37f60b7", "indicator--dcdb7a5c-2078-479f-8d09-21e48a71643c", "indicator--9837bc1c-4700-4727-9af3-94ee06d47bbc", "indicator--4ce77ee6-f850-438d-a717-5054b399c63e", "indicator--bd39bd8b-6a1b-45ad-aa2e-f157839d4f72", "indicator--d788e228-11e6-43ce-9323-9961c3832c6f", "indicator--6ca5489d-7ceb-4a5a-a85d-de9c2aaf81fa", "indicator--21d3866c-ae55-42d2-a229-2bb911212f70", "indicator--707ce1d0-a168-4eef-95d9-5fa53e3cf1e0", "indicator--1c7abe22-e0f8-45d0-8e04-ef00bb667824", "indicator--a93cc747-a0f1-483e-9b32-a05e7cf7fa7b", "indicator--f66567da-7c67-4f06-8320-e001f029d7ab", "indicator--0e42f5c0-76a0-49d7-8844-d08fbf8c9713", "indicator--bc96dcba-ca01-4fd8-8fa1-eb8e3aaa9265", "indicator--71fc91a4-df32-4f49-b98b-f0553e0e54d6", "indicator--f3458aa4-929f-4299-a019-175398ce4e6c", "indicator--a0bbc7e1-2e78-43ff-9579-7e2c3d1be30f", "indicator--e1304832-c66a-48de-ae4a-61858ba78da0", "indicator--52511bb9-cc35-4b97-98ce-65e88a661ef8", "indicator--b470c56f-2147-49bd-adf5-fcdbec7fb074", "indicator--6e872aca-016a-4fcd-9f1b-29752a50da74", "indicator--4e39cb31-8d6a-441f-ad47-6b41eff7245b", "indicator--eff1b5d5-434d-43f6-b445-1ca7d6415998", "indicator--554130a4-89ba-495f-a4a0-6d7bb504d8bd", "indicator--f6e3fe27-e27b-4444-adb2-fa783de9705b", "indicator--cab3abe6-c6e6-4a1d-a897-f68746598c32", "indicator--f02a0a92-a6c5-4cbb-b754-30bf8765f717", "indicator--7fd0648b-584a-4020-a6f7-505263d1d3e2", "indicator--ad4d1d12-4bd1-4e98-b334-518df99f27a8", "indicator--88ba84ca-c92d-45ad-b288-4b4f0382478c", "indicator--237f07a3-76df-4b64-9754-a49e8e611773", "indicator--970c5bf4-b084-404b-9969-241e773ae492", "indicator--e2e6b0a1-f2ba-4fcc-b7b4-0245470879ea", "indicator--696f3970-4262-4723-b980-f9f6f9bf2c4f", "indicator--1e90aec8-57dc-43e5-ada6-47bfb31f122a", "indicator--1dae6285-37f3-4c4b-8f74-a52bff1fdcab", "indicator--e16f77b1-9bff-49dd-9c3b-c6f7ae0a6296", "indicator--e8486165-7973-4d44-ba5c-bc5c9364d285", "indicator--4862582c-e483-4922-af5f-62719a70e3e9", "indicator--67251d36-eb22-41ff-b2b0-1ddfb673e762", "indicator--3af5f1f5-721c-4610-8782-62b0169a98e6", "indicator--333df2e9-3bd3-4289-bd18-a55269ca4260", "indicator--0087174e-7b06-495e-9152-b621f954d02a", "indicator--9f44a240-8beb-4821-8c8a-fa28d118b4ae", "indicator--f4182236-532b-4284-8d71-b70f0f0230c1", "indicator--c0b50812-99ec-4a02-9ac1-e72c1415e488", "indicator--72823ebc-4821-481a-9d42-5582c2055fd5", "indicator--2f229e12-c63f-470a-b529-c0841fe0d6d4", "indicator--630e24b6-7e55-4d2e-9855-177b3b1ea8d0", "indicator--2b7086f5-c21c-430c-b7ec-1cd387eb10f2", "indicator--ac91bf46-a745-429a-adce-7e677fba97a0", "indicator--3a9c15a3-48d6-4bf0-b997-86cadd8120ba", "indicator--ae3a81ed-abda-4ee8-87cc-e4c745377a9b", "indicator--dcdadb38-54bd-4cf3-a8ac-7eac288c8380", "indicator--b772d8f9-4e13-427c-a8c7-b4d040688472", "indicator--e9582e38-7bf6-422a-822c-73f18227315e", "indicator--b7b5a65f-a73e-4ea2-a305-b3a7034027ad", "indicator--141de925-1d0e-4b2e-bd98-a9a98616c3ed", "indicator--9d7026ca-1056-4068-9885-f5c2258f7dbc", "indicator--36035c1c-20e3-49c9-824f-72979e8e3fcd", "indicator--8eb54f54-1a19-4abe-9686-addd4ca22406", "indicator--747e6200-792c-4be9-81c6-7a02fef01f4c", "indicator--6fb05252-47a1-4e38-98d2-6baecf28d32c", "indicator--9b8c1c8d-514a-4bb2-a43e-c3a3c44aeb64", "indicator--780e851f-dfa8-49cd-9279-16d8af28864a", "indicator--7b60feb3-7fa6-4036-b402-e31cdccddf7c", "indicator--8ec5993e-1342-4340-9acc-7a8c3236ea37", "indicator--9f5dcfb0-6a88-4e11-ad97-df78299813b3", "indicator--4316d744-ad6d-4916-a619-cdaeca122bb4", "indicator--a878a797-7782-4848-8eae-0da4417b60b3", "indicator--c05609c3-e79e-4262-8a68-c10e1c68cbbc", "indicator--6b5f7cef-e5f2-4994-80e0-ee6d863f2a1a", "indicator--fb482039-29f2-4d66-9823-47667c500b19", "indicator--053f5924-b0e5-4d22-af55-49b449919b17", "indicator--a65a717c-c66a-42c6-be52-cbf6220a4307", "indicator--ad93a4c7-6fba-4a54-962b-974f60db1ca2", "indicator--805f49cb-0fa2-4c10-90de-1880de29129b", "indicator--1825e183-ced2-46e0-9403-fd6ed9e81aa1", "indicator--54f1b1b4-e429-4511-ab89-5f09d9bab6e9", "indicator--0a58a831-ebde-41d6-8ead-08187a741c05", "indicator--36e01c72-043f-4743-975b-8e54479f6c41", "indicator--898476e2-e37e-4329-a86a-74029f4dbdd2", "indicator--b5688a30-488d-46d0-89ea-d16c24017007", "indicator--c4d0bf2a-af1f-4c53-8b71-5b8541d7fe99", "indicator--8efd0987-6c23-4ba1-a420-5138f7203cd2", "indicator--0c543474-52a7-4cc5-93ee-26f9b4bec852", "indicator--f0ccd384-5c89-485e-91ba-29cfb23dcae5", "indicator--eac92dbb-6ec4-4936-b019-6db95aa52f2d", "indicator--10cfa3d2-cf05-4dad-bd2a-620afb9ba7b2", "indicator--6f0be054-637a-4396-9829-05cd79ab770e", "indicator--afb6236d-9440-4731-b61d-2a7db636da0e", "indicator--bdb3055e-58db-45eb-9a3d-13b99d65f1d3", "indicator--2aba6fd6-7b77-4c68-87a0-13322d44506b", "indicator--cedba65d-01b3-4391-8aac-f51ee172ae2f", "indicator--97504a2e-8e5e-42df-a376-c82ceca5689f", "indicator--395ae790-1b5e-4b01-8ab7-c71a3e554bdc", "indicator--25df8b5a-077a-4753-bcec-44c00dd54093", "indicator--7e4309c9-e1d5-497f-b5bd-68d4ddb70ead", "indicator--2133ae1a-b627-4deb-b6cb-9402ad68458f", "indicator--d848ea97-977a-4cc2-a2d5-0db752cd435c", "indicator--82d143e8-174f-451e-bfae-257695aa62cd", "indicator--a770f2e2-7961-4d31-bf1e-94cab8ba1d3b", "indicator--e52a93c7-a7e9-47f8-b9df-0def11f110be", "indicator--72119a35-6909-47c4-ad39-246f38361ce7", "indicator--4e189b1f-8ff8-41e7-bd79-5a3e72af23ae", "indicator--fd34d7d5-b1d2-4834-a017-99760930a803", "indicator--e43ac939-7bcd-4874-832a-b589173c7d53", "indicator--47e0259a-206e-4fb1-931d-86d4a393f906", "indicator--31b139f5-61d8-414a-afb7-9eee52c16aff", "indicator--3f705767-c6e5-429b-92dc-30b55755fb3c", "indicator--337c723a-922d-43c7-87d6-7556d460c964", "indicator--bbdd7613-db98-4b91-bcbe-faac9442fc59", "indicator--f1ccbc41-4e3f-48b3-88b6-fbda55051786", "indicator--de79c3ab-de7e-4560-8d35-58f4c9f9b370", "indicator--c7eba6aa-a7a3-4417-928d-ea15ac58d75e", "indicator--e13ac9bd-fa72-4398-bfed-af4266338855", "indicator--ac9735c2-0569-456f-add9-509c87289045", "indicator--f3ea0958-6048-4d42-8e68-7e694c9eb8b3", "indicator--fba5e6a5-338c-4f19-bcf1-943f3a7160ba", "indicator--5ca1cf1f-cbdd-4352-8453-de8ec3f988b3", "indicator--f6d62fb6-71c2-4798-89c2-824fa6f232ee", "indicator--72c782ff-31a4-46ff-aa0f-d08694b9036e", "indicator--480e6ac6-e01c-4dc4-a543-c7a1cc602e86", "indicator--a62ef1ce-a6d3-46f9-b689-d108319bfc10", "indicator--14feaea2-7538-41fe-9332-f01c2b0b3de2", "indicator--a2148f97-0999-4b8a-93ca-f294c25cddcf", "indicator--eb653ef8-fd05-4804-afe0-a91b25547857", "indicator--32333746-f79d-48c3-9e8b-3ef5a4a4c35a", "indicator--862fe6de-b644-4e44-ad44-1444880ce16c", "indicator--6bbe7668-bd12-4845-84d5-8807b354f3af", "indicator--dcb5ebc8-cfdf-4d1b-ba6b-c024863037ed", "indicator--9bb3d296-b651-4467-8df7-3f2620a2aafc", "indicator--db166965-3ad5-403c-b694-f3fe9b09594c", "indicator--2e81c465-1be2-466d-aba8-337e7a900358", "indicator--0fa26b09-a764-4a49-8f3c-0907e744bee3", "indicator--a42f455d-3209-4177-9b9f-e403824331f5", "indicator--4165bd65-c6c0-4155-b2ac-c6f64a569fef", "indicator--722e03ea-c1c5-4293-9fdb-9be8dd49d21c", "indicator--9df45694-c69f-40ab-ad15-52dbdde762ef", "indicator--c792f35f-498f-4222-a58c-b4d6beadf65c", "indicator--73734c2e-5ac7-48fa-bfb3-7fc16d8e3863", "indicator--1e5f6044-92e7-49b0-897f-f2785f44f2f5", "indicator--125907b1-c045-476a-9f7a-3f1cc8ffe504", "indicator--0fd36345-7978-4a5b-811b-32173405eaab", "indicator--8ab8c68d-9a1a-432e-98ec-78e230dbc341", "indicator--e807c55a-0da1-4aab-98b0-4583996df9af", "indicator--7984eb52-6107-484a-93ba-3f969c3c10b0", "indicator--5159cded-ccaa-47d7-b31b-89d0776af81c", "indicator--08e973b3-705f-4281-8c90-6abf5743199e", "indicator--06083f06-30b8-4359-a32c-eeb91937e82c", "indicator--f4b46a30-ce8b-4120-92b2-c30d3644e151", "indicator--ecf46685-c50e-4f7c-8f8e-a60adedd5708", "indicator--ec370491-061d-4bed-a420-721c46267eae", "indicator--7990e6c6-6977-4d2a-8c45-a244c685a9f0", "indicator--0b4c504f-7f71-4321-861e-1541e2de0fd6", "indicator--e4d474a7-0a56-4c6b-8312-d3d6eca3ec04", "indicator--ada45ebb-064a-445e-91c8-c71641ca736e", "indicator--a2c638c1-4d8c-418c-8890-d05da6691175", "indicator--c04237d9-6fdf-463c-a7f4-034530af3047", "indicator--749f3005-f088-42bb-a438-8759cf2f0637", "indicator--9e244081-4dd6-4a9e-84cb-da418be47194", "indicator--5f89cc81-f1fe-494f-9c6b-04968f000d73", "indicator--ee847720-a46b-4e87-b0d6-df521343fadb", "indicator--4ba639d4-f1fd-41b9-8460-7cad80922842", "indicator--5380f66c-d1d7-43a9-be65-4f8880d31bea", "indicator--4b22d374-8fb9-4f94-b465-517ce108e5cb", "indicator--5b01302b-3780-42cf-9ce4-48fedaacefdd", "indicator--fc044491-ea7c-4b37-ad76-397c9ce5c11b", "indicator--8b1e9190-bfb1-409a-8d5a-c40c65a9e295", "indicator--39d57f3d-ba3a-4150-be7c-29e2008ca426", "indicator--4bd44c7c-53f8-46cd-80f5-e92f1ea7f6c2", "indicator--6642a507-03cd-4f82-a14d-97baf2f2a84f", "indicator--a209b4ee-29b7-41b6-848d-53030ea8e774", "indicator--7314ce92-b19d-441a-9eb2-8fb2f8fba226", "indicator--caa18c1e-3702-43d1-beac-f2cb4942a32f", "indicator--d28363ab-a006-4940-a9c6-71346643b963", "indicator--42be8849-5de3-4700-b478-e5d1ca154b8f", "indicator--f3a35f7e-c0c6-40ab-8bab-fee0041b8179", "indicator--30093940-490a-428d-9df0-7aeaeb8b0734", "indicator--218f290e-dc66-49e3-ad11-bd009d64da89", "indicator--e35c735d-ad1b-49ef-8f2b-585be083cd1a", "indicator--d56b3cca-8079-4755-8a7d-b856ba8e67e2", "indicator--7910a8f2-10f1-4863-911e-b2ae7f2b8d4c", "indicator--67d83e82-8f51-4859-8ed8-862e08a0dde5", "indicator--9d3f3a6d-5ae5-44c3-a40e-c986899493f5", "indicator--12d1dce6-ab80-4d8c-b5a8-894015140430", "indicator--208ffa5e-b5cc-4493-8fc6-a58717517618", "indicator--dad8204e-111f-419f-ab3b-1062be9e18bf", "indicator--b98250f4-3488-48f3-85cc-4aae8747389d", "indicator--ef385bcc-9bf0-4ea6-b973-ce77a7330230", "indicator--cf2070af-5958-419c-b5bd-1e3b8910be09", "indicator--57e33e7b-0d22-40ba-9298-2d160a5cf066", "indicator--374f2a3e-3e58-42ac-9c6b-b730d2503822", "indicator--5b011618-a418-450a-b8fa-7a50f74caefe", "indicator--60510969-e1b4-40b1-a877-1dd73df3b497", "indicator--ffcd87bf-61c5-4093-b203-5de63df5c73b", "indicator--d470f948-8931-47da-a44f-b34a5dfa911e", "indicator--b44eba7f-17f3-471a-ad0b-e2496cbcb210", "indicator--ba1306ec-5a7a-4062-b99b-de677dba7eab", "indicator--ea0865f1-1dc3-4511-ac27-7e884b205eca", "indicator--2e20eb71-c571-4c7b-9ffb-8721c8bd6b8d", "indicator--74b8d5e2-21ea-4944-83f3-163f952364a0", "indicator--8cb62b6d-66d0-4591-a220-2f26e0388129", "indicator--57d2bb5c-fb8f-4a9a-a565-fc25877dc6f8", "indicator--28884af4-c638-4f75-ac8a-c3d710999a86", "indicator--a46d5bf5-212c-413a-b585-73d9812b971b", "indicator--2bf0f7e4-d79a-455a-b276-9c6a9d44ee8c", "indicator--fa54a552-e452-42e2-888a-e40651c2142f", "indicator--ca911b30-68d4-4814-af19-32feb132dd52", "indicator--2b96db7b-57f9-4a37-ae39-ea281f51f835", "indicator--bdb8c6e8-c44b-487c-b46c-882c0ec2b038", "indicator--d80f496e-738f-4a04-a7ec-0beb6ca69180", "indicator--2bd0d59e-d05e-4286-9dee-a6812a1e8a03", "indicator--c1913676-c994-43ea-9a89-c20735159f98", "indicator--09987869-8fb7-48e0-be9a-e3c58d3d9a98", "indicator--c13826fc-ac92-4b09-96a7-f5014fc74f84", "indicator--cd6069c0-e29d-498b-9e7a-8ad284b186c7", "indicator--5d21295f-d886-48d8-a5f6-94d248fbabc9", "indicator--e509df92-60c8-406a-8b32-2c44abcd38f8", "indicator--1802cac6-883b-49e2-aae9-4362a840b98d", "indicator--c7bd7b07-efbc-4960-95b7-1197317f3b65", "indicator--71604a89-cbdb-4f09-b855-09fa75e779e1", "indicator--8ef7798d-2e18-4fd5-9bba-8f23d87b0bda", "indicator--417fe994-2e2e-4b4e-8e4f-8e7c0890e46e", "indicator--02c2731f-e52f-47a1-b246-f6e200c80be8", "indicator--88c80bd6-786b-4c91-8898-9ae27f3537f6", "indicator--30598c43-c931-4977-995c-8f8f45b4f692", "indicator--7774f00f-0a4c-4c8c-8c2f-f8ef1667c02c", "indicator--3a44ccf2-3a8e-4af4-956a-84cec5f527ea", "indicator--5ea9a064-227e-4e1e-a683-63e72cadd197", "indicator--6fbcb9dd-fdfc-4419-a2fb-6ebe9be70f74", "indicator--c05a4178-b77e-45b0-8037-944f584dcf1d", "indicator--1b75fdaa-5a14-4395-87f3-504ec348ef0d", "indicator--b4408224-f44b-442d-b83b-5b22c312d7c9", "indicator--649180a7-64f0-456e-b2f9-db8b7c76206c", "indicator--64540f85-678b-4297-a61f-1b819eaeaef8", "indicator--28910e00-cd37-4a9e-b51c-59e624cfdbd7", "indicator--d7fe48e6-87e1-44a5-a46e-63986e9753f6", "indicator--80494d9e-6ab9-45be-9f8d-0229b90d2e74", "indicator--b1c74346-6986-4761-8ea3-34b53aca2277", "indicator--818a216d-7307-4b2f-b5b1-0e2fb86f83e1", "indicator--761b80ce-5a12-467e-a82f-81e1a22fdb2c", "indicator--3ab7d2ee-5e6e-4c79-a891-ac03c5ffdd27", "indicator--d71cb12b-f384-4a46-b340-3affc1f201d2", "indicator--a0bd8a77-9898-4bb9-90fe-b21f3be58026", "indicator--a483c79d-826e-43b6-87e6-62d68055a959", "indicator--52368489-63ab-480c-86ba-831cf67bff9c", "indicator--a81456c3-2e3f-4e07-989d-2e897f14ef76", "indicator--7823614e-cca5-47a7-b0e4-dc80f92b6e1d", "indicator--1231b646-640d-437d-bc54-52f1a687af4b", "indicator--222c4866-9b78-4979-b031-072076cd3aca", "indicator--1f0a65f6-643c-4437-ac6a-9ff4df85a9f9", "indicator--2fcadc3d-2876-4da1-852a-5830b43f4768", "indicator--fffc3ec2-61e2-4ef3-9e73-d1f170573686", "indicator--088482b9-c986-492c-ae47-cb2ba337ca04", "indicator--68363699-fb19-4e5e-ac91-c7aefa1b0dab", "indicator--56e48c92-ba5a-4d26-9482-305c1da27898", "indicator--8ba4afc8-911c-4cc3-94d6-1be164b3ca99", "indicator--7c18a10d-767e-4f53-8953-e4a7a3f78c5c", "indicator--c9a57e33-b4d4-4554-a258-3d7ec5f2c2d8", "indicator--3bc0b18c-042e-43fb-a582-989075405401", "indicator--c528ad52-1491-4aae-b9b7-74c742c8ea66", "indicator--08b174bc-93b3-491c-af14-5216c62efcc2", "indicator--f233690c-c34b-4e2f-b8b3-2794e652f1cc", "indicator--9bd52d0f-36f4-4832-a6e9-bd2adeb4f37a", "indicator--becd7809-bcad-489a-bfdd-33086cf6fe57", "indicator--c6d427d8-78d7-47cc-a671-9dd9cc6157ac", "indicator--4bbb9bf7-d830-4940-b99b-74355de8b8ee", "indicator--3e030646-248c-45fa-b246-295fe4cb6a9f", "indicator--2d0fcbe7-18b0-4f93-b87d-3654c8e3ecfa", "indicator--c5735b8b-c5c7-4326-97b0-2be9c8c6064a", "indicator--3f134cd6-04b1-4a11-ab3b-001468a0deed", "indicator--972e7f00-7b01-4e01-a6f7-6fdca04c799e", "indicator--bab3da0c-85c4-4fe2-afee-644596de0f9f", "indicator--5bd9f609-b115-4b82-9e44-5682af590c34", "indicator--26e59624-1dab-4a0b-9644-236fccd2ebfb", "indicator--3dcb7d71-7342-448e-a1bb-9adc36ed9672", "indicator--64553c99-7330-418e-ac24-e261c2b77ffb", "indicator--dc0393d1-f3a8-4911-9898-434ab1639992", "indicator--2fc7bd91-83de-427d-8ee6-8411bd7f77f9", "indicator--c793a1fb-d7e2-43b9-a321-e392d26e3eeb", "indicator--9a710724-0569-400e-9b26-f7275203554d", "indicator--5ac7cda2-7bd6-43fa-99a6-bc689bce0625", "indicator--917c5fef-adcb-434f-bcac-db5cb8fcd65d", "indicator--84d97706-6f8d-456f-b7b2-21a41361bcbd", "indicator--5de4d416-f4f1-4622-8c6a-d7bdda17d391", "indicator--f1d5641a-f58c-439f-9b86-a00d26da39c9", "indicator--68e2fcc5-71e4-4787-88fb-54208987cd52", "indicator--03f27891-7e5f-4adb-a8bb-25dde36721cb", "indicator--2eac4dc7-4aae-4e25-a3ae-40fa40680ca2", "indicator--a81e3caa-cdb5-455e-8b3f-399e050c926a", "indicator--e1246c45-0db4-48f3-a5a0-e680e83278e7", "indicator--68f55035-e521-4fbf-ba45-ac2400832872", "indicator--6122d52f-6a87-412f-8e6a-296910ae36e7", "indicator--68b892b1-d6d9-4032-a747-aa88e96d30c9", "indicator--185e13e9-f3d4-45b8-91b0-1770a4fda96b", "indicator--b78893c8-83a0-48d6-be03-f56c3eb68739", "indicator--72981e8f-482a-4a1d-b18f-a761806495dd", "indicator--536c5fe3-2e9b-4117-9b28-8f5e02a4df95", "indicator--8c84b2ee-c3a5-4a3e-aff2-4f203cb8a004", "indicator--76b3d87f-47cd-4a2f-aab9-8d1d2cea6de7", "indicator--5312bad4-23b6-48ce-b90f-5f5761a02339", "indicator--611c8fe6-15f9-40aa-bc72-1aa299e4b552", "indicator--df3dd1b1-c640-4ef1-9d32-49cfee7eafd5", "indicator--21fba818-f258-409a-a619-430f500cbc77", "indicator--076dda53-74ba-41b7-adf6-d074e8adb781", "indicator--113c1bba-547c-4bee-adeb-511a0e1986b7", "indicator--4b1b27d1-6902-4356-bdf5-1df13f426ba3", "indicator--da6c83f0-99b5-4316-bf53-203cb00971c1", "indicator--4664afb6-defa-40cd-a44c-4f811f51dc52", "indicator--c0d05070-9d12-428e-9ac3-bdd705d2c5b7", "indicator--c0343ce0-f948-4b6f-96c3-a84426d390fc", "indicator--65c15c13-d43e-4e20-ace6-fc0c4385b814", "indicator--f3f95946-09fb-41fb-b31c-571da8b58563", "indicator--826dcde4-6aed-4c9f-aee0-2ca005cc3485", "indicator--b6aa6313-e842-45fe-825d-f0d2b645f8de", "indicator--5f7de98f-c0d1-4dc8-9992-cc4ecf74f76a", "indicator--76a27852-e221-4e73-a638-234d51b98ddd", "indicator--c24bea93-17cb-488b-b06c-d5389f4ceb15", "indicator--3338511f-b869-4aee-9cb5-da30247bc7f2", "indicator--b564de15-b805-4df4-8773-13ff07ef6d15", "indicator--cabf4545-7315-4a9f-ae81-8216b96a7d37", "indicator--9d58b803-ab0e-48b0-8379-9071f6b8ff1a", "indicator--0a67baa5-a3da-4630-8e2a-8ac95a373755", "indicator--13ca2ed0-cd81-4104-8d4c-f9e9833a4fe1", "indicator--92aabb91-93aa-473b-ad24-08c62e13e690", "indicator--25b35b64-b243-445b-a235-04f22b3682ee", "indicator--62e1c48f-a01f-4cd1-bbbc-f58fcce9145b", "indicator--1913341a-1bb2-4fdc-be38-24b3c2ce6f6c", "indicator--0aa8a97e-4ae7-4a79-aaa9-e3724f40ee86", "indicator--7b080901-bbd2-490c-99c1-3419186d04ec", "indicator--ecd8292f-8388-492e-bcb2-bbd6f256c66f", "indicator--9a435826-58da-4e7b-bfe5-ccf3e4f568b2", "indicator--b843e087-6c4c-45d9-97d6-3307e5bcb60d", "indicator--f29d56a9-56c1-4003-aed7-ed92d0a1590c", "indicator--24de467a-16c4-4bb1-b41c-34e7f78bb2a8", "indicator--4ee3148e-25d9-40f7-8b8f-b39509ac96a9", "indicator--fc0dad3b-44ad-4834-875b-eb1a3ec60eec", "indicator--86e377fa-8c77-4b82-97b9-11845c3cc581", "indicator--430bd99f-19dd-4e16-b374-1f26279c0494", "indicator--b7bc45e4-fa29-4787-b408-7f6a271145b5", "indicator--b9eafab0-aaaf-4383-ad35-6c9a36f90e74", "indicator--c8baf84a-591f-4e7e-a583-0762e0d07106", "indicator--48fe4e00-304c-4f9e-a9fa-9a6734430e74", "indicator--bb3fd52a-54a9-4065-8114-e2f02ce5a63e", "indicator--b590e948-5587-4254-8e4b-1311fc29d15a", "indicator--f04ed3f0-1196-47f1-88ff-2bf894eeaceb", "indicator--209d9207-af8c-40b6-95d8-361b94f185cc", "indicator--cb086330-44dc-49ef-8f87-1a761a8f5da0", "indicator--48c1e1b2-5029-473d-814d-936bcd8e5042", "indicator--5fafc93e-a880-4898-8df3-4779f207ff29", "indicator--a0c44164-3683-47d5-9569-1d6f86d4ed9f", "indicator--fcd22552-026b-4488-88a2-abe57f928038", "indicator--b006f19c-ebd5-4aa8-94d3-ee64d9f14b90", "indicator--8be15f4b-f267-4b69-a823-a4db803e8578", "indicator--614b0312-f2f1-4c08-a728-f330ebc2fb81", "indicator--4c125fe4-3472-428d-80f8-4e17a2808fb7", "indicator--645d9d5a-98b4-4706-8f2c-2aecf3629aff", "indicator--d7367f80-c44b-465d-86a2-e28b016590dc", "indicator--19179ae5-db00-4227-92b8-4027ace97552", "indicator--15296c06-5790-453e-81b7-616a864b6456", "indicator--64707bcc-dfb9-4433-a207-fddf4993a753", "indicator--725b7a0f-0360-4ebb-b489-cddadb30ba2b", "indicator--fcdd0616-bcad-4b39-bd6b-cb6cc51290e4", "indicator--4e4f20d0-fe6f-4a28-9a29-eb1dac42f4f7", "indicator--e26af066-425e-4be7-815e-399ab6db6bcd", "indicator--294f21fa-16f1-45e8-bfa8-37de8bdee51d", "indicator--301a4166-46db-40e7-8829-d7a88ae68262", "indicator--7e62bb4d-06ce-4fb4-b305-96db7e68a2b4", "indicator--a40a4d24-d5f6-4cef-b8b6-7e0938422094", "indicator--ae4cfd5a-f9a8-4e08-929a-85f6a8121ab5", "indicator--f0eebcab-0d56-4620-a201-e655da8ef8f2", "indicator--bfa7676d-e93a-4d27-88fc-f1773b88004c", "indicator--6bbfda7e-4c6e-47e7-8d20-0c9fc1e242c0", "indicator--60172db6-1df5-4ac8-b410-9de343980266", "indicator--d3d2cfee-0ce4-489d-9024-9036aebbbdb9", "indicator--1a808b89-0d8e-4fd2-9315-1adc073403ae", "indicator--e39fe129-9cc6-4917-9686-cbd9407f6c80", "indicator--ffe7a383-156a-40b9-bd7a-ec017f00d145", "indicator--4215ff20-bc37-4d95-b3dc-aa86d54b0e04", "indicator--d4d62489-52de-4d8b-b516-f167eb1dec48", "indicator--d22dd938-e5d6-48ff-90a9-2c6f76084544", "indicator--508a7e1a-210f-4b2f-8515-2ada58f47ce3", "indicator--a5d4b6d9-f0f0-4646-8927-6abc200aa094", "indicator--57d1253f-e8e2-49e9-ab16-98a7ed7ba458", "indicator--5266730d-d624-4a14-8411-a2863c9b6249", "indicator--c30245f7-2568-409f-90c2-d035d586c9a3", "indicator--a69c5761-9314-40b2-92ae-ad9a467d2cfc", "indicator--606b5c2f-577e-4d13-a601-a6961c294d03", "indicator--1081dd43-a79f-4b48-90dd-45cdbd70cd83", "indicator--7aaf782f-436d-4eee-8cc9-fad2cc056e91", "indicator--ea419f63-ebac-4388-9fd4-c734665022a5", "indicator--96cbfa62-749c-4c05-8b73-b5d870ab2bce", "indicator--36a87599-6f76-4d5c-9398-83691ca7f841", "indicator--96bb005f-12f2-4bde-9a26-fcdf1f213dee", "indicator--94d1cb90-a077-4774-905a-21727e1ca2f0", "indicator--996eac2c-3894-4362-98e3-38ee5089e2b9", "indicator--362abb95-fda3-47ac-9b68-9deebd6465d5", "indicator--2f0ad06b-97fb-49a9-b7db-9091a8a3f7d2", "indicator--f9d538f1-7fc0-4082-bade-6bd9d88d7c45", "indicator--4eac56ca-5c27-4894-901f-88af0d446288", "indicator--b549a408-c471-49c9-ac85-b22c2fb7a687", "indicator--6a7f139b-cb75-4c53-95f2-e17c7cc2d3bd", "indicator--c04ce0b1-3c39-453e-b308-a696a029bac0", "indicator--3585c247-d0c6-4a1e-ac9d-484b2007edaa", "indicator--d761a6e7-4491-4330-8f7d-dec8df5d8fcb", "indicator--a2c6a967-8c15-417b-b850-c1408f9594d6", "indicator--be833497-116d-456c-b1c9-5f1c0b5b0603", "indicator--c2509097-cb54-4114-89d4-6828e0140275", "indicator--33f4da94-35a3-4683-a2c3-b93744c06dd0", "indicator--f02f0cb0-456f-454e-af98-be7e85c611ed", "indicator--384767da-aaac-4df0-9f5f-7167cc97cd2a", "indicator--a78b2538-39ab-4dbb-8452-e582bcd14d5a", "indicator--a8b742ff-22d1-40a7-9850-fac3286df010", "indicator--a93769f8-5f36-4923-bed3-44b3d1d5b6cf", "indicator--a39c5608-96be-4938-b21e-a11e54ec034f", "indicator--c46d7e9b-6b1d-40ea-b0ef-a7b6a885053a", "indicator--862ca2d7-1cb1-442f-808b-8cfeba958edb", "indicator--d0436ffe-a375-4a43-aaea-e748d254dfd1", "indicator--f360f0d8-347e-43a4-9a83-d67e8d32eb93", "indicator--6977cd18-64ae-4e5e-a0b8-9b5fe3e7a5ce", "indicator--5ceb4e07-cfca-48d3-b3f0-98bfd4fec459", "indicator--41fa94a8-6d96-441c-b410-cb70eb36d9b9", "indicator--62cfa4b4-b226-4617-90d8-5ace3e6acfa6", "indicator--39e3a43f-ffee-4a64-ba15-2782fed2e3b1", "indicator--b8f1c466-20a0-42e2-96cd-b4399d619cb7", "indicator--d73bdf6e-28cc-4cd4-9c0b-e83aa39d7825", "indicator--368fa137-010d-4a76-9366-02c14d29f28f", "indicator--250bb53c-2ba2-4ac0-82d2-6bfcd71f7618", "indicator--e683d65e-c6ad-474f-98f9-1c77b7acb677", "indicator--38b2e10e-1b6b-4159-8c65-5c2d9af23201", "indicator--2164a3b3-0ae0-4d7e-b896-296f2f7020c0", "indicator--2f5bdc00-0674-41e9-8b1c-181f9676047e", "indicator--6e2f2a27-566c-4b2e-9002-f9a1501fa260", "indicator--821f4c8d-31e7-446e-81a2-d132145055b4", "indicator--fbefe03f-ef10-4106-8510-4a0b60e222cd", "indicator--fc4129b0-477f-4b56-9d15-01bdaff0479a", "indicator--93aedd0a-539c-4c31-acea-03ee3d7aded0", "indicator--f34dc087-f303-4e99-9a97-1e7da85583c7", "indicator--776fd232-5715-4abe-84b2-c614f4e62891", "indicator--26f6749b-2df7-440f-946f-ed9387da77aa", "indicator--9ab88c14-31ca-490f-b8b4-bd77a4b668fb", "indicator--01873184-6c7a-410e-b03c-a8ac74a8e627", "indicator--8a7e22d4-3618-4de1-83d6-46aef3f0aa89", "indicator--3e4e356c-d4ec-4d99-9066-09a52fbf9164", "indicator--956a82c7-a047-43d6-9cda-2025a05152bb", "indicator--e7cc0fd4-5fe1-4eac-a459-74fb8e34fb44", "indicator--27a28a6f-b4f7-47be-92f8-d1d3421b30dd", "indicator--1927f64e-9006-47dc-ae18-fb1a5d070376", "indicator--55163347-54a5-42db-9083-92d66dd3dc37", "indicator--f3147d28-bae3-4439-b5fb-a3e0ba8906cf", "indicator--273282bc-17af-47a2-a0a8-2514a9cb1d22", "indicator--815f4e4a-f188-47b2-9e15-97308ed17077", "indicator--8b5a2165-2ef1-4183-a464-4f276ad658b0", "indicator--0a8e7294-d00f-41b5-9874-9c2184df1935", "indicator--65969de6-13cb-4971-8cb1-c75685f4df7c", "indicator--7ec11a58-c615-4a45-b7a1-81b2dabafefc", "indicator--130dca98-c55e-4f09-83a4-97f4a9ae22da", "indicator--c96eb0e7-7d0c-457c-b633-e4a0cc1600d0", "indicator--c0f7c18e-d66a-4f4f-9bc3-5b3589c81d77", "indicator--01b0a3a1-0ccb-42d3-9ac6-080173f54129", "indicator--85ac77b1-277c-4f1d-899d-18efcb3c475a", "indicator--e18947d6-b16b-4145-b35e-7d29b87c3940", "indicator--1a9c3488-3b39-4556-9641-12d2f8556aeb", "indicator--29d9c845-9f09-428e-9619-acc850fbb656", "indicator--6acf6b15-d3fa-4ae9-811c-225ac5c4aa24", "indicator--3514103e-6501-4f41-aa8e-f3d3fc16d578", "indicator--23e29bf3-9ec8-4d8a-8cf7-1b80d6f69d6c", "indicator--0c9e23af-4175-498a-9d5f-ad5309e041e2", "indicator--d5985082-59ff-4bde-a3ba-2cd6b830be08", "indicator--c3c0b3c5-4762-4038-af8a-6b882060b590", "indicator--9d10d41c-7859-4bfa-a38c-18e8345438ab", "indicator--af777798-ba9f-4d12-a0ff-a261ba1a848d", "indicator--65c79345-27a9-4baa-a51b-020029107e2d", "indicator--2bb7fa1c-901d-4c0c-af1a-a7f93c352bcc", "indicator--311d879e-8786-4fb1-acde-fa66395bf540", "indicator--dc615321-01d4-4494-aba0-0a937f7c8fb2", "indicator--ddc104b7-957f-46df-9afd-56bf767b2b70", "indicator--7c1a6903-901d-4422-adae-f7c6cac107d6", "indicator--38d15c10-262b-4bf5-bb9a-fc55e06c6267", "indicator--6d7ad19b-fac9-4365-8739-4b03006641be", "indicator--0a74ab3b-55bb-4797-bcad-0548bbf1e4c6", "indicator--e5db9386-cd72-43bc-a947-5c1b3740b1ab", "indicator--ca99717a-d486-4181-8b6f-d81cbe63e5ac", "indicator--60ad97b4-15f5-4ae8-89d4-e377d5445583", "indicator--b9498aa0-1239-4199-8d2f-45d5a1bf2be5", "indicator--8e1b3ab3-4d99-4f56-a322-359130fa2bdb", "indicator--ba9b5ec9-ea5a-4f84-b427-18a254b50af3", "indicator--59c28f58-f7e0-44c5-a39c-9e4cc8af3549", "indicator--d242d8d1-4783-4cc2-a0dc-70f3eeb27e1a", "indicator--cb2416de-b857-4a4c-a331-50f7a269f1c4", "indicator--f637c44e-71f0-4eb9-b9b7-916f414ef0af", "indicator--22cdc259-1a77-45b4-a172-1b99a91dafbd", "indicator--82674425-d63b-46f0-9296-03833004af03", "indicator--8f669e3a-0c92-4175-a624-34509e8dcf49", "indicator--9e2ba9de-e1f4-4a8f-be4d-499be2a169bb", "indicator--1728e166-b954-4b11-b878-a1f42e0fd966", "indicator--2b82abf0-13ee-4e8f-a85c-a3884851ef3a", "indicator--9a4b91f6-562f-4519-bffb-44831e98aa85", "indicator--7b24051c-f1ea-4b1c-ba61-e7cb40495256", "indicator--31ebc2b9-6a0a-443e-b48e-7d32d758e390", "indicator--4a6c04c3-5f03-451c-93ac-443b90dbb89f", "indicator--97d67f3e-1715-4e46-9006-7f383fa2684c", "indicator--0c3a4270-e800-421f-8726-ac0cb784551f", "indicator--ad82a246-c15c-4140-bc91-ca949e065e30", "indicator--a7e06ff1-13d3-4bf0-8a78-e3a72b999219", "indicator--8e1459f7-67b2-4c77-ac76-280f0d312f67", "indicator--b161d319-3c7a-48c3-99d8-4b09cd79fcc9", "indicator--9bb540c0-979f-4d32-a422-17ce649333b9", "indicator--81001b74-7227-4291-a574-d511ddc3202a", "indicator--b489b773-d660-4e17-a8a8-722cd6ad078e", "indicator--5070c215-79da-4338-882e-ec652ba45df6", "indicator--c6ab3ace-8fbe-4e0d-baed-296a169493d8", "indicator--8f2cf796-a688-43e2-b87e-94c99924248d", "indicator--1b575226-0ab3-41e2-8dd3-312542e4d50a", "indicator--4bdd1650-a5e6-40b2-b503-7ee1c8145525", "indicator--60b43e82-19cb-48cd-8209-68d855233ba6", "indicator--bdf4ad0a-e90d-4135-8865-193b37fb6349", "indicator--ebc9d6ec-67e6-44cf-b3c8-f771f97111e3", "indicator--06a08ef1-bae2-4419-82b8-d618b6677463", "indicator--91046b71-8f30-4a2f-b52d-ad582f9f9036", "indicator--2cb0a07b-b68f-4ffe-8631-4a7ff781bcdf", "indicator--5eeb95a2-80f9-4ded-97ba-91902b592724", "indicator--02dd03d9-c2ad-46df-9e56-e304fb9a98bb", "indicator--a7ef22f4-a812-4115-bcd7-f1088afa1b05", "indicator--2118d399-df6a-4cf0-9b4a-f1ffc2207e98", "indicator--cb16695b-9ab6-469e-a3d1-81e295bcbcd5", "indicator--e2686909-87e6-4901-a733-e0ee97b1d82d", "indicator--43920156-0d02-43e2-a0ff-0543fa0595b8", "indicator--42866a7f-1735-4919-a3ce-cfd37a6a6cdd", "indicator--4d0f2fe5-b247-454c-b800-1c4a4a5f344c", "indicator--a2911a77-d7e4-4413-90e2-d8fdc98c17f2", "indicator--86dbac19-b83f-42ea-b383-5a17d5224c11", "indicator--c424da28-7d77-4785-a755-132acce8c92c", "indicator--e7cf321d-dd1d-4e8b-b0c5-c54dfee6a48e", "indicator--98c6ffbf-a754-421e-85ff-d6c5ad5885ea", "indicator--091951c9-38d0-44b9-8fdb-9d777c58a211", "indicator--b349d0bc-4571-4d53-b69d-fcd48bb55be0", "indicator--6d01cd60-c770-4aa2-ab89-f72459679f0b", "indicator--6fe3446d-981f-4a80-9d72-2ab1f8e591e3", "indicator--f8db0b6d-6a25-494a-9694-2c893646a319", "indicator--7f50a049-32e9-4323-bdfb-77e27f66f08c", "indicator--d87f7aff-fd42-433c-bf37-422f9b0d25ca", "indicator--dc32dbc6-8ff1-45b8-b4a9-175e62190d1d", "indicator--35d15836-b192-4ac9-b5d8-adfd6caf099a", "indicator--a26a4df7-56d6-494c-9de1-3dd0e660beda", "indicator--db500a9c-d9fa-415c-b2df-27061e99b1a6", "indicator--735fd252-2f94-4308-8eff-52ddd9cb85c0", "indicator--03a97ff7-d4ad-45fe-b58d-c09a64f7fc83", "indicator--cc7b0e72-a5c6-4eb8-a8f8-b6e45c601d5d", "indicator--3d3cb3e5-84c2-458d-80df-7c7ddcc88afc", "indicator--5026b0a6-1157-4895-b33e-0d89441ef195", "indicator--96bfc394-58d5-4e13-9db5-872b7f6b8234", "indicator--85426e4e-d014-4651-985e-5ba18c1a74e1", "indicator--b4ee964e-7f03-4d57-b812-9084531e4625", "indicator--03c11aef-50c9-4bf6-b469-44446c2c5d12", "indicator--c92b90f1-8a77-41cb-9672-1982bee23d3e", "indicator--e4ce601b-bdb8-4922-91ae-d76afbc17239", "indicator--2ec6124f-14d7-4abc-b9fd-1d2665e70773", "indicator--38f9d31d-0fee-461c-acbd-21035995c6f2", "indicator--aec4b9bc-7031-4b7f-88f4-95e43945d061", "indicator--addda44e-7c38-4aed-9cda-627402bd88a0", "indicator--b7fc2aac-c8dc-49f2-9ffa-5fd286b392bf", "indicator--b206a642-d339-4226-86eb-39759d132bc7", "indicator--81e5092b-cc7d-421c-86b8-9d388997b0fe", "indicator--5499e85b-c6c4-4dcb-87ad-07533c18343c", "indicator--5d7177e8-9298-451f-accd-dc7a6b35b09a", "indicator--1f8e6604-28f7-4f94-95ba-975164c83e3d", "indicator--4c990365-d8a2-47e8-9848-339339332c8b", "indicator--ad0bb24f-a4db-43b5-9f05-453f33982a4a", "indicator--56e02171-afa9-4165-b836-1bb329053cf9", "indicator--4d15b67b-df4f-468d-869f-93326ea519f9", "indicator--29d25647-32bf-4c5d-b52e-43bf4d93c33a", "indicator--c145cbfb-7d3e-40a1-b291-cbd9e2f8551b", "indicator--a04247f6-d806-492d-bd56-8346976a21ea", "indicator--d0833415-4706-4417-bc26-bace4d69c498", "indicator--5f34ac52-2804-4f30-a24b-335e0f908500", "indicator--99bd083c-83b9-4e07-8f98-613b72deb16d", "indicator--c3ae3e0c-0e31-47a3-9bf8-a65a3cc72a54", "indicator--aa8162c4-6e07-449e-a844-4516ca703fb2", "indicator--5f239b1f-7210-4b0e-8639-c6a8d09abf07", "indicator--4f3c1fcd-27bc-4cc5-a4e4-e49a84e48d42", "indicator--4e025407-3947-4c6b-a564-1989016a0cf7", "indicator--c3043b0d-b528-49e7-bf2b-db47ce054fed", "indicator--fa84589f-7d12-4855-a2a2-208f90be97ac", "indicator--f0dc2db6-ad08-4968-95f3-27ba00b71334", "indicator--564e0fa0-05da-46f2-b4ce-3ead42743169", "indicator--d17b503e-a3ad-4c7e-a082-06f760d3a0fb", "indicator--5ac63dba-a207-4c53-9935-bd3f028d3954", "indicator--1870b9f1-933f-40b9-aebc-1c08fc89cd1a", "indicator--f5858689-28d6-4f93-a36d-2d10bbb92ac0", "indicator--4cb087d5-653e-4a73-a129-b01c227c6c2a", "indicator--4a3940b4-ec13-477a-9b11-93ba09650a2b", "indicator--e5492944-0352-4929-89ef-1b8f5d2c9cc4", "indicator--a4a7fd39-3bbf-4870-869c-94a5a4c5ad30", "indicator--74b372e4-8751-4a2e-adec-02f0e95ac103", "indicator--023dc1d7-e7fa-4214-8a01-6cc3fa1b54c4", "indicator--f6865431-fd28-4ced-8e90-1b4235984cb8", "indicator--fa514a49-5f75-4756-bdb5-03c85d64210b", "indicator--6ab97461-9fc2-4ff6-bc70-c2353dbfc1c9", "indicator--ae0346ae-6b02-4863-9ed4-0b7b930ff1fd", "indicator--6c70c443-b6a7-48f7-808d-e90d551c79ee", "indicator--87a1e57a-1496-48b5-ae4c-ace51b310332", "indicator--b2c06046-9ae0-48dd-b3ca-cb9356186240", "indicator--2067cb69-9fbc-4017-a9cf-c28aad562cfc", "indicator--9fec6940-0177-4cff-aff2-e581913d0c4c", "indicator--70804c59-34a3-4950-9dd4-849942a0c4fb", "indicator--ac09145e-f5c1-4678-af02-3a65fc39489d", "indicator--973c6fec-3a20-4d2e-aa95-9498f64556fa", "indicator--b1277547-5946-4413-ae24-b8bc15a9eb7f", "indicator--d8b8ad04-d376-4a0f-a4a5-f052dff723d0", "indicator--9df3feca-0fe9-44f4-9755-e41302205f77", "indicator--9f9c5b8f-53ac-4055-bfa1-6f37e81c12b2", "indicator--f38636e5-d183-4814-b384-bb8a68639692", "indicator--77aef39f-f722-4f5d-98cf-576c6bc0350e", "indicator--53c0b6d9-3a05-4718-95d3-8a6cde77a1cb", "indicator--fe850891-4da2-460d-bd9b-c7a3c1976963", "indicator--bf3bfd4d-0d2f-410c-9929-772dfc0eb10f", "indicator--db5b17d3-7419-4db9-a405-9d13f6820702", "indicator--f25a6951-8310-4597-89c6-9d97e3ce69cd", "indicator--55073050-2a00-4160-96f6-a7d7cc47a30a", "indicator--e6115214-3faa-4f53-bbcb-a7d8d1d41419", "indicator--d685b580-4b79-4891-870e-e77acec1a251", "indicator--d13d449e-5835-428e-8949-78a976b07517", "indicator--1028f1a5-62a3-4ea5-a3b5-21639ca7ac75", "indicator--9fc26942-1863-41d3-a0c3-f3050ef8b079", "indicator--555b903c-df70-4dfd-9f7d-aa73037f4958", "indicator--fa13f107-ae72-4280-b44f-bb943658a945", "indicator--4e325e57-1c63-4cd7-9be7-79832a2826b3", "indicator--19985d67-fe6b-42d7-b79b-3de31081a16b", "indicator--dcc8a5d8-d457-4e88-aa14-24fb49a29106", "indicator--6efaccbb-b31b-45b9-a22f-9754e86b79a3", "indicator--d9279ed9-2bd0-42f3-9a1e-7f7bab57e7d7", "indicator--c5ee6672-47e5-45cc-a2da-52f3b3d127fd", "indicator--42cf1109-7689-4d81-9812-bee91d25f788", "indicator--9537e5ce-aaf6-4696-82a9-30a7b27530e7", "indicator--0eea3441-8f27-426a-9c76-c1922d1462f8", "indicator--38e4b488-f91f-4250-8cf4-acfa587675ba", "indicator--0f70d547-cd64-4992-af13-330e7b5a3036", "indicator--68470118-8a7c-49a7-bced-fdc05b73e1ab", "indicator--3fa803ed-1b38-47dd-807a-c41da34c612f", "indicator--44863d6c-6171-4977-85c7-3631e7da44af", "indicator--82d9b666-3908-41d6-9a6e-1745b7298aad", "indicator--325564db-977b-409f-b276-8ae6d0b56724", "indicator--4f377cfa-6b0e-4fe2-8f5e-5df6d9354377", "indicator--57d5795d-9c1f-4b2a-90cd-ddc026f7c26f", "indicator--540b3562-ee86-4bb9-9b9f-c12218e442fe", "indicator--8112b106-06c8-4af1-b81f-2d2ad790a4a4", "indicator--e0ab61bf-3352-496e-b9ca-d89e4e3dcff0", "indicator--0b666853-9ed0-4718-8bf5-6f8cb4a7cf7b", "indicator--449fe2de-7d5c-4bdc-8a7f-2783d4e2a8ef", "indicator--8f736c38-9b78-4966-a320-7acbb633e2a4", "indicator--f116a8c2-0f2f-447c-beeb-405862b33312", "indicator--78caafe8-f839-462d-83d2-13ccfc95a54c", "indicator--e98e1971-2695-4d81-8e64-8bc338dc1176", "indicator--3e657146-6b8c-4796-856c-9f0d3b038744", "indicator--d8b654e3-d3d0-43a7-8162-8d7e85fdfd49", "indicator--a0b98b36-4933-4f31-8372-a0a201f99b7b", "indicator--a2d928a4-d68e-47ff-9347-3dc3f95c53d5", "indicator--7563d0a1-7d54-4821-bc23-873d9469ee89", "indicator--d87816cf-849d-497d-a259-632d1af46563", "indicator--c99369c8-7bcd-42bf-927e-f25132113b23", "indicator--9600ea2c-a27e-4fee-b803-ee1723e2fc5c", "indicator--6ffc479b-5035-4bfe-84ec-f71f9f92efed", "indicator--e5474f12-33b5-4855-8ffc-94f50d9856d3", "indicator--58cf5e6d-8959-41d6-b109-d12233b55fe2", "indicator--8d402187-348d-48dd-8426-6796ec83a15f", "indicator--4648155d-7f18-46a1-8f61-c6b431e25397", "indicator--b96c7ab2-967c-4b3e-ab3e-0b4371dd482c", "indicator--a9aa0b7c-378a-41cf-b743-69029eed82d8", "indicator--a6e086af-dcfd-496e-bd47-ace623707a2e", "indicator--0492cdba-18a3-4c78-b19e-62516268ea54", "indicator--b1fa36f4-1e2a-495e-9adc-a7374071586c", "indicator--7959065a-4cd9-482c-9992-1286858315ba", "indicator--7aa2d785-3be8-477d-8f98-603a60edabe8", "indicator--ff3f17e1-590f-415b-bc19-77e00a906512", "indicator--90357686-972d-4217-8f36-9313b49234bb", "indicator--4a40eb02-f98e-4bd6-857c-3b0edccc87c8", "indicator--11bbd4b5-e65e-44ae-a0cd-17347aaf607d", "indicator--8373fa85-4cd8-42f4-b7c8-8ac03647cc20", "indicator--f63016f1-5227-464f-819b-f60d3c3142ad", "indicator--76a567af-ee22-48df-a733-3e0273246495", "indicator--a5d333a7-6423-40d9-984a-bc86aaeae32b", "indicator--868fc515-5fb9-437c-885c-bb37804221b3", "indicator--8058b57c-b651-4ec4-bfe0-00ee4e4df219", "indicator--61cdfb21-fc51-4c39-a3e3-cd42b459c381", "indicator--e9c33a87-dca9-409a-8509-d1507b69aeaf", "indicator--69c0aa07-9f4d-425d-91d3-1e5f47a5e474", "indicator--041958be-9cf9-4063-b2e8-8bcd41ae9972", "indicator--408cb091-27e6-4a93-940b-6c7a6e45a000", "indicator--73295dd8-c804-4cac-b1c3-0f6a6f85b3e8", "indicator--f9f387e9-f1f2-4b32-9779-eacccc5d025c", "indicator--159b482f-9c8c-43a6-8335-d7164fadc778", "indicator--302ef587-7d0b-4fe1-80c0-8e65b4ce1ab3", "indicator--303ab585-a74a-4aae-bf82-d296121d4876", "indicator--b58ce9ee-b374-4c20-bec2-c0cddf88755a", "indicator--0ed68796-2707-442d-8b68-8ed8c32805e4", "indicator--7d996038-cc95-413f-a9e3-8d298bd2d0fb", "indicator--b80febc6-df99-443d-b080-8421bf0d612e", "indicator--b62af153-d556-42a0-949e-e542e5d5484c", "indicator--d7a3d61d-c4f4-43d3-98c8-1f78b4ca7d84", "indicator--9417e18e-ff92-42ee-8d7d-3cbe6a81416d", "indicator--62789fea-fef6-4c2a-8997-528733024576", "indicator--edd30d56-a958-45f5-9673-2b7b46218d46", "indicator--77f17114-329d-461d-b3bc-4ccc2b7646fb", "indicator--70aee231-6c42-4edb-b0c7-784505501422", "indicator--7843ab92-dcda-4886-9521-370021ca7d92", "indicator--408a6e93-b60c-4c8c-9428-0d4c75008a39", "indicator--60d2323a-0a93-4b0c-8471-1ad2b2e9f5e5", "indicator--bebd2036-2e20-4349-8198-44c540d08f30", "indicator--ff5d9122-ff5d-424d-ab22-7904fabf3241", "indicator--e477a509-d1b5-4944-8f79-19a6a78256bd", "indicator--78ccd054-c7e4-41e1-bfd6-ce429ca85b86", "indicator--9eae58c9-f93c-4886-82a6-b1d733136483", "indicator--92c54953-288f-4f09-a441-6aedb860c7ee", "indicator--bb866ddb-91ca-44c7-ac97-62b77536523f", "indicator--afdf1d5a-399b-47f1-96a3-713f69191898", "indicator--20071b7e-5b17-43d1-a317-a75316867abb", "indicator--057c4368-867f-43a6-99e2-ddc87612a44d", "indicator--1fddd314-6624-45da-8ca1-ef31d589ab45", "indicator--66f650c1-266b-4593-940e-f30892760465", "indicator--2055a443-2151-4fb1-be69-587ff23cfd58", "indicator--e44814f5-e285-4e23-b03c-0a3b38fb09bc", "indicator--2a626260-b69e-4ed0-a523-923a637abfe5", "indicator--bd4a71bd-70be-425a-8a43-51c28848b0ee", "indicator--4ed70eed-6c31-45c9-a3da-ca79c485c14c", "indicator--5ba0b27f-7e86-4052-b587-c7536d67899b", "indicator--ad00a288-dd2a-4545-84cf-037c864f4f9d", "indicator--257ea3da-14ed-4594-acd4-8d35521bd54b", "indicator--b7817adf-0ef7-41ca-ac66-aab51548edb2", "indicator--286f6369-d6be-41b2-98b5-a95034c4d4d5", "indicator--54c2fcdf-15f1-4852-a6b0-0709a18a6c47", "indicator--8f954fc4-5c13-4f2a-b4d6-bd183d061272", "indicator--d857d9d6-e20c-4f3a-9400-304937ced604", "indicator--2521b374-08bd-420e-9c0e-65df4f447b88", "indicator--5cea3c2c-1be2-411f-88a3-1e9a90ab51ff", "indicator--77296503-39dc-4875-8aca-7b02a893a85c", "indicator--e17bb2c0-faad-4e1c-b6a1-492facf22e5c", "indicator--f43db9e7-ad7d-4d2a-84d3-ca9f54efbca4", "indicator--28d9e5b5-af9b-4eae-b404-09199509fa5a", "indicator--02a12c6e-1c2f-4e0c-80e2-100c937b5877", "indicator--3ca5206e-30e2-4df3-a2ed-d27d31fc1daa", "indicator--c08eac1c-f900-4d5a-9ad5-081aa3891360", "indicator--0c2295bb-d5bc-41a3-9cec-f1b6c351f9b6", "indicator--56999f12-8fa2-4614-b610-c6afb4a69813", "indicator--c0186ae8-2da0-4b50-af50-824aae77afe8", "indicator--4df34867-73bb-4393-8186-6d7cc89f2838", "indicator--3818f96d-38dd-4eb1-898d-900cc5744cd9", "indicator--e0ef10c0-610f-4802-b11c-57fff88cd459", "indicator--4d75fd25-97af-40fa-a6d1-a119ecd95768", "indicator--ebda44f6-3bc1-490e-ad5f-37ccdf519388", "indicator--d36f7f3b-e8bb-41db-9871-52244ac43adb", "indicator--579f16fd-24f6-4069-880d-fc5f80479a89", "indicator--aa92dbdb-87a2-4de3-bbf0-0bbd530c6a3c", "relationship--fd883557-e8ea-44b2-b687-5b535993e912", "indicator--c3c2d638-2d89-4344-b476-979f8370c4d6", "indicator--4a3bf702-678a-48c9-b4d4-0ee155e99c77", "indicator--d0d0e1ff-3d96-4db3-ac0b-2e63f056aa06", "indicator--fdcc0a70-b1a3-407d-9220-426f3cd8a574", "indicator--f9bf7b49-fac2-41a4-8e6d-1bdc3760548a", "indicator--1d2e1b96-2af9-4bf9-9427-9e9699385fce", "indicator--df762daa-c950-438d-82e0-12948c14ac7c", "indicator--7d24895c-3832-4451-8c66-6e37ef122188", "indicator--b1619049-665c-4f27-be73-7052d0a9caab", "indicator--15ebac60-e4ab-4cf1-b95e-3f2930bba4c3", "indicator--306338da-6bd6-429e-94f2-32c78025d8ed", "indicator--dfc168d2-f8c3-49c4-9a88-795d7e81b881", "indicator--a47cf92b-416c-4de8-a984-92a0ab9c01df", "indicator--1d0f37cb-95de-406a-b4de-b05077dbe540", "indicator--f8c2a6a3-533c-410b-ba5f-81121b562b45", "indicator--bce44922-4fd0-4da0-92c8-0cb49d17b7d9", "indicator--05d688ad-6db1-4349-9738-4934b631af01", "indicator--2ad3f453-fa8d-452d-bda8-84c6e0676bd4", "indicator--a7d654af-17e5-472a-bb17-ee4ec421627e", "indicator--a79456d0-6a7e-4806-bfbf-346ba0b118c4", "indicator--9c79dbaf-4f9d-4e67-9de6-249a69ec189f", "indicator--cc8aaa0a-bfee-41b0-b22d-aea2ecc42e0c", "indicator--8c93b3e5-495c-47ac-a8f6-5fbe28bf5d13", "indicator--b30e1fee-4111-4e3a-98ce-9daecc6a4d49", "indicator--dffa901b-64eb-44c1-b8f3-282c9e7d3ef8", "indicator--e00938cf-e5ef-4b54-a95a-7ea96e095f64", "indicator--ec4300ef-a649-4f8a-9f7e-edd1ce2cf2cf", "indicator--6342b90a-5002-464f-9231-52d1fe726382", "indicator--96b36272-264d-4011-8e26-ffcf59291da5", "indicator--f2ae6549-ddcf-4464-be07-b5b88c6e14e2", "indicator--96d6e3e3-ad4e-4aef-a1da-ee347f7aeaa4", "indicator--ecd2640f-e138-4a1f-80ce-67c2b6d6aabd", "indicator--22ef6718-f94d-44a4-9a40-137f925388e7", "indicator--e4d420cb-838d-4d54-8f5d-7080dbfaf800", "indicator--3022655f-1ada-48eb-9988-41d1e60974f1", "indicator--20beb0d9-f1fd-45e6-ae67-036555e6a808", "indicator--968fcd1d-1f22-4033-8a63-0c70d6c51017", "indicator--bebf2961-436c-49d6-9232-eba1fe0ae602", "indicator--e778b29d-e9eb-47dd-a7c3-5f9484937a2b", "indicator--aae00600-ca99-4470-b9f9-89525667d95c", "indicator--5a47764e-afdf-4dca-8939-97abdd2e852f", "indicator--cafe0665-089d-4dfc-875c-3ce4f5797739", "indicator--51374765-cdfd-4eab-aa0a-4a32a34513e1", "indicator--b647ab28-0f15-4b1d-8c9a-43e996514cd2", "indicator--f8ba86ee-4a32-4678-8d9e-4347867674be", "indicator--b2cf58a4-2e26-4a08-a5d3-699fcd84e44e", "indicator--fa17c77b-24a3-4762-8b06-98d8f3cd9d33", "indicator--67eef342-1fe2-4ab0-8edc-1ff1580e2f75", "indicator--6735a37d-86df-4a67-9702-c98ef076d063", "indicator--4124d398-620a-432a-8a70-a2c3bee27ec7", "indicator--1ce6c28f-6e76-4495-b816-86371edf69dd", "indicator--640de68f-b390-4806-820d-576811a14fcf", "indicator--a17fa891-a17e-40b9-9d4d-b69913cb3098", "indicator--94c87f7e-b927-40f9-8780-647ca33a3c95", "indicator--e4798d80-4a50-4fd8-b404-2526fe7845cf", "indicator--0921d81c-34ac-4492-9f04-c811c0e6ee2d", "indicator--b857c3b7-9740-48d5-80ef-614c7e6ce502", "indicator--a1f67bde-d5a4-47e7-8bff-5b836087702f", "indicator--42d6546a-0bf7-4509-8764-9310f9545c96", "indicator--80f7fd7f-de96-42fe-bcd4-1359955552b4", "indicator--0debd781-dd65-4ef2-944b-74c99a632bd7", "indicator--c7595028-d56c-4579-b7e9-2a64067b315e", "indicator--8538e063-ed04-4ddd-a59b-3c039addb2b8", "indicator--a668d082-3204-4f21-88ba-7f319d71f4c9", "indicator--da40a234-7c6a-4d86-847b-3f5f1f15cf84", "indicator--40243dc0-47e2-472d-8df4-894dc48c78c1", "indicator--2ee0a32c-4e28-4b44-985e-3a988aec3d0c", "indicator--372af996-07fe-42d1-a2a2-5c445cc1a1a2", "indicator--9697273e-7cb2-4efa-8413-ebb0591c791e", "indicator--45345ad6-f2ab-4123-8462-2a2b96b16666", "indicator--541f70d2-3eaf-4916-a0f9-80c0a373a198", "indicator--4b9316ff-50e4-4190-ac3b-eaee25708791", "indicator--88ac4ef4-3b26-4826-ab24-41ea32d4c4d1", "indicator--4aaa0ae2-36bb-4252-81ce-74ea1eea7907", "indicator--e0709a19-b52a-4cbe-aec5-452537e148b2", "indicator--c620202a-14eb-46d0-9e8d-464345e4f092", "indicator--4be79a68-dd73-414f-8491-a21ce00db3c6", "indicator--6c9d2f0d-5181-426a-8efa-03d8a3b65ef4", "indicator--39c0d430-9148-4c5e-8562-6a8f54826fef", "indicator--d9f9518a-993d-4cdf-8445-77fd3499ca49", "indicator--c783bd96-6427-434d-984a-f48dbd38fe6e", "indicator--4e7c03ca-5b72-4a54-bbb8-d5217d8284f6", "indicator--a6bf6bcb-6ae2-4bfe-87b7-e02a8c45c364", "indicator--adfa22dd-2d8c-401d-ad18-8461568c3167", "indicator--4c466c1d-4fa3-4e8d-86ce-895a6c6baccb", "indicator--141040d0-f8e1-4d4f-95e0-800aaf7cef5e", "indicator--b3858e71-7775-414b-9a2d-57554113662e", "indicator--8dad2b85-e552-4f24-8aab-bcd9f5d49578", "indicator--203e08fd-f398-4d83-be86-5f15a459d8a1", "indicator--e07a1ac5-6295-456d-ad06-cf3418254f31", "indicator--c77039da-b82f-4513-8658-fc3d9d26b5ed", "indicator--587fb66a-6609-4b3b-80a6-62d48df32872", "indicator--846d825a-add4-4c86-a5b0-42eabf6446f2", "indicator--4e85cbb0-b709-4d0b-9259-2e4222314b86", "indicator--b5b44651-9c8c-45bf-8c96-e76f84dd92f0", "indicator--b92990f0-6647-4a4f-bcd8-1ab2d373d036", "indicator--e8f31c97-3691-4350-9b2b-7e1decdb68ea", "indicator--02ac6b4a-c956-4e89-9a71-c1f60a908c24", "indicator--1d2bd901-8b7f-4a94-a853-605b557c926f", "indicator--4617b771-fb92-48e4-af99-901cd9c76aaa", "indicator--3fe89642-c15c-407d-a35d-083cf7c959e8", "indicator--660b1e09-2037-42cd-80b6-0b6ccd2efc51", "indicator--495de675-ab9c-4a21-8aad-9030687dca4c", "indicator--cd6c9cdf-4fb4-4ce4-aa98-2b8b47ef7299", "indicator--74e5102e-0fd9-4285-b15c-c40f0e86b158", "indicator--7ecfb817-4e63-464f-92a8-ceb5d1c2e17e", "indicator--8ca93f93-4e66-41a1-bf12-e928af692da8", "indicator--eb7674c1-6493-45dd-a1d0-62aa533070e7", "indicator--4bfc8abc-7101-41f4-8147-2439ba5826b8", "indicator--23535343-09e0-4e16-85ad-6451482aa1b0", "indicator--466ff950-8d53-4bcc-b2c9-d8449f29f037", "indicator--8744a7f5-e0fb-4741-bb71-657acab35711", "indicator--3be5d67d-70c4-42e6-adad-9213dbe2f33b", "indicator--e4d0d635-f943-4d9a-bc1d-0046a9a0f95c", "indicator--1347e518-97bc-488d-92a3-281e2a1461c6", "indicator--20070038-4b74-43f1-8859-bdc10b8a28bc", "indicator--cb8ff751-0ab1-4d4f-bbc6-d657a09e2e56", "indicator--c000df9a-66cb-4127-8e63-13722e71d631", "indicator--63f32b2c-c51f-4582-bd98-a610f4edba2d", "indicator--728de72b-10b8-406e-b9e0-dfa310c228b5", "indicator--e07805a1-3391-4281-bde9-3a57e30fc6b1", "indicator--d3c028e5-609e-4c01-8e2a-f287c073ec58", "indicator--e29f2e62-a4de-4d3b-9628-6ffae3bca880", "indicator--76490f34-d9f2-4065-95d4-6d95d6128c8e", "indicator--504cd38f-f44e-4875-b468-21c57c978c44", "indicator--dcbbbf0f-dede-4d71-aa3e-4e576886e7ff", "indicator--8e5f97f8-e435-4583-ae8f-88657c6a6d7b", "indicator--d33c8f4e-bad5-4eda-83f7-288282a148d0", "indicator--a1b4741b-47f6-4af0-8e9d-3ce03cb3accc", "indicator--1b474c47-0f15-48e8-a824-8c628a55f1ef", "indicator--5e27565c-da77-4f51-842e-8ae9e6939406", "indicator--e7bfa678-5cd7-40e7-9f0e-51e922ed5a0e", "indicator--2a65ac10-436e-4c28-b743-5fecc1e616bd", "indicator--c92c50a0-2a51-4808-81d5-42b672c863ab", "indicator--bbdfbff5-aab8-4024-9ae1-bf64e08bf204", "indicator--9bf61bb9-7a5a-49f0-848c-0d172d7dcc39", "indicator--66d9b0fd-691c-4158-81d7-2a2a2608a611", "indicator--d3ca82f2-7402-4fa4-9e42-594259511c8f", "indicator--5eeb36c7-969b-409a-82e8-a5befed733aa", "indicator--8e3d9353-1295-42cb-8260-ca916528c045", "indicator--e538f5c9-d349-45a3-ba8f-feb5bef31b99", "indicator--e50c347d-3f5c-4976-9ed8-2e34be30faf0", "indicator--55f88781-8a7f-48f3-a49c-47b40988dc4f", "indicator--8da9b799-1c24-4b64-9ae0-fa48b2a67207", "indicator--9dbed78f-1f25-4c22-8c28-d74fdea81a32", "indicator--429f2ddf-97c4-4da9-8073-452b52eac828", "indicator--0e30f90d-5c61-4d6e-b93b-5c1e62dd04d3", "indicator--de344aa5-a385-4efe-8fb9-217be2cfb247", "indicator--3463a1db-1d2c-4179-88de-45ed17908b58", "indicator--1906eaa3-8779-4317-866f-879767e05b88", "indicator--5e7eda8c-177c-410d-b1f3-5591789f4a3a", "indicator--01669b7d-3aa2-4aa8-bd25-9bf14698c9b6", "indicator--d6b48cc0-54a3-4d6f-8c6a-1fb08b138f80", "indicator--b7b295d0-2b8b-4a8c-965e-5935626e25fb", "indicator--93a06384-38c3-4cbc-9404-b0f95ca33ae3", "indicator--3315a886-cd5c-4c7b-b829-b94c4ea0b0b4", "indicator--74f6134d-af53-4dfd-9c69-5aa479af3ed7", "indicator--8e9decc9-649f-4987-8220-1c8aae98587e", "indicator--b3c150cf-b521-4b60-9d5b-13f34a0107ed", "indicator--44741539-40f1-466f-9f26-5807c9788135", "indicator--d676aaa0-e408-411f-af62-c77a21a575d2", "indicator--8ed62d53-ecbc-4748-8686-5d3fa2bc14ae", "indicator--6d428c02-f89e-494b-869c-4dad9cebba1f", "indicator--9795a185-c287-4633-9042-52f6972914ac", "indicator--10213363-c9c9-4f68-bd12-b98f29c68d64", "indicator--b4e897cd-8a10-4372-a3d7-b2c0059a16a6", "indicator--f6305fe0-1bcf-4d90-b7fa-85947bc243b4", "indicator--afe2cd49-6c64-4963-8107-ecfa44a871d5", "indicator--321fb32e-42a8-4646-ba15-9af401361d60", "indicator--0abb51e9-723b-4289-b99c-c77de53143f8", "indicator--e69a6874-63d4-4761-bc68-ec46f279e04b", "indicator--f806e07c-821b-4231-a826-59a4a66055d3", "indicator--0ed0b89f-b6ce-4737-b23f-4fa86b0f1385", "indicator--588a86c6-a629-4797-b12f-e1f7828dccb3", "indicator--548eb53e-4495-4f7c-b342-f501caef5acf", "indicator--ae90cf52-c399-4da7-aaf9-27dd6bfa7938", "indicator--a8cba91a-9d17-4407-91d6-cefded0e8f0d", "indicator--9d065aa3-8131-4684-85e8-258f2f04a631", "indicator--e80a89fd-f87b-4a44-a2a7-52fa611557c8", "indicator--7ee00b78-239f-4859-987d-6505cd93200c", "indicator--5b404b6f-2a8b-424c-935e-f729ac18c90c", "indicator--9068fbc6-a8dd-45c7-b098-387b7e9efcad", "indicator--c5a8a8ac-64c6-4d78-974d-ab1b0eddadcd", "indicator--0153def9-b180-48bf-a4a0-758eece6dc4a", "indicator--dc324a39-5136-42e5-97ed-0974cb0de511", "indicator--e4d3b469-01c5-4055-9cd3-7a637bf0e577", "indicator--e6d3a183-96b8-47cc-8a18-a25e3b57c5d5", "indicator--1d74088f-13bf-4eb9-97bb-539629656424", "indicator--7eeb0d4f-1b72-4264-893a-fba5fc7f0361", "indicator--00c3848f-bdbc-45d8-970a-c64e1d97c215", "indicator--751f1d92-1994-43a6-a515-c623b944f7f7", "indicator--2f459b98-70e8-4bfe-8a57-25d9a913b1e5", "indicator--47008558-1421-430d-821a-bbc58f6ed7dd", "indicator--7bf1df29-0bcd-487c-b616-69c75ef7b9ed", "indicator--bbcbdf77-f1bd-4b2a-b382-e94f3e3ea8b3", "indicator--097c4d86-2f93-4192-a442-6dd434724a1d", "indicator--7bee79c4-bd04-4e9a-aaf0-a17fa0394092", "indicator--f1162d37-17a1-491c-93c7-b7b5cf46dbbf", "indicator--96358761-f20a-413e-9206-7c11e51e68f6", "indicator--fcc00776-ac21-43cd-a6b8-6c630aef40c3", "indicator--5c3f3ae0-7189-4865-821e-cf60e1dad55a", "indicator--135f8102-78f4-474e-9d30-f647fd22e67d", "indicator--f5db96a5-8904-4d47-969f-06850daf352b", "indicator--0ab73a6e-5cba-4793-b68e-b98eca50737a", "indicator--fc68a6d9-7c04-47cf-be6b-d3036776ad14", "indicator--4879f5ab-2cf7-42de-a0e6-1d8be111ce50", "indicator--4128b201-b8fb-4bae-9876-9cede373d10a", "indicator--2363aa8a-f146-41a8-9e4f-ef96c8bf25d9", "indicator--6d1b3cb7-0542-4e25-b47a-2e3f0d0ea42c", "indicator--7501cbe0-833a-4076-b9ac-1cce08645ccc", "indicator--01763189-e610-4a18-9244-7ed71cd7acd7", "indicator--32f4e40b-9ecf-4a71-b0e8-f91aff049d55", "indicator--499ff6ff-f54d-4eef-ae2c-2e35bac1c814", "indicator--e6a94594-703d-491e-86f0-626233ac5196", "indicator--cfb772e4-91cb-4fcf-b5f4-7ea028df41bd", "indicator--d5781084-914d-443d-8679-3c9d9f8263e5", "indicator--9d9b9b8d-c452-4dc8-9a3d-3024b707ec92", "indicator--2f1c84e3-164c-425a-967e-01222a9608ab", "indicator--3d1faf13-c698-4a82-8567-4bb38e4ceff2", "indicator--6124f3c6-1582-4178-8466-77c8d80235a2", "indicator--b362a21d-62f9-412d-bf52-89f1867b8514", "indicator--23cee885-c6fb-437f-996f-e1814b5648ec", "indicator--22b38666-c214-4bc9-907a-b64d4cc46a4e", "indicator--e43fd8dd-3de4-4141-b1b9-a83d291ce112", "indicator--7cbdd8ea-0781-461a-8820-3d14124da1fd", "indicator--894b7dd5-5623-4514-891d-c03aca675b14", "indicator--752437a8-1cb6-4ad5-8251-45834ece2d7b", "indicator--66a56d15-fbf7-408d-91ee-805649cc1242", "indicator--cdd0c38b-9a1a-4f9f-8570-b8a14ad4eded", "indicator--a3c729e7-f27c-4d1e-ba79-b0d13933da23", "indicator--ea9a0c83-8e1c-4612-a8e0-4dbeb5005342", "indicator--7f2707bd-513a-4a31-9b8f-6761d19fe425", "indicator--f3a6d5d1-5dc0-4329-984c-c17b7e47848d", "indicator--094477ef-34d7-4525-81f6-11ce90e12e92", "indicator--dc30cf30-cbf5-445e-b771-ed2a79c7a170", "indicator--34083029-c19b-4058-a0aa-54dc7aa27203", "indicator--34d63f02-dae7-4880-a975-75f6f9287f21", "indicator--960eebe5-ca70-419c-8066-982f38efe396", "indicator--4eac9521-ff4e-4630-a556-9fe3b8044e09", "indicator--32f4adaa-c5d9-476d-a246-eb185399e395", "indicator--68853dd1-6adb-4e77-8607-189759611324", "indicator--9ebe835b-5fdc-48c3-a1be-99f58c8c4849", "indicator--39ab38c7-a6ab-4f59-9716-50118f54a879", "indicator--5931c1a0-a86f-41e7-88a5-2919d511100c", "indicator--08bb0a7b-7522-4897-9854-15c24fdee9ce", "indicator--7401fbea-4f2d-4e5f-bd9d-7832eb20681d", "indicator--da7498e5-d010-4be0-b5df-062ca5f2810e", "indicator--a7704eaa-3923-424e-b8ec-35844f3f0fde", "indicator--39f74523-1849-405e-a020-a5a80e039879", "indicator--9c8dd781-a0c9-4ce0-bb7d-27faad04efa0", "indicator--5cee498e-f701-4565-b11d-e098a1183d62", "indicator--96436c9a-b7ee-40e0-baec-6a2b4ef47087", "indicator--7f3cc81a-5770-41a1-a012-452028307fb7", "indicator--e8ccfbf8-f7e2-4915-9920-751160c3434a", "indicator--15d1161b-a307-4c9f-bb7a-2c287eacf3dc", "indicator--1b4765a3-ba2c-470a-84ff-853af1dbe207", "indicator--ac0acd33-3742-403e-8c32-408c4f1dfd67", "indicator--00c0e8be-70e8-48e2-873f-9725ffc3b92f", "indicator--64a48e6c-5092-4e19-9d5c-165dcd5c297f", "indicator--d0e4e916-9739-473c-a4d0-a7a8da47fe83", "indicator--4048047f-a4e9-41d2-b6d8-bf9c538891e6", "indicator--1274ef25-1948-4f6f-bfcd-c486379c40cf", "indicator--2f1b8c70-f6cc-438d-a977-9fd6f92e39f6", "indicator--f1d1597a-7d2e-488f-928f-957f81c12662", "indicator--827d11ab-1d30-46d5-9f6e-983907a44083", "indicator--ca1d15d3-76d3-446c-b2c8-0a25aa2a953e", "indicator--5d5767ff-8579-487a-990f-6769d57afa9e", "indicator--c84d29f7-abb7-4477-a5ca-320ab6411415", "indicator--3b89e519-2f96-4ca6-add6-992197dc894e", "indicator--bb497f08-91a7-4ed8-9bd6-40c367a5fcb4", "indicator--33451ddd-da5a-49eb-bc69-885ea3893a5a", "indicator--418a1a24-ddd5-4f9c-8db8-b9936b7da3f2", "indicator--60c5401e-8c2f-4cf0-99e9-da5892c170b6", "indicator--c6927fd3-0e4d-4c69-a70a-5aeb7d28ca30", "indicator--2bb58ce8-7204-4f6d-857b-db0b7cb307dd", "indicator--c9f51b53-af8e-460f-a564-5c72f5deb470", "indicator--3851a00f-d421-4881-9485-9a8e5494e1ee", "indicator--1d5953ca-6e2f-4d39-8bad-f08dc7f45475", "indicator--87c9dede-7589-4394-8126-31d824a9d2fe", "indicator--ca3a86af-8d9e-4aa2-aaa6-dcce4bf43ec2", "indicator--83d7c414-77b0-4bd6-96cb-89204c57c424", "indicator--5902559a-f83d-46f6-987f-a8dcedc88eed", "indicator--f8538704-975b-45ab-bf8e-8ef845c69e1b", "indicator--49c767ef-cddc-4459-8abf-a69675857e0c", "indicator--ade394d4-c141-47f9-bf71-240483ca3542", "indicator--043c25f2-cd95-4d76-bd0e-c27f4f131e2b", "indicator--a2527d11-0e5f-49e5-b4c5-937beaba348b", "indicator--5a7bed36-8dc7-4ce0-af43-c24f43a6f895", "indicator--ba9aee2c-bcbc-4ad4-b5f1-f86c576b9f8e", "indicator--11c1eb43-053b-4f42-a03a-6ac8d15621ac", "indicator--aa1fdc93-c67b-40df-a992-fa99bc13372d", "indicator--8a22ec7e-59bb-42c7-9685-395f415bf8eb", "indicator--c86b98fd-9af4-4791-9408-78369de0f8d0", "indicator--5394af17-db35-43f2-95a3-6b852068af86", "indicator--73d14829-40c0-4eb3-99b1-c87eb1eba932", "indicator--fb33a1cd-259c-4e82-9012-6c3561d6026e", "indicator--cb1c8842-5bfb-46cf-a287-83d17b1de97d", "indicator--8276f515-af66-43fe-b0b2-bbc95f9ceffb", "indicator--c46947af-67ad-4f65-ab18-0e4960a4f1ca", "indicator--b94364f6-9527-460b-9e3e-638ef5c3262d", "indicator--50b00495-ca39-4f3b-9c61-d98103968cf1", "indicator--01ab7789-3f72-4738-ae8e-f681d3021814", "indicator--638ba679-bda9-4f1b-90b5-bcbaa0d047ba", "indicator--bbe49b45-ae46-49e4-bb57-bb16025e3fe8", "indicator--c238a266-16c2-4ce8-808b-1f9125a978b1", "indicator--68447d37-96b7-4ae1-8b81-3c7770c94934", "indicator--a37b943f-5d1e-45ad-abdd-9e188ba1bc81", "indicator--8196eae7-a2d8-4054-a47d-0375cf304a55", "indicator--9eec0735-485c-45f4-a167-519fcda83b6b", "indicator--2d9f8028-1656-402a-9439-5fc7f53bca46", "indicator--571c0a8a-6d0e-41f5-9a1a-22a0a0a15d92", "indicator--874be406-9817-4326-8e2a-dd679702d421", "indicator--6b739e50-fb75-416b-8d8f-4bc84fb06f7f", "indicator--cbb32a6d-ab02-463b-8025-f8b5cd0371e6", "indicator--ab8d1179-5432-45f1-ab0e-fffe6f3033fe", "indicator--57c4a983-dbde-45c4-9395-1b3dd057e800", "indicator--8efed5f0-9c3b-4f9e-b6d6-5ea9eaf32dd7", "indicator--1a41b1a4-ac6a-44ab-a503-83843200af48", "indicator--6c17579a-1d8a-40eb-ba2d-4f6053a14997", "indicator--bd448b18-f4bb-465f-9240-01c77cb71f7c", "indicator--5e47e968-2d5a-431b-9ed3-087c843e8532", "indicator--b1119f61-992f-49ec-ab2e-5e8f74b94edd", "indicator--95fa7cf2-e995-436d-ae29-e3abcd2584ae", "indicator--0ac7e24b-e9cd-4469-939c-650ae92eb84b", "indicator--7d1a5e64-b949-478a-8558-c37417415e7e", "indicator--8acbe812-1c88-4db8-825b-6b34fd6723a8", "indicator--9e9e98b8-2ae5-4744-b575-43ddd79d7695", "indicator--5a5755d7-c0dc-49c2-a4cf-dc02b28a28b0", "indicator--edd19d2c-ca39-4adc-bf57-2687b2171736", "indicator--0ec6cad0-7df1-4a9a-9825-ae205cdfaeb6", "indicator--3edf0b16-193e-4c80-9504-d63b98ce50bf", "indicator--e4d16b28-edb9-455e-85aa-ac61d6cc7946", "indicator--2c307c60-3244-40b6-b08b-a7e984de1cdd", "indicator--e2f900c1-ce68-4984-b320-bcf3dfbe21df", "indicator--e62b3bd7-6b08-47c3-ad8b-b5fc65c48a56", "indicator--c971190f-3e70-4f2a-ae5d-98ca91daa128", "indicator--d49a1aee-8d12-4265-933a-2c371a1c7bf2", "indicator--3e16eea8-e528-4a28-91a6-d5101195bf65", "indicator--db7509bf-48f3-46c7-96b1-3c46f42f2cac", "indicator--482618df-3f31-4d2c-8b4b-d161db7a348e", "indicator--2801b3ea-716b-4d56-95a9-f23d8208db3c", "indicator--8bb94978-3222-4066-9be5-b64783a070cc", "indicator--e59620ec-9e30-4171-9ae9-cbaa61a9e460", "indicator--8d4f45fd-149a-4ae3-87b7-1b02f18661d9", "indicator--e172ee35-f6c7-4c2a-8b3f-f68fc13e5080", "indicator--7750c5e1-eccc-48fd-bb2b-13b141822666", "indicator--5ec01b2e-d561-442d-9466-3522cca8c32e", "indicator--c0404413-530e-4b9f-a7fa-959f6f649a48", "indicator--09104cb0-5121-4991-b02e-63d47e167ec5", "indicator--0baa56ca-52b4-40f7-a1af-b8c0b3b725b9", "indicator--006bc123-00b7-4525-a916-8400164c10ed", "indicator--0a5c9030-4fb5-485e-9457-9ffd5904fefb", "indicator--77c80bb3-dc38-414d-8486-20cfb60e1676", "indicator--91457e78-5227-4daa-9f14-2567e0b0c9f6", "indicator--1c43aad7-2c7c-416d-a049-d953f474cd1e", "indicator--87cb8d26-189f-4cd0-8f3c-c0c95c85dbe2", "indicator--c7991afb-8b15-4995-aede-8899b2611a0d", "indicator--5bc89877-ea7c-4c1a-8135-28e01a11fe1f", "indicator--40e86424-b965-49ed-8eab-1a237ee11bb1", "indicator--260e8e49-0c8a-407a-af35-7fdbf47804ef", "indicator--929dd9b9-8890-4989-a6d1-5cd25242a881", "indicator--957c89f9-1577-4ea5-85ff-ce902da64a66", "indicator--dbe8b96e-f484-4acd-a891-2a874edd760a", "indicator--ac13456a-3c10-4e90-b7ba-4118a9896fd7", "indicator--b4a6be5c-8b72-4865-8b60-b4c3b6a29379", "indicator--635bb491-2993-4c89-a414-c079a442f8a8", "indicator--32e0c2fb-7262-491b-be76-5492063e1551", "indicator--55e65a08-3638-455c-a6c4-79ab2b4ec1b5", "indicator--3c1f6f2d-2d99-4064-bc49-48f848392d9d", "indicator--d586c58f-2ae8-4816-a681-32aa942cb318", "indicator--35a98c93-7dcf-45a4-81b1-7788f4fc5f7b", "indicator--7ab29c84-afdb-4e9c-b46c-60b6ebed3315", "indicator--e345d7ae-70c5-405c-a9f3-f6d9996c9719", "indicator--2102777c-5469-4d2d-887a-aaa55649052b", "indicator--9447aabb-5139-4763-9d68-e801daa2a8bc", "indicator--3cfcd459-c23c-4d92-8d8d-5d5b63ad52af", "indicator--65f26d85-d0e8-4152-8640-7bed01bb7a49", "indicator--0059a6de-76af-44d6-9383-732aa07eea70", "indicator--e48b4ff9-c2a7-4249-81d6-cbf1f038d321", "indicator--db213d44-6084-4ac9-854f-d9fd057ef916", "indicator--359fdf20-54e4-4401-a0a7-a17732295c40", "indicator--bf1f99e1-2345-4c54-b851-bc88edee0fba", "indicator--11f2388a-957d-4230-a0b9-a182604ca1eb", "indicator--7c313f74-dafc-4692-8523-110afe61b8ff", "indicator--8c947805-7002-4ed2-b49a-1e3920f97a78", "indicator--dd1323b6-7732-4027-90c4-f3243eba9ab5", "indicator--72b56166-f49b-44f6-8c07-0bf86c4bd169", "indicator--443713c6-a26b-40e9-8e95-a20f2a98af41", "indicator--a78e7783-f33f-4c5f-ac1c-3eb6727a0d10", "indicator--43146995-a8b5-42b2-a58e-0f8b256e2696", "indicator--8caa9c4e-4a20-4a53-8b17-cde1116b9502", "indicator--6335c381-df34-4543-91a3-98976ce86917", "indicator--47f0c6b6-13d3-4ba5-9997-d5017ecd0146", "indicator--79160348-77d4-48c8-8ec7-e0a9d6678ae3", "indicator--1bf3dac6-5043-4505-a5a8-8cf82a2e584e", "indicator--c0f6aa6e-7e9b-48ed-b708-8a0231c62cc4", "indicator--78beec73-82f6-4324-879d-8e3d82eee973", "indicator--b6890b7d-6a76-4081-b0dc-ff98fa5aba15", "indicator--a9047bbe-e951-4dd8-b8d0-cc89498fe392", "indicator--722afe71-1559-4e28-b904-19ac456ccaab", "indicator--ab388f77-b4b1-45b4-b7f6-c726bc391b52", "indicator--b16b6f48-4a5a-40f8-9579-4784a37c94df", "indicator--d3a365ba-76c1-4b9b-b3f5-ea60269527c1", "indicator--b2ebadfd-19ff-4975-b822-db3b1b9b3595", "indicator--8f1bc628-218a-447f-ab1b-a5f950230d5e", "indicator--76600a4e-e843-4e8a-af7d-8ddacb1c67c1", "indicator--0cfe2c11-7cdc-44d3-916d-932bdaa84932", "indicator--82a7e3a8-25e9-430d-96f0-cd9821881293", "indicator--45cc2a13-994c-436c-878f-2ee8da782e11", "indicator--10d34224-bb29-4a98-8d9f-d0a7008e8bdc", "indicator--1ee1a7d6-3236-41dc-8de9-6a7a9f483090", "indicator--037f1ae0-c6c5-49c3-b307-8f051a8396da", "indicator--21fa180a-54dc-47e6-99ad-71a5aee58a53", "indicator--2d312e6d-a3b9-40dd-bee2-1a406b382582", "indicator--65b0d6eb-70d2-4ba7-82d0-833bd3c93c99", "indicator--fb87ddf2-6604-4000-8e87-549bf121c629", "indicator--494f496c-e40d-4bf9-8a29-7d66da83243b", "indicator--40db5e00-146e-4f05-ba38-03dbcb82d89b", "indicator--16726c81-1c38-4db1-a79a-18d3276e68e1", "indicator--8a3609f2-adaf-4d8b-a95e-57dcd684ea25", "indicator--7910c72b-5259-4ab1-8925-61c4ccedd199", "indicator--eeca2e1f-b2cb-4a2f-be45-9d8a77432b80", "indicator--b8c328de-32d2-4f0e-8d22-ba9ec9df5dd7", "indicator--590b91bd-0c1f-4d46-8c51-ad0a3e0b6441", "indicator--30ad4421-91c7-48ca-8013-66cfa464bb85", "indicator--508600d4-5484-4852-b781-67bef4da85a2", "indicator--7cef5450-388f-4044-ad34-93cc0b33234b", "indicator--31c0955f-da1c-4208-82d3-50c847a75c17", "indicator--92abbbd4-9383-4f10-842c-f483797bb64f", "indicator--4e3d2b1d-ab91-4f15-9e8e-9c71e79e49f7", "indicator--02350688-b78e-47af-ad46-c50ff3513d4a", "indicator--35058433-e35e-4870-a659-4ffda16457e2", "indicator--8d14d059-e119-4be3-af2a-b8ec1524c4ec", "indicator--d4ec2567-b7ac-471b-b294-65ee72a50ce7", "indicator--5637dcce-3e0c-456c-aee0-fc66c1d9b14b", "indicator--8430a759-afa1-414e-b020-998b15cb2d5d", "indicator--3c5451cf-da38-4620-9b7c-c813dea43a1e", "indicator--45076732-40c0-4971-9e89-2f25b6e857b9", "indicator--1190ee93-3315-4a1c-8e84-96b3e8e451ae", "indicator--4664d815-2610-4d14-a145-db18f0dbf073", "indicator--9515c763-487b-4b21-9c37-d0047116add1", "indicator--044054e6-45c9-433b-a365-f34acdeada54", "indicator--1244a6ad-24ec-4609-9600-2d6b100cceeb", "indicator--1f52a429-d9e9-4203-a0b2-68842aaadb5c", "indicator--89ea5df3-34d8-48db-8217-ae3cbfbd2832", "indicator--4e04b42c-b24b-4e0c-8d55-02b085aeb39e", "indicator--ed86828d-a8ef-466e-9859-756e96a33eed", "indicator--bbc6dc06-1fc8-4733-bac4-8f8ec48067e0", "indicator--d7938a98-a81c-42b2-b605-894c8df05c6a", "indicator--13bcf41e-5826-4dce-9c64-12091e78b802", "indicator--ee564bac-2510-4468-be97-8598510c645a", "indicator--3d051b19-b4b7-4b1c-b0cd-cf6a78ef437c", "indicator--ed03ba32-aeca-46ed-abde-3ec4b66f4bdb", "indicator--c293efd8-241c-4ff1-bb99-9a1254fdefa6", "indicator--e6bbb9f8-5dda-4c3b-99d3-61e22c5e8242", "indicator--04264a6f-a39b-46bf-9f64-0daf8c78c92b", "indicator--a9804b24-cd85-4603-998c-79f5a0cba338", "indicator--c9a9cb1d-6d47-4f81-aa76-520e164b3032", "indicator--1201be50-758d-45ce-af64-3733e1e2c66d", "indicator--1437b6d9-5ab5-4d84-b193-79d4411409e7", "indicator--3634685a-5ae5-4f26-abba-cd9e94f8e299", "indicator--bff18bd1-d245-42e0-991b-5775d3a52bce", "indicator--a8c5e5be-28b6-4448-83e5-1afd71a92a86", "indicator--43e4c83e-9371-4f7a-a8fe-072354290419", "indicator--f001fa0a-572c-462b-b96e-ddcbc221157f", "indicator--a95fbddd-f549-4988-89d5-7756e95615d8", "indicator--5e7911c7-df2e-40e1-8cba-d9615d86f8ce", "indicator--0898f41a-8a5b-4039-9817-4aacda38c90c", "indicator--ac3f2b35-15d9-4787-9058-de33818de072", "indicator--4d78b586-409b-43fc-8ec4-5c0f8c4a1bd3", "indicator--4180efd9-b3e6-4c9f-9e6f-642d4fb58513", "indicator--074924f0-33cc-4f0c-b113-82bc614dde9f", "indicator--8d6595d7-dfc0-40ba-887d-202475578722", "indicator--1dbfe810-ce09-44d0-9022-21909a69ac88", "indicator--7224b651-3f0b-455e-9e7b-80449f27f938", "indicator--8eeccb05-f4e8-424e-86c5-56536d8776a1", "indicator--ecc12f25-824a-42e7-b97c-828636695852", "indicator--4ba7900c-7c54-417d-a0db-6c901bc00cd2", "indicator--a56acd7f-b249-402a-af39-603471fcf0c8", "indicator--fab32d33-ec51-4cdd-9125-033d4cedeccd", "indicator--9cd04acf-956e-4a56-b470-a48bf7781d60", "indicator--2d996793-e77a-4a9f-b1e7-8ef2a631c167", "indicator--e47139b3-5bca-419a-b5f2-57bbdcdd1cfc", "indicator--05f906c2-8592-4fb1-97de-5ef90981c0ff", "indicator--75056f9d-6e51-425b-b61a-b10adf0427ad", "indicator--fee812aa-f144-489c-bc5e-8d538c9fa296", "indicator--6101d9c0-9e31-4590-b62c-893025c81873", "indicator--43b4977d-3b1f-4967-bbf4-47bfd0d5f59a", "indicator--e35dcd81-1532-4f52-8d87-992d0f573784", "indicator--7b89ded0-2a19-430f-afac-83f1e442e1db", "indicator--5a9937d0-6595-4710-9e99-7ed13dab4368", "indicator--9f7b3cca-226d-45fb-92a4-2b828024b58d", "indicator--15c92a38-a764-40a9-9b82-f9214d291188", "indicator--4adb37ca-a0cc-40ae-b1f4-ad09b29e7020", "indicator--0a157486-734c-48c8-9a51-e4f6fb0f5646", "indicator--d4bbac88-c42f-479f-814c-6ec603c225cb", "indicator--c451a8a7-5338-4f76-9bae-babbd4565805", "indicator--e1cbe923-4313-4bc7-aec8-d7fb90d1ff76", "indicator--f260a485-bf66-4dc8-aeac-12470b5a2aa4", "indicator--4147299f-914c-4609-86bc-2b9be7b7431d", "indicator--cd7dd649-5288-4c05-8d3a-2203f34ae1e0", "indicator--dc1f2cbd-e27d-4484-ae97-5d3bfd6b5209", "indicator--1253b2b5-edf6-48ed-867b-29ef791d4c56", "indicator--472c6aae-73c5-4e24-bac4-919d6f3eb3f2", "indicator--ac91a65a-fa54-45ff-a6d6-85b194a53bfa", "indicator--cc9f2449-4004-40f7-a527-c4439603a787", "indicator--51bc8db3-656c-4753-bcc4-aa8cbe858c1b", "indicator--0da19280-2132-4016-97a2-6726a433ff54", "indicator--e7c8ca12-2cec-4872-842f-cd433a96da33", "indicator--94a14039-6322-4b79-9802-845455929ead", "indicator--3059ea2a-a563-48c7-a8c4-9eb157522a3d", "indicator--010f31b5-fadd-4eae-98fe-cf3991642667", "indicator--be319fec-8d57-4b66-ba20-ab1d5a6aa11f", "indicator--776ac657-af0f-4290-9f85-6f0cb4ae695a", "indicator--7ea7bf7b-b9cb-4b07-8a62-a531838654ed", "indicator--4e54dc38-cc67-435c-8a55-c525769dc209", "indicator--3cca1d15-4163-4d34-8ebd-bcece47e07a5", "indicator--6e4df094-6648-464a-aa39-c87ba6cb6184", "indicator--c3eb1f17-d18b-4e66-a9e6-2c5657eb71ff", "indicator--3d6d9345-4b25-405e-b15d-04883930ee21", "indicator--a6074e5c-1df8-4963-ad38-367bd6bd1dbd", "indicator--1a35f9ca-8104-4a8b-83ad-b02ecc183b6b", "indicator--c3eccc77-e518-49b0-ba5a-2a89b930e13e", "indicator--03a814b7-b461-4e88-8d0b-05448e5d434d", "indicator--fd085d89-c07c-40ba-9128-40a27189a657", "indicator--85174752-3d72-4929-b93e-4790936c20a7", "indicator--3dd3cda0-93fd-4a79-b727-fa0bf2db04d8", "indicator--666a63a7-c811-4382-aecc-1a85f0dcd099", "indicator--5e801615-ccc8-48a9-bb2c-b95e0d22c881", "indicator--ce2bec0e-62b7-4d41-96d1-b68f6a15a00b", "indicator--9841f534-40da-4b66-8912-13cccd7bc306", "indicator--6ef30d80-4690-4551-a5c6-8a5ef3e1f9dd", "indicator--9e3697cb-c0a5-4523-97a6-648a83660b24", "indicator--84892a66-14d5-4c72-bfce-04cf65f492ec", "indicator--03b0bf92-2fab-4ba2-9be0-27e4b0636503", "indicator--0a856aa6-607a-474c-9767-87257bc5b2f1", "indicator--63dee41b-aa18-48a2-a7b5-7aa5f7288f6f", "indicator--30bf5bea-66df-463a-a6ca-cfb8ca8e3f19", "indicator--390d5cc9-c05e-423e-9f11-bc23ab08a021", "indicator--cf2ebd51-ff06-4788-bada-b9bb3a844acf", "indicator--f688589b-10e5-43d6-81c8-0c21aee87448", "indicator--026cab0d-5262-4648-9f94-a4eb1326bd01", "indicator--c170a667-723d-4a90-ae34-e816473e618f", "indicator--46120cf8-a059-47d8-8e51-1e4dffe547a0", "indicator--8f6610ee-c6be-4e39-96e8-697127d7eed3", "indicator--d428a80e-be62-4fe8-bfbc-0f7ff4cc6a12", "indicator--ad2b8bdd-4e1b-4675-885e-096e3af4374a", "indicator--a078188e-de3c-4603-ab29-5a81a2e52829", "indicator--a8c69d0b-90ed-4292-b7c7-7373a5450067", "indicator--ae69f1cc-07ba-4602-b0ad-d73f41689433", "indicator--835aaa19-3f20-48cc-8def-7d4ef0e2e92f", "indicator--9ec5001b-9bb4-47b2-b61f-9a9ddb6eadf3", "indicator--b72b1cfb-7ec3-4311-a5fc-4e2fa390bc73", "indicator--0f1c2128-bfe1-4a40-8177-b716504cc2e7", "indicator--8fdd57dc-ba3d-4bfe-8b58-98b3b00fe04b", "indicator--a9e942fe-3b5a-4d27-ad06-aaaec9ec49d6", "indicator--91517607-bfbd-4e49-98fd-05a6929354b6", "indicator--41d031bc-cc0f-4bd9-b41c-43be4504c579", "indicator--77bc776f-45c1-4fa4-8d38-7ca95a0a2689", "indicator--fed4139b-8eb4-47cf-9667-a3f008f2dae4", "indicator--190b90b1-a997-4c87-9f3a-ec30e511ba56", "indicator--2d5e2ebe-3ac5-4dd2-94b9-67a591881e0c", "indicator--4a08e95e-665b-4c41-8c23-6a41f9e4ba4c", "indicator--50969b27-bf89-425b-9fd6-88c29bb1bd64", "indicator--517908f8-8f8c-4293-8bd7-2075054c56e7", "indicator--e933385e-0925-486d-bc6b-206a020ebc96", "indicator--7ef07c67-bf15-4858-9a65-d853add16f85", "indicator--2bf073a2-9fbd-4387-a12f-3a26709c0d6f", "indicator--0daa7a21-be0e-42d9-95f7-78cafaee8276", "indicator--b7073f1e-bc83-4fa5-8bb2-f20c542c71cd", "indicator--fb070343-4a81-4e97-b61b-01984441b74a", "indicator--6835e88e-f0fc-4849-ba35-d56f5ce3397e", "indicator--0f201225-961e-410a-ae70-fdf4e20112eb", "indicator--8b6761cf-286e-4938-a6fa-829e3ac0dd57", "indicator--4536b680-37bb-4ef3-ad1f-a5799ca2d4d8", "indicator--c10d9143-06db-4b51-beec-6787d584d8ab", "indicator--f5ff1931-cc2b-4dd7-a9c9-d72c4fcdfc3c", "indicator--4d3067d1-3f0f-441b-a4b5-4aa8896b52f6", "indicator--65cd6635-979b-4697-9bb0-ab291aa95f93", "indicator--f65b84bf-8432-42ed-8874-4a5af1987a97", "indicator--1319e269-ca35-465b-a640-4888d86a65b7", "indicator--47d7a860-ad1d-4cdd-9a13-400aad71406f", "indicator--057a4c96-493d-49f8-af99-380f495a965b", "indicator--84687c56-a426-4e1a-b52a-77fca1b82027", "indicator--eac76c50-85a6-40c6-a475-6063644b3ddb", "indicator--f0bf915d-bccf-472f-a767-c803194750b2", "indicator--27cad8c2-9ad7-4de8-b2ab-191e007af348", "indicator--970e3e86-812c-4106-91ae-2202adf4c107", "indicator--2545d1de-3798-4fc2-a459-c998ffcec2de", "indicator--4004140c-e194-4193-ab45-ec96a40919ea", "indicator--b62fb40d-7c1d-4b1a-8d9a-11698d992e86", "indicator--61bda990-64cd-4119-9518-83b811cbb716", "indicator--87874abe-4a09-463f-bde7-a9484b145df1", "indicator--2486f62a-fad0-4717-b6fb-d73eb13c6aac", "indicator--b9da45d4-a437-4ae5-b98e-0eeb625be139", "indicator--8dbb4a97-1698-4cfb-b3bd-0297913e4c26", "indicator--8e4dcd98-b654-4c98-aa8a-954fefb32e35", "indicator--b9409f3d-7f93-4f2a-a926-cd24978e1d39", "indicator--6009fcfd-784b-4251-9f42-ccb48a0972f3", "indicator--685ef7fb-b298-4fab-b666-55ac1af6807b", "indicator--5a1ab853-320f-4968-b059-f7549ba8631a", "indicator--58233287-54a3-4fec-ac09-92c6121106cd", "indicator--4a1acd55-ebda-46d1-beab-4764c9241eba", "indicator--f0ff7ecb-aac0-414a-a136-420b94514784", "indicator--dbd7588c-6cfb-4b45-bad5-e4d30da9d7d4", "indicator--22e9ddf7-9b8d-4703-beb9-c8cd03404315", "indicator--c5922829-c271-4ab2-bc93-2bcd30b62866", "indicator--86b55ba7-ff6c-423b-9217-6a84d5ba848b", "indicator--9823fa66-99ef-45f7-8550-a7fcbe8dfc77", "indicator--8db9e9d2-6de3-471b-a888-3e48126d3546", "indicator--dc0c487d-a497-4cb0-ac63-0cd9bcd500e2", "indicator--49d46a06-d64f-4ec0-9d1e-9eb13d235549", "indicator--8ea74f45-e7d3-468f-874b-d6ac6c91909d", "indicator--a34d4b7e-7c95-4fa1-b45f-3d57eade9fe2", "indicator--c5c5246d-2fb4-42be-900a-b91e642689cc", "indicator--86c3ac2b-dde3-48bd-9054-96d5966ad4d0", "indicator--443fa33b-8bbe-42ad-a01c-caab0b88dddb", "indicator--326a7edf-a638-4a74-ba7e-08eaca7eb08b", "indicator--e6e8102b-95e7-47a5-b517-ba7817a49402", "indicator--b81691c4-8f34-4139-9874-333912392776", "indicator--ffba0cdd-5597-4c0e-b241-912171b9220d", "indicator--30531466-c173-4df8-950d-f18b1f5fd111", "indicator--0fedc105-e9ba-4a7e-9a03-f5612430b869", "indicator--dc4c1e82-3675-4332-957d-a8ef3e8fca0b", "indicator--cb6bfb10-b8d9-4233-a3eb-a56e18f52b15", "indicator--f42ef215-e794-4177-9d53-9726fd46ea2b", "indicator--ebf280ce-ed9c-46c1-8f5f-b93b6ac70199", "indicator--33993117-295c-4fc0-8ed6-6c147e58b331", "indicator--08882679-25aa-497e-8964-af2186e8098a", "indicator--3a8cd7b0-1368-4f0b-aabe-65288ef65c7c", "indicator--6065a7bc-a3a3-4acf-83b5-9b4bbe7c0b06", "indicator--9d9962a2-ef21-4b74-b2a2-6985f6382812", "indicator--d25ed8c9-e077-44a8-872e-c1b87e5b42ae", "indicator--9fc09e44-483b-42cc-9f53-57d5b40f3c33", "indicator--4cfc66f4-7177-46f2-ade6-41d597bcdf9c", "indicator--378a2bf0-0248-46ab-90dc-8edcb4ab8519", "indicator--c05e4eaf-f720-48f6-bc29-94d74d8c529e", "indicator--6fcda78a-942d-4b14-b050-435c278fd5ee", "indicator--ab80b733-eafd-4474-9f13-10cef5157792", "indicator--77a043a4-b763-4178-88dd-fe22a6671f93", "indicator--a88947f9-a80e-4361-86be-02fcebf266d1", "indicator--fcaf77ef-303c-4269-bebe-cbe70006a517", "indicator--a09d22d5-9762-41dd-a8bd-e39a08efcb7c", "indicator--ae8b6336-4419-4a62-8f1b-118540bd9866", "indicator--45bdc2a5-1ac4-4257-9e3f-d65884ed1679", "indicator--2b18e1ce-9b2f-4055-8b07-5912664666b5", "indicator--d4b444d4-903c-4e0e-b976-df22e66624d3", "indicator--33558785-3019-454e-a6dd-f312e133d28b", "indicator--adf2cb61-5d50-49ba-903e-6e532f9af693", "indicator--63acd973-8b1b-4e1d-81e9-be182842a104", "indicator--69b2fc5c-7e05-4f28-a77b-7bdf84558053", "indicator--d2bac4c2-4bf7-482f-a955-83e3be4eecb9", "indicator--486ea633-a432-42a1-a86a-73e1114a9628", "indicator--cdfffa63-682f-4be4-9f80-209e7df29ef0", "indicator--e3b67784-2eb9-4125-8aec-8d07cca88025", "indicator--94e3cbdb-4b62-4a9f-bae7-259deb2b04e0", "indicator--13d53ba4-a8f1-4249-b59c-4fa79743948c", "indicator--510c595d-3956-41a8-b53c-a5e181f515a4", "indicator--034aa3f3-afb3-4c16-962e-eecb5d20a0ab", "indicator--0c544627-24ff-4d20-a37c-826ed3cbabc7", "indicator--cf789830-ea4f-44e3-b807-06a1903a06bb", "indicator--68a4de99-ef7a-4b42-8f07-5e02af517843", "indicator--f24a5400-7399-4094-a639-cbf75e686ce1", "indicator--d3875d23-183c-490a-8c7d-3f028ef3a1fd", "indicator--cea9fdde-dc98-4810-9387-c300e000c2e9", "indicator--99ea4bcf-94d2-4cbf-92d0-79f0978bd35f", "indicator--9e317310-757c-49fb-b84a-538dc2011d69", "indicator--930bd02a-4de2-45fa-814d-a6839013fd4f", "indicator--112ba171-e2f4-479d-a77a-994e73d6508d", "indicator--8ae5fb90-78fe-4563-9cff-a3e2beead778", "indicator--4e3622ca-b966-4553-a424-05fd2203cb94", "indicator--e8e80c82-b5e4-4724-b59f-3574135aa2e0", "indicator--3f17f200-27da-4455-bd39-25bccc2974e7", "indicator--432d2e82-e3c1-4f45-93c1-2c1814d6e4f2", "indicator--33cd6107-94e2-44e2-8c72-f1b51c0d24ec", "indicator--7a609c45-6746-47d5-96c2-cd7bef718c9a", "indicator--3efa4a17-e025-4840-be67-b815d5ece5fb", "indicator--886e7953-8205-44e9-bf0e-c994eb486d85", "indicator--b098d6b0-01bd-4f03-a1e0-6cfff78bc737", "indicator--1f8b14ad-b8bb-411c-aa35-c42f245ef383", "indicator--fd45b518-2285-4fb0-8ecd-c19e21ac4cb8", "indicator--e65cbf22-a80f-4376-a329-2988a103597d", "indicator--4c450876-ae75-4d81-8892-50776e2a4a19", "indicator--3dc981c1-abb8-4c59-98d6-8cf210782340", "indicator--ef11d9ba-6766-4d92-b686-fad4263239f9", "indicator--f63b7390-1b23-458d-838b-1c61fd0aead5", "indicator--a36ed8dd-55d2-4f83-a306-1ddd53ff800f", "indicator--bee7135a-e395-4c81-b4b4-783fd61ba452", "indicator--7cbc96fb-c297-42eb-9fe7-52479119a93c", "indicator--13cbbfd8-6f24-49d8-9936-d3210375148d", "indicator--262141ff-ac17-46c2-a573-7061a17490e3", "indicator--5b71fa73-c805-46bf-840a-d00cd6e29a66", "indicator--33629523-6b37-4a00-aabc-75dbb9a64a9c", "indicator--02725118-8b60-4a32-835c-f5af197e9f03", "indicator--f631b1ae-4156-41af-bc2b-28887e207d12", "indicator--fee1cd22-163f-449a-89b2-bab132875264", "indicator--bae7150b-3758-4fed-b220-a3c02e0f3174", "indicator--7b1aa5ea-9471-4f90-b63d-e75ec43624e4", "indicator--8d909a55-a6d4-46c8-b791-4cc20e2aed9c", "indicator--9e85af88-4ba7-44e0-a731-094f4a9da0c7", "indicator--6b607640-89fb-4ff2-8b15-0ec8e4605f8b", "indicator--0876c8bf-6356-4c67-b818-a7902daeef87", "indicator--06462011-f0c3-4a7a-904d-df9e407d11ed", "indicator--b2c4346a-21e2-4003-8806-d45bf4995d1e", "indicator--11d01706-9b2d-4009-97fc-a8a1136345df", "indicator--322be96a-20d4-4cc9-b19d-ff480a6e4801", "indicator--6f371448-3f98-4cca-bf68-6b4df06faec3", "indicator--41332419-11e2-4081-9763-0536f848e96d", "indicator--891e184c-b50c-4a8c-a216-e25b8fe230d0", "indicator--cccee4c3-80d8-48d6-b4ed-4b37a0ddf84b", "indicator--331e4059-b161-4786-a039-6586687f8833", "indicator--0e7bd7de-09dd-4033-9b81-9523aa69a647", "indicator--85505a33-3a3a-4259-8f0e-a69fd0efabc9", "indicator--50ff970b-5839-4483-95cb-3494a8227058", "indicator--c65560b3-ce23-4fdc-a7c6-ff7fa0978d5d", "indicator--5eafb1e7-b562-4961-a7a8-e504ddd6652e", "indicator--483ca904-838b-4d27-94b5-f31ce4c17753", "indicator--dc615cc7-32de-4e10-8ae9-960eca68326c", "indicator--d62e295b-bdc7-41d0-b165-2c9fe76f0d11", "indicator--a9462387-c6da-4359-b83f-024d5fc03bf3", "indicator--964894d3-80e9-445d-b752-f032a1bf7e52", "indicator--d1a27e5d-dee1-4721-b686-4fa1226cbedf", "indicator--8d9923fe-174a-4922-bf5e-8cff1722687f", "indicator--185ed67b-40b7-45db-ae8e-3741dc7ea9cb", "indicator--65803d76-bea8-4d18-928f-7bf6181d940e", "indicator--381c1305-4dcb-4562-be9b-de2323da4d1a", "indicator--425edb02-0ec1-4648-86a8-0028ddd1ba1f", "indicator--d423933a-de14-4025-8f83-a4fb2ef3a3ce", "indicator--9b7ec2ab-b35b-4881-a175-0d93ad205c98", "indicator--d7744c9e-62e0-4ba8-b456-ef26a11aef09", "indicator--7158d299-027e-4bc7-bff1-8dec907c97c8", "indicator--36872705-ea5e-4271-9746-dd9bd448001f", "indicator--37cc5497-74c5-4829-8009-73969e78aa30", "indicator--381788f2-7743-4a1d-b8dd-446da5413626", "indicator--630104b6-e7ff-4c07-a5ce-2390c3e2937e", "indicator--d8d0b8d7-7ba7-451f-8a9f-aecabb3198f1", "indicator--2b042ddf-4e7d-4098-975c-5ce1bd5342a9", "indicator--a1a08c8c-d554-4b7e-a2ff-234011a68368", "indicator--3fad777a-99dc-4e1e-b620-e657eb0457c7", "indicator--96e65b63-b205-4f5d-80eb-727afd52f9de", "indicator--e7dbdd8c-00e6-4fb4-95d1-1079657d1ac4", "indicator--8b196a5c-6e27-4dc7-b78f-c7ccbd0e7d5a", "indicator--55d48a06-0125-4147-896b-20845adc1bf9", "indicator--762ec45b-5db5-46c8-b220-4e379e2684c4", "indicator--b09f374c-e9a5-497c-9b8d-ff3878e5ef7d", "indicator--0cfb506a-bf5c-4ebb-9ad1-720222382d5e", "indicator--773bceff-bf10-4a34-a1d6-d4281e116b65", "indicator--9a89efd1-fcaa-4920-b8b9-f336bd477bb0", "indicator--8bdc168c-f2b9-4dd5-9da9-c6dd889284c3", "indicator--9f0780e9-6387-42a9-bb4d-525fdf314a15", "indicator--5bfda122-d65f-4e42-9fe8-3713cf01e349", "indicator--de7315ea-b697-4313-a4b4-79f850e013a4", "indicator--d09ac0bf-1439-4dd6-85b2-73154344be9e", "indicator--c79107b8-2d0e-4c59-b1f2-4b2382748c36", "sighting--c3dfd0b1-0c96-402b-af8f-2b281fa0b4c2", "sighting--e19b2c0d-bb0b-4ce3-a37e-1807cb1dded0", "sighting--58fb3107-6e8a-4228-b0b2-bc5ec296d66e", "sighting--db4a2388-e6d5-4010-acc2-98630519d3dc", "sighting--8d3a2415-f137-46bf-91de-2de101135572", "sighting--4d8f4a6e-9cfe-485d-bd55-055efd124c09", "sighting--e156ecc7-cd18-48e9-8a9a-42a12c618088", "sighting--7e5924dd-d0a5-4c98-9692-270ace363d99", "sighting--ad1c104f-effc-4e04-ba39-3475bb5261cd", "sighting--0a1fe19b-479d-401c-84b9-79776dd28334", "sighting--ea4db476-70c3-4ccb-a278-13a72a4a7b2c", "sighting--6f8e1e04-1b77-47b3-bbbd-e28cab931cef", "sighting--e1ad21f5-543f-432c-81df-afb99a66d455", "sighting--1017bb7f-3092-48c9-8619-53978e8aaec6", "sighting--9a3c9489-3b03-465e-b43c-5348b38601f8", "sighting--db780aa2-07ba-486b-9335-75c17b8e244b", "sighting--e1b09e9c-b4d2-410d-af14-1ce1c12a2dd8", "sighting--11032bd7-bad4-4e72-8745-529945c4b725", "sighting--eefde089-05ea-4849-a5b1-38a05d4eff4c", "sighting--d8cc4b78-faee-4656-9e51-db9782c16d37", "sighting--6e427689-d367-4580-b3a8-20116dce01ec", "sighting--2c4fb853-2815-4c43-aab2-72a2c87620eb", "sighting--e28a4fa5-1057-4596-8d75-849a16f234be", "sighting--e4a9890e-6b82-4f01-836f-8394964380ed", "sighting--f0f4bf76-9a0b-4a84-9c9d-7cc48ecf291c", "sighting--6204c00a-34d7-4217-970d-f539312ee89a", "sighting--a54fc632-c89c-41b7-8ecb-73f0208e62e6", "sighting--1169a4ba-8342-4f4e-a237-227672cf8a90", "sighting--a3800537-5334-488e-ac94-2a53c712759b", "sighting--548c094c-504e-4a20-bfe2-ccc82b60bbde", "sighting--f827d0dd-e168-46f2-879f-16076352537f", "sighting--7c25b1f7-b32f-4779-b695-c0b9c7e8ed8f", "sighting--a93e96b7-629e-458c-84ec-5b5c19122bca", "sighting--2cb99469-9122-45c4-94cb-eb4c83883c45", "sighting--58d12d35-6d44-4b09-8c6b-889631e5307d", "sighting--98542385-a392-45d3-a3ce-81aadc07237b", "sighting--8afdb44d-93d5-4a05-a946-3e078ed21707", "sighting--87ce2e6e-b8a5-438e-906e-68d6c9a47788", "sighting--8dd95822-0408-447c-bdd9-24fc9791de10", "sighting--ba1505f7-b0f6-4822-a01d-54790954aa8c", "sighting--4b2fcc67-4e10-4f34-9542-f665921cc838", "sighting--a59b019f-9c4e-480c-95a9-f776821802f6", "sighting--ccee9ec8-0c6b-4aa5-b708-26363e8d09f1", "sighting--ea09eab7-f143-4b8d-b8c8-2f6bb80a6084", "sighting--1024888d-b4b0-41fa-9020-43d17fcef5c3", "sighting--ab5fee89-2568-4a3b-a2c0-bdf5cb0bf3a5", "sighting--61ed7c63-6b50-4fb3-84a4-106589a59889", "sighting--8007f045-6805-4e25-9a77-8236eec8e929", "sighting--7221df4b-49ea-45be-a065-3beb7dc4ab00", "sighting--a3bf6d6e-43d1-4e7d-8253-9e17148e4a11", "sighting--f3ca042e-e272-4c9b-9741-4f1b0f594dcb", "sighting--586c8600-7a95-4211-8d84-cc2ea413c3bc", "sighting--56211fd4-b924-4a6e-b6d8-fbd8e974e848", "sighting--6e8ff870-3493-448c-ab1d-8eeb1bb3959f", "sighting--0e701869-847a-4e28-b4ce-e795c1c31a79", "sighting--90c8c801-24ea-4419-8625-3cd577443b16", "sighting--527736c1-a34e-4ed6-acf2-c13afdaac6a7", "sighting--b7d8a232-deab-449a-a534-eb896ca68a39", "sighting--721b902e-1903-4228-8c7a-fb7954887111", "sighting--d6c578cf-1a4a-4387-aa51-a363e8b9308f", "sighting--36d7f59b-4826-4238-bd9b-5c9bf8d594ed", "sighting--cbb7b014-b09c-4411-a75b-dd1559c8c3e0", "sighting--0ac49be8-2688-4530-8510-0e0400f56d52", "sighting--cfca6e09-6a7a-4b10-95fe-d27806927036", "sighting--bd7cb7b4-7682-4158-8383-aef6490f87a5", "sighting--0a0b0f60-b9f6-418c-9df1-b24dd6614c9d", "sighting--251d4400-9202-4453-8d6e-7ee3f2b036d5", "sighting--a0cf0f02-4ea1-4fc1-bde0-462d9682b60a", "sighting--9ef69719-cf06-4b14-a91d-8b4d7588fdf4", "sighting--513bbd18-adb6-434e-a940-93443154281a", "sighting--4ad842b7-9e8f-404a-ac2f-6451ac7b4729", "sighting--b88e56df-d12e-46d3-8bb1-169aa5a5be6d", "sighting--a703cbcb-5393-4d12-b8ce-8a171948cd25", "sighting--92164c6b-e00d-4b43-b5d2-58dcc2a7948d", "sighting--b58c0890-fc40-4f5e-8a9a-d6bd65e94009", "sighting--303449bd-e119-4847-8e04-dbe487c4b043", "sighting--166f59cb-e502-4ef6-b442-6f5eeacbb1aa", "sighting--fbd12296-8cdc-4918-8c0d-e30a3fe32ad2", "sighting--7262e959-01c7-49ac-a43c-5371cf49e0cf", "sighting--f8829042-a022-4cf6-abf1-60d07d0fec38", "sighting--006fb744-bb9d-4e1d-a9ed-c9d012af4743", "sighting--9aff4448-0faf-4b8e-880d-877dd93729c8", "sighting--e3841a64-9408-4da6-8e64-8c450dff1617", "sighting--5466510c-80ff-4f5c-a46e-47760abf93fe", "sighting--f2c363f0-8102-42d2-b4ae-39566d022f79", "sighting--c86e9c97-745b-4c2d-ba87-0fc509fdd3cf", "sighting--4ad5d9c5-daee-4905-8042-6574af255669", "sighting--406b4e65-7de4-4147-9c42-2e4f8abd4b7a", "sighting--685c2e39-866d-4faa-ad5f-6033470f47d5", "sighting--9c71abf8-0214-436b-85cc-29c1a3ac366a", "sighting--9cfe9507-0b0f-4907-85bf-cf636d0da7ab", "sighting--19b38e2f-e036-405a-bc61-45ec6fba8907", "sighting--51d9258e-0aa4-4e20-8e35-35de69f876b2", "sighting--1ade047e-af4c-4da8-938f-8cbbe3c304e0", "sighting--8778c2b4-6443-4912-8617-7a01cdd775c3", "sighting--c57c5160-51aa-41a9-be83-8ad9b3aefd63", "sighting--998b0e1a-a2fb-4110-bb47-c032b9e4ba99", "sighting--d0135d3a-df88-4049-ac43-4d66ac690ea2", "sighting--c48422a6-5545-43d8-9065-e893b0eeea0a", "sighting--c0a58643-1c92-40f1-98c8-d7afc8849f19", "sighting--df6a6eca-46dc-4bf3-b79d-bf4c5a1ae508", "sighting--4755fc83-4c80-4c84-8527-a3887012f214", "sighting--7faf07a3-652f-4b8d-9717-82c92408e95d", "sighting--b47ee1fb-e8bc-499a-8b56-95f4c02cd815", "sighting--61cfa2ac-f3c8-41ce-af1e-b7bf36b44e9e", "sighting--ff9c5b71-430a-4614-8f28-cc52d8ca56bf", "sighting--06837a4b-6e61-4e54-9627-9e3df9880d8f", "sighting--fae43d69-48fa-44df-b643-e60a02463aef", "sighting--99706e35-8f34-45f3-84da-18b594bce48e", "sighting--2f433a9f-0fc9-40aa-95b6-bbbb68d3a358", "sighting--b4155ff6-b61b-42da-90f0-81ada11bf692", "sighting--b04993e0-7b29-4e88-9847-7ce74e3ab075", "sighting--6b9180b3-99fc-4654-be95-b8a470e3b4fb", "sighting--1d8d0ce3-5186-4c46-9f62-0878217adfc8", "sighting--a1257f7e-9282-4759-9475-de2aef6eebf9", "sighting--298e13e7-1c88-48b7-bce5-de25ebbd2f8c", "sighting--924b5dbe-bbd4-420e-9bef-ecfee408eb93", "sighting--1d752aed-8ca0-4a88-bfc2-ded98f6eff73", "sighting--c7e82d28-0541-4c74-9de8-a8ccc3d022a7", "sighting--db993bae-2eb2-43da-8e88-b3d7dd878de4", "sighting--e28027fe-63de-42ba-af1b-a0fa90629291", "sighting--64bf7812-cdeb-4d0a-a38c-28345e7d63fb", "sighting--c80fa0c3-e8b2-48ae-a2da-49d902f7805b", "sighting--fdb865ee-9405-4867-82bf-b0948a519f2a", "sighting--857ac138-18a5-493d-8819-981e1cb781ab", "sighting--55f4bb57-02e5-49c3-bb88-009cb973426d", "sighting--aa6919fc-7726-440d-9041-93546eccb122", "sighting--8bab3a1d-02d3-4986-a4cf-435ac9ba4b61", "sighting--d925e051-192f-491a-97a4-bc2dfe2ae163", "sighting--c9b0837e-fd5b-492d-87dd-1c95da93aaea", "sighting--f34cad76-5c64-4984-9594-30bcec493bc0", "sighting--621fc538-ef69-488e-b9dd-27beeebafb00", "sighting--c8ef2669-6bd1-4fc1-b031-ce52a9ce3f01", "sighting--6295ab35-3071-4511-af16-755bd7af764d", "sighting--0888a314-8ac7-47e2-9237-743684960b0e", "sighting--a892d91e-897a-46da-861d-12bea19c6c92", "sighting--ac42deb9-5d26-45c7-ab89-5f6f1bed62ad", "sighting--9a5ac7cf-ccce-44e9-a91e-801c009636d0", "sighting--4f456f3c-718b-4eac-9fc7-94095b16883b", "sighting--ed0e9885-6c9d-410c-b191-0557b49b6671", "sighting--ef26e497-d33c-44f7-8413-1c6d67947309", "sighting--69653761-9aec-4e82-953b-8c3d0ff128e9", "sighting--c17dfc6d-5422-4152-8d29-fcc50e65347d", "sighting--06955edd-fa86-4c10-857c-0abbe02a78aa", "sighting--d52c6af0-2207-43b8-82b2-4d631f61a13d", "sighting--655151d6-c570-4dff-89e6-2f1ab0bf3d1f", "sighting--fec2f2e7-db8e-4cf3-8b68-72fa1c60295a", "sighting--c83267ad-21ac-404f-9d34-641a915490d2", "sighting--15cae19c-51b8-423d-b264-41cc99206edd", "sighting--dad0dcf0-c5ba-4f0c-9a97-b237163fe15a", "sighting--266516ad-83ef-4d7f-81f6-58e0d88539b4", "sighting--1da56e2f-d9bb-4ce4-988b-8634c09c87f6", "sighting--68e14512-0a38-4a78-a045-923ff894e54c", "sighting--261af6e6-bfda-46a0-bcf7-b62e4cc6becd", "sighting--7bf0df8a-4cff-4fa4-b35d-820bf60c2364", "sighting--37ee5258-e792-4f56-a2f5-295d9ebc24af", "sighting--7ef49fd9-8e01-407b-8fdb-734405e9cd99", "sighting--3690a5b0-d005-43b9-80e5-83b19a4b81f8", "sighting--53eca26d-9e2a-4ce0-a712-a5325434c6d6", "sighting--59c08d63-d1bb-47bf-bd49-537abf64f409", "sighting--8ce585bc-8e6b-4b6b-858d-bebd70d52a47", "sighting--985630be-454d-43a1-81e1-f808239432a1", "sighting--4f4742e8-7803-47cf-98bb-743386fbf18d", "sighting--980b63c3-d1cc-4fb3-858e-2fbd9a877290", "sighting--e2882a4a-d8e8-43d0-90e6-06ea5ebeef19", "sighting--8f1b2a76-755f-4a1f-bea0-5f17bfc9b8c4", "sighting--61ddb8f3-eb45-486a-9909-6b7e0e24fb2c", "sighting--0a06c0ca-39f4-4e4e-92b4-4c18027cfedf", "sighting--2848bb91-7fa2-4259-9200-131e409ef09b", "sighting--a9f9a527-355e-42f5-b263-0be4edc5012e", "sighting--5fccaeef-f7cc-4f2b-859c-dba09fafd83e", "sighting--380b2cfb-f78c-443d-a1aa-1e2c0cacae38", "sighting--8e13db4d-c0f2-43d3-bd95-115b414955c8", "sighting--0e02c5c0-4b9e-4fd6-92ea-35f92d4bc5a5", "sighting--60f7ed53-ab45-47f7-9668-313341146173", "sighting--d63dfe71-1aa4-4327-a716-e444aa6db3e2", "sighting--385e7d83-4168-48e9-b4a7-f9c347a2f5bd", "sighting--69fd5733-1a4e-4cc8-8e85-b2239c51ab63", "sighting--d71389b8-af8d-43ba-9ae9-dc0e816b92a4", "sighting--c5ace8a4-fa2c-4491-b1b1-070343a92d20", "sighting--b4d4a279-b1d8-41dc-a249-71e5a2c93d89", "sighting--6bd27ea5-202e-4cc4-af62-97627602884a", "sighting--36a26529-f491-497a-a2fd-84740989dad9", "sighting--b2e9b19d-c23c-452c-ad32-1c5148c4b251", "sighting--03149236-def6-420f-916c-6fc2b7518421", "sighting--a596f533-0c4f-4650-b83f-503621da6f8b", "sighting--09aed012-f314-4b8a-bb8e-3e78d34a65c7", "sighting--771986d3-3c1c-40b2-8d9a-9f91fe82c696", "sighting--96b41233-f4f2-4cbb-9849-5c58002f5ba3", "sighting--989a2d3c-af81-4eee-b0c7-255195b43a82", "sighting--f89c2e08-d46e-4f91-845b-e15f25a44828", "sighting--7b048a7f-0472-418b-9f6e-1f5f0b65b0d5", "sighting--77ef1a09-bd10-4b29-b2a0-fe23f9415435", "sighting--8b003da9-f822-4e5e-8ad6-24f48d4f3902", "sighting--4452bf28-b034-43d3-96c2-9adef287c131", "sighting--6bf02d68-759b-49a1-a42f-8af5fae06372", "sighting--57980a9b-6314-4ce4-a619-7911aebe138a", "sighting--9912e32b-50d1-473d-9002-ccd03ef54bb5", "sighting--4fc07b68-d9c8-4a51-8c8d-9fba451721d4", "sighting--4ce89bc4-c1f3-46c9-be3c-325eaf4bb563", "sighting--e22921ac-c954-4cf8-b027-1a54fd72154e", "sighting--2bf7995f-3c11-409f-837a-26a9c36aefeb", "sighting--a0fcdad8-0ff1-407f-a37f-defd3df8c107", "sighting--660ac997-99bf-4418-a490-0f9367c95ffb", "sighting--1785d0b1-eae6-43c0-bede-f55bde1d3f2c", "sighting--4410486c-45b5-4a5b-bd0c-b36a924a0c08", "sighting--b5695153-0345-49a7-a56e-7721b18e3bdc", "sighting--70474415-f37c-4047-a622-263ca80e7b5e", "sighting--d4c28cea-0497-450d-835c-d0f2a116264d", "sighting--b15f63b2-ea41-4bc7-b647-e0120d55fe15", "sighting--ad32fafb-88d7-4a3f-b8f1-f89472a5044c", "sighting--9beb1c55-9133-4d70-b841-15a0ab301b8c", "sighting--db2d7e2b-1a47-49dd-b19b-da12a0c7dd09", "sighting--5f095ca9-a717-4bc2-aa56-af63b71d1f1d", "sighting--52fc227d-d8ba-46ad-9438-ef6e799cd10d", "sighting--d9bc9704-fc9a-4279-9a7d-368cbbe691cb", "sighting--a05dfbba-5a79-417c-b561-81f3b5788a3d", "sighting--f0661e5c-bba4-4c52-8b79-d6e3f506d560", "sighting--0e8023a5-0f88-4516-8da8-82c0621a9fc7", "sighting--bca90448-62bd-4b63-bc4c-7257216eb846", "sighting--8bee0424-73ba-4f47-83c9-645eba890e09", "sighting--e49ed2c8-2199-465c-b904-f078f6b98ce1", "sighting--ab376926-c64c-49b7-9797-fc3b48795553", "sighting--a8f8bd35-eade-4d73-8345-d89247ef4152", "sighting--762c3939-cbe5-4ab4-9dd0-174be67299d5", "sighting--3a5300fd-f34e-473d-a923-00232bebdc85", "sighting--be093cde-947b-456f-b318-f4ec9a5f9d83", "sighting--8debec10-7315-49bf-8973-c39c9c481dcb", "sighting--91199721-e31c-40a0-9349-6b137da8c24d", "sighting--bbd6405b-d4f5-4622-bb1e-12d2dbcef22d", "sighting--53ab79b4-7c22-485c-89a2-69603303b621", "sighting--dd269a4c-48da-4cd4-a237-e0baf8f8522a", "sighting--9540d623-5cef-428d-9889-3d6838b45003", "sighting--b7aeddc1-e01c-4923-9d44-8ef84b736fbd", "sighting--ab5cc2dc-0684-413a-aef4-f8721c121397", "sighting--531c0e73-711d-454b-b5ce-7a29c5a99dde", "sighting--e34ee32f-ac20-4835-ad7f-0e17e41c2e92", "sighting--6dad0049-4b53-46d5-af2e-a5cbeddd4479", "sighting--b2af79ec-fb89-4a0f-8720-4ca14d16e137", "sighting--a152a5c7-9f70-484e-90b9-0b606111d028", "sighting--75225955-1e9e-4fb6-8bfb-d51d27743bce", "sighting--9c19f4ac-751f-4929-bebd-280d456b4f9e", "sighting--ecd594be-3784-46c6-ae26-e04909842255", "sighting--b7cdcfa2-fbb4-4f0b-b1df-9be7ef705176", "sighting--788cc244-fa90-49e1-b988-b26fea898f65", "sighting--44d3579e-df2b-43c1-85ed-e5d6afb066b7", "sighting--a185bb54-409e-4090-ab6b-42137486b205", "sighting--6860eae7-96c9-486a-8b08-ca7387de47d0", "sighting--443112d1-8ece-440f-8dd6-af1979058f60", "sighting--77cc4feb-846f-441f-8fc0-25d681d61e73", "sighting--510f8dda-ea77-436d-bee6-0234561a3536", "sighting--18d0e49d-a25f-4065-877c-3a8bb6a2661e", "sighting--132cea3b-7b5a-4d3c-9051-7ddd01bbf23d", "sighting--2d6f641d-6206-46fe-a06a-72340b759453", "sighting--9dadd3cd-2d1a-407d-94b2-a56a9bab2fc2", "sighting--f92ec5e8-a9bc-45a8-86f8-e8797a144e97", "sighting--f7d9718e-ca24-4749-8512-135fdd3db9cb", "sighting--0626cced-0821-425f-b9ce-c38ec2b3f362", "sighting--a7322a5c-a689-4c68-ba0d-794e3cfd67ed", "sighting--7ed4a426-8169-4683-8dfd-72c4bd730dca", "sighting--c4c8eb6d-4a79-4dfd-9d89-cfe768060c8f", "sighting--bc7cf6fc-22f2-4ea2-8c5e-6763217ed377", "sighting--ad25ae0f-bae3-4fa0-9ad9-f469b2950b7f", "sighting--7e7fc6d1-61ae-41c7-9f22-9a1dc07ab43d", "sighting--851a98d8-0d9c-4f54-8091-e07cccf014ee", "sighting--b731faea-0117-41cf-8a7e-858d864d6140", "sighting--cf7cc504-ca86-44d4-a426-3395e60dc8a9", "sighting--8577e424-2c00-4081-a77d-207dd49b3ef0", "sighting--2ef554dd-1e0d-423b-9721-4a0d0767b817", "sighting--c14d4cf8-3708-4d79-b10f-75c7472e299d", "sighting--9a71800f-d9a6-4070-91bf-2acf7d272aa7", "sighting--1a9a3917-6d1a-45a4-851e-09faa6a41b53", "sighting--b7e99cdc-2366-4d37-a69a-f9f935083f81", "sighting--6c9d67b4-da09-48de-9469-86a4af7e2fb6", "sighting--0170270b-cb78-47ed-af0c-bf38f22b09d6", "sighting--9b320ed7-7591-4920-9b59-1f4644454b1a", "sighting--563031bf-cd79-4c58-b1c2-d4bfcaf5cee4", "sighting--fbd435d9-7f02-4aa8-b25a-35b0d76fb949", "sighting--9a1321ea-b84a-4918-bf48-061f4506ca14", "sighting--60c2683d-b76c-4713-82e2-e71bef3ac6a6", "sighting--1a10be18-bcf5-40f6-9dfd-1c961ecb93e6", "sighting--defd36d5-d746-4175-8f21-aa1ad69b878b", "sighting--c436d1d0-8c05-4fd8-a44b-fd5f8dda3db7", "sighting--ceaede1a-bceb-4c08-8988-fc4d063b8327", "sighting--041d83f9-8dc6-47db-a473-31df70afbfa5", "sighting--19c8f2e6-cedc-45bc-8505-5cab606c212b", "sighting--8368acdd-21de-4342-a2be-9ef9644fcdd3", "sighting--5f632b7e-f4dd-4873-8cfe-ee163a350c65", "sighting--6b7b430d-7065-4aef-9e3d-8491dcb61a54", "sighting--dd821a8f-6060-4535-a168-e0d8178c2f58", "sighting--3d65d3b7-e2ca-47d9-8a03-2d8b55d6b1fe", "sighting--6006cea1-f05b-4e4f-b070-1b2e02352f6c", "sighting--f49783a9-f817-49db-8f73-91b87202986a", "sighting--83f08d5a-d262-416e-919e-5cb9748e7611", "sighting--e305ed8a-2e78-4668-a065-18f79d205dbf", "sighting--b25bc6fb-2110-4736-8149-c593d4b598e3", "sighting--ff0ff622-3e26-4ba6-83ec-b5260860a318", "sighting--f8fa60b7-1a71-456d-a009-bf940c942f4b", "sighting--534557d6-f36d-4b04-a8f6-a8a10ddd7171", "sighting--1fe085bd-1946-452b-8b2c-c52d105b2239", "sighting--068ee0c4-dff4-43c7-b994-9ec433132e3b", "sighting--349bab5a-6ef0-40b4-9d08-cda888130851", "sighting--822602d6-f84c-4f24-9b41-1b5209af34ee", "sighting--4028468b-58bc-48a0-a653-2d8cdefe966f", "sighting--cf8582f5-e4c3-4b47-b441-8d213b53b8ad", "sighting--7e40e14a-344b-49dd-81d0-4986bb16b937", "sighting--dfa49a64-22ae-4af7-bedf-f5614860c0d1", "sighting--a55433da-ace8-40bd-a33a-705d39030b49", "sighting--ac769c78-67e5-4c77-9dfd-61bc4c629d53", "sighting--204f0710-f1a7-4059-aa00-5139a6269373", "sighting--1d0b496f-a9e7-422f-8b21-95848c71d04c", "sighting--0f553f7f-884e-4b69-9c8e-9cd6a646a0b8", "sighting--d49b0746-1980-41fa-96d9-52313f7995cf", "sighting--08900b5a-5311-4070-9031-732ad4b6e8e7", "sighting--a501c356-f0c7-46c3-ae01-dbca2d10f4d7", "sighting--e6d61ebe-036c-4cfa-a2d3-62d80c89e8ef", "sighting--5fae08e6-4dd0-445f-b8ee-7176a702f663", "sighting--677ebdbd-59b3-43f6-bf05-2df3417389cd", "sighting--8a6d7247-f3a1-440c-8ca4-d21edb553cef", "sighting--cbe39edf-9f1c-4d53-ad37-0432fcb81aab", "sighting--5c5a9782-db60-4406-b138-2b55da38f0e6", "sighting--7fb0ea0a-b848-4ea0-9344-eb0cea6c3ac5", "sighting--2a22be5f-c881-4d07-97cc-c851db0d56f4", "sighting--d2532f1f-2468-43cd-bac5-29cda176c650", "sighting--ffd28e66-4fa4-4d0f-b1f7-b35bec476b67", "sighting--77386e36-853f-45f3-877b-5e767e73b500", "sighting--071bb697-5d44-4ba2-ad06-10e19c9b67bb", "sighting--0571ed3c-0b32-487f-a68c-43dc9003f8e9", "sighting--6d2c221c-3759-4960-8ced-f0653fc7518c", "sighting--8db6e572-21fa-493b-9afc-2c52e1604261", "sighting--8b317b22-4fde-434e-abe1-257f3a28d50b", "sighting--ab3d9f9b-ea63-4282-9794-01fbd37e11ac", "sighting--2884b4ec-44e1-4d75-83b2-9d1b701c8b75", "sighting--6c1ca77a-f864-49f9-9f57-f90e33a9f719", "sighting--e96e39f0-e862-40b9-a43d-0bf43f7e8e96", "sighting--6da61540-f486-4abe-912b-1973ffe472c0", "sighting--12a07b9b-3f0f-4c50-aab5-4c7a684a87dd", "sighting--ac1bdb27-3664-448e-baa1-fd0dc57f8813", "sighting--6eb0f7b6-0d27-4324-aed2-cd67e75d0e21", "sighting--3794103c-030f-4027-a706-434cb8908d41", "sighting--2c557d6e-8487-4e8c-864a-b9b0a14b5353", "sighting--6e4d8c4b-1143-4cdd-8f41-1a177665ff7b", "sighting--84d7dbf3-a2e1-42e6-9a13-0efddcc95f28", "sighting--b7a34fa1-ff6f-4a6d-9afb-c9eb8fb71499", "sighting--842a76e2-6560-4e57-8b08-cfdd000c6c61", "sighting--7717ddb7-0d22-4cc3-b00c-24cb62dea989", "sighting--c79afebc-c1dc-40fd-b9bf-94a63087be0d", "sighting--019dc4b8-f7d6-402e-a0ba-65f4379588e9", "sighting--b6d852b1-ee20-4020-a3b0-c74bda639f65", "sighting--125c2818-c2ea-442d-8ed9-96e401c7163b", "sighting--8161a071-e04d-44ab-b4da-feea9a088e18", "sighting--e6abc973-0422-43b2-9721-bb7581e006fc", "sighting--81b426cd-cac5-45b5-bc80-eefaa1b158b9", "sighting--9d7fa087-ee5f-41e4-bb0d-fd24c03c3c3b", "sighting--b2a55fa7-a32a-4c60-bbc3-d1f42d14f0b2", "sighting--144104cf-9911-4503-9254-cb7519f736a6", "sighting--85cb7aec-61de-419e-8915-dbbb8caace86", "sighting--bc9f2c70-79c4-4a38-b299-85418d64f026", "sighting--788caa26-2335-4aee-bc1f-c2722cb9ea61", "sighting--6e7f8963-b6fb-4c60-bd38-0528a12ef585", "sighting--0d651337-c988-4d99-be79-1bd9412278fa", "sighting--3693d90d-9f7b-4e65-8c32-191b1a0a21a0", "sighting--63e4e423-64cc-412a-8e26-2b1b2099e66c", "sighting--d22537ba-f903-4c3c-af15-1365ff754ca3", "sighting--0869bc6b-9145-4bd4-8bc7-b90c170bf925", "sighting--58e193b7-879a-49a9-b946-d4cc2ef06710", "sighting--67712d49-1ce6-4239-940b-8417e9dcbd96", "sighting--033ff120-4992-4a7b-b2f4-382082140d7e", "sighting--60e34cd7-bcde-476c-97cd-5402a68542d4", "sighting--444ccaa7-fe79-46be-933e-e6e153497b95", "sighting--f5a20995-bf5f-411f-a535-3bdcca4838e0", "sighting--295da916-c83e-479d-9486-f27196e431a0", "sighting--2b870348-2509-48b6-afbf-cdeba80dfd16", "sighting--e88a725f-19ba-408c-9743-91e9523d0b82", "sighting--c5144a50-8b75-43f6-9cee-03dddc279512", "sighting--dc83bd88-faf4-4c7a-b48c-64c3f0af804b", "sighting--913b87e5-aab5-4c1b-8878-bdf14981e892", "sighting--4218e84a-1767-488e-8d8a-367b087dd743", "sighting--af0ccf85-56fa-482b-a894-06fe68929626", "sighting--7e11a61e-a4d0-48f3-81b2-9ca3cd47675b", "sighting--2d8f0729-efa0-4983-a993-9c518b68bfb6", "sighting--a1a4f4b0-354a-4c9e-be1d-12eae1abd3ec", "sighting--0aff7583-7d6f-40aa-9909-b5736b02d0a2", "sighting--6b1b1bcb-a81a-4e5c-89ac-875dfddbf0ba", "sighting--6a37e576-8b14-4442-9a30-8547765a6388", "sighting--9e20ef87-d678-4db2-ab6c-fcc4c822b8ba", "sighting--50038a4d-2bbb-4b50-b933-b2a7c819858f", "sighting--b12041d8-0630-4794-a9f6-5aac3d9cf39c", "sighting--a1fc8aea-1968-48d5-b78b-7d7bf0e587e0", "sighting--d65aad7f-3c80-4ac1-be49-41f05931dd13", "sighting--51270722-a4fb-40db-aa7b-459718d087cd", "sighting--668eaab3-7f38-4ffc-a51a-0468127c2aeb", "sighting--15b018c8-aff9-4063-844a-81c4160944c7", "sighting--930797f0-c287-4491-81aa-2ac1d6149453", "sighting--9ce09907-3324-48c4-b854-9cfdf4e92221", "sighting--506ed6dd-4e46-42cb-8068-b6fb5043da31", "sighting--2c9b7b36-7711-430c-beb5-994ae2121aa6", "sighting--61d9dfd9-407c-465e-92e4-c34ee02ada25", "sighting--2fe562a4-e93b-4f4f-8061-ddb23491fcbe", "sighting--b4440915-63f9-4e0f-be15-dcecaa416028", "sighting--a849ae6c-33a8-404f-8968-67612d76dc0c", "sighting--d0f8d2d8-c4f6-4c68-af75-9505246860a7", "sighting--fda1780d-2af0-4db8-962d-d5908eef9a35", "sighting--a8aa893d-dfe8-48d7-95b7-c192c84bbba0", "sighting--6205a537-0bd9-4a11-b430-74df0448d56e", "sighting--0364bfc2-9827-40d9-ba33-731da186311f", "sighting--be2535bf-6ca9-45ee-b0b9-f65d3e430a2f", "sighting--37f251e0-4072-4c95-a0e1-bab61ee798fb", "sighting--5eb3f52b-d73d-4606-95ab-e91ef35ac3da", "sighting--883a3e9d-e482-4a46-86cb-eaa123c79c7d", "sighting--9ca04cc0-5a9c-4901-9da8-7207fb92a874", "sighting--63976938-a28f-461d-8cfe-02bd882607a7", "sighting--1575b5a3-2d7f-4eba-ad47-5b9ec837ebfd", "sighting--811f6206-8c13-4cda-901d-6aa37791d784", "sighting--267e4638-8df1-4653-a57c-16d05bb2a069", "sighting--cfbabe0f-6091-4e9e-8671-f7b3a3d022d7", "sighting--befd0ba8-2dd0-450a-bd5f-3e3e4c45466e", "sighting--c9c52cb2-53cb-4f25-af94-df456df9eb73", "sighting--f0b9825a-c29c-4ef8-bced-2eb124f64e18", "sighting--0335e6e9-4423-406b-963c-595081f71eb7", "sighting--852c357e-8c14-4f52-a3f6-c5b559ccec92", "sighting--22cc5415-eaea-443a-b11f-a4600ca4c759", "sighting--4e9d9bab-72d1-4b12-83c6-fe28175b2c69", "sighting--be60134d-2322-4c0c-a887-9759d0c8bd72", "sighting--a0981e81-cd50-4530-8602-acc77618b763", "sighting--09ee2573-c880-45f8-bcca-71b85581a25a", "sighting--87aa80ff-2f3a-4d52-b4de-374721fc5f12", "sighting--7a309f60-ef29-4aa0-8100-1d8ac274e661", "sighting--b1c23bf8-9571-44e9-98b2-1e38e9f5f473", "sighting--2fd3b7e5-dcce-4346-9b41-a0a07e86276b", "sighting--f8ba28ad-6583-4345-8cd7-fa1cb897e561", "sighting--fb6e1194-746f-4327-a002-1bfde056ee16", "sighting--f66ee628-7046-4a0e-bb89-8244bfb5bfbc", "sighting--fb1fa210-d3cc-4957-a622-8e53813f52f4", "sighting--964e8340-d92a-494e-95fe-8a7ec9e85c8c", "sighting--9a4d30f8-041c-49c0-bc86-7ff98f3bb0eb", "sighting--7a68fc14-0424-469f-9e89-184e6b632e28", "sighting--58cb1d42-954c-4657-8a96-d64cc686a2b1", "sighting--53051971-1ae2-4d2a-a6e6-c252d1f8f282", "sighting--d9061a17-bf44-4d3b-a1b5-14a8e7140a05", "sighting--9b95e563-f381-4fd9-a7aa-f52a32533289", "sighting--aa1bd6eb-ee63-407e-94cf-e140628e9547", "sighting--c4abe10c-a9cd-45d4-a9a7-0aa4daec58ce", "sighting--56cf7ebe-ba66-476d-9c86-571a9a2edb72", "sighting--18d17c1d-da73-49cd-862b-4cb2d93c7274", "sighting--91320878-c2fe-4480-8cbf-9e07112390b1", "sighting--a221ae08-7a36-4672-993a-e7b0e01b73f4", "sighting--89f87fe9-3d89-47b1-bc3d-618604f15929", "sighting--3a0f38ea-a66e-40b0-b0bd-f5e54d27a189", "sighting--6d8e8910-f391-4fb3-a892-6260f189070f", "sighting--927e6c7a-aaf3-4a24-8533-65784b83224e", "sighting--588359fd-d087-49fe-9615-b46af91a1cc6", "sighting--18ca8688-eb10-46c4-b480-a12a7e0a91d6", "sighting--c143f672-719d-4bee-886a-d4aae87fab59", "sighting--f6ca15ae-d617-47e6-a4c1-7f0eaefcc223", "sighting--7d1bc870-9da8-4a59-a190-906919d70954", "sighting--1ed29326-6a4b-42bb-9b24-43bb23bb62a2", "sighting--21a6eccd-3d81-4880-811d-fa85528bfc77", "sighting--d9922011-ddab-4f81-9b74-e8bcd0b12f2c", "sighting--9ae196a9-2bab-47ed-a955-85abd1eb837f", "sighting--cefc8497-d3e9-4b14-8e71-8d746a7fd4d5", "sighting--3b886f8a-a526-4510-aeb6-8c0d97675319", "sighting--9115e9a9-ab14-4ae5-a822-43eb7705e624", "sighting--a702c525-fd4a-46d3-a926-7ee7bd66964e", "sighting--e7014f57-47ba-42a9-b9e2-0aec01b571ba", "sighting--5807a259-95c2-4670-bc80-751641dbd2bc", "sighting--c594a2a2-701f-4516-bdf5-650c16b78923", "sighting--f377b040-d31e-43fe-b839-4e04f94aefe4", "sighting--5bf071cc-040c-4017-a2e8-b8e26fd23890", "sighting--b791953e-88ab-47f5-b079-34b13fbc8bac", "sighting--228c382e-964f-41eb-96d4-ac86f3f3dfda", "sighting--ada577dc-5794-4052-a49b-cd4b3832400c", "sighting--cd39f024-28c4-495c-a4d9-f400c330eea9", "sighting--5c92ae9e-ecd9-450e-a824-483acd22690e", "sighting--c235683e-147c-49fc-80a1-24014952d52a", "sighting--acee42fb-85b3-402b-bd78-e99ec908078d", "sighting--57982e13-f435-4c40-8726-cc676f9f7c4c", "sighting--29d8fce7-d39e-41d7-89df-f104b7d7b55d", "sighting--cc5bc3a5-8dc0-4a6c-a6e3-d1c9f114aca9", "sighting--833a9a93-a065-4dc0-ba66-d400cd7fdacb", "sighting--2369407f-e240-41a3-9a48-747a97db81bd", "sighting--48e3b8a6-b808-406e-b872-649d4dca8f88", "sighting--397b8b67-5ff5-4e1b-9b84-b5e0e8211f5c", "sighting--97326299-b05b-4536-ab73-c7e0000b1ef5", "sighting--25e8d170-972b-4f5c-8144-9dec7c584119", "sighting--c6aaf92f-357a-467c-9119-9ae0f2654564", "sighting--5dd230a4-46c8-4597-b0a9-a59b109a4f3b", "sighting--7f732216-1da6-4a0f-aae8-0463f559ee2d", "sighting--db916edb-76b7-4540-bf54-047451c741c0", "sighting--9bf45843-9fc5-4985-b30f-854781b5db35", "sighting--7aa6d1b0-e725-489d-b20b-eccdf4bb7c8c", "sighting--a7e4eb2e-78fc-46df-a29b-199a94aa4e8b", "sighting--bad7dc22-e1ff-4b1f-a402-d6a2b14d3ef5", "sighting--2cdf2633-b97e-4a1d-bd87-93fa5b244c14", "sighting--794e625e-b938-4ed5-b76e-3b068cbc0e11", "sighting--78872a45-d79f-47be-a43b-46c8cb88f9c0", "sighting--1de38c9a-8894-41a9-9a32-61f5f90be7d5", "sighting--8f9e63e5-1646-468c-a37a-db3de2b735db", "sighting--d325f380-8de8-454c-af08-0cdfdb1e85cd", "sighting--62b0c6a7-78fe-4743-aaaf-2c5ba60a7f02", "sighting--def98e91-d07d-4e9c-9e09-0cb2cf579065", "sighting--6dba44e9-1da8-4818-b35d-3ab605b03a79", "sighting--1301ee55-b1a2-4ff6-815d-a0a6ae3e07ed", "sighting--efd4548f-448d-4d28-a7a4-02ac2078227e", "sighting--7b39bc25-5db4-4600-b229-090dc8b9fa0e", "sighting--1749b452-31cd-47c3-b999-9b2a328a0b1e", "sighting--cf642a1b-65df-4beb-8fb0-9a634443811a", "sighting--00e5ed8f-6e0a-4fbe-ae10-0530901a16e8", "sighting--399643e3-3b9f-4371-91d0-c7d1978a5e1a", "sighting--27fa02e4-0a09-49f0-8f41-342728c8cabe", "sighting--07cebe8c-932d-44e3-a123-dff23aba8d67", "sighting--51a8213e-2d3a-4a09-9ff0-50863273f96b", "sighting--196e6174-4a75-4d7c-8fb3-da7d00e851ca", "sighting--4a90baa9-3812-40b8-b948-015e656bfd56", "sighting--220c5c81-3363-4ffc-967a-8db5728ec94a", "sighting--405c5e1b-2f3c-478d-9e2e-e401e0ff51ba", "sighting--d0afce19-40bc-47d9-a4d5-968b620e9e1f", "sighting--8de7f753-7262-41d3-bd97-a827c023f18e", "sighting--49a5b224-6d89-4ac3-9801-3a2002b58fc8", "sighting--9ef42d74-700b-41fc-b2e4-0527cac098d8", "sighting--afb2fc3a-b630-4abf-a1c2-9e78f2f4a332", "sighting--2493a30d-c7c8-4b65-8727-3dc0e48c16bb", "sighting--1b8b8c38-dd6d-49e9-b28f-e41cb6b446f6", "sighting--23a98a8b-c36a-478c-afe0-5daf1b6de725", "sighting--92bff4a2-378d-4db3-bcf8-502ac4bdf208", "sighting--cd6910c6-f631-4cf2-ae4a-e27f89493f3c", "sighting--5a52a946-04d4-4d83-b47c-65c2b892075a", "sighting--67cd02ff-48e7-4194-9d13-6dd9e3669cd8", "sighting--80312c73-d3ea-4df8-96be-2c03b0578f0d", "sighting--6f40760d-90a1-40c0-98ad-12f8a14d9944", "sighting--7f055c75-63d6-4652-b5bd-6520ebd4a7d4", "sighting--bfcfbb57-30db-4995-bb11-47ea5ee2ca3a", "sighting--685a86d4-09f3-4811-ba18-fd9448bd13c8", "sighting--403be21b-097d-481c-b52e-373ade50939b", "sighting--69739224-ac43-4790-b070-03c5c11297f4", "sighting--6df22f2a-45b7-490e-b204-4b6004e86859", "sighting--b7be7be3-0f8c-4f21-93ea-526573e4cd0d", "sighting--2c705199-c736-402e-8d76-f5f8773a1ec4", "sighting--93003651-7b16-460b-b58d-43f6e715557b", "sighting--7b72bf3c-60c2-4332-adf9-904fcb131872", "sighting--9777a09f-ad65-4bfa-984b-8f176076f4c6", "sighting--755a0247-9913-4c48-a08b-3b78073c9c71", "sighting--ae91f560-ae96-4146-a815-354f5aca8aee", "sighting--40e55fca-1e05-4c26-b9bf-37751d2996eb", "sighting--f00b84f2-e3eb-4f63-81b3-3ba85bb4da8c", "sighting--3a7f89ea-7aaf-48c4-875a-d23461250eae", "sighting--730900b5-badb-4948-9f0a-d841f4799246", "sighting--750c742d-ba3d-4374-9b26-a70ca1a11110", "sighting--0ae2fe3e-9a35-4a31-8eaf-ba29a0f7c109", "sighting--99a2d43b-c81b-4b24-8a5c-8c4e2d4ae326", "sighting--7ce8ac72-0fce-41a9-b5a2-c4e82841ce6b", "sighting--07e7fcd2-3883-4bb4-9afe-02eda6a3b4fc", "sighting--1d2619e9-7e9d-4f4e-9782-0a6c96491601", "sighting--9d430519-7d2d-47bd-8d4f-ff937c1fbe9e", "sighting--4a72bea0-b068-4c76-b666-d4d8bb3d2068", "sighting--f52c9d6b-b712-4d8d-8ae4-2019772bed60", "sighting--42a33af3-8140-480e-9917-75d1b09ab3e2", "sighting--5ed75615-b5b5-4c15-aee8-dad94f0a16b7", "sighting--a49ab2af-73c0-4b93-b516-a33f444dee00", "sighting--b385238f-7a69-4214-90b6-744e4142d510", "sighting--b5efeb24-23ae-4123-ac9c-f1376f875e86", "sighting--16eeb7f6-8125-4b69-87fb-0d0dbab884ca", "sighting--256ccf62-f5a6-4287-a83a-ac0548a0178c", "sighting--584b0559-802e-4fcb-a2f3-0ec9e53741c8", "sighting--2ce47064-f289-4cac-abb4-fda8634637d5", "sighting--d9bde605-c19c-4749-91f9-698552cbff73", "sighting--6b653c35-d4a8-4a9e-b917-c293c9608566", "sighting--3b397b38-3766-43b1-8980-73d92316a9cd", "sighting--8896efb8-fba0-4814-8219-ecb031507189", "sighting--7c35ccf8-c45a-42d1-a895-b97e4015a592", "sighting--4c7c946c-ec7d-4a0b-945f-4694c1b49894", "sighting--51659141-3c27-4773-bdb0-7385e04aa103", "sighting--ff3fe48c-f952-40c5-95dd-adad3fa6f356", "sighting--218a9451-3b31-4ac6-9a5a-04770db9bdfa", "sighting--d7bd952b-0aea-42d1-bcaf-e5278178192f", "sighting--76542f19-d5fc-4016-b2cc-5220ddd23bde", "sighting--9484c91d-b1ed-4049-a4da-1817a0c12086", "sighting--1407ef9f-f207-4ed0-a8c2-f431478e3e9e", "sighting--b73b481a-059b-4429-92f9-67bb36a78dbc", "sighting--c0543b76-abd6-43d3-927a-aa0e3831254d", "sighting--73541ef3-71fb-4fc8-86c7-69cbd30bee7c", "sighting--201f8558-bbf0-4adc-af68-70c1e51d25de", "sighting--b961ed89-599e-4278-b20d-1dcaabbf35a7", "sighting--b64dfcea-cdd5-49fa-9ab6-11fea8d32433", "sighting--a79f004a-0e8a-444b-9551-81a6d1fca639", "sighting--d6982bca-1c5c-4385-8cfe-369c3ab816f7", "sighting--8341eb1f-25c3-4ce2-aafe-2089d12e3fe8", "sighting--334010f5-485f-4e26-8e8c-6ffd4cabbcb8", "sighting--0beb0a17-2cf3-410a-b023-39b5721d9a2a", "sighting--069c99c5-dc20-4a6f-9f33-a8475962123e", "sighting--7999d805-9a10-4e0e-9b26-c701858070af", "sighting--6aca0d1c-440e-464e-9bf8-9198108db984", "sighting--e23a7803-14d9-445a-a8d1-c085057bd988", "sighting--9766d9f9-f7f5-4e70-90fc-951de40c983f", "sighting--9c2d7d3b-b329-4179-ae9f-09da2fe07b0b", "sighting--0089222b-429b-4222-b90e-eec0e01ea983", "sighting--1d6b21eb-2ff3-412a-b72e-eda8e18be430", "sighting--fa48dc90-25b6-4803-a13a-4ede442874c2", "sighting--73fc291b-4762-4729-bf2c-a3e84af7b1d7", "sighting--df6779b1-36f4-40ce-9c23-36a1438162df", "sighting--103d9d51-66f4-4833-af7f-150342a58f1c", "sighting--c3590bc5-a3c3-41e7-b566-62a7b342d7a7", "sighting--7c35b674-febc-4464-872e-d2fa4f86fb32", "sighting--010942ab-9a5d-4ab2-92f7-26fa70720a13", "sighting--409335e7-8262-4311-be8a-cea8a8ee138b", "sighting--70b36ad9-1cab-4209-8079-50e7f8c96602", "sighting--b23bbf51-4bb8-4001-aa0f-2fa36f6f2478", "sighting--6cbed550-667a-4d7b-bcdd-e4262d809223", "sighting--e169a3b5-55a3-4eb9-9411-aa7675b8c0fc", "sighting--d2d93eb7-67a3-49e7-96bd-da955fa68f15", "sighting--6fdfbf49-d9f3-47cf-ab29-0602d5d3586f", "sighting--436f9bf9-7b79-4c34-b63e-afc645bded79", "sighting--94f72e9c-635f-4eb9-bdac-9065a52806db", "sighting--44deb189-6a38-420a-a05e-dad5780cd01e", "sighting--02993b9f-24f1-409e-9568-68b2239e5b8d", "sighting--15371150-d7e4-459e-aa9b-0eee6547df62", "sighting--40321540-842a-4d6c-8307-2de05d6aeca2", "sighting--d8e5e1c7-f055-4e1c-a041-14fc872ae242", "sighting--bd261924-973a-4610-9bbe-0cb66a62976b", "sighting--e6e80862-3ae6-4ad2-95d6-dfaaa4d9de12", "sighting--fa1b2cb8-0f4b-48a9-90b2-a2474583cbd6", "sighting--6fbf1e85-8669-41f0-8e68-e3addcd8b4bc", "sighting--5c69d97e-7a1c-4784-bcad-810bf24d03b8", "sighting--547457cc-79bc-458c-99e5-557569c8233b", "sighting--5e864609-54d2-468c-b866-00c704b0a088", "sighting--bc3979da-69cc-40ce-b4c7-ae4be969914e", "sighting--12026afc-f948-4463-9953-62fbc9f9850a", "sighting--ea52e591-3458-423c-830d-aeae11aef093", "sighting--343ac5d4-043b-494a-9ee1-b51c1cea9b44", "sighting--ec3af8ea-1d93-4cc0-ae02-658b1272fb12", "sighting--fac92c5d-36d0-4aa7-af73-12c0b2e008a5", "sighting--a84f975c-a643-4cfe-8b8c-3cbc98c3fced", "sighting--e00b893b-f0d7-4152-8653-82705c9d33f0", "sighting--29ae1555-9ad2-4e3a-ac47-8da6ce777783", "sighting--27254418-4996-4b0e-9806-a367860b055d", "sighting--1c073e83-ad63-46f3-b03c-89c4ff7b7c6c", "sighting--aeb1f0f3-838f-4fde-b22a-a09085f571ca", "sighting--a73faad4-3b69-4879-a2a9-2ebcaecaa375", "sighting--63175c58-6f1e-4524-9853-9345f667c5cb", "sighting--fbfb9003-77ae-4807-8191-89e605036860", "sighting--9a9a2a97-4b1e-4504-8627-6cc52e329388", "sighting--a5cc286d-e5b2-4d38-ad6d-8c8d4bd27b56", "sighting--c6b8e675-9fee-43f9-a0d3-6f6729edd0ea", "sighting--8e9291c2-4503-47aa-8dc7-a8cbe8b4a473", "sighting--177cf111-3ab7-4af0-8413-8e9067eab110", "sighting--1c17f982-09e9-40b3-9843-6d2339f49773", "sighting--c2c56ca5-59d9-45ea-a8b2-315d5750b96a", "sighting--ba93a2b5-73dc-4c7c-a9af-63fef0c03451", "sighting--87e5a325-05f6-41f4-8f2d-b462b753406f", "sighting--8465d754-c8d1-47b7-afa2-7362f4e76985", "sighting--fe9792dd-6f2c-4d9f-89ab-ba1cfc2794e3", "sighting--e3a793a4-9e48-44fa-b3bc-86c6159c738e", "sighting--bf634a14-e824-4ef7-b8ee-b06ee11c8fdf", "sighting--0cdf4e94-c429-4e91-9255-a8fe663714ef", "sighting--3d339182-f769-4f03-b1fe-025b2aafb7ac", "sighting--d50b8e19-1acb-44e2-83b8-44751c2f5ccf", "sighting--feb3e792-d409-4c23-a107-7bde96ff5346", "sighting--9d5b8fa9-8121-4a68-8542-c697b6f5a563", "sighting--63abb643-683d-40c4-b990-9f2e9baeb25a", "sighting--33762542-e954-4633-9cd4-75fb41a39a48", "sighting--1ecd482a-9627-4777-9f8c-9b465a4e8921", "sighting--fdcb22d1-28ce-40fb-9cae-a7833e197826", "sighting--195b8921-8943-4170-9ce0-bdd04bc569ca", "sighting--169fdc17-30bd-4c99-8059-ea4addd551cb", "sighting--ffb23518-15e9-4d97-b4cd-df574206d9d4", "sighting--8ebab6c2-0f21-4e18-adc3-978a64e2ec23", "sighting--0e5cb6a2-9636-45f5-a726-509131a612fe", "sighting--85a94a92-d583-470c-af29-9204fe3e3f52", "sighting--01257d2b-97d3-4da2-b4b6-580333bca436", "sighting--e10209f4-95ca-4bd1-858b-46df7860425e", "sighting--898154a8-42ad-4277-81b2-e0beb1384807", "sighting--e6cb69ef-c9ca-4008-b02f-9b6fd2799fb2", "sighting--52c615a4-4e35-4435-b6eb-37ea4caff8cd", "sighting--f2b2d3f9-00e9-445f-9111-148d8f411641", "sighting--86364d33-38c7-4c0d-be5b-778c9fd0aa76", "sighting--dafb727e-21f8-4aa3-b792-bde14438fc9f", "sighting--eaa7d90b-5d57-4927-8df4-de2bd32ad2b5", "sighting--172a88d4-7ad9-487f-b5ae-fea53dea3838", "sighting--be76654c-71e7-45f4-829b-0e1ba50d2adf", "sighting--983265ab-163d-4701-b398-2dbfd80c33b4", "sighting--5c09f1be-4fc4-479a-bf0e-7d75d612bfdb", "sighting--4520742e-a605-48da-80b2-a2d7d8ffd295", "sighting--b6caac58-7c84-4d0c-a86c-dbaeacb8296f", "sighting--f863564d-6209-4950-90bd-75cd7d13e7fb", "sighting--e6477b0a-3e37-404c-8e6e-51aaecf64fab", "sighting--48d763d2-15fd-4eac-a5c3-05d2085e6608", "sighting--80888464-c17e-4f87-964c-3c8226ec0b46", "sighting--d6b270ce-5bf6-4dcc-aa1a-28ddb193e336", "sighting--2b38b06a-ba19-48e0-a48e-6aaa3021d930", "sighting--707c5288-f473-4612-86a6-7452459fc297", "sighting--19da78ee-3502-4e2e-a100-fc902470eac0", "sighting--98e7946f-0ce7-45da-863f-ab38249c2c13", "sighting--8606ff76-8435-424f-98af-0cddcdf85995", "sighting--74797341-214f-4c29-9624-cb72652a1ffa", "sighting--3f8e820c-8a4a-4b7f-b214-327faad63cc5", "sighting--ba6beb13-04cf-45c0-aab4-cc995e624f3b", "sighting--4aa121ae-34f9-4adf-b546-f0e9750bf433", "sighting--53bea699-8df6-47be-ade4-b35db74e7848", "sighting--2e06f498-6d72-43a9-b63d-28600d92794e", "sighting--d5dcde58-98ad-4a92-9ea6-8fbd3e2a477d", "sighting--b159c569-78b2-4842-9b0b-6dec4eb42aeb", "sighting--c976f3da-0fc1-4978-bf53-aefabb45d630", "sighting--8a81309f-bb0d-4a67-9f06-7789601e8567", "sighting--2fb4f037-b46b-46c2-8f26-e68150a2ac60", "sighting--bc5f7d04-989e-4bf1-ab02-e55588b1b250", "sighting--191c4621-19e1-4a32-9169-2beb21b2fc9c", "sighting--da1538f0-c272-4472-929f-ac37384074d2", "sighting--bcd43e79-9a66-4472-ad0e-d04a0ac2a087", "sighting--f8720144-98f8-4c2c-909d-ba2d951fe636", "sighting--922a72c8-38c1-41a4-8342-3938a9fbebd3", "sighting--a1e5e412-a727-4f87-9dfc-a6fc6fd5fce6", "sighting--d0fef7e8-7d01-409f-ac65-159c040f5b54", "sighting--11a76bbf-992b-42b8-a565-42167d3c585d", "sighting--6e916feb-84ea-4352-bf8e-7a2c828764b6", "sighting--021e2cd5-6a9d-4c3b-b055-c1e898e7584a", "sighting--5a1e3eb8-ff9e-4aa2-bf9c-2b48576bb6d0", "sighting--86accc7b-6014-4836-a1bf-a1206c07c96b", "sighting--de7d8d59-63ed-4d04-9dd7-787f7c481244", "sighting--aa6fccd4-81c4-4797-9f81-df4966a41923", "sighting--e21476af-6d8e-4523-8fd5-9d732aa03a1d", "sighting--9862eaae-236f-431a-ac83-63083adcda44", "sighting--aa6307d1-cc46-4b06-b50d-6cf6f7e2d967", "sighting--6436109b-355f-402b-ba28-41da43b42ed9", "sighting--c55f29e5-8c80-4a6b-80f1-31bd77fdc857", "sighting--d05f501e-a358-49aa-98d5-091b67550c2c", "sighting--ac5cf56b-5300-4c2a-ba86-7a8c03721dbe", "sighting--99ad4c6c-17c0-4a79-a842-293316202db5", "sighting--a1258d81-64fe-46b5-8f39-efef112f1f1f", "sighting--1014e55f-bd4f-4cab-b59a-938f9b8d0735", "sighting--89b3223d-058e-4add-8cfb-6f09620af56e", "sighting--4b56963a-0e58-493f-b20b-c6cf8cb07c5b", "sighting--25e7f70e-8898-4345-a796-022281b49c65", "sighting--b3dfa5dc-55a9-4fdc-af01-9afbfc1cc971", "sighting--a3a8949f-5b37-48c6-a072-8664e8897e7a", "sighting--4a024ce0-75f3-412a-ad2c-7719afd88f6b", "sighting--a30dcdd2-d204-4ebb-ae92-03f5366cdf7d", "sighting--b2f53c0c-63b2-4067-8adb-6b133c6d5dcc", "sighting--5cfad30a-4cc5-4af7-b0f7-625e99c8e67a", "sighting--57d3b541-04b1-411f-9c97-549bc91b1aeb", "sighting--32036d4f-0baa-4511-8a1d-00df9a5ee2c5", "sighting--e6a8597d-0beb-4616-8951-147d94a5d607", "sighting--5af0346c-83a3-4341-ab7c-8286996dbd1d", "sighting--d0c0b941-440e-4b1f-8062-6792e588d8f2", "sighting--5aeaec23-95be-4930-bda4-5482110ecce1", "sighting--00e9b27c-2e5c-4a86-a2e0-71e72833d48f", "sighting--be259a8f-ce83-47a1-9ae5-d368df5cbecd", "sighting--c492b1f9-f736-4489-908b-30f9b08cbc23", "sighting--cc241aa8-e9f0-49c2-8e1e-95b6d98dd6fa", "sighting--9bdd9217-081c-4bc9-ba8f-1a2a0492cede", "sighting--a0683a0a-99e7-4e08-993c-c571b728a29e", "sighting--d53ad5e6-4390-4a19-8c25-6d38e5c2403e", "sighting--1c3c6663-eae4-4ff6-b47a-c7c8a1d7d4a8", "sighting--7d7392d2-0992-4147-85e0-73eba034895f", "sighting--f5cba338-7008-4586-90a4-054b833ef34a", "sighting--2258572c-a6d9-41a7-adde-91e78508b9a9", "sighting--d0744570-b9cf-4fae-996a-ee3efc9d7d4f", "sighting--0960309d-10e9-44d5-a3c3-c20c6f4a3a0c", "sighting--17818431-7060-42f7-beef-5fd6bc8c7b0d", "sighting--cc569fec-431f-4a5f-ba0f-e0c7c0696998", "sighting--e3ef56ae-a787-43b9-832c-c40c4ccaf91f", "sighting--d145bff7-c75b-488e-8c73-aa4af6f7016c", "sighting--64748fdd-431b-4ed1-acdb-ff09acab8a94", "sighting--bd76dbc0-d1d9-4d5d-bca4-94d0f91a8a54", "sighting--4ab08ec3-8d28-4cf2-aa79-c9eba8766b90", "sighting--5a3a6960-c6d0-4432-9a41-70fd2141f822", "sighting--6f8757a8-39ba-42e3-a2b1-ae75d73ae218", "sighting--7bf6e093-9b39-4c85-989b-6b71e0a7a38b", "sighting--4dcbe9ba-f8e7-4ea9-81d8-471c4534b12a", "sighting--2b85e02a-f95c-42f3-8293-a9795cca71e7", "sighting--e61e9001-f273-42c4-9163-ee8f74d992e7", "sighting--d009eb8a-9d55-4c2e-8557-89c810c35d60", "sighting--d6e30dae-eb08-4058-b9a2-7b26ca1f5132", "sighting--b9b75a65-bc44-46d1-90b0-ad17408f24f1", "sighting--d8d76edf-5226-4611-b538-8569381ccd74", "sighting--1381df98-78c3-4e9c-8c58-2cda2e80202a", "sighting--7cc86cda-418d-466f-8059-520c978b8bf2", "sighting--9f6e8c85-7de8-4cb8-810f-73fa0fa12226", "sighting--ed4b8a47-4c70-4b9d-b8b1-342ff792af7f", "sighting--f1b06e4a-e559-4954-a85c-a2ff8f9d6a01", "sighting--6eb2a541-7c3f-433b-9aa8-40946998653e", "sighting--85b21420-7698-4e13-afff-0be1098a2729", "sighting--415c15e0-f8fd-4d2e-beb4-35600d9ece7b", "sighting--54a02928-2354-4776-a640-a7d0f9f7282e", "sighting--6af19486-8489-487d-a3f5-79cac508716f", "sighting--3339f9de-4dea-4d8e-b22d-f2c7f62f8499", "sighting--3237dafb-13b3-4049-be6c-9ba274f86c1a", "sighting--d7539516-0aec-4c3e-acc5-10adafd4bcbe", "sighting--8f5085e3-cfed-4531-83fb-12e563b91f85", "sighting--746e83aa-8eab-429f-a9b4-e09366c8aa6f", "sighting--5ce12869-5eaa-4a5a-a0f4-a5e96b0ad0ec", "sighting--6be9e76e-da59-4018-82e1-6309a75203a6", "sighting--d4cffd11-4c03-4bab-b60b-549c2e40b46f", "sighting--baa8aa46-07b1-496d-a38e-618539259945", "sighting--2b21e78b-042a-4f2c-85fc-e16f7f946536", "sighting--8f2ca193-d780-4ecb-ba47-4d8d4b2db2b4", "sighting--45114a80-c2bc-4257-ae9f-f808db567ec8", "sighting--bbccd71d-ed6b-42b8-8476-e73129a310b9", "sighting--811b439c-04db-4bcc-9b0b-47640229b574", "sighting--c7ca598b-b3ed-47df-a012-939d7d500f2b", "sighting--f615b701-f4c0-4235-8335-9feb81d6036f", "sighting--49d34c26-2fab-4484-9ebf-cb661953ff0b", "sighting--12ac86c6-2823-4641-9179-550072eb6488", "sighting--b7b8e550-664a-4a56-bd8d-4945a00e638a", "sighting--a3428911-dc4c-42ff-8c80-b396ec713794", "sighting--1f181032-b33f-4fa0-9f93-85bff7d4b3e6", "sighting--49487ed4-a5eb-4929-8416-0f2b3cbe5b58", "sighting--1b596e3b-cbbe-4026-8d47-49057d2b0c1e", "sighting--256ddb08-f897-4e8c-9346-62580d8ee175", "sighting--6822c29d-dfbb-4d04-b5bd-08ae8f2f37bb", "sighting--1347d0e7-af16-4a9e-9a78-aeb647eac7c3", "sighting--cdc113cb-6824-45a7-bfa8-efb155394016", "sighting--7725a025-25d2-492e-a636-2abfb8963e01", "sighting--9c8d24ca-899f-4407-bb15-bcd8dcff3d78", "sighting--7cb4c0d5-e67e-4544-900b-90b537775b2c", "sighting--be09bc2d-6172-4ad1-a0b8-123238e044bd", "sighting--265ff30e-4c5b-480b-ab1a-d7d69dd63b12", "sighting--d8918005-3254-47fd-8b91-77fe4e67072a", "sighting--509a8a81-e89d-4ae5-9d1c-26f00f9cd3a0", "sighting--e82e1faa-99b3-443a-bfff-9f102ac57dcb", "sighting--8fc9f5f1-03cd-4791-b48b-6369c4f1a9e0", "sighting--c547e470-7190-4e83-a067-e51d8246b970", "sighting--39b787e3-5263-47e8-892c-e51795bb934b", "sighting--4edfc0ec-1e8e-4855-8956-8a76b0c8b3d6", "sighting--ee66d284-9b8b-44c2-a884-ceef6fbd90a8", "sighting--6c18caf1-be44-44f6-b22f-153b10826816", "sighting--d9b85210-ffbc-4b1a-a92e-8886fc310904", "sighting--ad205d15-1247-4204-ab24-a052b0b00fa0", "sighting--9055f13f-26a2-43bc-ac6d-613a1dc8a4af", "sighting--88fcb51e-e4ca-4b26-92ad-d80759ddfe8d", "sighting--cfb2c1be-930d-4338-811a-11347f96b4d4", "sighting--f75f63c1-6f1c-4be0-9348-c38f5a5e8e30", "sighting--3b4fbb96-49e2-4010-ba10-143ef1b65543", "sighting--6caeb267-2044-42ea-8198-4bdbdd896d66", "sighting--b66da78c-7e88-40c2-8e6a-aa34350dd33f", "sighting--6cfc6004-a4aa-459a-af4c-23ba6d362d9d", "sighting--c551a8af-7420-4db9-a811-7103611ab1b1", "sighting--5fbda767-5298-4a09-8786-b4372f624be0", "sighting--8b3656ad-6946-4a18-ad84-d6266143e0a3", "sighting--f7a2cb46-911f-4ae6-9d1d-ba8bd3dfb323", "sighting--042219a8-72ca-4392-8d40-e0e529f8c344", "sighting--1e051f93-3a0f-4f86-a929-0611fe23cf48", "sighting--be2ebd2c-3fe1-44fd-aedb-47aab46ad4d8", "sighting--4a9f16f8-741c-4209-9e79-a8cccd313eb4", "sighting--f1c8f936-afde-48f8-aa5b-ad95867cd486", "sighting--46433a4f-6689-42b2-83db-5d7887f030c7", "sighting--0f97739e-28cc-497d-8512-25006a2cb2b3", "sighting--f188be30-e523-4fd1-9003-bf4d402edd17", "sighting--53a5e984-16f3-48b0-90a4-5b49cf0cb3fe", "sighting--602f3818-7cbc-4f4c-8dfe-ae1f180fbda3", "sighting--f9919638-feb3-42f3-833f-55029077c5dc", "sighting--f31a41d2-1689-487a-970b-5351eb01c561", "sighting--280c1817-dc51-44b1-857f-728709d36d1b", "sighting--a5523951-92fc-4ff0-8e52-87008e367997", "sighting--114f7229-cf39-472c-bac3-bb6e956c2f5c", "sighting--977bfa15-6771-4e6e-8359-f9e50cbad775", "sighting--c217a76c-a564-48ae-a02d-c5675f8f48ee", "sighting--418effee-b3cb-498a-b9f6-f07cbc53f49c", "sighting--c6bb3705-78d1-4cbe-bd59-f55fad16a8cc", "sighting--00463bfb-b289-4d31-9c1d-e1b09e6ac488", "sighting--3c1c3a0b-ba94-4117-8492-c5c601a569a2", "sighting--e9651d84-fccd-433d-86e1-29b3130e6d58", "sighting--082add15-6005-4469-bfc4-d99d376bb4d6", "sighting--c5c43bc1-fd67-46f4-8806-034711f97537", "sighting--fd6a5712-a387-4e05-aad8-59fdae4cfeda", "sighting--2d1f06bd-7046-49a7-bce9-4b474a83883a", "sighting--59ef6258-7baa-4f48-bf7b-0e5545a49c7e", "sighting--7e2f0a19-f471-423c-9a95-3fd23b91e39c", "sighting--68973bbe-df67-49d3-9280-281bbf2c5604", "sighting--d3844427-3984-4e1c-b6a6-16c401927ef1", "sighting--da1c152c-c654-4241-a7b8-ddad1ddbf700", "sighting--769f8f20-7701-4f9d-bd9c-378fb5af2479", "sighting--41918d5d-1c06-486a-998e-96ec8c0554e1", "sighting--b1bbeb63-d532-4e5e-9212-de13aea6d18f", "sighting--fd554424-c83a-4f38-a16b-5b4f82374026", "sighting--965806b4-1ca8-42a6-949a-6c9faeb078b1", "sighting--ad05b15a-335d-411c-a709-c8fa18b87aac", "sighting--73ab95c9-95c2-4d99-b392-4162992dcd02", "sighting--d43c7efc-759e-4d8d-a495-d52199bb7a48", "sighting--7a9f73cb-af00-4d3e-a418-302fc980cc01", "sighting--44f0c759-cfea-400c-9535-ec5d1d105668", "sighting--78e2f11e-15ec-4b28-87ed-d5a12dfc8961", "sighting--52af609a-d793-433d-9d43-324fb56a004c", "sighting--1bee5fc4-d52e-439b-8af9-6aea07018815", "sighting--a1ba676c-ed74-4682-8890-19698b0e2d80", "sighting--ea443b31-8531-4c2d-992b-12ccb6cb583b", "sighting--e82f8041-d797-4837-a68e-af83c7c9efec", "sighting--7a2f6eaf-895d-440a-973b-591c903abd05", "sighting--72888bd8-4d55-45ea-ac25-de21c1eb7eab", "sighting--87390868-ac5d-4e92-ab5c-b07c41734571", "sighting--cf0773cd-ac7f-4b64-bdac-9ba5fc7f90a8", "sighting--cab24611-1eba-4e2c-b911-923e532fb871", "sighting--6dabee87-9139-40df-81d6-25339fd79812", "sighting--a2c52955-7985-4671-b95f-fe4ef9f10022", "sighting--13e3ad94-69e7-4b89-adb1-3e543606850a", "sighting--61dd9487-5a12-4cd9-9e37-d37d745515b4", "sighting--3dcba4ab-c64e-4191-859e-162920321797", "sighting--4568b445-3daf-4f43-95a4-ad16520344df", "sighting--e4585344-0009-42a4-b1fb-388421438fc4", "sighting--ba51e61f-e12b-4d1b-a33b-68c6c51fd751", "sighting--b2e0e364-23c2-461e-b921-0b6cf40d8b6c", "sighting--85ae9bdf-f180-4081-aabf-4576c9859e81", "sighting--a11f3f98-2022-48d4-b56d-3363af2fac50", "sighting--10142af0-bf87-48e8-ae95-2a494e6a8ddc", "sighting--5da56dcd-195f-49f1-a8fa-27f3a4812bd6", "sighting--9a700289-bc15-48e9-920e-42d3b3e6c32e", "sighting--6a18b5f5-8474-4419-879a-237b4b24043c", "sighting--3ccd4ae9-5498-42cf-8780-7c0254bbee9d", "sighting--1f7b0475-9efa-41f2-a627-10d32e0639ab", "sighting--7e9cbe98-e003-4e70-8da4-eb26304dfdfa", "sighting--2b662d3a-ee58-4225-8111-b6ca8201fe2e", "sighting--45f92771-2525-4ea1-844b-5243bcbcf487", "sighting--ff55bcd9-8d9f-4ff7-8638-afd95601f2c3", "sighting--dc57e9d6-e5c3-4f1c-bb0b-532ca683a7cf", "sighting--878208ae-3e98-4d9d-b79b-1c3d64fa7da7", "sighting--2a0933e6-70e1-4d68-9260-dcec166af795", "sighting--45ed7e3a-a3cf-41e5-804b-cc86e60677dc", "sighting--ee6e9854-bb2b-4d72-b741-b53fe3f6746c", "sighting--b25b2ee8-d210-40fa-b53a-4a17b0cf27ac", "sighting--ade5b638-4a37-4d60-8ff5-906aaf841ef6", "sighting--b25de851-3a5b-4462-a047-8c0bbeeee1d5", "sighting--2811c244-4b92-4d6f-bf3e-3205834da4c8", "sighting--a16fd6fb-3045-4274-b6a4-4953f0756788", "sighting--ba443e50-204c-44ba-9138-957fcc8e789b", "sighting--0f79a3f6-c592-4ba1-92af-8d4d6d88121d", "sighting--bfc44d59-61b8-46c0-83fe-e03e23df3c75", "sighting--30fd7681-4369-4672-bb99-c0af0d7152c6", "sighting--08416e8f-bf55-4ce0-8a8f-65cb72d7d4d0", "sighting--1419862d-f660-485c-8c79-443755f3e4a4", "sighting--586cf275-bf14-45e5-9473-e9bfd9fa15f8", "sighting--65392e9c-c95a-4322-8fe8-1e7cbcaaa59f", "sighting--403bfbc9-2ca7-431d-ac51-173cbcb5b975", "sighting--45514a89-3f28-4efd-a900-e6141419ed16", "sighting--0b2e53d6-de29-4cf3-9a1a-18b7ee721741", "sighting--716ec015-600f-47dd-8648-d2492f4dabc4", "sighting--dd0ab2fb-5245-4b0e-a168-a2c339b54d76", "sighting--7c582dab-08a6-4bd5-8a07-1ed52ac70ba5", "sighting--81db542b-fb58-420e-ac6c-49423c1cf1b6", "sighting--ab780894-94ed-4f0e-9495-04352ff7915d", "sighting--e177284b-e5aa-4ce8-a341-3ebe689f85a8", "sighting--f9653991-8dc1-4a31-9856-1e1775f3bfb3", "sighting--487b70e7-9ff1-4e24-b68b-0061660761ce", "sighting--0972ac84-99b3-4743-a37b-7d03c6796fb5", "sighting--4c6de537-8be0-4a1d-ac27-768480778da2", "sighting--c349301c-474f-4d69-819a-e05a3c5d7c89", "sighting--a6a9a5d8-b055-481a-8c31-958b46e5fa76", "sighting--a43980c6-4e7f-4865-a9ce-a941de84148f", "sighting--29fbc934-2fda-448c-b058-8a7f29ca81ad", "sighting--27c35c60-7a44-4142-be0f-cb4736ddaea1", "sighting--982b4f69-8fb7-4f06-a967-6e2ccf834734", "sighting--09996175-5634-457b-8a09-880c788d144c", "sighting--40098070-7c15-4b5a-ab64-4544688935ed", "sighting--5940dc14-df15-40aa-91fc-2652cddd4661", "sighting--e601c367-37de-4883-85de-9851d42df934", "sighting--429ab1d0-ca0b-47db-a782-0f9ae14303e1", "sighting--a968dbb7-0cd8-495e-bf8d-a25a44999fd4", "sighting--263fe6e3-6411-4b2a-a5ad-bb4599c5ec48", "sighting--e78c1886-8fb0-425d-aeac-fde104776741", "sighting--f6fd3d46-2afd-4c52-85cb-595e8f3723c8", "sighting--72462a35-a8a9-469a-a4c6-d47898590a94", "sighting--74780e92-9c7d-4889-a9ed-9c0d3e749074", "sighting--f8c0c8ba-f4bb-4259-95a6-021f0b2154a6", "sighting--545e3001-de64-482f-9eae-9d1b34ba920f", "sighting--4d2804c7-68ff-437e-8672-aed2c1a8169f", "sighting--fab1c365-9e73-4ade-a8a1-6fcb172b04f3", "sighting--766d4b2d-b8fa-4ee3-a715-4c204c461824", "sighting--ee12a2ea-888b-47a6-a9d3-cbbcc94bf893", "sighting--b871b695-2d76-47bb-a12b-94229851111b", "sighting--057172d2-5fb5-48ab-bf07-486450c5e0bb", "sighting--f20e14ee-e5b7-4492-91e2-29c1c2e49409", "sighting--5c4fc6c6-65a5-4b5d-bfaa-14c2f5ac5407", "sighting--d4526c45-f817-4204-8e65-ff8e5de431af", "sighting--200473b4-098f-48c0-b3cf-396354e35a2c", "sighting--3cfa78a0-6d3a-49fb-ad7d-4cae0486574f", "sighting--a07e70dd-3b17-49cb-84ad-5b63ab46ac9e", "sighting--dcc96674-e05b-4ab1-b5a4-1a890f8e9382", "sighting--500d5cc4-2e3c-487f-8405-ce8d62b90119", "sighting--cc6c5a11-7a49-41b2-a5b1-d0987543567b", "sighting--70fa8b23-d228-466f-996a-711198fca416", "sighting--764d3900-ea7f-4bae-bdb6-e61ca5a01d40", "sighting--e3ff77ca-09f9-4ba0-9d16-75af9427366d", "sighting--fbe68991-d122-4a05-a79a-9c2c5925177a", "sighting--8c072e7c-41a8-4c86-bffe-9d2ca0498dc1", "sighting--96578ad4-7111-4d8b-8380-09c55b9b60a8", "sighting--256cfef2-cedd-45d1-b54d-b93a23d5c5e3", "sighting--ac932cc6-acd0-4adc-b1c9-886b931be8d8", "sighting--3cd4732a-7e7d-4752-ac22-f9680a8e7690", "sighting--8c256f6c-59f5-43e9-8ba6-a4826e260c07", "sighting--6b7639bc-3f1a-4b32-9888-b75b6c9e3100", "sighting--e2dc3947-9ebb-475c-90b7-a360d4a08a08", "sighting--fe1125d4-7a99-48c8-aae7-9f10fbb808c7", "sighting--5a5d741b-1cb6-4917-8f0a-a56a5e661340", "sighting--49939d15-ae1b-40c5-8e34-94c14cca503e", "sighting--f29d3879-1143-4963-b1e6-9d62fd6826a1", "sighting--602bf168-fc5e-4c0d-8d96-60d0d4949f4a", "sighting--3d62a42c-252d-4e8e-b479-1935845929e8", "sighting--094cfb13-6dc5-499e-9fea-d6b6ece58fca", "sighting--3451b603-9b73-49e4-984a-fc9f56f67915", "sighting--0a35113b-b24c-4faf-8563-f5871bc590a5", "sighting--233209eb-a085-481e-a5c1-0340f702ae6b", "sighting--9780998e-2880-4e81-8040-724ed03f788b", "sighting--41c2731a-8145-48cd-8576-25b320a3da90", "sighting--600a54dc-7ed0-4e3c-823a-8d4ec683b104", "sighting--87c611c0-0674-4afd-a8b4-9690ecc71bba", "sighting--2cf1c94f-45b9-4f8a-a41d-68fef05e3da2", "sighting--0d0c8456-ddcc-4b23-8635-d4ed98072f4c", "sighting--5107f08d-859e-4575-9d75-63ac0f2f74b6", "sighting--b8ccb859-dce5-4e37-98b0-7caf48ed4f0d", "sighting--778ec86e-384e-4897-abbf-5d971690db3a", "sighting--4d4f17be-5fb0-4d03-a95f-20ca54624c88", "sighting--dc47985d-3824-47c2-8cb7-ce0a6faca099", "sighting--e705b919-7e37-47ee-a9b0-1f6b77e7fa3c", "sighting--3d48baf1-5dfd-4eec-937f-4335d1d32be7", "sighting--a17ea596-e50b-4cd2-b153-62c5fca66e3a", "sighting--9d9a9826-0cf6-48fc-9317-73aa14636229", "sighting--b4727993-976f-47dd-a06c-85865878c41e", "sighting--f70c0c3c-3492-4a45-b830-c1f1ea0a6eac", "sighting--667ab80e-d534-4f4f-8e20-b65941dc6fe7", "sighting--f8e4c6f5-e32e-4822-a957-432a4ca3c8dd", "sighting--1bd7ac85-9355-4db1-8bf8-7c143eba0ce5", "sighting--43fb76c9-e53c-42ba-a653-71eedbe007b4", "sighting--baaa3629-7cfe-4fcd-b20a-9840a4238044", "sighting--85339c2b-863e-4e10-9e45-57ad615b847d", "sighting--b2306871-6d58-4b6b-8650-abcd53b0d35d", "sighting--0067670b-fb9b-4a72-91b5-868050359b47", "sighting--87025320-136b-4ddc-a95d-791824c4d73b", "sighting--6d9cda0c-049a-460d-b336-dc665151389b", "sighting--31ffbf6f-1a29-49ea-ae07-2235c10bc22d", "sighting--050f8ea9-b34c-4a02-9bc8-78eb4b76d3bb", "sighting--6734c56e-dfeb-49d0-8fab-80408f1ab0b9", "sighting--8a6a3267-5731-4aea-a00d-dd068bcca2ba", "sighting--b4dca935-3119-4878-97eb-858babb519c5", "sighting--bb8059bd-b037-474b-864a-413bb2f49288", "sighting--b414c565-1926-40c9-b817-e33c81b61f89", "sighting--4cff6c3f-b6a6-478c-9ba5-7f39112c8ce5", "sighting--766948cc-16a6-4505-a93b-c1ce925e92bf", "sighting--fe945112-e324-4074-ac05-2d6f6026608b", "sighting--76fc52a7-08be-411a-b4d9-3867dbe44409", "sighting--552f3f70-dda8-4303-8abc-39b0defc74c8", "sighting--b4f79a72-4124-483e-beea-fa88843a4e18", "sighting--bdd39c87-f1f5-45c3-a9b8-b8206e205e7c", "sighting--1a825353-1e12-4964-a8f2-6eec6e3e9d40", "sighting--a3fb023d-93b9-45b5-a0ad-5da58799f42d", "sighting--9aefc4dc-1e01-4855-ae90-db45e2737559", "sighting--d22fce4c-d3d4-4481-a568-b3ed1a3f46aa", "sighting--177a04a4-077c-43b2-974d-37d704ade0ba", "sighting--4072d1f2-137b-4e5d-908e-c99bd7c1a5d2", "sighting--ccd3b215-2924-4d97-aaa1-c92eb72a7838", "sighting--6d4ac2cf-04b2-4f7f-8f48-04cac1d61812", "sighting--72ec56c9-260c-431b-959b-c612ca6b1d43", "sighting--5322222a-c2f1-4279-9a53-9d9846f478d7", "sighting--6b0bc545-36ec-4c88-a4c9-b65229f6e4ae", "sighting--42b31339-c519-4992-a2c9-0e8e59929ac3", "sighting--fb62850c-7d80-488e-9441-85b786bdeb2c", "sighting--66cd1dbd-d84e-43ae-9ccc-7cdd39ee502d", "sighting--b2ac775f-5d3d-464c-a7fa-bbbd8a1c782c", "sighting--fd273772-ebec-4cce-a1d1-da0ea0601a6a", "sighting--8ab573e9-82e0-4c5f-b62b-0fc6eeb3da61", "sighting--b59f643d-cc5e-46fc-b575-c45aa2b4af19", "sighting--f824512d-a410-4e55-9d40-a795877af0f0", "sighting--2a44a59f-d54a-4a46-aecf-fa1251aadb80", "sighting--6f3c83f8-5ad8-4e4b-ba31-de86697ebf51", "sighting--58be4b5a-04ff-4aef-ad8d-0006080b8e4d", "sighting--daca910d-cb1d-431b-8fca-91027bff4204", "sighting--853b9c6d-db39-43c4-b72b-875afb4047c8", "sighting--775ede5c-2fc0-41fc-b13b-246f3481c923", "sighting--57eedaa0-7684-4cef-aecf-8ead71728a84", "sighting--118177a0-fa68-4768-b6a1-7fa234cca57f", "sighting--33cc4693-13bb-4aa9-a818-ff8b5378e1ef", "sighting--b4533537-1172-4886-9665-d532b4681abe", "sighting--59f2c602-b7c5-4b43-971b-c4713e19e82b", "sighting--b154ce83-2f59-487a-b336-32f0721f2ae9", "sighting--99dc218b-47be-40b7-82b8-e6724bd34111", "sighting--df43ad79-b8cf-4020-ba2a-a6422c3ab3b5", "sighting--1aa89952-38cd-45c0-8e6b-447aae1c3e7a", "sighting--055a2f29-bda9-470c-920a-ddde34be7806", "sighting--0a0cd05a-74b5-461a-8b9e-33c0ae6b6ea5", "sighting--0bcb42b1-c30f-4707-a2b8-441d6ce411c3", "sighting--17ffd49e-6c6d-4e14-9e8c-b32d47fed137", "sighting--7a9e2e76-3152-4a62-8008-ae35dd93e904", "sighting--f4f2c583-a8e9-4346-9a9e-e03ea871e2e2", "sighting--29327723-9964-45ac-8221-cec284cc9ab3", "sighting--dde256a3-4240-4e7c-a6ca-6ebbfba5c439", "sighting--9eb19d37-133b-4849-bafd-f6daeb2731de", "sighting--cc358028-4355-43d2-b12d-03e36086228d", "sighting--47d0612b-5d5a-470d-8808-2cb2b3df2d78", "sighting--cf5497d7-1d50-42c4-9e01-1336686a55ed", "sighting--9d79f6d9-b048-4493-820b-f4adf975f34f", "sighting--1d7a554a-ac0e-4692-ab7d-4edbb9aac3a3", "sighting--cf8631b6-848e-426c-862a-be35c750addf", "sighting--679e2d81-abda-475c-ab2e-d56441b3d79b", "sighting--dca26bf2-e73b-4020-b217-367b6ecdb80c", "sighting--6d4c1e61-4f45-4815-aa96-3df3e7c1ebb3", "sighting--d260eeee-e123-4a1e-aa90-407d13abb813", "sighting--328a8b37-dba1-4319-a0b4-7d4d3d4ffebe", "sighting--cd28ab7b-07be-4f6e-b346-96fb9ad7de8c", "sighting--c14bd99c-1f1c-4bb2-bfb6-3c683352179d", "sighting--5e89777b-7db5-4702-8137-725ab88fc9a2", "sighting--66b7a071-58c2-44a1-9c81-5e7175bdcbc3", "sighting--1db85905-7cea-42a6-93ca-e1890c9f0d20", "sighting--044f77f1-1b26-44ad-ae33-927f6383c9f3", "sighting--8f1bb5d6-fe19-4761-abe0-a233af439ed5", "sighting--b099f761-f98f-4841-b08d-9efa8858bb33", "sighting--c2755057-ad34-4334-8eca-e8ee7e581fb8", "sighting--da9c782a-5eca-4a5f-a5ef-f06e448f4342", "sighting--09550dce-c712-4e55-a32a-cb051c32798a", "sighting--99cbd307-6ace-4bc3-b3a9-d9c1d11581a4", "sighting--f180a3de-8f4d-4883-897d-b1d504991ab6", "sighting--830ca334-6ddc-4a44-9710-5766870b6a18", "sighting--a089fd39-8910-4233-9d53-1bfdcf81d38b", "sighting--ad36fa43-109a-4579-8b69-f9612ce2ca6c", "sighting--f32ecf3d-935b-4aa7-84f8-2ddc26ebc70b", "sighting--26f88bdd-cbb3-45ce-bc1a-28afbd74d6bb", "sighting--90e82d57-7d25-4944-972b-73fd69f16913", "sighting--dbbfbf6b-1ce9-494e-91c7-31450c7db95d", "sighting--10f8b307-61cb-4aab-8340-5600fb9bc196", "sighting--f47dbd8b-ad93-4b58-b649-f264553d6f8d", "sighting--9ee83736-fb91-48ea-8384-c07927e0fe39", "sighting--a5aeca77-d29c-4642-b2ec-c17c94b45847", "sighting--205b808e-c780-4b21-bfc0-4900464b195a", "sighting--edaf1eb4-a5b4-4539-8d3e-3d3e1a95cbfe", "sighting--50b9e6c8-13fa-4759-a7f4-c28f97d26b3a", "sighting--0be1bfcf-b1b5-4494-80fa-cfada1b488e1", "sighting--ed979578-16fd-433f-8dfa-85055fce6f56", "sighting--e334d33f-d39c-4c19-86fb-20c691b2c12e", "sighting--8e1e9fdf-1391-4dee-ab26-29a20950b7dd", "sighting--a122183b-b24f-4b3d-8788-c3b30caa75f4", "sighting--b0e1e600-412e-4c24-9a68-c3f5d06b499b", "sighting--86019b70-614e-4460-8ab8-a7ac3ea88b2c", "sighting--cfa7efc9-6bf9-41a7-bc3c-bfdbb230ca33", "sighting--890580ad-1fab-468b-a633-32f523a0bde5", "sighting--b31300db-97c3-43f4-9f95-eaeaa16d30c8", "sighting--224faaf0-9d58-422e-be19-204a848425ed", "sighting--b493bc27-4c97-46d1-b939-b99459a16df8", "sighting--f14a9f90-9873-4691-9bde-b6b3905f3bb0", "sighting--046829a1-f2a5-4e7b-bcb8-5579f4cd15e3", "sighting--b03ff3f6-0b3c-466b-ae6a-3c090587404e", "sighting--a4d4aea2-70b1-40f0-afeb-8bccf55cbc04", "sighting--1e9f4cca-7906-4ab5-a55a-c1f51019bbfb", "sighting--f1374144-4608-494b-9c01-adaca7445eba", "sighting--1bbae3b0-2b72-4428-906d-e7ce29f1158e", "sighting--17e21e63-c980-4bc6-849d-ab8447c11ec7", "sighting--f91c79a5-d237-4ac0-8175-6d0b77918a76", "sighting--11e42c4b-d46d-4d4d-8571-15e1c317b690", "sighting--396c562f-b248-490e-95cd-151119816ad1", "sighting--4add52c4-a07a-447b-ab2d-8f705d765818", "sighting--66092dea-9e40-4441-9194-4e5faa3a349e", "sighting--e3f7691e-4fa6-4754-82c0-7603498cb1aa", "sighting--b1345b7b-07e0-4886-80b4-fb01de66789b", "sighting--01c01032-f9f4-496d-8827-030fbe44d6fb", "sighting--03ff121a-161a-4d1f-b7a9-1a945a0cbc85", "sighting--f817850b-66ed-4538-a300-c978de0b5fe2", "sighting--bdcef099-68a1-491d-96c2-67ad01a1a8f0", "sighting--3bb4e261-120e-4d8d-83e2-117f61b2be8e", "sighting--3a548184-5b62-4fb9-8c63-d9beeb562431", "sighting--d8ea8150-3f6e-472d-947e-467748e47164", "sighting--50337068-cbbb-4feb-98d7-93881bcf8c6d", "sighting--61debdf6-2f74-44fa-a44e-c0b6ff04cc9a", "sighting--0e3454be-901d-4e48-b5e2-494190cc8ce0", "sighting--b2c216d4-456b-418e-83f3-c3c62dbb5fe6", "sighting--93dff11d-7855-4285-b93e-c87128f18600", "sighting--4ffcf3d1-2683-414c-8adc-d0afc8eea8a2", "sighting--94d4b59b-05e6-4755-9f05-e5f94e265e07", "sighting--b3f947ac-6bcf-4a39-87f1-6616723ebb85", "sighting--cf4216e9-652d-4742-9cce-f8fc70599692", "sighting--d5925e58-66d9-47bb-b7c6-dfc5e425f527", "sighting--d09f98bb-ad12-430f-b25c-f26c135ab5a0", "sighting--daf0ca23-7dfc-4d9a-af7e-b2c87931e697", "sighting--1edbb6f5-2453-41d8-a8ed-aad801fb79ea", "sighting--76de8236-33fe-4c25-95c7-4ea9bca84003", "sighting--5d30b963-d683-4bcd-ba9f-2f07e2175cd3", "sighting--37e9f8eb-49ec-4521-a255-ea23b390e1c2", "sighting--17382680-07ab-41dc-b0ba-e2c58a4835f4", "sighting--35f86213-2502-4a4f-8735-919d6fab1a0b", "sighting--ed8ab081-f4df-4805-b61e-96017d21d095", "sighting--816494d3-8568-4880-92da-afa5a55c1d68", "sighting--15d09fe3-a56e-44fc-96a4-f178edc43cb9", "sighting--f0b8139f-17e0-47bc-848c-fa3dfc2bc932", "sighting--3350fdb8-fa81-40c4-af8f-2c730cb8abf9", "sighting--31b2be84-d328-4649-ba09-a292140aaa04", "sighting--369969e6-1e8c-4770-828a-6f16c7c247d4", "sighting--3cff2a8c-cd7c-4b14-ad20-4b89caa06089", "sighting--86083ab5-e817-4958-b804-ae9cac811e8f", "sighting--1423a69b-d505-4573-9e49-4c401984475f", "sighting--fb5ae163-e7b6-4810-ae36-9dd28e53aba0", "sighting--40dae730-0af6-40a6-9c8a-cee6599b85b6", "sighting--8e45fe4e-8f9e-4d23-8c9a-e744b92eff69", "sighting--ae31a66a-67d1-45c6-b3f9-3f4f295cadf1", "sighting--2f1b88e5-dd27-4036-92dd-f2c20c3d0b8a", "sighting--c9782bbd-34f4-419d-a17a-a7a6ada081b4", "sighting--108de711-db54-4bdd-bbc3-2a99c1c8bbe4", "sighting--ee6423a9-b53e-40c1-bb76-5f472df0887c", "sighting--929a9b17-3f24-4a94-be66-fa5851bbd68c", "sighting--06436fc8-0398-44cc-85d5-ed575eae79cf", "sighting--0ec3ce8d-fbdd-48a7-9801-017381ed8c96", "sighting--aca72d3e-38f4-4456-9ed0-9e9b97b46c81", "sighting--54c7788a-a31c-4f8c-8c7e-d3fd630a4ad7", "sighting--569d79f9-2c2e-41e2-aa02-fd48d17ce68d", "sighting--6fb4f1e6-6c30-449d-babe-b373f7ea75bb", "sighting--c9483920-b117-46bc-8a77-c0a6e502da0d", "sighting--7b7254a4-f1c6-496b-b86e-01949292b54a", "sighting--3afeba08-5d4c-4246-978d-e17856c8f46d", "sighting--9b5f96a4-2f8c-4a74-878f-25c18ca6f091", "sighting--8022aba9-32d7-4646-810d-0a98c9402f61", "sighting--f84f5d37-0229-4af7-a8b5-83f0aa0a1e08", "sighting--dad617ba-8957-4fb8-a9ee-6976e863092b", "sighting--bcee0d62-cd45-45c2-ae50-f8b90f76003d", "sighting--77eb3380-0842-4a9e-b5eb-f6404fa03254", "sighting--d3a8f85d-752d-4186-a3b4-02d81108186f", "sighting--ab4546e8-e074-421c-8f7f-81bc9f997e85", "sighting--1e5926d2-6c3a-4de0-ab01-4b6c923caa3a", "sighting--dc7c917d-8bfa-4565-b1b7-97758eebff7c", "sighting--fabb581a-390c-4656-b81a-b6962e94651a", "sighting--ef117af9-9be1-4323-908c-72910e49cf1e", "sighting--9480b0da-1d82-497d-a4e4-b05b54437a06", "sighting--b119f181-4bdd-407a-af7f-a0cc7f621e09", "sighting--ff954069-163e-44ea-8749-9872d17bc86a", "sighting--48388a7c-3e89-4910-aacf-aabd291e4590", "sighting--2dc023aa-52a5-4a65-b582-e5efa1d95a13", "sighting--6653c46c-8194-4e00-912f-71107527a07d", "sighting--bee18c25-95a0-4d9f-aae7-179ef879aa77", "sighting--b3bcf70b-a97f-413f-a163-6d206f99d28a", "sighting--0d1c3758-ee4d-44d3-a168-25c8d8f7346c", "sighting--0834e184-18b4-4ced-8501-b939ff68dc68", "sighting--63968908-a92b-4d60-a36d-daa5fb85f7f8", "sighting--0ff914f3-297e-40da-9c44-3c574ce3f290", "sighting--610eb0e5-b9d5-4dfe-8296-7284adc2f7a1", "sighting--0be3f703-7cad-400e-8d1d-36c290247f4b", "sighting--4bfacd30-5e7c-4bd7-bc35-71450edfe4fe", "sighting--f0ee0395-9d48-4dab-9262-af085954babf", "sighting--c2c81878-803b-45c4-851d-fd647ca40e0d", "sighting--1e67205e-3b78-4b95-af5b-900faa7bd3c6", "sighting--8fa072bf-f4f4-47bb-9c31-46d0d1d2573e", "sighting--348610ab-3cba-4ddd-9576-31802ea2a908", "sighting--e6e279de-9088-4f9b-823c-03471135bd2e", "sighting--0e128c9c-576e-41ec-bbfe-6b5a7615d8a1", "sighting--495d7edb-0e2a-4009-83df-4d9b98c306c8", "sighting--e3b06955-c372-4438-bb06-e15794f58524", "sighting--c4ef6850-d1d0-4834-9c3f-d28bbeab3a15", "sighting--8ab8ca80-2b2f-4693-ab39-fa2091b9e42f", "sighting--17e76638-8f9a-49dd-9c91-1d52d87aefc4", "sighting--d05d97a7-c4fd-4134-ac4a-4d2356bd5377", "sighting--4f1867c2-227e-4dac-b2a3-815a40122247", "sighting--0af67f8c-1a01-4919-a108-e88d01ef49c1", "sighting--60852939-cb98-400e-abfd-8a8cee17cef6", "sighting--28039ac4-c802-4b7e-8de4-f29ca188368e", "sighting--2920fa7f-acf4-400b-a519-daa667ddddf7", "sighting--179799aa-6215-4c31-bd28-e8d1c99a9f12", "sighting--426d9d0c-5532-45eb-9f12-f8b7a869a481", "sighting--2862f804-d370-4a67-aa24-8a5d74c6ae32", "sighting--3df8b94e-9766-4250-b1d7-a7f7b4cc5845", "sighting--8c88c035-0e75-4330-9931-7ba9aecd5e3a", "sighting--73235fcb-7084-4db5-9e47-39ca2ea5e50e", "sighting--976a90db-df40-4e0c-b625-a701a1de1fe5", "sighting--38f79136-77b7-4b9f-818a-326bc4b2f961", "sighting--e9c4df4b-e7a3-476b-8c49-24ede395fb4c", "sighting--7269e852-717d-48fd-9bd5-a0e805e5f44e", "sighting--7ca395a6-5fc3-4ea0-9a01-d0822f01e923", "sighting--b4eca8fc-2d2f-4365-b972-48f91c8ceb28", "sighting--c62ce79e-b0ed-4637-a4b2-d6dd632f471c", "sighting--eb2419f6-560f-4f23-9f28-3adf8096e714", "sighting--56df0a17-6bf2-4cb3-99d2-1c0045e63f40", "sighting--b04012dc-b969-45a1-8f68-c6fc8c609d32", "sighting--1c31bd39-ac5c-45fb-9d5e-33b5e92d26a6", "sighting--d450fc2d-85d8-4f1a-9263-68267455fe24", "sighting--388bc2d7-aad5-4d12-b0dd-3fafc3e3a86b", "sighting--f41a53ba-4f2e-4a29-a724-316788ac8596", "sighting--c4f0b29d-ec22-4e41-8feb-2c5c393921ba", "sighting--7322c0c4-2152-4add-aaf9-72d091ec6472", "sighting--eca63a31-5a60-40ed-af1e-759425cade92", "sighting--ed0d7a30-4485-4646-a07d-a3cb392ed561", "sighting--e7278318-6ccc-4d79-ad9a-c81ebcdfbe1a", "sighting--d9eecf72-ddb9-4ad9-bfdf-f396569a4ef1", "sighting--9901ece6-33c4-4c0b-b084-3399236eca05", "sighting--0a1f3d07-1e9e-4764-94ec-d44142298f2f", "sighting--0fc87a82-4f09-4787-a0ea-63b1ca60ae44", "sighting--82782934-7733-450d-ab24-f25aed5cde79", "sighting--db629903-2b14-4400-98c7-a1cf72ecb7e2", "sighting--c928f6ad-df61-47e5-84b4-cbc0e81c8887", "sighting--50f6555e-f780-4031-9821-30e9fb53194d", "sighting--06d2cdb7-6cb0-4916-a1a5-815e61882b04", "sighting--605613d1-f618-4097-ae2c-1dfec8c0f0d3", "sighting--95eb56f6-d440-417a-b643-34bd321cacb1", "sighting--01bad041-fa27-4ccc-a947-b9211245452a", "sighting--f8b34459-9af1-40fd-8602-d8bb5ec816b6", "sighting--54d70ed1-5066-48e6-b516-61e58ff15623", "sighting--0dffcb8d-5c0c-4a3f-b6be-ef40f881c86f", "sighting--f7b057ed-f31c-437b-86d1-b9d07d1dded9", "sighting--9496bf07-da1e-4b29-b6a6-02d1b513deb1", "sighting--8fb995ff-3cf3-4156-ad03-b09c4b5ddbc3", "sighting--1a8d88f3-15ff-45cc-b4d2-f326d4fe501a", "sighting--9021363a-130c-4235-ab08-bb7365267d15", "sighting--b4bfdec2-d0d7-442a-b77b-c6fec507cf20", "sighting--4476b859-9741-4705-906c-5335c88b8615", "sighting--ac971d32-eb69-4853-b68f-f71cb042ae5d", "sighting--8a9c4eae-3b02-439d-a35b-a19c476ca535", "sighting--e475b6bc-41f8-481e-b48e-4706847595f5", "sighting--af48ea31-1420-4206-ad84-a572320d5901", "sighting--9cf8ce1e-f883-4348-9955-78de7dcf0aad", "sighting--99a5f4db-d690-4d7b-ba24-e97a22375a1d", "sighting--3acfa56b-f5c6-42bf-a21d-15333cc34ab0", "sighting--8ba8402e-3574-46f0-9964-443bb7c2eae9", "sighting--2d471d51-367f-41f4-b242-e46cf1c1d163", "sighting--f6377940-2ead-4ded-bbd1-9b5000f7419b", "sighting--a31edc11-506f-4021-aa60-614874fb5b75", "sighting--ed917e8e-1111-4979-88b0-9f26ba757dbc", "sighting--76a75048-a845-4617-9c1b-3887430c3a62", "sighting--95949070-c081-4100-bf2c-a0b6a6c3b32c", "sighting--981f45a2-8b5b-47bd-8737-633713fcd9b2", "sighting--1dde0607-d2da-4815-9d85-9cdc7bc1609a", "sighting--2c5dd459-a499-424a-b768-51348eea2f32", "sighting--23a9762a-341e-48df-b614-e0290fd264ab", "sighting--2cc911b4-450d-4500-b19b-d3079f6037d9", "sighting--02f09a81-ef10-4d9d-b1d6-ac87f417f409", "sighting--f06ac2c3-02a3-4b95-a262-35cfe9c17f8f", "sighting--8c9a3c99-014e-457e-9be2-6d7258b93e82", "sighting--8f87347e-46a9-4040-b9dc-c5d09d0787fc", "sighting--6be6a719-337f-48d7-8a1e-705058706a75", "sighting--6ef9ed69-7d02-4ae2-ac44-29c3ea9529b5", "sighting--b54f0f6b-8a41-4b8e-81b5-ca55a5e65607", "sighting--5339a1f8-6b2b-4c4d-8511-2d24d0f722ee", "sighting--f7c874c1-c039-4940-8e1c-22767c4876df", "sighting--391ee0b0-eba1-4d8d-8cb9-2da148795713", "sighting--64f735f1-363e-4315-a7a6-b4d5e5735eb0", "sighting--d0b13a13-d361-4474-aa0d-8677badec3f7", "sighting--a829c28c-554b-41f4-a158-fb8ff4e9f0de", "sighting--8fff5db0-548f-415d-aa03-5752f5c3efaa", "sighting--b2058cac-cc09-4576-926f-6df42a52ca34", "sighting--d14f1645-40f8-43fc-9598-7265a9fac330", "sighting--2cbd89af-8919-429e-88d3-3c3d49f3b330", "sighting--46475ad7-5f2f-48e8-9b19-bb79c23c2a78", "sighting--65b8aea2-e00c-4a42-9f0c-8daf95089448", "sighting--d9b06035-42eb-4807-ba08-ae2f1cbdb2d9", "sighting--f928ee3e-b30c-4f01-8416-476235dd68a6", "sighting--77ec6899-dd3a-43dc-99e5-81b7fd448c8d", "sighting--f24c5afa-fefb-464a-bc31-a8edca72422e", "sighting--e07f2c77-97b9-4cd3-a89e-735fd6d4a514", "sighting--4135627b-6fc7-4af1-9214-8b3d8210be0b", "sighting--5ba8bec2-1d5a-41d8-806e-045421a38ff1", "sighting--9b4b124f-14b3-48f9-ae8c-7e2de085f0cb", "sighting--b486d161-b996-4844-aa45-9f9bfbcfd669", "sighting--38ac914b-74d8-4e32-9030-cf1becf0482a", "sighting--0b49a036-3d31-438f-8d4c-37ceafc94f5b", "sighting--ccce7925-7c43-4d09-8b09-3ceb6954da71", "sighting--5e73a5d8-9987-4000-bcd9-f4949c517350", "sighting--388d3158-019b-42f6-a547-c500f28afb9b", "sighting--9d2a42a2-712a-4d22-a705-085db4ac4820", "sighting--2e8043bc-ef10-4bf1-824b-2b8dcce12b49", "sighting--e0d090f2-2efa-4834-a45b-53b3754cf703", "sighting--c868a335-e5f5-4de3-a5e3-3793962cf894", "sighting--559bbb26-a71c-45e5-9245-2374dc816917", "sighting--f6dcf116-c0e4-40ce-a0ba-e66686154869", "sighting--ea5e8840-9e91-487c-970f-76ce64e2a6b7", "sighting--f79e2eba-6156-4f53-85cc-6cb54a176812", "sighting--2c09bfae-c3fc-4899-91e3-f2c6095f64d8", "sighting--6fede196-ed59-4326-8236-7696ea4a48da", "sighting--f4321df3-b5d0-4be6-8c57-b3fe94b0d655", "sighting--041f0b40-3b33-41c7-94a3-d7af3644071c", "sighting--e70727c9-aa71-44bc-867c-4fddc326b0c6", "sighting--0c9f2559-ea9f-4392-b357-59bee7b33f39", "sighting--34030fc3-7449-4602-89e8-ec4a92bfdbe7", "sighting--1e69a97e-c836-4ff3-a612-a3beab48d29f", "sighting--261aa0e6-6bb4-4675-bd97-f3848d71708e", "sighting--9ef42558-97a8-42b4-8eb8-cda702c57779", "sighting--0a6b5c28-d5e9-4801-9a08-4a62e305d31f", "sighting--3dc7ae4e-d936-4c0f-9289-28bbf85ff6ca", "sighting--a0ee1cdf-384b-4a58-8208-a3e28024fb95", "sighting--f42edc51-71de-4d2b-aa0b-84bf340c0761", "sighting--2f022205-8b5a-4b3d-896e-2c48afcb00c6", "sighting--46fa35d0-c8fd-4c7e-951b-0be22ecb2a73", "sighting--faee8e78-52c0-495b-a84c-e5182838e365", "sighting--3b4843a8-f5a0-42e0-994b-d7f9e88b4e0c", "sighting--439c8789-d41b-42ab-a4ad-5c5bab05cec9", "sighting--25f94884-b252-433b-b2e5-bd38caf5c65e", "sighting--b700b73e-58f3-4385-bcf1-4a067cd5241e", "sighting--0977d01c-9699-45fb-89f0-5221c8289326", "sighting--8308be2f-9454-4076-908f-658d0881e83d", "sighting--7d0d1f1d-ae07-4824-b578-24ff2929fc37", "sighting--5f33305a-ac7c-4a47-9b4e-7f0099b60bcb", "sighting--017c4347-b37f-41b4-96f3-6fae4b3c9f53", "sighting--83a5f079-96b7-4870-887f-c94bb343c314", "sighting--61c07fbe-f492-4068-8274-9ed3c4356872", "sighting--fdc72471-bdb8-4dea-ae52-6e573c999f74", "sighting--309e9c83-9b1f-43dc-b8ba-6957b7533f83", "sighting--ab2e8016-94bc-4f7b-9c25-2e9685e1dc32", "sighting--d7ac8cdd-e187-41dc-8dba-0938c94bba49", "sighting--8e931705-edda-43b1-9a0d-f4ccacedee15", "sighting--e3e368f0-f28c-43cf-b899-848ebb611d03", "sighting--de5675b7-1a8e-44da-8566-e132a5ba4866", "sighting--a1f491ce-5a1d-4764-b794-4a414cd3f151", "sighting--be3c530e-4719-4cda-929f-85037d0170e6", "sighting--f8513bd1-0fda-4006-9cf1-8f8047a56b37", "sighting--f7e0f9ae-9e9b-43b3-bc67-75baf6a67e9a", "sighting--1dadee4e-aa9e-48ad-aaff-d0ba8bf7d52a", "sighting--d6a77b0a-c632-4512-8bba-9a1c964f4699", "sighting--5b898510-38c4-49eb-a9a6-af7c1a43a4df", "sighting--433575a0-3cb1-4a42-b95d-749a0d2be849", "sighting--2f54d305-502d-40f2-9cfe-3e6fb01d96b4", "sighting--8dfbab1f-bcbe-4e65-be31-6539c326e4bb", "sighting--46a6d7d7-a73a-43ac-bcfb-494cdd778fd3", "sighting--1bd0b6cc-84db-48f8-bf92-a954a16def04", "sighting--99dd8ed4-6364-47cf-b811-c97b36bb829f", "sighting--a2e816eb-f0c4-4ad0-b3b6-be1bb98d9195", "sighting--57fc2b13-0771-4744-b0d6-ed0466498c96", "sighting--9736121e-8804-4884-9813-794aa471d3b7", "sighting--a19359eb-3966-40df-aa5f-50c2d577f3b8", "sighting--f32ad417-251d-4027-b31c-885865ad5d58", "sighting--d6dedf4c-9f26-4ba8-9fb5-333dd333353c", "sighting--bd07ce7e-d782-4311-ac32-918a28fa58a1", "sighting--ab00fc62-3b7b-4dcc-ab92-aa3ee7aef8a1", "sighting--b7a76aa9-4974-4751-9595-85421fb93b4b", "sighting--9b42d0be-ec9e-4930-9b0f-5071d6319749", "sighting--101d0ec2-3d8a-4b1c-ae4c-f6a7d4a18567", "sighting--f6c8a696-5558-47d7-86e6-899ee8a229c1", "sighting--0707dd2a-ab64-496f-bfe0-ff7863ddd889", "sighting--652d3cf5-bc76-4796-91e1-1a6b080b0b50", "sighting--77884f06-8895-4e64-b795-df7c536cc5b0", "sighting--4850a10f-ebc9-43e3-a5c4-bc7b7f13e5a1", "sighting--a79e06ae-e862-4390-ad50-b6dc6692e260", "sighting--2371baf9-1b2c-4701-acbc-116284d87fba", "sighting--3ae591af-1035-47a4-8087-ab93e868d225", "sighting--048f1956-c97f-4f01-9ca1-2f42a1a0b8c8", "sighting--a616bc31-bfed-4eb0-b6b8-752b90ae1547", "sighting--65e5c35f-0026-4335-bb9e-6fbcfb5ac2c5", "sighting--5e992d2f-5e21-4ccd-9639-d6c66c1e7d88", "sighting--973b8d2c-0c26-48ac-b973-0b3816b4aa96", "sighting--0b12294f-8ac3-4e16-a802-1cd61949ef33", "sighting--f65fb57c-2255-499c-b355-c3c9f4a070a0", "sighting--d0a50d83-0586-40e8-9071-f031390c5992", "sighting--a0b47a42-974a-4c9d-8164-fdc3eb526951", "sighting--6cde71ca-2aef-40a0-8f40-21f28b0854b2", "sighting--ca70b8ad-e3ba-4ca3-b8ca-1f3f29f74147", "sighting--4b4c1003-a1cb-4573-85e4-4c47bfe61402", "sighting--83f8081a-1f50-439a-b1d5-c9a857a4d14a", "sighting--b7d0fe6a-c374-4ca1-934d-de2a2c9ede43", "sighting--14ce89ff-4bc3-4505-b873-618de402118a", "sighting--21292a7d-0e42-4dba-8a04-21e4ff91406f", "sighting--fdf0c4b2-9da1-46ca-a756-ff0bb1ba65af", "sighting--6cca06b0-eb22-4b13-92d4-cdf8fe0905d1", "sighting--f2842182-77e1-4be9-9e38-21d0982e8ffa", "sighting--97c47af0-8de7-4663-b7b9-8ef41c645435", "sighting--e84a51dd-3e56-4e74-9b0b-6940e162a73f", "sighting--94e2d72e-fd35-479f-94c3-385db20a6443", "sighting--da10fabf-e00d-4e79-9d64-89cfd7d3080f", "sighting--6fec12bf-1d87-4858-83ec-13ad584ff87d", "sighting--e898a7c1-b0e9-481b-ac3f-d44e0f2ad6b0", "sighting--52ca2fb1-5765-4a9d-b26c-5cf41cb5d8f9", "sighting--9f8b09ec-29b7-497f-bff2-aa4a00831341", "sighting--6b22dff7-b895-40d8-a00e-f4d236573ccd", "sighting--6803bd46-5c01-44c8-bd9f-9c32ea1afe93", "sighting--520390c5-d977-4d40-8f4c-d026413ff97d", "sighting--9f54b4ef-dd6e-41be-b167-d0d06d2578f0", "sighting--d49168ad-f281-4534-b067-a361b63b3032", "sighting--63572830-80df-4460-a211-6f64ed34bce4", "sighting--d85cd040-507f-48b4-b093-cc0302df703c", "sighting--4ef13059-fc63-404e-b1df-9ec142299644", "sighting--cdd5fbfe-d7ab-4da2-84aa-1388c83996ff", "sighting--ba72b6db-8f63-4068-acf7-c0325899609f", "sighting--d64f1753-406f-497f-920b-92a8158c10cb", "sighting--a3ec420e-cec5-4bfe-a39d-7086e4d90bac", "sighting--92039f35-5b63-4fbf-8cd1-f5edeacfa100", "sighting--cfbecb91-02d0-4f39-8e98-e4b3f58e9eb9", "sighting--a44c6ccf-0a7f-4bdc-af55-e55852221a70", "sighting--b244b814-7fd2-4275-a39d-c1eb8231c550", "sighting--70107b7a-9761-4756-b711-34f105471487", "sighting--e0a98514-7c43-4d1f-94ec-88613b788130", "sighting--a36f902b-226c-45fb-b7b5-c6b7d933b6f7", "sighting--11e6116a-d712-4973-a6ee-3a2e446bf62e", "sighting--498dd9b8-cf76-408c-8d65-3f1daa001867", "sighting--02f9e236-8878-44c3-813a-cff0a5121a21", "sighting--c5ddefd2-ab92-42d5-92e2-341305607060", "sighting--a592bffc-b1f5-408b-a4cf-04c3db372737", "sighting--723864ec-2f44-4b0a-a88d-fa13fe42bd9d", "sighting--b6024a0e-0366-423c-a7a6-bc023ca9f5f5", "sighting--6aca91a8-a806-4e31-aff1-c98fdd25fc6f", "sighting--1a2e32c5-af32-40d4-9152-c80c4887cb06", "sighting--3898598f-8e69-4862-a88e-5adeb472c157", "sighting--89526020-41a6-44c6-98e3-71cf5d5d76e7", "sighting--d7207243-a6f9-4a0a-8d36-41da2db7c37a", "sighting--613cb25b-8b99-45b7-ba3b-066dd8ba9039", "sighting--16d33777-6a36-4573-a5f3-7e7541091486", "sighting--2024fd6b-b0ad-4b28-9a12-adc14cc34e5d", "sighting--da01a632-c110-46f6-b54c-98d18bcaeea8", "sighting--e0496b04-1de3-4700-b0d7-500195a30ad1", "sighting--e780f995-54ab-4a4f-a701-f8efb96fc880", "sighting--950ce009-5b95-45c7-8f8a-2e376149d05a", "sighting--f154e4e6-b14a-4b6e-a1d6-fe0f657684cd", "sighting--1b10cffc-92e5-4389-bce4-7ffefc044d35", "sighting--3456f801-88bc-4602-908a-050d789e7293", "sighting--f806e24d-2fe5-4738-8f64-28cc6c781ab9", "sighting--bb48785d-df9f-4152-836f-eb288db2da38", "sighting--e7f88560-2927-45c7-8ca5-74c5126000e6", "sighting--dba3f27c-6fa5-4abe-abc5-dbe05009d3c7", "sighting--b42b0880-0c1c-4cea-b246-d2209d7269e8", "sighting--098888c4-e22e-4eff-931e-4b289fa82c32", "sighting--16352b7c-9061-4cff-88a9-38d750dec2c1", "sighting--4bb155b4-866b-4ec0-8dcf-4bb6727a327b", "sighting--7a6fe46a-31d3-4295-b8fc-cc1eed54ab6c", "sighting--524c0f79-94e6-44a5-95af-6082a0f3014e", "sighting--a1e25515-cad1-4fc7-b1e0-9fe4d7663d14", "sighting--6be52d2d-8851-40bb-9aea-a30f2bfa3dd9", "sighting--bdb71df9-9c58-467c-a8bb-96e43ff54fca", "sighting--2b1494ed-f9a1-4a07-968a-a6c1e39297a6", "sighting--74281ed5-de76-42a1-ae11-54257af24153", "sighting--630c22da-9431-449a-a91c-1ecfc1b9d474", "sighting--75ab9a03-2394-4620-8c18-59a137adece4", "sighting--550ab68b-14e1-4351-b625-6242fd613710", "sighting--d8bf421b-8eec-4dcf-877d-6e02db986bd3", "sighting--d3704b10-8eda-4ef4-a415-a3a2708599a4", "sighting--a44ea111-1c88-48f9-8583-02b15a3b4ae5", "sighting--3f0aa692-7517-44f1-a489-f7368adbe5a0", "sighting--5dea3e4a-2ba9-4a9f-ac69-97d5c4393de8", "sighting--57129353-bdcc-4afd-a647-6105423b4974", "sighting--d2aefd92-2e9f-4fe3-9d59-5fd0cdc8b8fb", "sighting--9476fe4c-8db4-4f33-82d2-3e2314809669", "sighting--acdee326-e50f-4ac2-a147-7e4172f3b30d", "sighting--052744c5-ee73-4f9e-ab62-5e79a6206cd9", "sighting--c5bec926-62e2-4bd9-9aa1-83f7d31bd230", "sighting--0fd0ee67-1e91-4c01-a53e-48c2e9bb411c", "sighting--8a06e708-e2fd-4660-ba5e-ed5cfb75c532", "sighting--eafb73aa-b66a-4045-b305-506fcd2d0fa6", "sighting--03261061-1d1b-491b-a94c-af1b1a880121", "sighting--8303619a-5cd2-436f-b474-8a262547e833", "sighting--c3ba8940-4dac-4439-bcf2-a0ddfeee1e58", "sighting--e639db4a-950d-48f7-9095-6907841c32e5", "sighting--e8298bcd-e515-40d6-85f0-86ccda44bfc1", "sighting--41e52ff9-c448-4ad6-99a0-a1a868bb3b0e", "sighting--5aaac53d-569b-4b9e-b12f-b116bbec41e8", "sighting--6dc45c17-447d-4051-a547-38f27e4e7d3e", "sighting--0d62bf9f-82ea-4589-a4ad-a49281b848e7", "sighting--2e0f38c0-2691-4a18-876a-3eeb75f95f72", "sighting--34ecc22c-939f-4d71-9e91-dffa1944668e", "sighting--f68f40eb-2c85-4dad-b9be-6061315651db", "sighting--cd07cd58-08be-429d-8971-cb47b88b3fe6", "sighting--b7d368de-b472-442a-9ac1-84b82a7552a8", "sighting--ac81a8f6-b6ef-49c1-a5eb-c66e6dad0679", "sighting--15e53874-dc74-4208-95ca-bfe0b45f7d83", "sighting--64e4cee7-7bbe-4c0a-8301-ac04477a5b17", "sighting--d895cdf1-86a9-496e-b296-200c80f3b45f", "sighting--2a5a5ca8-c985-428d-9f3e-907a96c3a05c", "sighting--8cdcd9d2-656b-4030-9c82-7726cedd0e39", "sighting--603dc468-86ea-4af7-8ef0-409ab57f91bb", "sighting--cec13042-1ea0-4fae-a4c6-577630ae6b24", "sighting--4258e364-0c68-440e-ac38-4b5fab43e7ca", "sighting--03572d33-2607-4afc-8bd1-b73e5b522d9d", "sighting--e361345b-7c93-428a-91bd-dcfcd570797c", "sighting--2716b484-d679-44d4-ab71-bac1aa674306", "sighting--f2896c3d-3f50-46ca-b7db-d5bd395f118a", "sighting--42aeb76e-f608-4b08-b887-2dad11f7dad6", "sighting--4ef1b29d-f3de-4563-b64f-0952880e222c", "sighting--d6d407f7-d55d-4ee4-aa16-392aa49f795a", "sighting--2d0899f5-dbe2-43e0-b9af-1297feacc7d2", "sighting--3ba202fc-960c-442e-b443-b96d558f6fc9", "sighting--e8ff9509-061a-4f20-9e69-b626b7e28f81", "sighting--d087b605-2574-450f-bed7-d49bf0cc0777", "sighting--be9a33a4-4f30-4f41-8f76-746bf70d0a4d", "sighting--2e5208d5-0ac0-4bb0-863a-b7dad9f368a4", "sighting--1a09217b-3114-4a2d-a9bc-ed9e4062e6c4", "sighting--c5d6154e-4e17-4534-a44b-b97fc25ed54f", "sighting--e920516d-0d24-4850-ad69-9d7fead9a740", "sighting--617edc08-30a3-4a34-bc42-f0be669c720a", "sighting--b2e18d9d-b02b-4bb7-86d1-35c3508cec83", "sighting--746c09b8-6547-4832-9803-02114fd0aebe", "sighting--ace2cc29-d5ce-4ef2-a113-d28c94759c4a", "sighting--80eed1d7-ac4a-42ca-b905-a44af5086365", "sighting--1496b55f-306c-4683-99c1-3d44971238ce", "sighting--e3f9bc8f-5361-4f0b-b0ac-c5091911a681", "sighting--36b4739f-bd81-4c59-9233-ca72457607c6", "sighting--96d36400-5d3f-40e7-a250-2403796e6de9", "sighting--8580d3df-1e6a-4164-b4ba-c831c0a61bc9", "sighting--b4c355b2-6b5a-485a-b067-22b2448e5252", "sighting--b9d455ac-934a-46f0-82d1-5ff7c4d6a3ed", "sighting--fce62249-4ce4-4c60-bea0-3a90a343fe08", "sighting--397669d7-eabd-4810-a886-eabca613842b", "sighting--cdd4f858-e7d8-4cc5-94ce-919bb772f7bf", "sighting--536a4e97-3adc-4b5e-a1ea-e7e0c1edfb46", "sighting--fdea40a2-58cb-4737-8e7f-356cf9db6803", "sighting--16d55557-c675-49ec-aea9-a76071cd1287", "sighting--72bc2314-5b3d-4e97-a778-1293cba6a44b", "sighting--1b82571a-a3dd-4c45-a7c6-f53426c7ef4a", "sighting--bcafe754-2bf9-42f0-ae01-01be81b3108c", "sighting--ba4676fe-966b-40f1-9bd8-25ed0b509907", "sighting--5149e787-405a-4feb-8f7a-b990092ab44e", "sighting--229dc173-d0f6-4860-b240-ebdba6a1c1d5", "sighting--f83c3895-5f09-46be-88eb-82febf7ad091", "sighting--4807108f-4c60-4ecd-b2d6-55fa087882e9", "sighting--884223a0-4712-4414-a275-988ea7f75977", "sighting--dc668735-be80-4c69-b1c0-da3a5b91335e", "sighting--c1a5c9c8-f54f-4206-a31b-a7cb6fd96393", "sighting--27faec57-b0c3-448f-953b-be44472daaee", "sighting--1bb2d6b9-f106-4b61-8492-1f237a229206", "sighting--406f779d-5424-4fba-a191-d764baa4aff5", "sighting--d4b223c7-bc4d-4456-8955-59fe8ce7cf22", "sighting--1f22e5b1-3d29-49d1-9186-c10bd81f5e9f", "sighting--e335c904-a80b-4a22-8b30-7791b6a3aa3d", "sighting--09ce3a5c-8dea-4fcf-a730-f1e3f230f578", "sighting--979a6d14-f0db-4eb8-9847-7764d4bafd69", "sighting--049a5e9c-2803-43a0-be42-bc89ae0ea425", "sighting--48ee07da-d080-4440-9c01-422ba28bdefd", "sighting--e094eb5b-8987-4982-98a9-d61f0ba7a5f9", "sighting--3e391be0-1201-4c4f-8469-9e051d8fd1dd", "sighting--aec61fed-82b5-4693-972a-dc31c077583c", "sighting--81bab37d-7e92-446a-8f19-2d8ac8a2ea68", "sighting--f1879cf6-bce7-44f5-bd26-0c418eb6e2dd", "sighting--34400342-16ae-466c-bc31-dccd77b6e1c6", "sighting--11c69142-717c-4fe3-908c-8f9bb0939026", "sighting--46ff9714-a98a-4b53-bfc2-772800d249b4", "sighting--ee6b865b-7d19-4d1e-8375-b98baa405831", "sighting--1a88502b-ef17-4cbf-887d-3b50c798377f", "sighting--0552f0dc-09ac-4727-92d4-892afe006f37", "sighting--0de0cb69-4ec4-4c21-842f-e096ad34eb59", "sighting--1b67ab1c-fbe8-4217-aa8f-395810be2d46", "sighting--ef6bab7c-69fb-43b4-9bd3-5ca3a9cadb17", "sighting--336a7f30-afa4-4595-bfdf-834ca06aea01", "sighting--4fe098f1-ac5d-45ca-8908-9a330096710c", "sighting--dd69ff80-3105-4a97-ba34-8de2004f0d1c", "sighting--4da97ee6-b394-4160-b297-1475e1ab83ee", "sighting--c2d2a803-e0b9-4d93-86ef-6d13ce347661", "sighting--7b70363c-b50c-4bea-8a60-1b68e6460b66", "sighting--70f8f660-e8b7-40e5-b091-f2b745ec9897", "sighting--7d6d8540-2cf6-48de-8ce5-c7ef11fe39f7", "sighting--c9b380b8-11a2-4419-8f35-143438091258", "sighting--10becf12-5f06-466a-91a8-baf88eedc65f", "sighting--af0a1dd7-6a7f-4190-9dd5-67dbbf033fcf", "sighting--22cdd8a1-8e68-4cde-baeb-59fc45a3e196", "sighting--fac743a3-a7b3-4098-ad93-8f3c3ca28fd1", "sighting--8b2883eb-7f28-4568-a105-b38e02859cf9", "sighting--c5d9e2b1-a5ac-4571-a556-72feb0cbd44c", "sighting--0cab44f1-31fc-496f-9d67-2b7b88b16878", "sighting--24229e45-3fdf-4a68-8041-58bcea288293", "sighting--a8a2bd8a-802a-4522-a7b4-850ac2c13a15", "sighting--88449205-1556-4876-9a2a-80b4ba238b79", "sighting--8c4bae95-dcba-4a85-98f4-7a6519ab6fb9", "sighting--525ba487-afa3-478a-aaf9-54aa17526fa7", "sighting--13f11090-d455-4220-a573-8d2debad1c9b", "sighting--4f89ba27-8377-48bf-b6be-33c00f434e6d", "sighting--62e32c0a-cc40-4f5a-8887-9dcff92b2a98", "sighting--eb2c67c1-a339-4fa8-846b-8b35591f2fd6", "sighting--c969ce0c-8434-47f9-98b0-60db2d9e8424", "sighting--140dff98-541d-48fa-8ab9-8f2eb6b9ec76", "sighting--01874d85-784d-476a-9e2b-24a24edffd8d", "sighting--4299dfb1-af2b-4030-b718-7bfd62051da5", "sighting--18f7c971-91af-4e14-9e39-2096f1960193", "sighting--0a3f2ea1-49de-4acb-8eca-f13236a565a3", "sighting--ad0371c9-1e40-4d85-a075-9b731a9026e8", "sighting--89c632ef-76be-436b-9e23-4052feb811ea", "sighting--065e48fd-14e1-40c5-97f9-60a8c3645c30", "sighting--0f7d37d5-7f1d-44db-97b4-f365250c3c18", "sighting--528a1492-1a72-48be-93b9-58c50d93eca6", "sighting--1479d65b-5369-483e-93cb-7ef6f06ba533", "sighting--719eb697-3ab3-42d8-8230-ccf641dbe21c", "sighting--d8c34fd6-fcb7-4512-b15b-8ad6b24b2626", "sighting--be1a2f40-6477-4610-b1a7-e39b60f0ec2f", "sighting--d0ef8f90-adb7-436e-9220-94ea9d39b64c", "sighting--3cbc8870-f1b2-4fe3-a335-e02e21b8b47e", "sighting--b360f107-07dd-4127-9fd7-38d5d5adf4ea", "sighting--7f459156-a5b2-4d97-ad65-d5e2ad3cf087", "sighting--c7d5e2f2-2629-462c-a498-2e6146165ff7", "sighting--43171998-66df-465d-947f-569dd41bb1c1", "sighting--9e1d7b59-c714-48ba-b789-bb1f2760defe", "sighting--e8a42b0d-7953-4165-9d7c-8bc28a38c795", "sighting--9a3661a6-7de3-4c5e-bcad-1df1f446d377", "sighting--8aaee9ff-1d93-42d7-b6dc-9355a541a886", "sighting--d4cdecf4-cb23-420f-a13d-682c2e36ecf4", "sighting--5ef2ecff-5fa6-4d54-a679-dd451678b9dd", "sighting--bec8fa28-08b1-4f30-9184-ca54f6c50d84", "sighting--2495caff-395f-42a3-86c5-feeacd147142", "sighting--8d504e1c-2bf1-47b2-b54f-d1351724bcc1", "sighting--6f1ac6df-5bf4-4b39-ba9e-a97c25123276", "sighting--01f8f9da-556c-44ce-a2a8-379461b70ae6", "sighting--d9c7f995-4dc5-4c5d-93aa-c01a2a0ce779", "sighting--5fb45909-20e1-4535-a746-beca43a1afaf", "sighting--6ed151da-a6fa-48de-93a1-06a715bd7713", "sighting--836e171b-dee2-4687-9fab-3d3fd5290908", "sighting--2c360d56-4c32-48d7-a981-d4960c0bfe1d", "sighting--b2c716f8-c4fa-49ef-9068-12e6cc72d771", "sighting--1a5a1737-5730-47e6-8b35-514b91fa5c92", "sighting--875b649a-a7c8-4a72-8b16-419295e5f5de", "sighting--94bb27b5-3b11-4ca8-9962-2ee77b526360", "sighting--73d17158-37ca-4c2a-b58d-d7dde89c29ee", "sighting--8cf39643-581a-4722-8e87-15cfab32132a", "sighting--2618c3e8-79b3-47e3-9a6a-4997ab5984e6", "sighting--7475b368-c00b-4e55-8781-3c019ce42f78", "sighting--47aa4483-3c5e-4afb-b067-2de84038e214", "sighting--e11acc90-40cd-41ad-be04-7c2e496bc7b2", "sighting--24d1060d-e72c-41d6-8b33-37dbfd1c20b3", "sighting--7dfd6b56-76ac-4bb9-81ba-716f29584847", "sighting--25999632-0487-4445-b42e-2a278eeeae52", "sighting--93a70829-0f47-4439-9cc0-e24c51f5c611", "sighting--547348cd-6baf-44d1-a0fb-5dee06200077", "sighting--03c34f50-ece8-4d62-9876-ad982f7414d8", "sighting--88741fa7-c227-4877-8c7b-a2ca23f422e1", "sighting--557e0a29-9433-4c1b-b492-a87c9e3b7952", "sighting--f0929612-1223-4ea0-a61f-d8d594950ada", "sighting--927b3051-1052-4935-8c60-c80dd2a08f4d", "sighting--3f1c14d1-c6ec-43e8-a848-76f3e7b3b664", "sighting--7b287a13-b67d-4d56-b10d-eea69b4461bf", "sighting--973f47a7-e34b-47b4-bca3-0e1bfff402de", "sighting--01d121d8-856a-4dec-9b08-6badb3788fed", "sighting--ddd81177-f957-441f-bb33-75e31a692d7a", "sighting--0552c201-ff40-475e-a5e4-900cd8863498", "sighting--4aa66641-e842-4a9f-98e9-c9462c8c2a71", "sighting--63fd63c3-70e8-474f-abdc-86ddbbb23ca8", "sighting--d3fd031f-ddcf-4d80-a51b-07febbfb704f", "sighting--d3b972dd-445e-4ab0-b339-d29401527d8a", "sighting--49a63d21-e189-4e64-844a-b38285266258", "sighting--a94cc121-5bb6-4f27-abe6-4b9ec3bd73ea", "sighting--a54f63e7-2d8a-432e-81d2-62339a49aa4e", "sighting--8f0fc530-6427-47a9-82b1-c08b460c61bb", "sighting--321325f3-d94d-4fea-a46e-ca8a07a2d880", "sighting--ce5cc506-0952-4ce4-88cd-d934d3bedca6", "sighting--f5650260-4d8d-4f81-8c37-7b52300018e7", "sighting--78219d29-09d9-4ff5-b7ea-a4f9e48cd724", "sighting--ca0d0a33-64f7-4ff0-a96e-e99c642401d6", "sighting--0701d8c8-4d85-4f98-b6c7-7d675641726f", "sighting--4f5cc6bd-0e44-4c83-a990-76dfadb1b166", "sighting--9c49f3aa-1e97-4d38-ae2c-915eceb205c5", "sighting--4668ce93-4aa9-4a9a-bca1-2f41cfc9b5bf", "sighting--a82aaa38-d321-42c0-af1a-105b5d68c010", "sighting--b0d214fe-fd53-43fa-99c7-6e16d74c7da6", "sighting--a52cd08e-461f-446c-bbb6-ef431fb9ff25", "sighting--dadb137e-d45e-44d8-9c6e-ccb0fd1d612f", "sighting--938c42ed-830d-458c-afbd-6abbaffbbb74", "sighting--93587d0a-06e8-45f5-bede-62c355c0169f", "sighting--9f11aa18-997d-4e85-8cda-d70c9944c5a7", "sighting--a0ca00bc-19b3-4dac-ade1-7f6c54540803", "sighting--0d4e3104-8339-4ae6-9482-bd6b5318d93c", "sighting--78291542-e15b-460f-ba1b-3c5abb2679d1", "sighting--24da176d-0944-4e19-bfd9-6b1e457433b1", "sighting--8cdeb19a-1d29-4d2e-a5e1-1be95c75cac1", "sighting--87f13390-1947-48c3-810b-443552b0f399", "sighting--f698dff0-9878-42f6-8ef5-2f6385f42d87", "sighting--141c0aac-8dda-46c4-baf8-2760993e26e1", "sighting--3ea4d957-f515-44c7-a1ff-0ddb03861b03", "sighting--c9b02afd-8393-481f-a77c-a1a5c444a097", "sighting--5d629589-3c02-409b-a72f-d3a8a0a8bdd4", "sighting--c142199e-3b90-4457-a83a-da5e6c35a90a", "sighting--3ff1366e-438f-474c-85f8-ed58cc246b20", "sighting--48916398-ac0d-4869-a12c-58c101df11f2", "sighting--2fce3af5-ce0b-4aef-b6cf-c5198aa31408", "sighting--c98dcdc8-8221-4762-820f-67b800f2ef9a", "sighting--b90207ce-c6ba-45f2-8d04-d0b33127a18b", "sighting--10c0868b-93cb-445a-a78b-516b248b9f63", "sighting--45dd5aac-99c0-499f-aed0-be5966288a7f", "sighting--e7c8e0ab-adfb-43f6-8582-b57e3b58e2a0", "sighting--3dc23298-2226-42a8-8c0d-415d2478d5b1", "sighting--00969961-9f3f-4a95-b4c1-1f885ede29ae", "sighting--fcc9e4b7-76cf-441a-bc55-ca3fd6c4cac6", "sighting--02957a95-f556-4160-b3b6-4c07b99165ba", "sighting--0e832163-9a67-4dad-9c29-a8840fa437d1", "sighting--a147dc5d-1d11-4b3e-ad36-794e7fb684a6", "sighting--ed095722-e016-4e4e-96a9-a1c946b04744", "sighting--664a6282-0887-46c8-9ab6-07ecb9ba1123", "sighting--756010d4-e97c-4f5c-8aeb-449e1e35fcb8", "sighting--e1f6ac9e-a439-4ff0-a9c1-d1f5b769d4e2", "sighting--551c1a32-da31-4259-84e8-7afb6387ea78", "sighting--1c6bb928-4669-43d1-9b50-9651787f5bcb", "sighting--0af709dc-53e3-48b0-9816-0fc5868a8358", "sighting--05bb43b9-8463-4fc2-8069-8093e6498170", "sighting--73cce4b4-ddb3-4582-8267-b1f433a51261", "sighting--27c46feb-b92d-401c-b46f-37dcf8ed8cb0", "sighting--370009c3-e3f3-4e59-85bc-c28023452fc8", "sighting--e26f7b57-5f2e-442f-9475-afd9e1781414", "sighting--948c9c43-2776-4a82-91ee-b5be644fee92", "sighting--9ef5a85c-f69d-4be1-8fb3-45b595df0683", "sighting--e51c1a50-a261-4ad6-a929-517bcb056f59", "sighting--dfc3fd2f-0d5f-4203-a6af-c4e258ce1438", "sighting--91b487ab-e7a5-4cbf-8ceb-cf40f4810ec5", "sighting--577a9e15-0554-4865-8789-5ed7078fbe7e", "sighting--49dc5336-35dc-4ad6-9d6d-b318aa4122b9", "sighting--344cb43e-f459-4f35-8753-92fac1e70e29", "sighting--aaa2635e-a2eb-46da-bf46-d89e8eefeda5", "sighting--6e64ecd7-c5e1-48fe-be6e-6d600d3d2fb3", "sighting--5bc4df2b-dd3d-4ec4-a133-848167f6b901", "sighting--6c0726a6-1a98-4b57-b464-827812a45ba9", "sighting--61a9eeef-9833-413a-854e-f50061cfb492", "sighting--908d866b-709b-4045-9230-6faa39213a7e", "sighting--a2c55226-0309-43d0-895a-1838f6de3f04", "sighting--71a7b03f-e65b-4a66-96bf-e7a0f4d8a03f", "sighting--bc0ceb41-e35e-4ce3-b724-09c9cafdc08d", "sighting--69a8ce41-e547-4e39-a0d3-2d910c3bb942", "sighting--75da78b1-cdb8-4268-b6f3-222925292de5", "sighting--e407b49e-8931-40bd-81a3-6b51939235d5", "sighting--edd7efad-59c4-457d-87e6-449bcd713e37", "sighting--713f0b56-798a-4e6a-9723-1d1c11470a56", "sighting--d6ae77b0-6d70-4854-b3a2-c1c27dc46b08", "sighting--d2a540af-ef43-46aa-864c-e23265689460", "sighting--5121b1c9-cab0-4c1c-80dd-383e2166e401", "sighting--42f640a9-ea4f-49b2-af0a-805eedd88aed", "sighting--da4050a5-19f1-45e1-86ca-f7071bfbf289", "sighting--2ab8b8e0-b3ba-402a-8dbf-f03731333358", "sighting--e27adcec-728f-4353-84d4-44ca764c6ceb", "sighting--4902570e-3e24-413b-a6c0-0519dc497dd0", "sighting--024f9891-8ce3-440a-b149-55c635f17b20", "sighting--cc17dcd2-74a0-4b34-91d1-413116d3c4d1", "sighting--86067896-d10c-4a0a-8a3f-16600f4e5eb9", "sighting--c710a42a-f043-4abb-8d34-90f2bc10d2d3", "sighting--af1bd6bd-f9c3-4f6c-b87d-45c06a5e9688", "sighting--3699b7cd-4908-4bc9-a30b-dd26874cba39", "sighting--729c3715-11ae-4291-bc62-0f2d02815a51", "sighting--eabac5f9-1011-4ef7-9846-25653139f382", "sighting--96176b21-e279-4f9a-bb40-4b8eeb3d38aa", "sighting--1f966ed6-31ab-4212-840d-0319c128d0e1", "sighting--cb9d6c98-358e-41a8-b598-eba8b5211b2b", "sighting--a65e162a-8afc-4997-992c-65e9404de900", "sighting--e7b9a5d2-23e1-4535-a004-547db51470df", "sighting--3847dd06-ab69-4145-8787-a01591999fbf", "sighting--10a4d73f-80e8-4a0c-863a-16d3e316aa58", "sighting--ef596c21-7492-48f3-b3f5-33eb322c9c1a", "sighting--172c0f0d-e729-4192-9ca3-c8f0d6ae2755", "sighting--0e54babb-d746-4526-a0bd-7e60c1e7e37a", "sighting--c552c878-95fb-4216-a96d-57f85ee9b0e3", "sighting--c6d8d529-4b9d-496a-9696-3d73bdc055f9", "sighting--0a7a43ef-3204-49dd-a943-1e422f69b45e", "sighting--a076c6d8-89c2-40d4-ac3f-2f04ef47d9d7", "sighting--c00553ab-557a-42c2-9bdd-0c79d77c2475", "sighting--ca7bbbc3-0f69-41af-a8b6-6afe99cdc594", "sighting--98824d69-80c7-4a5e-82d7-100dc2dbb9a6", "sighting--2cb1b3b1-5d94-4ab5-90e9-071018e2f2f2", "sighting--6db0d5ea-368f-4436-be53-8a1c868d0174", "sighting--86faa826-c2f3-4f6c-8d97-dfb137a4214a", "sighting--1d0e20fe-d872-4e25-84ae-d668613bf6c3", "sighting--e3d97668-829c-4f96-a774-030ae1e6b3d2", "sighting--5c9996a2-9beb-4536-a8af-3d6befd7a77f", "sighting--e441c9d4-68ef-4dfc-aa3b-cad76b65c17c", "sighting--8f461821-abf3-46cc-accd-058dcdc4552b", "sighting--c1dc9a2f-c89f-4726-bf2c-70c3f30a438a", "sighting--83ae50d0-ffbb-48ae-b13f-c0e131078885", "sighting--26bdb9dc-68b6-482c-a979-82b0ecd81667", "sighting--a3cbf7e4-7afb-4cb8-ad24-7321326276b6", "sighting--5f6c8f34-e79c-4a6c-bac6-da0844474d91", "sighting--f583b2b1-3363-4e92-8693-ee040554dc40", "sighting--efaa0e77-cf3b-4dc1-b0c5-d49e51bc91a7", "sighting--e4d3dc3e-fc1a-406a-a9e8-6211656fa99d", "sighting--963d3c93-e6ff-4625-b71a-73e5c17e8859", "sighting--cac93618-eb70-48b2-9c44-2b49456b1b13", "sighting--d46e03ab-f9ab-4536-bae2-a57592a23d92", "sighting--4f5a717e-85c8-4637-86d8-e81ff3f40e35", "sighting--b67d50da-d587-498d-ad04-463c9e13a6ac", "sighting--78996437-1693-4bfc-8ce3-a285cbbc2fde", "sighting--cf1d2e4e-1317-4ab7-bc59-0d6e8806cc9b", "sighting--b06da8ea-fbf4-4e84-b347-737c2754e6e8", "sighting--d1dfe4d9-3073-4e14-aca3-a939212e2ca2", "sighting--4dc284fd-9e6a-4f41-b4ca-b4aa7aebbdd0", "sighting--41fd3338-ead2-41ab-a7fb-0aa855bd8ad3", "sighting--6d2adfab-9ed7-48b6-a875-10c31a753870", "sighting--d37e3301-4e26-4737-b398-86315c4011f7", "sighting--5ed82e7a-24f8-4d1c-a1f6-a8afd77f2a76", "sighting--8923a9e9-8e78-46eb-8152-288acce933f5", "sighting--ab01d09f-576b-4b33-a91d-80034a741780", "sighting--1a113321-03f2-44fa-a423-f27e3c538859", "sighting--2c07af60-59bc-46b4-9c29-fc0bbe97c00c", "sighting--c78d272c-3b0c-4b58-8df2-408f6c9f6232", "sighting--5c589ff1-d694-45f0-aa99-78ebde4f0931", "sighting--9f9e0d5f-6546-40b6-9bcc-a11da9219766", "sighting--9495b41b-a797-4d1c-a862-db16b1b1415d", "sighting--4cf445cf-342c-46c2-abd2-a93d6002bcc9", "sighting--a89de66e-1527-41e8-abb0-5aad67eb1595", "sighting--614121e8-2380-4b7b-8c57-fad248531dd4", "sighting--2040ed3f-56bc-462d-a299-66e72618f936", "sighting--44f24391-a286-452a-8018-7369c8fe3d45", "sighting--dc726f16-2fd7-4746-bf63-532b8e5e9581", "sighting--0087dca3-c66d-4abb-9863-ec935d25473a", "sighting--eb50e3fb-0d15-4ff9-95d9-8c788b318072", "sighting--1b96e876-e284-4711-ad41-0c8c320c0e93", "sighting--6407d51f-7901-49c1-b3fc-fb39e86748de", "sighting--9269f284-95b6-4e31-8082-9de574deb3fe", "sighting--fc5f0251-907b-4909-b602-20216c83229b", "sighting--6e24b31d-8056-479e-b9af-a1e6b85c88c0", "sighting--f8a19aa0-bf62-4732-8463-4c59d17cdd41", "sighting--51b1e239-3b2f-4db8-9cc5-1418490a7357", "sighting--9ebbcbd8-204a-46a4-9f66-ffd19543f23d", "sighting--d50eb993-e9ac-4585-a9d1-c598c7fcfc96", "sighting--2940e638-4763-4232-b9f5-cbc81afa701d", "sighting--9634418b-949f-40cb-a712-0fa16020c78e", "sighting--e4650b3f-0c47-4c0f-ab8b-0531e5a7302d", "sighting--0173247d-c68c-4a4f-83c6-7fc90ae0ffad", "sighting--cd30c8e6-b1de-483f-9782-c15d11976921", "sighting--9a0a8496-1295-491f-9e64-4581c8c61e72", "sighting--58088042-1823-40b3-92a1-503204abbf02", "sighting--42195c5e-194f-4fd1-9709-3db46ac671f6", "sighting--c1cf6fcc-852d-4968-9771-0870a3965c1c", "sighting--730969aa-5a29-4ae3-8eed-5fa510f6cd10", "sighting--08bc1b5a-f210-4041-9517-06fc62005e73", "sighting--65eab56d-6048-4abb-84fd-5bbe828d81c4", "sighting--c3d6fc27-0fff-4436-b4df-b408cb333246", "sighting--3d4b46b5-149e-4756-9267-976d56917e3a", "sighting--b0f318aa-3ec4-47e9-b916-80fc6c2bbb49", "sighting--3d3070a3-56ec-4198-851b-44a3860a4bed", "sighting--5a1e1e63-2a4f-41af-9e20-64f0e664165c", "sighting--024580f9-2388-4b98-9c2d-a168aa86ede5", "sighting--01e1c13f-abcb-4466-919f-bda89811572e", "sighting--c16e9159-25c2-4693-820c-76d9cdf68ff2", "sighting--0801c68b-1eab-4a5b-a72b-3ad8daaeba3b", "sighting--229d8e10-48f3-45f1-a3a0-90e843fc45f2", "sighting--41f43b0c-a9e4-4357-a1e5-cdb65374e7c0", "sighting--ef584dc1-fcce-40b8-9b64-2ce18573c910", "sighting--cc4eca16-794b-42a4-9675-f9b12b78a13d", "sighting--dd997897-c941-4ee8-9010-5f78651f313a", "sighting--88fda2dd-ad59-42d8-852d-782142e05fb0", "sighting--a19cfe94-49e5-4524-a550-3f6a2e1ccbbf", "sighting--182083f2-d582-4e52-b5d7-66ba92b4f1b8", "sighting--493fd3a9-88de-4fb1-81ef-4f3a0363ecc3", "sighting--37a46976-6d6b-4104-ab3a-13459f63e4ed", "sighting--0f15a359-e97a-4eee-ace9-ddf3601404af", "sighting--e61eab66-4d98-4e98-9805-543654344c79", "sighting--2b6ab0d4-2d9f-4a28-8a8b-2f9a6dcf5b41", "sighting--5c30ef2e-24b1-4db0-b392-46e9148c9ef8", "sighting--9055e6f3-2c04-49a9-ad5e-aa75d436e528", "sighting--51e48192-d00e-4375-a325-fab19a1bc65d", "sighting--6cb1be02-8954-4ace-8029-e58244907bc6", "sighting--60ae2ed1-c9b6-4d46-9b31-1a3bca98ca56", "sighting--a151039b-49dc-4930-a727-4bf24a75822b", "sighting--61720c6a-81a5-4f63-8ed3-15fd3d17c378", "sighting--3f0ce814-2da9-457b-be56-cae7b6699349", "sighting--2ab4833f-c2fd-4dff-929f-61d482ffcee8", "sighting--3ad28e5f-483e-4ce1-a6b1-0ef01b5b50fb", "sighting--d26d52ce-ed9d-44cb-a7c0-9e54126c7abc", "sighting--e66422cb-2e7c-4347-9e68-9709b349e737", "sighting--040fca13-dc40-4e83-bdaf-f24414b47fb3", "sighting--50238451-bb2f-4245-8c11-92bc0afb3640", "sighting--e5fcf485-378c-4c7d-971f-561bd6ce78e9", "sighting--d93abd98-c423-4a86-8d43-3bb91d42597d", "sighting--84345a5a-121f-4706-a75f-c69ab4cfa2cb", "sighting--5f540411-5bf5-46e8-9ba7-c213694a24fc", "sighting--8be7c9c3-bab7-408c-8c68-4d32b7fa0189", "sighting--a2629a98-23f1-4376-9336-f9a96baddac1", "sighting--2a9111f7-ab0b-4de8-a3e2-e98e16b7d839", "sighting--ce8d1fca-5ace-4a95-8a14-d5dab094c0e1", "sighting--ad2d6c4e-7ee9-425a-a50e-5b0f5be20d6e", "sighting--132e0389-3b5c-49ef-b157-b742728c1bd4", "sighting--acd0f4a0-ec05-453d-9c3d-d3123008ef32", "sighting--d2ac5fde-1272-4e47-905d-d8fdaf6bcc38", "sighting--1e4f289a-19c5-4525-9395-72c478708a42", "sighting--5c585120-1500-4eb2-b679-618ccc8407fe", "sighting--396aab57-2159-4890-8e82-6db37ba59b54", "sighting--44a29bff-eb59-4a73-917b-049510046d20", "sighting--e4d9cc0f-b39c-4185-a9bc-3c1ee198937e", "sighting--6a2b55c8-3f28-4114-a1a9-e2e925012d14", "sighting--7a093806-7a3b-4844-9641-f884b66b5536", "sighting--aa7d4c33-59c5-4b97-bb4e-811a55c51327", "sighting--2de8ebc4-8543-464e-8603-565985f39f6a", "sighting--7918a720-bb23-45db-b065-d5dd56eb0f67", "sighting--73442ed1-a965-405a-9b25-af9e69e488dd", "sighting--fef6caaa-cd56-48f8-9fb6-f5e36f740dac", "sighting--2555edd5-6b1c-4d95-afb7-fb2ac418b422", "sighting--8782f006-9caf-4d43-a421-1360f0d8de04", "sighting--352198a2-92ee-483f-b230-933b89e0bf5d", "sighting--e454b142-52bb-4c81-b250-d356dc88b785", "sighting--83837758-34e8-44d1-a931-dd62b011a571", "sighting--c187bba2-fe7a-4455-882a-86190ad3a1f5", "sighting--fb1e9600-727c-4070-8e92-46d371459d08", "sighting--80993e82-b753-40fe-94ec-2f5fc962018b", "sighting--1491795b-ea19-46f6-bcad-e314b51f8f11", "sighting--efece826-09e9-4408-8f6c-d59caec20182", "sighting--2b8891f0-52e0-461c-b96f-1c730732404d", "sighting--0203f364-d4ef-4fde-9f81-72c73bfae804", "sighting--cdfd1683-555a-4a7b-ba7d-494036636bd7", "sighting--d963d045-7436-4ca4-ab45-10857578294a", "sighting--ec902d39-e64a-42d8-ada8-65acdd9670a7", "sighting--4d792264-e46c-4416-b426-cdd58b114d4b", "sighting--e7d44c00-9566-41fb-8656-7fbc979b72d8", "sighting--c425ff6d-02c9-490f-8de7-0b7dec65f721", "sighting--fbbb5a28-0887-44d3-b520-f579249975e5", "sighting--328989a1-29f9-4eb9-b66b-cde66b9f4aeb", "sighting--11aae14d-f77f-4c5d-a3d8-69d812c4aec4", "sighting--717de23c-b9ac-46f7-b046-e6af1d7b25e7", "sighting--d8172116-57c9-45a2-9ce8-17a672372879", "sighting--9535f32d-a2ad-4248-b9c2-f5133bd9d906", "sighting--a3e00acf-5ba1-4982-ba6a-af3bff8883c6", "sighting--a2d74d0b-0f01-41e2-9262-5d49f7c37080", "sighting--86bda2bc-074b-4120-86e0-8b1caf7554f1", "sighting--efa7da12-26c0-4570-a73c-db26cf10c65e", "sighting--2db84e9e-03ff-4fe3-9b3c-f4bae0f6e99f", "sighting--fba156d6-9dd3-46b3-a6ec-5578ac8bce4f", "sighting--fa1f3cab-a3bb-4c81-a3d7-14620ba9cc9e", "sighting--0d1b1493-eba7-4a69-8424-44374e0a4fa8", "sighting--22960757-13dd-4019-bc99-d0a153262075", "sighting--d5fedc99-dd2c-4dab-83d3-73af13d336f3", "sighting--c7b1629f-6d73-4fff-b185-0095a5f23d5e", "sighting--53e27064-392e-454e-aeae-d75c326298f2", "sighting--3770bcb4-e9f7-45e0-ab2c-bd6a332f8d99", "sighting--47750064-d90e-4d92-8ca0-ea136690461c", "sighting--82db65f5-6afc-437a-975f-a3d6f93b4ca2", "sighting--e521e841-932d-4338-81fe-34bee8f1e93e", "sighting--023ab2b2-a8c5-426b-bb37-8dcba0d5c16e", "sighting--5b536573-1014-4d04-b52d-8af5a025dbff", "sighting--0777053c-a266-436f-bc1e-376cd0c39853", "sighting--8350c221-442e-4cd1-b420-115018f9b640", "sighting--8081f70e-79c4-41a8-b5f2-fade73aa73b0", "sighting--74d546be-3ff4-459d-abc8-3a48ba56ef84", "sighting--8f08b2ee-2dbc-4d03-9a62-b98d773ad469", "sighting--7c88341f-21aa-415f-b08f-b084eedc5f3c", "sighting--ba593739-8961-41e7-9f33-f9838b031ea5", "sighting--2cf10e01-ecb1-48b7-9da9-bb26770d06a7", "sighting--4d88bad1-3dd3-424b-841b-28384af06fb9", "sighting--470ed9e5-72a3-4b35-9f8e-923dd128a559", "sighting--a3ad0357-fc21-49b8-8dfe-422fe341674e", "sighting--b6132a39-28cd-43bc-afff-cf681cbba38c", "sighting--92b3a97a-439a-4222-bade-501fe5d7f909", "sighting--6844fbea-ce81-4979-98bf-6787d56a9200", "sighting--4624a7eb-ec8a-4b6f-be70-1c6a13570641", "sighting--bef9373c-bcc4-4872-b729-2ce90b3df68a", "sighting--dd5afdf2-0916-4bc4-b831-33512af74bee", "sighting--1f117c62-0bd6-44f6-92c7-67e9adf23e53", "sighting--0b9228d6-7af1-4c11-941e-a22fab034cc6", "sighting--e562b298-6c20-4632-acd8-33e87ce64df9", "sighting--1e812ba5-c45b-4626-a228-1d1151d4cb35", "sighting--b59cd922-66fd-4cb0-af5a-8c0fcfa9634e", "sighting--f1288b1e-f538-4f76-b665-291a00c0cfa9", "sighting--de8d6042-dad2-4f33-b5a0-d1583e4ce895", "sighting--1f4174e8-af6b-4e9e-8bbb-f51e44b5ef39", "sighting--5fa678c8-f01e-4f29-bf08-17cb08b4ab54", "sighting--3940f283-46f4-4b87-805b-5fa3b5259bde", "sighting--3bf3c6dd-1b36-4afa-8f33-a5d012d44ca3", "sighting--df26be0b-a705-4783-82b6-8815a5a2a6f2", "sighting--4ad2519d-f96f-4e4d-87ad-3e44f364c3d0", "sighting--1428e906-d379-49fb-be98-dae9a7a223ca", "sighting--311f99a1-68cb-47a7-9bc5-51e7fedb0460", "sighting--188e152e-0d63-4b68-b5e9-b5aa0c95f409", "sighting--2874484a-730d-4bb4-a420-7f80f63354f2", "sighting--9dc63a9c-d203-47af-9c72-95071c86a356", "sighting--d9fea557-001a-4f79-a167-bbddabcbf2d9", "sighting--fd4ecbea-ffc5-47db-87c4-67ed19aa99a4", "sighting--fa39e623-aaca-46ad-a392-cc51fd9feffa", "sighting--d5a66728-8e28-4237-9090-80eb1fc6b9cb", "sighting--dde04204-6e9c-49f9-8f95-d101aac3d9d7", "sighting--023ac3b3-8e71-48a7-bba5-89fefa88c015", "sighting--689d500e-2bd0-49e5-bbff-569e8e4d77fd", "sighting--c3d56f38-c89f-4557-82bf-6a2a78f70bb3", "sighting--435ace75-7ec3-4027-bac5-c647c83a7c06", "sighting--bd6bacd5-1ad5-426c-9883-5e177bcc8d5b", "sighting--c5fd36af-6ade-40ac-b109-b9d4ec0009a0", "sighting--c3f482fc-a650-44da-bb32-676966f316ed", "sighting--a8e5f22f-299b-4a78-b4c1-4c94667e6a9c", "sighting--d18cca2d-3b5b-4a96-bcb1-b1312054acbe", "sighting--42fab7c0-5f88-42b3-ac2b-6be55be1fa6b", "sighting--8396efae-947b-46de-855e-d5483f50d015", "sighting--403f742f-21f4-4b06-b15f-152c6c6ce1aa", "sighting--4dc31622-e15d-4cdb-8218-9b3937bbc713", "sighting--99f76ff9-cd18-4839-9644-e36c802d2826", "sighting--afbe6d88-a62f-4480-abc7-d024052d5e33", "sighting--bbc5671d-0740-4f5b-9e92-d2d9eca2aa39", "sighting--f0667ce2-5a3c-4aec-97de-00c442926053", "sighting--4e6f6c3c-cd38-4be4-9e2a-a26aed2bd905", "sighting--e95d79ae-23f4-4c32-b971-ed2883d00553", "sighting--7468ce9f-29b8-427d-966e-204bd5d08fd9", "sighting--24f07977-6e85-45e6-b6e7-c90f0172f9ee", "sighting--5c575e47-6209-4b8d-90db-d8312f4708c7", "sighting--43842ff3-3c37-4563-babb-de2ed096b13a", "sighting--4bf0cef0-7ec2-4a84-bf51-01aba26e1e53", "sighting--995dbe71-884a-414f-8765-e525e206961a", "sighting--db9b0e82-a245-4c45-b9fc-40d639b3a4c0", "sighting--65fcfc33-8516-48de-abe2-cc173629ee94", "sighting--175d2f77-eceb-4321-82b0-68efe9cb5c44", "sighting--946d2cba-dbc1-4461-b7ed-9f660d844bff", "sighting--23da49e6-7cb8-4bf8-a19f-f891e9dba487", "sighting--18d34456-2b1e-488e-97a8-9483fc9bdfc7", "sighting--b536ab46-bd92-45cc-a0fb-0ee879eecd30", "sighting--90c0c13f-cc40-458f-8da9-0257122472b5", "sighting--8ec8ccc5-e4cf-465a-9438-dd8a1afd2477", "sighting--dfd0797b-6983-49f1-9018-2ae50d5e7c12", "sighting--5bf5fc2b-7b8c-4ba6-a896-2de05c964936", "sighting--6f0d8a6a-0f19-4200-978e-ef7adedee573", "sighting--182db07a-f341-426a-b6f7-64323e258c09", "sighting--93fcaefb-6e06-4804-9fa5-17f880599560", "sighting--485eaee3-c329-4b17-856a-d839f5dd145c", "sighting--a5551e40-0a43-4ce9-b0da-1cac878217ca", "sighting--d332aa12-705c-4dea-8a75-9dd40a2a306d", "sighting--df684fb5-07d1-4844-8524-8338fc6ec49d", "sighting--e028c01d-e6e8-487b-8319-552f0cb05cf4", "sighting--3b05f659-32a0-4ad5-a200-bb93ba045c16", "sighting--0cdca6bf-e05b-4a61-a3fa-e5e42a7bf6b7", "sighting--06447701-527e-47ec-a20f-4d13079de212", "sighting--dbbaf3d3-0220-4276-9972-b357702aa08c", "sighting--cd5750dc-b6e5-4b09-8347-c9a4c4f617e3", "sighting--9bd7e24f-6d27-4ba5-a8f1-7f9ff1225600", "sighting--520c0d33-b831-4b6b-8e41-6db30a13e846", "sighting--d5bb5d21-9a04-4821-bf7a-d9caabbfb152", "sighting--2a4206fc-fc24-45e0-8614-6858143920a6", "sighting--964b83f1-84eb-47cb-aaa4-8cc319aeb8f9", "sighting--a89cc7cb-993d-4517-af7f-10097854075a", "sighting--9f8e4c25-f2c3-4a90-8eb1-f06f8549ce98", "sighting--ed363707-d363-48ec-b3d7-16aed7338049", "sighting--232c8cf6-3f87-4bf2-b3eb-176862b2b239", "sighting--414153bc-08f7-449b-8a62-5f3c7740e580", "sighting--dbd5410b-b65e-41c1-860d-d430b26a181d", "sighting--7a3d8d97-f11a-476d-8620-f46c5afc7fb9", "sighting--360c9e8a-ac97-48fa-b604-b4f842953a32", "sighting--afd66087-5caf-4cde-8f74-7d75cc0f3b90", "sighting--2785ed3c-70bd-499f-bb60-e91480c282e0", "sighting--a0428ba7-5ffd-4677-b9de-d5514d2426d4", "sighting--8d4a08c7-df40-4a4c-81be-462da7886bec", "sighting--5c824c3b-4fcf-49f2-a939-ab3c1c3de7f5", "sighting--8f35f250-a15c-4ef5-a175-8601653830b9", "sighting--324bef79-bc6f-4d9d-8dd4-cd56ecebf10d", "sighting--29d5e2ce-6d68-4e60-9b99-ed8363f5cd0e", "sighting--21c93609-f867-4cf7-bc8b-2302528481bc", "sighting--55e14ac3-7c87-4074-b268-9e6bfe5c0577", "sighting--d3eafd70-007d-4ead-baf8-2853104f7a2d", "sighting--cd248f1c-7d68-49fd-93e6-d9c0cd0fcfbe", "sighting--466fd426-368d-4bfa-9a9f-b26ed91ed3f6", "sighting--31232918-0802-4cbf-8485-44a763ae1206", "sighting--add4d795-4117-436f-87ad-503f9c7baf94", "sighting--8ff41ad4-3d92-4a73-9d3e-1f022273110b", "sighting--c6a46881-e6a0-4abc-a3ef-e1e7bc2d7de1", "sighting--a54ff357-e8d5-48f7-bae3-7f86ab88af06", "sighting--51e447aa-711c-41f5-ae13-619f050aa17e", "sighting--7ecb1844-2034-4c01-bd56-19ac159c74cf", "sighting--2c494f07-55a3-4c0e-8d04-7017aba26a78", "sighting--2f202139-b6e7-4856-8319-c1e83343b34e", "sighting--d0f29d33-5d8b-48f0-9c80-45446b6b442d", "sighting--35e66519-878c-441b-a627-18b491401192", "sighting--f8f449da-89b2-4af4-b4f2-006af2395a35", "sighting--9e6a2e4e-3c69-4366-9aa1-0ff8571fffa4", "sighting--dc1074d7-4af1-4823-9330-059869d664c8", "sighting--239d9ec9-27dd-418e-969f-39acfd7615b3", "sighting--0059e9d0-52f8-44e6-86b4-d4bf195f274b", "sighting--55944ed9-790e-476d-93bf-0928f5d99bb5", "sighting--26f8e41b-b0e3-45b8-8ddf-8e5ef4374562", "sighting--64901859-cc87-476a-9788-13e82f7e14d9", "sighting--3547de68-9614-4f9f-99ea-3eaacd403808", "sighting--50317fa0-5b6c-4dd3-8ce6-ecb371dcad45", "sighting--290e17ca-1a4c-4714-846b-22d563dc868f", "sighting--145c5093-3155-4e11-9c7b-dc29c5490624", "sighting--497f892e-078b-400e-9852-f13534253b01", "sighting--109104ac-7659-4633-9c55-503ef3de097e", "sighting--d3cc2c44-11e3-414c-9285-b5082c65e272", "sighting--95be5d5b-c890-45fc-aa05-34de592e191b", "sighting--72652587-f9e4-44d8-8582-0a9cbd572fbc", "sighting--155966f3-66a3-4a91-8341-e5cd9367223d", "sighting--14463acb-35ad-4cc2-a2a1-cce9a2849968", "sighting--32b8020c-f92a-4fbd-915a-4e94663768c3", "sighting--57322385-f921-400e-987c-a597cccef16a", "sighting--896b7720-9045-4180-95c1-32e2d4d1217a", "sighting--c8a29ad8-34a9-4be7-9aca-a856c6142390", "sighting--d70caaef-5159-45a2-b3ef-43789c8f28cd", "sighting--0e3e772c-4197-47af-82bf-9ea60f20fd2b", "sighting--7ef3425e-d797-4b15-a41f-fea502001622", "sighting--fef00138-6b90-4795-b88f-6db752087c5e", "sighting--e1586d3c-29d6-4864-a8c2-ecbf15f9bcca", "sighting--8d137386-4d1a-4f0d-8f33-221718c6c9c6", "sighting--b24b8d07-084a-407f-8d9e-b2273db1a140", "sighting--e38c2b4f-31ef-4ccc-8397-1183809234f5", "sighting--981de095-a8cb-458a-b58b-52be8423f733", "sighting--eaba0215-b8dd-41c2-a433-05b7fe1321e3", "sighting--e6ee0323-14d8-47ee-9f02-01756b98279b", "sighting--f876010d-93eb-4d8b-b207-f620dc204d4d", "sighting--a75812af-f2e1-4515-a943-53331c036e01", "sighting--dc7e231f-a619-4246-af5a-e1ee2132f5d1", "sighting--876b67ca-c8a0-4007-bb99-dc08fff1ee0f", "sighting--0d61e832-64c5-4267-910f-b90ec979916c", "sighting--1f9d93a3-46dc-4889-96ab-4bc21ffcc634", "sighting--9b54b993-cc15-4e41-814f-54e863d1061d", "sighting--3f96de05-e588-44e3-931a-ecbaeb418209", "sighting--c43eb266-5ce1-4e73-9fdd-d8175decae6c", "sighting--2598c5b1-7e5d-4c83-9252-23068fe5ecc7", "sighting--0db15662-7c81-4013-8573-4b48b224177b", "sighting--1b74498c-ff3d-4fe3-b9a8-d0ce13709ff8", "sighting--be13d75b-e06a-4dda-ae44-5dadf97ae536", "sighting--76a7e423-10b3-43c4-8181-d9624fd3c338", "sighting--50980fcc-5f62-4112-9743-783c84efbcb9", "sighting--35529e7e-bcec-429e-8fb0-88f8c55c16ac", "sighting--a8b7df9c-7d47-4023-b169-870e082b0401", "sighting--4b68bf79-98b8-45ff-ab21-2d191938f08d", "sighting--6b9da78b-cfbc-4036-a5c6-174ad7b0cc4f", "sighting--e8f32ed3-64ac-4323-8fce-8b9b7c3b2c92", "sighting--eb8ea2d0-190e-440a-974d-a6284df00d1e", "sighting--569d2c05-6758-440e-bb82-bd7f6bc7ab39", "sighting--deb09be3-874c-4b8c-b745-9b99b5657ef6", "sighting--25ed6b75-f869-4693-8d30-01d6a5bffc8b", "sighting--41efa6d5-aca8-4349-b9f2-c83764e0a2bc", "sighting--511b28e4-4c4b-4048-a342-670dc6c60183", "sighting--1a04b298-36cd-417f-9ae1-c367e4405da5", "sighting--e510c4ce-4bff-4707-a3f5-9fd1909c1c75", "sighting--0ad34f07-a452-427d-bea4-f96e6af1a77a", "sighting--dd96cf87-c942-4f7f-8e93-b0a7f073739c", "sighting--0903bfb1-5e43-43e4-8d8a-5d6467ea30ed", "sighting--193205f2-0ca9-46b2-9df8-2a456cd5470c", "sighting--ecbf0ea6-a5ac-4aa5-bda2-05768ba7dbaa", "sighting--69e1fac6-b7ef-4e3a-b9d9-5b5e064106de", "sighting--aeac5d25-78cc-437d-81e2-0a4707376f51", "sighting--96423a18-d23a-4d8b-adfa-d1c786fd0d3b", "sighting--46eee548-49ff-4366-8408-4cdfcddfe96b", "sighting--c480b670-9fe7-4051-8683-88f97f8e2515", "sighting--eb5f06e4-ba79-4dca-990f-a2778e46de9e", "sighting--f2b33a63-daa2-4fce-ae47-c43a1bfcb80a", "sighting--7b866e77-fa36-4693-9944-0dafa4b5b708", "sighting--7d28026e-19f6-45e7-93f5-ca9cebe944b0", "sighting--041686a2-1383-49cf-84d5-90d333649a6d", "sighting--544ac2d8-6c3b-47f4-823c-87625dfb37fc", "sighting--95e44565-063b-4190-8d39-ffc7beb5a0c7", "sighting--53d55c53-5c32-47a8-98bd-41b1ce07608a", "sighting--90a25dcb-0f1c-4b8e-9493-886df18e2371", "sighting--71f94fa2-db41-4a9f-9986-a355d155f92d", "sighting--58f2cfde-4621-4248-99b4-5f17e89a8944", "sighting--d0de1263-559a-468d-a5de-313bfc3f65d9", "sighting--83e2bc66-126d-43b5-99d0-fd7712389555", "sighting--41f027b4-7b88-4235-ad49-84dcd1bcb932", "sighting--a454a3cd-2e0a-4378-929a-bc28707e7c08", "sighting--be37d5eb-09df-4250-bff5-2a864b786840", "sighting--502ba1bf-7dc6-4442-a5ba-69322e019cff", "sighting--62d90ae7-8b90-4d2b-a81f-3bb8af17f77b", "sighting--c85bed54-5b9a-4e56-9214-be1061d082ed", "sighting--c3b7dfc3-03c9-4f0d-b38f-a4533894943e", "sighting--cae71701-3253-4931-a407-742dbc38d1f8", "sighting--5f849dc6-f121-4b9e-afcd-ed8a38de1240", "sighting--37dc84a5-de5f-427e-8baf-80cff2655f8f", "sighting--acc0463e-0b4e-49b1-93b4-64c18a2716b2", "sighting--dc2a6e93-7969-4db1-8eff-2906ab388e24", "sighting--48a7e10c-3c90-4b65-a9df-fe3899910fa3", "sighting--34d0996d-82ec-426b-8db0-09f4ae9d7c5f", "sighting--e4d23018-385b-411b-bc09-336917405b38", "sighting--af7d27e6-a735-485d-af3f-4066e6dbb497", "sighting--049c9cf9-7e2a-4ec8-85e2-104e49faee2b", "sighting--d09befd3-f7cd-443e-96ff-f09603a702c0", "sighting--5c3037b0-4bf1-4b03-94f0-3ac1a86a457e", "sighting--54976aad-e3c8-49ff-8ab6-1b936a0dc4dc", "sighting--911c313a-62e4-4b4e-ba84-c38e7cbcda04", "sighting--255e4968-875a-425b-8744-9ccc0fd12567", "sighting--61aabacc-adbc-4e2b-9493-ca908cc4e441", "sighting--6e9519ed-072a-4f4a-9b8e-d79334b8c5c7", "sighting--d15c19fd-befa-48cf-99b4-7b018f045557", "sighting--0bd6efab-ba3b-489a-8e9c-eacfa7ef8fbf", "sighting--a9815071-5484-4f42-a7b2-1314761ddbe4", "sighting--361f15cf-b6a5-40eb-bb65-91cc4536f2f4", "sighting--65628de2-f10a-4466-90e3-4e8e0f683ad9", "sighting--ac3a402b-c078-42a2-8707-c49207889f99", "sighting--52948300-9206-49ed-a262-94683c9fb0c0", "sighting--4c3f1fe0-c3a5-45f8-829c-ef14c15c479c", "sighting--0f9d87fd-69c9-451a-9bad-eb744d53b1c0", "sighting--521e2e3e-b1ae-4f96-b426-a82465be2ffa", "sighting--ddef2218-7ca9-4931-9d0b-8d159de0d9fb", "sighting--da3597b5-e7d3-4065-8c28-d44759d97e0e", "sighting--fc86dc36-b040-4d45-bf68-5b13fd30f839", "sighting--a8c42ebd-299a-4dfe-8410-bed33a0a6fbb", "sighting--6b256892-4dec-4334-b9b3-1175a8a79af0", "sighting--1f93959b-67d4-4471-9a52-6c2d46f2ab00", "sighting--1331daaf-6348-429f-981a-14c8db35da24", "sighting--48dda07a-12a1-4f36-bff0-50c7b0aad5cf", "sighting--a819de2a-9ec8-4d2c-8fdb-123b22de1d99", "sighting--4e366123-cf6b-4a26-b187-9c9e91a8eea3", "sighting--d2ee8669-48ea-46b0-b8c3-f769bf4eff4b", "sighting--8c9beffc-f860-4628-8610-1599ee6fd915", "sighting--f31d5fb2-3441-446d-8f65-e456414384a9", "sighting--9e9afe0e-c046-42db-9792-6b078f74fd5f", "sighting--80ee4a52-7a60-44d8-9147-225ce697ba0e", "sighting--c0f67fa6-7a22-428d-b7f5-95f529b7a83e", "sighting--295f65a9-30ba-4a51-b549-23190ac6d823", "sighting--3d1ecae1-b1b2-4634-8275-6ae61847adaa", "sighting--72a5b84e-7221-4063-a8a1-c34ef916a604", "sighting--1bdf6b1f-4c05-4781-9eb6-7475f7fd4e3e", "sighting--7f3e5fca-1658-4382-9abb-f51ca68f241b", "sighting--27751d42-04ae-4811-a19e-f4e11d9a011e", "sighting--02080d11-3aed-4cb5-a015-d365daabd225", "sighting--cf010738-cdd6-4764-b785-8e98d286b2ae", "sighting--5efb8165-a151-484d-acdf-f8c2b5d11f91", "sighting--b29c536c-79b5-4c7e-be31-d6d09dda06f2", "sighting--aac84927-1210-4189-be9d-c457b642cd81", "sighting--afeab441-6168-4181-8e3c-7752aa51a052", "sighting--eb63115a-fb43-40fe-a06c-610bc462fe17", "sighting--b211fa60-f845-4648-b0c0-b7940f78fc68", "sighting--95c73eaf-95bc-454d-b749-890701b324c0", "sighting--c87349a9-4d92-4e0c-8651-babf60d47be8", "sighting--305ba7c6-0a1e-4fde-9d22-4d2915203054", "sighting--10292432-e371-49d6-bc35-92cf0574f36a", "sighting--3cac1f13-8472-4951-829a-4697a87f0f09", "sighting--f6936453-9c85-444a-b9a3-e03c0a99987b", "sighting--4a766835-8898-4174-b658-4b0e154c6843", "sighting--2a0a5bbb-283c-452b-9fdb-4545c5ed6951", "sighting--3114879a-d979-43ce-b4aa-361be94201f5", "sighting--58410fa4-73bf-4641-8a05-3749199d7070", "sighting--e7fa072c-cd87-4334-91ec-812acc610fbc", "sighting--1cb98a9a-099f-4928-86d4-18665ff5406b", "sighting--4ec02756-8884-4c1e-abc4-a5eb330b9fcf", "sighting--e999016c-4644-4823-897c-654957d5b1bf", "sighting--a40f5413-2de7-4717-9f34-09024693cec0", "sighting--943824d5-b9b5-4fc7-8aa3-9f449512905c", "sighting--d4437aa4-2479-48dd-9716-6bb9994fcb81", "sighting--141fd6b7-ec49-4c30-855d-00a6e203709e", "sighting--c63425af-49f9-4b08-bd92-652e87e02684", "sighting--7e51be50-0354-4f95-8ea7-4ee6894fd2aa", "sighting--c70f0d31-5e5d-4f43-8e02-d9106cd1dcdd", "sighting--d69ae438-6467-4505-864d-3fea71b245bc", "sighting--f107ee61-8426-4ce1-bdcf-826d8f030b9f", "sighting--42462007-d0ab-4e34-92b8-7e722f41e3b3", "sighting--2db27f60-e266-4682-837b-1f10b803c4c9", "sighting--8e59745b-9295-4477-add2-bd15dc08dcd4", "sighting--9b70af6b-2237-43a3-b81b-ad76c51f15c9", "sighting--81286df8-8aac-48e6-8f5a-440b9f28d449", "sighting--fd4601ad-9b87-4326-a5a8-e114475900ea", "sighting--88c922f8-d522-40c8-86f1-63e893e49dbe", "sighting--81ee7ab6-f449-4dd7-8620-d1563b90eeda", "sighting--428343c7-e0a5-4aa2-82b7-899116918a64", "sighting--5d5b7803-8198-4baa-9d4b-c204f8121fdd", "sighting--173ea759-38c2-47c5-b018-95c126c2276e", "sighting--09c59e0c-c2f7-44a3-8686-669bc1a9fe6d", "sighting--fff649c6-0ab2-4f97-8c50-8011e3fda587", "sighting--ba207029-7af5-45e3-9f15-c99ee0b879bc", "sighting--39d4ca6d-73b2-4577-9984-29a736a5356d", "sighting--b4d489a3-f656-466f-8b8b-f8ab0fcf67f6", "sighting--16050414-3eca-4f9d-acc6-b1a496504964", "sighting--abb56c55-9d4c-44ba-9db8-a262b78e5f9a", "sighting--b0191410-ef96-4389-b4dd-8d9d55616819", "sighting--f49a3c76-cc78-483b-b983-ddea185c87a0", "sighting--73237a06-d9d8-49c3-85eb-45c4e0ef274e", "sighting--7ef432fb-d28f-436a-a255-8bb2b47c21b6", "sighting--2f15fb4e-471c-49cf-ac31-609ad1b5a7da", "sighting--8da8a50e-5615-4265-a211-2c454793cd50", "sighting--5ef230dd-f3a9-43a1-a45f-afe41e4c5bc0", "sighting--c0bdd1d7-cc58-4c13-9365-af70d93ac08a", "sighting--8bc70863-d542-4069-ada9-1748757d8997", "sighting--4a2f4935-27b3-4d9a-ab35-850d3ffe6ae7", "sighting--a692bcae-15e3-4529-8166-9cf50713d927", "sighting--cffd6420-be84-4d89-8fcc-94014b88f7d5", "sighting--f38b7419-7053-4282-a04b-6247a57ea603", "sighting--2ca3b560-351d-48b0-adf0-ddc05e1e5eda", "sighting--ac673b7d-ce46-41e1-9b02-ab98d4b6b85c", "sighting--f337e64a-b72d-4906-bfb3-60a50ab78982", "sighting--07864be2-df0a-4689-bbd4-a6bc51fd6c65", "sighting--db42a459-1f52-4029-a141-0ef7c5bf5f1f", "sighting--4b0d83dc-5295-4f84-afea-24404892d7df", "sighting--696fd1c6-e5c7-4893-a118-1e7773cc6a6e", "sighting--15f5042e-b262-4fbe-8f28-a2ffb9070756", "sighting--67c72472-c62e-4da0-a899-6247656ddd41", "sighting--d9e90f05-07ed-44c1-9274-3bc902737f52", "sighting--2b061a5f-8c28-4fe7-a937-a195160c9ced", "sighting--7480c63a-be74-492a-a286-3001efa19b79", "sighting--a8e0f951-7db8-40f1-9e7d-45db66b3d557", "sighting--311d0b5f-7af8-45a7-a034-dd50e10c6cd5", "sighting--e2621140-e881-4492-8d77-3179a67b56fe", "sighting--2ce2249a-fe3a-4e16-bb8d-a19c5e04add9", "sighting--edac5e71-c53e-4737-9ac1-c2d117f85a0c", "sighting--78b7fd79-63b1-4d54-8f44-3909c090832e", "sighting--329b1358-7287-4918-9a76-b352a0e1229e", "sighting--71653b2b-7e6f-455f-bdbd-fc8651c2febb", "sighting--37c3a0bd-9e57-42a1-ba97-4bcde6c49acc", "sighting--92146ad8-175b-4823-806b-854882fe7938", "sighting--bd7a1175-5424-43c0-87bf-b3f281d56206", "sighting--952caaac-686f-428e-8f17-6467695a9004", "sighting--d3b3c45e-b19f-45e9-99c3-6a09aff03793", "sighting--4a8a7d78-5eae-44fc-ab5e-808d783b7e35", "sighting--ddc0cf8e-0cef-4da1-8704-c568bde43492", "sighting--99cfe349-cdf3-4ed2-90d3-0a71a20bc196", "sighting--c193d889-fa4d-4258-9793-800190ec1f8c", "sighting--ec92146f-1bd1-422d-bad8-35334df9d1cf", "sighting--a7691444-514b-4cae-80c8-15fdfcf09121", "sighting--eec1397c-5686-4151-b2e3-1553a048195c", "sighting--297de026-ec4a-472e-8d2f-0806ddaae52a", "sighting--45452aa4-ccb1-43d4-b4ac-1c931b28ecf6", "sighting--e1a8a73d-6478-46c1-a9a5-660dddc1a871", "sighting--7d4aa782-45b6-413d-92db-1a95cb480769", "sighting--b9707c96-6f40-4fff-bf55-4fd741a7e2b4", "sighting--7008400e-97fd-40af-9e0e-ae80d598cbca", "sighting--f57dbdd8-54d3-4236-a405-7996dd5b2762", "sighting--80dad76a-78d1-424c-8436-35292a305c4c", "sighting--7315129c-033b-4d62-931d-31490256c3dd", "sighting--1b796dbd-ef92-40da-91fe-4bd44708f320", "sighting--d54d9996-8a95-4194-b56d-24a3389b4e44", "sighting--25728800-f2b5-4805-a85e-8b3a4527c89d", "sighting--3a658f40-a9d1-4c15-9680-e24a9ff5586a", "sighting--6dceea09-ede1-463e-aa3b-35aa77fc675c", "sighting--e71ea5d4-6789-4732-b8fc-695ed84b9583", "sighting--f06b6bea-4c66-4736-8d01-91ac5337100f", "sighting--d3455af6-6ec2-4349-b3a5-87c6def596f0", "sighting--2f72704b-e846-4936-a169-b4f65486fdde", "sighting--663428ee-18ab-48bc-9924-b5812aef25ba", "sighting--5448290e-a1a3-44cc-98a8-06365f7cd774", "sighting--6d79750d-e117-490d-a875-8bed4af2f525", "sighting--75de2207-8b03-4327-8591-6388a73e5225", "sighting--63e14b04-b828-414f-8972-632bd5543abe", "sighting--ba896577-7090-4b69-9440-a26c52df4840", "sighting--47c663f0-969f-41ac-95fe-7c0e0c938298", "sighting--de007100-2d46-4e41-8a94-ad5d522cf8fc", "sighting--6deb1a1d-04e6-49e1-beb0-c776cc64fedb", "sighting--f9e8b127-8cc6-4146-bad6-b0ffe47fa541", "sighting--26abf7d8-50ed-472d-a038-6a2c6fdc3b1a", "sighting--812c989a-5155-462b-8f0c-13ef343a5c96", "sighting--d329ddf1-93bb-4bdd-8bc5-e945498bc1d4", "sighting--8b59c40c-2fe1-43cc-9b3c-93fc303834d2", "sighting--c0fc457a-2473-4f50-85e0-0b2650d257af", "sighting--98a96140-a71a-488e-b122-5f3c3d12cea3", "sighting--3c0b93d3-cef2-4eb1-8201-4de4c3c87981", "sighting--bec98cd7-5c10-4af4-835f-37d0ddb6be25", "sighting--aca54c67-f642-4bb4-b07f-e78ef6ed5e4b", "sighting--9fd249bd-0514-445c-b0ae-ce6c893f3001", "sighting--091c5324-1eb3-456f-b44e-05612de806b7", "sighting--f4c7472e-98e2-4cdc-9a24-50ebc1cbad38", "sighting--a8999666-1918-4b7e-b398-6a4a5da6862f", "sighting--6ac906d3-f594-4afc-9798-9a2868107345", "sighting--beef3837-8d7b-48dc-8eca-80a818cc72a0", "sighting--f2f0c336-6dbd-4636-ba97-eae352f82eed", "sighting--8f6e35d1-adf7-479c-a863-83d2a808c9a1", "sighting--50f946bb-8d08-4d6a-9681-b989bdf84c92", "sighting--f449d581-665d-4498-8a76-3ba7fb04c462", "sighting--ed44cb41-0f22-4b75-a3a4-03d8e2982ad2", "sighting--a4f368d8-fcbc-48c6-af5e-4737fbf4f3f7", "sighting--d631ec14-f6d9-4a43-aa9e-ac5b81894658", "sighting--f33bd003-c762-442f-ba6c-b8eb334d60f0", "sighting--ea4d8070-08c9-4353-95cb-111c04c30ae5", "sighting--c55f0e18-b339-4507-b3c5-5dec0e0aa66f", "sighting--74cfefeb-af6b-4c42-9381-9f98cb115c83", "sighting--093887f0-763a-4737-838c-f6a910ba24a6", "sighting--2b5a140d-1a66-49cf-bcbe-65b680297081", "sighting--449b9946-77e1-4371-85c4-8431502fc6ca", "sighting--88537825-f686-41d6-846e-c5e2e7ad969e", "sighting--ff5798d4-54bb-4e3f-a092-23685ca73005", "sighting--c2672fd8-013c-4cc8-83a0-3407632dd23d", "sighting--dc906661-2e00-4dc7-ae05-71071199348d", "sighting--e3aab783-e7da-469b-9839-82318fbef4d2", "sighting--777a7efd-e8cb-4ea6-8a2f-eeef012a282b", "sighting--fdd58c6e-fc1f-49ba-abaf-d4074fde2f3c", "sighting--4e149cb3-98b5-442a-b639-d60b93c41325", "sighting--f6b637a6-edbe-49ad-970b-52e84352212f", "sighting--8466f976-0b13-408c-a649-bec036c7bf7f", "sighting--adc4533a-63f9-4a14-9734-a763d62a9517", "sighting--87b804d1-eddb-46d5-9153-3fe5e1d4b397", "sighting--fdeb979d-c915-4985-bdaf-c833fd5483c9", "sighting--ef3c42cc-6af7-4b97-b50a-3b48eae4c9a7", "sighting--b521810f-e3b3-471a-962b-fb3838a9f08f", "sighting--0dbb00b4-3145-4350-bf48-d66f628ac3d5", "sighting--c104d2d3-0629-481b-ba27-0163aec04034", "sighting--ca67d763-e2df-4043-953e-683980ee9bda", "sighting--daf68612-c5c9-4830-9118-9f2b6063ee1a", "sighting--2317542a-cb14-4cea-bad4-ab39518335e8", "sighting--47c333cb-535a-42a5-bb19-6da65b31bcc2", "sighting--9dddb4de-51b4-4729-81bf-0023977a77a4", "sighting--4a09d5db-bd91-457e-840f-7cb9f513f068", "sighting--b654a302-28c9-458c-8348-de99c079f369", "sighting--cb63269f-45ff-460d-9545-f3b5add39dad", "sighting--c0a8cc55-df4b-4a0d-bb0c-18e2882d0ec3", "sighting--1392c0e1-39be-4293-be1e-89135cbe2ab8", "sighting--a2813a6b-602f-48ee-98a2-bc6ae1aa2ef0", "sighting--39dc1a4a-4112-41de-b855-d6f071401194", "sighting--c59f636c-c86f-4153-b4bb-24f17b5d4ace", "sighting--e52cccb9-acc6-4d93-895a-d1cc1d3d8754", "sighting--0883325d-b67e-4c84-8a0a-21d4a0842e50", "sighting--f2833b8e-d08e-402d-a134-545e17215a5f", "sighting--b60db219-947f-4b9a-97ec-7047a75c6194", "sighting--d5caf508-d5ab-4446-b8f0-83c5c01cc42d", "sighting--d475ae9c-2514-4d23-8923-8d0b6678b13d", "sighting--63a7f633-204a-4a94-bfa0-330ba492ed57", "sighting--1f550efb-1a44-4d16-8395-1a0398a55473", "sighting--cda6879f-8958-429d-b50c-80130608104b", "sighting--7e807626-93aa-451f-a0c3-c576b6e71efd", "sighting--bf36999d-4d17-4433-8c4b-4f1e2ea7d0db", "sighting--a81c8fed-2caa-4e0b-a409-10bde3e9b13f", "sighting--9084f02c-7c96-4567-924e-ac1dc6b4ca9e", "sighting--6b58e2e9-ae61-4c2e-91a6-cd6b92de41b2", "sighting--73f50315-28f3-48d1-9b21-ed515b4960f3", "sighting--83839f11-493d-4689-a6bb-61d5687f00a4", "sighting--54809ac9-0aee-4ac3-ac5b-072664bd9b74", "sighting--96d4be22-c0a1-4f55-9b7a-9215539979ab", "sighting--3129ff99-a487-4ae8-8244-dba64b76df6a", "sighting--6acf7e4c-72e1-4fde-933c-32667e322656", "sighting--e9ff32c3-2cb9-4466-a1ad-88cbe43e50b8", "sighting--55336175-fe23-4865-a9b2-cdf51301fb0e", "sighting--4c11cd75-1593-4f30-aa3c-b0c45f4487d0", "sighting--e69689e6-7801-438d-bb1f-4940fb792367", "sighting--bbd27696-cd0b-4396-9430-b180e1b8b153", "sighting--5d6a89b7-7a0d-435a-8a30-bf518d321cf6", "sighting--20acab2c-12c0-468c-bc38-c8767e1aff7b", "sighting--ebcdf9a1-7568-457d-b49a-f76067ae970b", "sighting--b8371d73-015f-44d2-a00b-341ca7dc38ba", "sighting--b50221ba-f271-493f-a599-b8004f7b524e", "sighting--bcb50d1c-19ce-476f-bc7e-f4b13af58322", "sighting--15acf243-18fa-4808-a845-0df92a52a301", "sighting--3648a27c-14a7-45bc-a2c0-b51162a7f6b4", "sighting--52018cea-d0ab-4fec-882f-6fd78e66bf9b", "sighting--1b22d4a0-f6fd-4620-ab7e-97a9377c9fb3", "sighting--915f9055-d730-4520-b415-68b908aeccf1", "sighting--5f557cda-d09e-40f0-bb11-d005af593f53", "sighting--9a9bf60b-0b03-4fdf-b8b2-0c5e22983498", "sighting--82b99c03-7151-4acf-b234-1ecd5ba1bee2", "sighting--c2ff0560-4748-4983-9eef-8256132f1d9f", "sighting--1d9d713a-58f5-4123-909e-71a8e1dd4259", "sighting--1418bca4-f3f9-4b1f-8225-476bef5e3399", "sighting--f7e20daa-0dda-4b8a-816c-8a0d6fbdd86f", "sighting--df43423b-54e0-468f-976a-87cee4b7f3ef", "sighting--080ed3c9-443f-4b5e-96d2-7afdf74d1bd5", "sighting--7fbd0c24-e505-462e-8f42-fdb87b27e70d", "sighting--89b883bd-1100-45ff-874f-a84255e948c7", "sighting--246afca7-153b-498d-bb07-528d117500d5", "sighting--165d6845-317c-46a1-880b-466e159132ca", "sighting--3f8d3a51-64d7-4a74-9585-6a88f7a7431d", "sighting--b71bd995-c801-4c69-9209-0ed17dbea936", "sighting--6ed7ee3f-df18-4da3-9adf-1a53e3b5eb6e", "sighting--7c5a1b4a-5ca8-4b78-80e5-33d4020f1d38", "sighting--32908e52-f30b-46df-82c2-1e49232cfa04", "sighting--8737c223-cb72-4425-ad48-973778ea1136", "sighting--a44840cb-0e3e-4e69-b557-936326d8dfb3", "sighting--e6a48f07-d307-4954-bc5e-6778e8cd0535", "sighting--3fd3f26d-7b3b-42b4-a573-154d80192904", "sighting--b0678373-4f61-4721-9fd1-374c9bd6bdd5", "sighting--492a070e-1fb3-4b13-b489-4390580f422f", "sighting--82a9e049-3c7a-4d9a-b2fe-ddd00f69b216", "sighting--8e0b51d6-e2f4-400c-8234-56bdce1a6f2d", "sighting--53022749-daf8-4100-99d1-3ec8f4d39c4a", "sighting--776d92f6-a070-4458-8e3a-fae3ad1bef4a", "sighting--5471bf22-5331-44af-8abb-96415def6c90", "sighting--b5811a53-f88b-4d35-b306-b124c6149456", "sighting--719957f5-1e9a-43a1-9075-77d428c9020c", "sighting--71e4b1b3-b6d8-42c8-bdbe-0b8908a01a6e", "sighting--62228e60-926e-41f2-bde7-0a8796b4c010", "sighting--74e37b85-8ce0-4edc-b677-8734269a67af", "sighting--7cbdae03-8bc3-45cb-a002-14c960f0f8b6", "sighting--4e5c7cec-2aa3-45d0-8692-ef2661c6283d", "sighting--1a8416d5-01cb-4063-babc-9f461b463031", "sighting--52c93e36-eec3-484b-882f-b252a4dc8c31", "sighting--69cef133-2e14-467b-aebe-0a88630cf586", "sighting--228f174f-594d-4a82-a864-656c4cddee9f", "sighting--daca5776-17f7-4d79-a762-406c8d3bb14d", "sighting--ebd703ac-f7f6-488b-87d3-70871677ee74", "sighting--4c8d17f7-10cf-4e36-b033-918d720f8266", "sighting--7d725d4f-66c0-4c32-b609-c5650c8bfc6e", "sighting--26af2e37-44d9-4327-bded-37d540e915af", "sighting--3fe04fdf-6ac0-425e-af0d-924b86891c43", "sighting--db2f6080-3c3e-4f8b-a059-9dd936da420e", "sighting--224a20d9-49c4-4b4c-9637-ff86dd937702", "sighting--44b38796-2709-4604-baba-5e4320742df7", "sighting--6e78853d-82a2-4054-afa8-0391c05a88e3", "sighting--a0e86952-6347-4711-ad33-f0aac9ed8343", "sighting--d39b0a56-309e-4d57-b458-494b717453ec", "sighting--44e81db9-ccb2-48a7-8bfe-9f1acc9bb726", "sighting--548de084-0b07-4334-bdda-d76856595ea6", "sighting--23773af8-0741-465a-8c32-76ac1ae76c92", "sighting--e2e08113-e527-4bf2-953e-bca67002e74b", "sighting--17eafe8e-f426-4ffb-a5fe-0bcdddc86d56", "sighting--fc89750f-319a-47c6-8586-d5de536d63fe", "sighting--6b393a02-3df8-44cf-befd-ae90cf9f68cf", "sighting--612e5e3f-5a77-4e64-b6b4-02189db74f08", "sighting--79f4282c-d09f-4e90-b929-ac5152a4abb2", "sighting--063faff4-18bc-48e2-a14a-518c4df9e19e", "sighting--5ea4013f-091b-4e37-af8a-08f6d4043d1c", "sighting--5ac289c3-f722-4425-ae0e-c13ff49ce0e2", "sighting--e809b9c9-d1ac-4421-a8e7-c0b6eccfaf71", "sighting--cd814513-ab08-4616-b4a5-c206ce5b64d2", "sighting--1c040927-5ae2-4399-9861-6735098e4fe1", "sighting--0d29850a-4176-4205-8d02-7b88d8ed30e4", "sighting--2c047ea9-ea70-4834-b449-c0a8ab2941d0", "sighting--683cdf30-6c55-41d5-b3d1-7c37a5dbe2ea", "sighting--8419db5b-3fc7-49d0-8289-6d760d918715", "sighting--d18a37de-d4ea-4744-b0cf-787e7a8e385d", "sighting--ca71c9fb-f626-46ee-90ac-e3fdba567e53", "sighting--fca7f12b-a9dd-4514-a438-56a26ed12272", "sighting--094f9d00-5cbe-42cb-a25f-80c087197015", "sighting--84def3ca-ae1b-48e3-aeaa-f956d7808664", "sighting--6a4bedb7-5842-4867-bef5-8b1a2616060c", "sighting--0f4d8a8b-3e3f-4547-8836-f35ced5e5562", "sighting--13f9f5c5-7bc6-48bb-9698-1ca1b03184ca", "sighting--1ba86584-70bf-4f1e-aed8-cf65ccc66584", "sighting--5f63d3b3-75f7-47db-a045-414e13adcaa1", "sighting--08e9bf76-2ee5-433a-b7e9-2a2ae31bf738", "sighting--a0e1e49d-2cf9-4928-a540-894b8bd6cb39", "sighting--c4a27f5b-14fe-4dce-9fd4-8d56b8dd1595", "sighting--81413189-af13-4f25-b3b3-6d20e5735e59", "sighting--b82a7796-07e9-45fb-b9a0-11c22b2f8561", "sighting--b185b777-16e7-4e11-9207-0a2c4f130e77", "sighting--e3c4fa74-5b35-4973-9e3d-b20ed3c6ef7b", "sighting--3c4071c3-7f75-4a28-83e0-e5976e9167f6", "sighting--861916ad-a72e-4888-8a2f-9cfa96176340", "sighting--aca027c1-d25f-4529-9673-f3e58413dcf3", "sighting--41b00e71-2713-496c-a96c-bae2981f68ce", "sighting--85a25970-0c2f-4467-9a3d-4510b853a946", "sighting--28314304-19fe-42a1-b786-6afe7a82a0ee", "sighting--a5b9b3e5-7746-4251-9cdf-9a9a0a7ca4ea", "sighting--1ca022b7-2dcd-4c03-b250-3a3990764ca8", "sighting--10902b4b-692a-4f14-9abe-183d92ff1c8e", "sighting--e2c8bf07-129a-44d2-9579-25a72ec23b28", "sighting--bf2eef16-ed5e-4fbc-9e39-c81cc507a49c", "sighting--f7dab5b4-bdcc-4ec0-b3a2-289b24bcb113", "sighting--54511d58-b9cd-4191-aa67-6ef762f24aa8", "sighting--11058a44-4bfd-497c-b240-ea7cb5718ce9", "sighting--70f4091b-d839-43af-96a1-3ef57ca682f2", "sighting--df2ee469-3a9c-4a9c-912a-96f96df0d406", "sighting--8339096a-1332-429c-9b30-3f0ef1bced3b", "sighting--93af1f86-4d31-4656-9c42-4a6e234e1852", "sighting--5b0851d0-c07f-421b-8ff0-f404273b19fa", "sighting--90b2f7cb-3220-4707-a973-12ef85d292f6", "sighting--1eba09b6-b28a-4fd3-8ccf-9a048baaf036", "sighting--b5184de0-9180-4ec7-90a1-9a503f825e8b", "sighting--4b88b316-b929-44c8-8bfb-b2da9ec4cb88", "sighting--61dda58d-8ee1-44cb-9163-6c8998ec4bc3", "sighting--7145616b-95d9-4a0e-b876-c027c6836efd", "sighting--1465ef52-33a3-4ea4-a5e0-fa3970886b27", "sighting--f5e009b1-1676-408f-ade7-9f4fab9abcae", "sighting--511d966f-1c6a-4e7c-becd-c52bc371921f", "sighting--c4dd9ac6-eb07-4e10-88ec-28cf5f99d952", "sighting--3e336b7d-8532-413e-b49c-8b3a2103e839", "sighting--1d2a25f7-2118-4556-bdef-c69bc09dce06", "sighting--7e8ee29d-1fdb-4132-a0f4-cddf15a0ff4e", "sighting--c597fe1c-cabb-4891-81f2-a81158cdb50f", "sighting--a6eeb913-6488-4c7b-9178-58627ac8d345", "sighting--1bd857b2-a2ac-4f48-9808-c32d22f884c0", "sighting--69ec1a7d-2cb5-4b84-a154-1acbfe6b2973", "sighting--cc988ec0-2d8a-48b5-b654-212514a84f79", "sighting--ac4184c8-9bd4-40f4-b950-24ea79b99adc", "sighting--83c896cb-fbb7-479c-8f64-c8ae7d27ce00", "sighting--42fa3fa1-1545-44ae-9810-bd14c1ffca9a", "sighting--9b9e907d-c3b3-4641-8fc7-400fbc9a4fb8", "sighting--6f3964bb-0b29-4614-8d7b-e199385837f8", "sighting--c888fbd9-4529-419c-afb1-b9b4dc50b307", "sighting--2f1cc55d-e416-4266-9d3c-94edeaec5225", "sighting--9db8744f-fefa-4e22-beee-0231c7507cc8", "sighting--f487b3db-d3a4-4689-aff2-50104056f102", "sighting--ba6c47b2-2ec3-4e77-b02b-a385550ab842", "sighting--32f0518b-d0df-42e6-9e7d-babac3d91ba5", "sighting--3cdcf20c-f248-4caf-ad1b-9b21b70bbfd8", "sighting--3159c92a-c411-45e3-966b-a6c1b6ea7393", "sighting--a6b289d0-b86d-4035-a49b-6df40c1a060d", "sighting--1b630edf-5a6c-4754-8c3b-ca662145031d", "sighting--2ce1b2c1-3d6d-4fb9-8565-c5996d2a2436", "sighting--d1bc400f-7166-434a-9e89-be390eb80cf0", "sighting--3e451673-3ce5-40da-8160-8d4b949e89e9", "sighting--1490600f-e444-4511-9ade-231267f7586b", "sighting--4edc7f64-8f86-4157-b76b-122ab9a533d6", "sighting--2f7f13da-8b6c-4a5e-8391-070cab33a716", "sighting--91a83bdc-97f6-485a-9d31-f9ae70f3e2fe", "sighting--ed629a05-f57a-4d1e-ac4e-4c005e13e2e9", "sighting--45176820-1541-467d-bbd1-1eaa8af3d94c", "sighting--bbfa72a7-cc3a-4f60-96c9-624d9af54d97", "sighting--d3f327e7-f82f-416e-b7cf-4817683bee7b", "sighting--d1c555b7-a489-4cad-b7ee-100bcb4d5982", "sighting--9a74b4e6-14ec-47f8-99ec-49ab06a563a6", "sighting--4439fbc4-f461-4b59-930c-1dace7de1981", "sighting--1c817071-1630-4b6b-a4ea-84ec5fa33acf", "sighting--4652874f-5092-4e47-9900-f88e289f4dce", "sighting--7117305b-635b-43d6-b52b-f3f785a52dfb", "sighting--931f3f2e-9a85-4424-9900-7a7540832968", "sighting--7dcc61a1-adbd-4efa-a2f3-c2668f07d162", "sighting--7c3047c0-8065-4555-b91f-0dc7b82e3855", "sighting--7a7583e3-4c43-4ac1-91c4-631df97f2121", "sighting--f5c25cbe-ad17-4089-b651-b9b88324a415", "sighting--27b00291-0c3e-4fc5-9d81-7b8d3398d417", "sighting--66fb14fd-a0e1-4fcd-a819-cee5096cc9c4", "sighting--b4ad2559-adf9-4619-b491-a6e0b3975d88", "sighting--53c8b761-658c-4f2a-8968-161b47d8f476", "sighting--06e50caa-5bb7-49a8-b0f1-965f25dd1187", "sighting--b970f004-7cee-4db9-ba8b-add597e33686", "sighting--6548c377-45cb-4e75-a174-013fda795b71", "sighting--8ebc7c7a-e540-4d56-b486-2f08ce53e3d5", "sighting--fd827564-edb3-4ddd-9661-0bfc0d4cb804", "sighting--796b3616-a9c4-498d-a6d5-adea71b8cd23", "sighting--5a370667-eae3-4138-a14a-bb6d368fd1d9", "sighting--6ecf973f-5921-4038-ac49-e20bf3343641", "sighting--5989c3d6-4a74-4fb6-b19a-885794075058", "sighting--526ca99f-3a53-4a8a-9951-1724737ccb85", "sighting--cc1e497f-c25c-4f12-ac5e-9c5ee0d9093f", "sighting--c1c8104a-2756-4924-b24d-f1cb62bc3bbe", "sighting--97cde53c-6ec3-4af7-8895-ac9f1a80a7ed", "sighting--6f028f34-2b94-4afc-b209-8ec4dde1fd24", "sighting--ceb65939-a71e-4e94-bfb6-d94e96855e1d", "sighting--c7dc269f-b95d-4319-9687-a87bb9c0b9d1", "sighting--1b4493de-d691-47fb-85d2-d05d779b1afc", "sighting--a95ed1f4-aa9d-4dc2-bc17-9a1b1787e056", "sighting--e468d1d0-76ad-47b0-a4da-bcf6768172ea", "sighting--40eb0b7c-441b-4a35-a283-dc84a1ac29af", "sighting--02d1ab34-303b-489d-929b-3ae2b90283a8", "sighting--f6af9c75-52fe-4e52-b036-56a0f96c392e", "sighting--0eb0b136-c1be-4ab6-ab5c-8b1353be47c2", "sighting--dc7b0ed0-6885-4777-bc77-08a734e801a7", "sighting--9066505c-8ade-44fe-8492-fa937791dccf", "sighting--998f908d-9983-4030-b564-bc28d4911f6b", "sighting--b7c0bd8e-172c-4e9d-8e20-8b3a70342b54", "sighting--7ca448f6-38af-4f40-bfb2-cfe29c152936", "sighting--d32d8a58-6120-441c-bc6f-167b5e53c2ac", "sighting--6389f3ac-59af-425d-a7a3-573e74eecbaf", "sighting--7b7b4756-a675-4a52-98a5-fad817bc581f", "sighting--c9d1537c-ea42-4ba9-a983-108a38cca25f", "sighting--be996f8c-12af-4b3d-b4e6-2828c26fe675", "sighting--bdd57021-d05e-4d5b-934f-e6839d2c3e89", "sighting--e9b86433-8b8e-4a13-bb4c-48e7b75ffc1a", "sighting--6d9a8574-8b0f-4b4c-adcc-b662f9585e07", "sighting--84cfbf37-9925-4f36-b08f-b2918822a7d7", "sighting--690b85e1-b321-4baf-97b8-6398ff63e785", "sighting--2fef5d65-6d17-40b7-b40f-d89014d050a5", "sighting--76066609-bae3-41df-8627-5cb1c4a1e8cf", "sighting--92dc01d2-5562-47fd-83a7-c54613a31a6c", "sighting--4993c058-0ce1-47fa-ae09-0d463445b404", "sighting--a5d66d11-4e38-4382-9773-d611737c421d", "sighting--b40e8bb1-a5ed-4e3b-a157-dd2d02f44b7c", "sighting--5b30cbcc-95df-46ec-b133-12d7d94aaa22", "sighting--9c763b42-ee93-4ad3-9f64-0507a67efd20", "sighting--1438caed-eecf-4bdc-9d88-41faedc54a0b", "sighting--e25f6cce-a759-43e1-b251-8a266175f8c0", "sighting--8425eeba-5ba5-423b-97c9-89db4cea83cd", "sighting--58f72160-e412-4747-a62c-fed66a908009", "sighting--f9c462a6-6943-4de0-9c83-bfc5d6a356ee", "sighting--ec3f6e7b-664c-4198-8969-d2d54989a87b", "sighting--61186d83-dffa-4162-8b81-da39cbe0f4d0", "sighting--6c09474d-24c5-4431-9f02-1878884d786a", "sighting--686e9f14-ad1b-46b8-a0c5-318128b965ae", "sighting--f145ff91-195a-4619-b6c4-7f6c7164387a", "sighting--75466351-fd9c-41a3-969e-0cd3b1651193", "sighting--2c8032e9-d0db-4209-ab43-c8e7728bda9a", "sighting--35eef287-904a-454b-83a5-fc60946fa865", "sighting--46fbb780-95d2-4d97-ab0b-6d619d2e7f6b", "sighting--6389bca9-3786-41db-8cef-228f13da0473", "sighting--983db24e-2425-41c9-9953-c7a6c7de4c7d", "sighting--91dedd90-00e5-4d13-bd33-7cc231a7d5ff", "sighting--53d30f00-96a1-4e41-8d8d-113de6cb64cb", "sighting--c6f99ff8-b403-4fe2-be1a-a230cb408628", "sighting--9292cd9b-7bd5-4b26-9758-3098cbab651b", "sighting--40712483-5629-4414-a971-d38a18fa7362", "sighting--052e9513-e92e-4f62-b0c8-00b3956d9aaa", "sighting--83a94b5c-f8b5-4d8a-96ee-58ceb861451b", "sighting--95d21d2d-aa49-4295-8792-fd0b78ead284", "sighting--ea9d0ab9-8166-4e53-854b-5efee6c587d1", "sighting--d46ff18c-be89-4ef3-89ae-2991fcdd773e", "sighting--e9b5491a-9398-4444-8d68-d4138e75a91f", "sighting--05c0eebb-d62b-4dcc-b297-fd755b9af4f2", "sighting--84063adf-73e1-4b8d-9f00-e5d760f49e9a", "sighting--82c8ac1b-85b8-41fe-b0ee-205483434b73", "sighting--3e790db4-b50a-4e36-8c13-45c7b064f239", "sighting--e0897c02-7df8-4966-9661-215730c65931", "sighting--f0e53286-e5e6-4dde-bea7-6083a621b546", "sighting--809faff0-7ba9-481e-90aa-28906d74c7e5", "sighting--5d0910be-ce5e-4321-8236-56baf1d8778b", "sighting--2a5ce477-0828-40d9-a8d7-2954704ceb8d", "sighting--89b1fa03-17d8-441a-ac96-2670282a692a", "sighting--915637e2-6e6f-4434-8b54-d18d4691df9f", "sighting--83e9fdf0-b74e-4787-a640-7b415ea41820", "sighting--9a47fbb5-8530-46ba-883b-24ade49af014", "sighting--3b2d2898-dd00-421d-9417-09b5cfdaa3c1", "sighting--3f137e74-f242-4cf0-8708-cf3f41465c14", "sighting--7981f5f7-aeb9-43cc-98fe-623075d00a3e", "sighting--58f4010e-e10b-4936-bd6e-ea0de63429fe", "sighting--ef646109-5ead-42cd-bd15-4ec026f3ff9d", "sighting--4adbdd03-8526-44b1-bdd5-c3cae8477470", "sighting--3b7f6591-d1df-4dd7-8e08-cd2379649db5", "sighting--b9dc7c7a-91aa-4a41-b2bd-09ac78787431", "sighting--b0c3fb46-a064-4af1-a63d-81863eb0513b", "sighting--16c58eca-f536-485d-99c9-ee2c01a57103", "sighting--f46b9490-7baf-449b-8375-92fc421889a4", "sighting--a153d8ad-2216-41ea-8cd6-a6c0f3d8d400", "sighting--c8e54cbb-9638-4254-a864-9c4718e9ce6e", "sighting--1994ff05-9acd-4955-a217-15ee2abf9250", "sighting--37c3da71-d065-454f-8820-a6ad78592d7d", "sighting--b5965b6a-4954-482d-83fe-ada565a338d1", "sighting--31b90a6d-3784-4677-85d6-955c848e9853", "sighting--2411b976-5b47-41b9-85a6-08433b68ebcb", "sighting--6dda0948-d296-42ef-a3f1-0dfe98028cb6", "sighting--72cd943b-6586-477f-b2ec-4dfc03986c26", "sighting--fd50e627-b614-42d9-af22-1952a9eb5056", "sighting--f4c92058-4ce2-4870-af40-af3a5ccf82d7", "sighting--cc7a8372-9bdc-42bd-b7bf-d983e49e1227", "sighting--a1298ee2-9c1d-4bce-981d-fbf28f0430f1", "sighting--9416eb76-c85e-4888-b4b3-ac4291bba50d", "sighting--1431e840-1c38-4942-a4dc-13171c4edc99", "sighting--3ec2abc7-5d49-44e1-870b-5bc4149e8c5a", "sighting--8e186dd8-56f4-4c83-9dcc-8a0773dd322f", "sighting--c0ec710b-dda5-487d-a80d-bf955f1b168b", "sighting--94dccfaf-dad7-4220-a083-7a278c863dd6", "sighting--e44b851c-e454-46b9-9088-d33c031b3910", "sighting--b4e4c12b-9e02-490e-afb4-eff6f185d5b4", "sighting--cbea9dba-c68d-4d85-ba7e-d1818a50bab6", "sighting--1f12b7ed-5838-4615-8ce3-89621e569294", "sighting--74729ac7-f4c1-4a17-8e6b-9ad2035ebcdc", "sighting--6255f71e-163e-4b0f-aaa8-70840ced5f3e", "sighting--f701a627-eb79-4cfa-bf5d-b53a03f0ec57", "sighting--79c5e344-e581-468a-909f-997ba99e7451", "sighting--0a88bdcc-74d7-4476-9e16-10b30a7cdd5e", "sighting--9e4cbc29-2cba-4882-8e5d-83c666073d92", "sighting--59af23d4-efce-4bd9-bdb9-f9acd30d415f", "sighting--2df604fe-3389-4a8d-b39c-18b6740c4018", "sighting--82997a4d-e267-48bb-8c7a-71acd8def636", "sighting--2acb77ae-00bb-40db-8d1c-1f8ba02db5f7", "sighting--a44b4c83-cdb1-4854-86cc-d682a0a32656", "sighting--7d180753-33b5-44cb-96ce-a50221b7f4d3", "sighting--f48e87c9-84d1-45df-8160-48c3cf2423d3", "sighting--a0f69b0e-84f7-492d-9cff-179ffba60904", "sighting--f0ee91fa-bb01-4f6d-8cda-01d14891c5f3", "sighting--361e54d0-cf5a-4d4e-a14b-cd26b71e3184", "sighting--3aecdedb-f762-4de6-8ae9-6f8ac3913b0d", "sighting--1b4de76b-3268-48dd-bc87-de43e250d4c0", "sighting--7e095784-ca0a-4b26-8d3d-b66b1cdcec7c", "sighting--7848583a-ad98-42bd-bdcd-65456764236c", "sighting--5d9cb2ad-f164-4b6e-9f38-b4fe0abba9e6", "sighting--618a81f6-321c-4f56-bcbe-d7c7ef7a50d9", "sighting--d5994819-3874-4ad1-badc-27402d85911e", "sighting--93c25597-77ba-4d40-9cb9-890a279264ae", "sighting--db1465d4-e61d-48ac-aa01-c83542dba500", "sighting--f9d57528-7ccd-4c03-bd05-786ba54ef1e4", "sighting--0f388aa3-14e0-486f-8dac-cbe63979e81c", "sighting--88c8f2a9-bbb4-4903-8eaa-fc687bda4b42", "sighting--a9996ac1-a60d-4d7e-ac11-bfbdc4523bbc", "sighting--ed402e54-261f-4cc2-92b2-b5024e0c7575", "sighting--bdb472a8-9f67-4f1d-8749-c7572c85db56", "sighting--006d53b4-ec85-46a4-ac86-7db31df663a5", "sighting--9aad7612-fbd2-4898-b610-4b8cf8e10d2a", "sighting--7104698f-af12-4a59-838a-10707a3df1b0", "sighting--44647d3e-095a-41b7-8768-02b42dd3d690", "sighting--25ba7351-7eff-41fa-8bd8-b4b09f1e1e2c", "sighting--2f52beb4-0cfe-4192-b7c2-082f712d7be8", "sighting--9f6c7956-5ba1-45de-91d6-0f6c2e3aa0f2", "sighting--95a81959-e102-439f-a21a-daf94e0edc3f", "sighting--63e7094e-5c5f-4143-a14f-bdcd7f052d23", "sighting--6a2ab2a7-91c5-4008-8918-39a53b4c86be", "sighting--ad8d8d26-e271-4bc4-ad46-dced56dcf889", "sighting--0b92511f-930b-41a7-84f6-d614fb8dbcdb", "sighting--46499842-f539-482b-9119-a86d239bfc21", "sighting--4545b2e1-27fe-4adf-b9f2-3adc848d7b8d", "sighting--ec9f4864-1d6a-4bca-ba67-64d606ce945f", "sighting--60e3d01e-4f50-4f2c-9ed6-2ec4f0ea02b1", "sighting--9303a96c-866c-47a2-8a09-f517f7d97e64", "sighting--661762a5-af73-411a-be9b-9e2afafd246c", "sighting--fdbef550-d04e-4b2c-90ea-34d2559d4502", "sighting--09edb3d4-270b-4903-800b-b7a57d3f7539", "sighting--132b40d9-f73c-4203-84e7-d7343bd67ef5", "sighting--875ce27c-b31b-4e43-ab2f-34b4d432979f", "sighting--c956112e-15d0-4f5a-bc20-5ee234ec0873", "sighting--227df81b-8597-4b75-a7a3-4d68dcdbe51b", "sighting--4708e372-1d9f-4c49-a5dc-393cd40cb9b8", "sighting--237be997-ac8b-4ce8-bc8b-9744c16212f0", "sighting--3c50a3f6-cbbf-4780-936c-315021cce5a1", "sighting--5eaf24da-00ad-4d19-895b-61b14c9ca331", "sighting--6e6d7345-ec3f-4b4e-8b37-4fdf368b8ea2", "sighting--d91eafd7-966b-4db2-89eb-acb0cb043190", "sighting--fe32f96a-e22b-4713-a40d-f23828587a5b", "sighting--80c225a4-86cc-4b31-a3ec-6581eb5db919", "sighting--9ca98d89-1e02-4aca-9ef0-75e86ff1b913", "sighting--5ae9320c-45f8-43a3-a9f6-6047e74e2f9c", "sighting--b020439e-3a83-49dd-a94a-7beae272e589", "sighting--38af8d0a-f8c9-4233-ae2d-dd88c6afbcba", "sighting--d42c940a-a5db-456e-aac0-f881ffb9b73a", "sighting--33ed739e-dc08-4292-afd1-a7f7d05ae62c", "sighting--8e0fc6f4-81ae-4c3f-828d-75bdb197bb66", "sighting--87aeba73-a00c-40dd-8d39-5cc873cdbacf", "sighting--b633f3f3-e9ee-45bd-9711-07852ab34e2c", "sighting--6c0a3f68-6ea9-448a-a104-31e4aed70614", "sighting--57903461-34d2-4f40-961b-71635db5e6ed", "sighting--1f4212c5-3fcc-489b-97c5-13e9a253255e", "sighting--26c166a3-71dc-42c6-b793-14a190c055a2", "sighting--afb0ef88-c77a-4b4b-9b15-b3d205cc7fac", "sighting--1bf1b195-a31e-4264-b935-908df9ec48de", "sighting--bb3e92d1-d7e9-4c6d-8b4c-6d771a6653f6", "sighting--c71518b1-c2e0-4702-b127-2d2fd9f008f4", "sighting--682bac7d-0273-4e7a-b259-46428ee4ede1", "sighting--de1566f1-07c1-43e8-a263-22f71e2aa67e", "sighting--b7a111ac-f32d-4329-a812-8cdda586fc16", "sighting--43d71953-14c3-4a4d-abad-50c7a7eac95e", "sighting--ce6067f1-8a1a-4f12-86c9-252e36f9102b", "sighting--1c191ce4-4367-4d39-9c25-6c13399ae391", "sighting--ca7ed2ee-1aa6-432c-ab56-14da09b03224", "sighting--f73e209d-86ba-4491-88aa-1ed3cbcc5c28", "sighting--f289f4b7-2488-4f3d-bb01-aaf42f8a1d47", "sighting--d7355c65-1436-4205-ab31-3ff8fec8a3e0", "sighting--f01adab2-2290-4e82-bc42-418ccb6aeaaf", "sighting--cf38e31b-d0c0-46b6-b758-fd1b4c6298d2", "sighting--62aea742-838e-42d1-ae12-96e0b5039836", "sighting--7a2e247e-b0a1-439d-bb97-ae8b795a767e", "sighting--c8363710-4f3c-4451-b57f-9253530e2704", "sighting--ab37afb4-1cff-4456-afa1-29c8fc44e033", "sighting--9b5666ad-035f-4440-af9f-e28765787cb5", "sighting--ca2bb304-eb7a-4d95-bfa1-78d17e4b05f2", "sighting--3238a669-050f-496b-bd69-593b9b15788f", "sighting--66c9876d-7533-47a0-b95b-7bb95772a92c", "sighting--59d90075-182f-4bec-aa58-81fc20857876", "sighting--dc08d91b-8a1b-4464-8fcd-dbcb4d7881a2", "sighting--7de50969-9c70-4b13-b746-795846af05c7", "sighting--a963feeb-a632-49cc-a284-b670259adb1e", "sighting--7230d142-d14b-4594-b2cf-a4d6f16afeba", "sighting--0511b291-582a-4829-883a-1a3f54fa1e23", "sighting--f125ed7f-bc64-4f38-9a24-60294330e6ff", "sighting--6858671a-e7f7-4633-9e27-eac5a05bc870", "sighting--57bac0d4-61d8-4026-a2cd-25047e277ec5", "sighting--ee86821f-4dca-4995-9fad-68b08cde322c", "sighting--fe3ed42c-857d-46c7-ad0f-7e5a041f52e7", "sighting--9af9ee73-ffa7-49c3-8289-82abb49bae65", "sighting--d65df8ae-fda3-4f67-8ade-9a3171196384", "sighting--1f3a65c2-5e47-4622-939e-5859efca24e0", "sighting--c86aa8d9-dccf-4e62-b86b-c58a6420e5cb", "sighting--c6bbb5b3-a57f-4620-a525-abead123bab0", "sighting--c6fdd646-6224-4f78-ae55-9473aa018391", "sighting--d501ccdc-1190-440b-89c8-280d7cee307f", "sighting--28e7b0d6-c0b7-4af8-99ad-2959e7072752", "sighting--6b7ed031-75a0-47f5-9fd9-b124e813a755", "sighting--a5990fc7-8dc5-4e08-a998-b14003219a0e", "sighting--0c730bf3-1fb0-4a70-84fb-088bbeae6fa5", "sighting--01549bab-fa84-4481-a9ea-bf7c75bf1c5e", "sighting--54b26fd7-b9d3-4c22-811b-54d2e130f6a5", "sighting--a5962116-9609-4892-a43b-0f2635f1b700", "sighting--f40412dd-f489-4e8e-83bb-5da60b47c301", "sighting--15263407-51c9-42c3-bcb5-d5a7543ddb24", "sighting--6f34f15c-815d-4dc5-bee4-284fa0d933d6", "sighting--2f5f5081-3842-4886-8e59-8bf44b6bf749", "sighting--2e09893c-1b44-4811-9f20-4a51862dd3eb", "sighting--17852f6a-c7a9-4bcf-9e80-192adbcf4dca", "sighting--bd9dfe50-ebc5-4a37-b78d-e945ce9ca81e", "sighting--a2943b1c-5972-4b79-8c5f-e5eb9ff72bc2", "sighting--3e7c3c6f-747b-4b08-92ff-025cd8c5b995", "sighting--e76b2069-a55a-4603-9003-9ff26d903e58", "sighting--0f138df5-40e3-49e9-8f4e-b5f996e090d4", "sighting--de15dd36-3d4c-4d15-88e1-10b995602355", "sighting--a8cc5fdc-0a16-4b7e-88d5-726741670452", "sighting--7ef7bea3-9adb-46d4-8432-af2e7201aaa2", "sighting--3fe9ae80-55d7-48b4-93b0-f40f8a2155b3", "sighting--b448fad1-08d2-4cf2-8196-92b02fdc28cc", "sighting--f7fc8f03-0185-43b6-b556-18c6c670e2e3", "sighting--8c20abca-5485-4ede-8b6b-85ce79a768c6", "sighting--a4d099d2-ec73-44cc-a3c0-954a0a47a1f4", "sighting--e687e839-6ec1-4e03-89fa-6e906a05acff", "sighting--2f64cd51-cf5c-405f-936f-6aa2ae6ec676", "sighting--d44292c3-871c-4aab-b609-762586de4d56", "sighting--46a95761-15b9-4a1f-af89-5e2444177d9b", "sighting--943eba40-e746-4266-96f8-0d1236293d08", "sighting--08a55248-a73a-48ab-8b0d-f79dea4c6548", "sighting--da2e5d2e-4c63-4e82-a093-c54d5d1d9141", "sighting--7f1fb044-7d50-4dd5-8377-fe92d800653a", "sighting--a71a6d5e-395e-4adc-9968-f81a1f088ce0", "sighting--4949e2c8-478d-49da-9fe7-3080de73010e", "sighting--9d17cd2c-6d18-40d0-b234-db48f8c00c97", "sighting--80936c33-f8e6-448b-bb95-c3db721b6865", "sighting--cd1d0598-e94f-455c-97bd-1739687b7e69", "sighting--f00d781e-a52d-49b8-99b9-a6d6f894217c", "sighting--288c3378-b891-4f06-8bef-1120a37d1162", "sighting--6d2a5152-874e-4db1-9f21-083bdb81f90b", "sighting--38890248-ea6d-4d43-8a90-dfe390b336ec", "sighting--8a1cf41c-ea9a-40a6-9fb7-2515ab240e4b", "sighting--bba6af00-a7b5-454b-bb2c-179b020823d3", "sighting--b96ca46a-8255-4456-8514-a8393b35e150", "sighting--afbd684c-9f57-4844-bde1-1040beec5da8", "sighting--2b7c950e-f91c-4dc5-8070-cb55eb935bed", "sighting--fea2efde-5fca-4567-808a-f2dfb1cd9dcb", "sighting--f40a3025-928a-4fb5-a67f-b7a357cb81a3", "sighting--47e305b1-d191-4598-9a7b-cbff434cc676", "sighting--a0f791ef-4b09-4692-af0f-6fa7e9e6f06d", "sighting--ee47c565-dbd8-47b4-a7c0-37164f5ce12f", "sighting--5d0a34ca-76fb-47f1-a618-14b9eacf6c75", "sighting--1d298921-40fc-4769-9829-728e021027f0", "sighting--f3dbc6e2-df90-4e36-b686-ce91f4e916d3", "sighting--630d9a33-4e9e-4cd2-985a-ab000a313ad8", "sighting--79479ee0-7b94-4774-9a48-e3f7bb29d551", "sighting--bd4ff466-5716-4d7e-a21d-3714bc8b9459", "sighting--c1ac7e03-63b2-4295-b9d2-dcf95289c74b", "sighting--69e9a574-6755-45f2-aa4e-2224e89adf29", "sighting--3122675a-f04e-49df-9bfa-2799730e537b", "sighting--722f049d-3bff-4d3b-95c8-a1c206b1e2d9", "sighting--6ba8fb55-3673-411b-a4a7-a22b7b378a71", "sighting--0201369d-e647-449e-8ecc-e40af6a367ad", "sighting--605b437f-6346-436d-9eec-ad005638fc18", "sighting--5beb45cc-fcec-4761-8c99-77414f64f8fb", "sighting--caca54b4-1eae-4173-ac91-d5e3b0ab0958", "sighting--40018f77-1f2d-43b4-83a6-81fe932d504e", "sighting--e43a0442-044d-4f3c-97b7-654589beffed", "sighting--9cd10aef-d65c-464d-b2c5-1ab68aacf64a", "sighting--5c3e8425-ba6f-4c81-88eb-95d6c73c0cb5", "sighting--10b5ef3d-b553-408d-927f-7ec198afd051", "sighting--45489dc4-18ed-4bd3-bab2-051f615fd523", "sighting--a16bf778-fa3c-48e6-89e1-8cd0c830173b", "sighting--4b36649a-2003-480c-992d-9519ecdaceea", "sighting--27d76832-93ec-419a-bace-568c06a325cd", "sighting--f272a137-8199-479b-a513-da038deb8b30", "sighting--18414598-8bb1-4689-9eeb-24d0139b1232", "sighting--bd86621c-a93f-41c4-b209-01508f65f279", "sighting--aeb0df62-9f4b-4965-a8df-851918812c0d", "sighting--56657e17-7b1f-498c-8747-027473e39107", "sighting--4aafa194-9103-4384-8601-1a5d2fe343eb", "sighting--7ff01d74-7067-487e-b272-810339011300", "sighting--c83b99ab-7229-4a6f-b1ff-b70d172320b4", "sighting--5bb7cdc1-c17a-4c6c-bf71-1d5ece298ebb", "sighting--61217543-0f50-4203-8e82-6fff359b9a20", "sighting--526e8917-d362-4a52-b85c-33c7d53f73ae", "sighting--f6f3b812-874a-4fc7-b77a-935f7ca2b5c0", "sighting--12183cb1-77fc-461d-88e8-e706d1a3196b", "sighting--9a35748a-1bf1-4842-b489-1137505cea82", "sighting--32bcd333-9eaf-4954-9d4b-9d29a6d11a50", "sighting--8c44350b-7c43-4c7a-96a1-bfe358a97fcf", "sighting--0c763a6b-7720-4dcf-ace8-e2b99bdd4d75", "sighting--4db1ac85-9082-4bff-a082-7997a5f09ad6", "sighting--b6c56879-1751-4fac-a920-05992e7957db", "sighting--c9d8265c-8724-4348-a9ab-325e059ac115", "sighting--a8bc6740-5436-426e-b516-d9dcdc23d389", "sighting--7de380f2-2245-4eec-8760-cb6a8464bf4d", "sighting--3674c6ae-f8a5-4f07-ade8-20478b6c24c5", "sighting--06ce1b92-8293-42b1-8aaa-9ff0f7aed544", "sighting--03536b54-7cd6-487d-ac0a-bfe9745cb246", "sighting--5da3bf39-345b-400e-a220-ed33ec9884f3", "sighting--b5136557-012f-405b-9805-045d59667d54", "sighting--4cd89435-1a6a-43db-8d6d-15ca962d5080", "sighting--ea5ba5e7-c5f7-4216-9f45-b4591741e957", "sighting--64ad72d2-4613-4c9a-99a0-f1ac7283df32", "sighting--74e074b8-7b92-4dc2-b53b-b1c1e85a73c2", "sighting--caa8da7f-4e75-48cb-b4e4-062d22ee1a00", "sighting--9042bcbf-c059-4a8c-8daf-062796494101", "sighting--72df3656-657a-4380-b262-f105f3c5cbec", "sighting--98594f3e-5fae-4fb8-869b-e97e32b396ac", "sighting--19ea677b-14e4-486c-bab6-47393e4d029d", "sighting--d7be6c02-520f-496d-9000-f6d52b021a9e", "sighting--2270b931-1dd7-4d12-864c-b5487e7ef57e", "sighting--71cc8c53-88ea-43f2-8f90-731331087c64", "sighting--2170681a-23eb-4ab6-b74a-054245e65521", "sighting--f168d7ac-3601-4e69-aae7-6cfa51528e0e", "sighting--eaf65fbe-a9f9-4eec-9c53-88f87f9c080c", "sighting--7a9b3196-1a4c-4f31-8add-fd6d4a9a5770", "sighting--a99b022f-b459-409e-b024-3c33e41a05da", "sighting--7c91d913-82d3-4827-838b-9d6a5b7c7900", "sighting--8d4284ec-a0b0-45e9-b1f1-ab13e0a6d7a4", "sighting--9b57354f-69b6-4604-b6eb-8bb4fe275258", "sighting--07267085-5e40-4185-9221-9949a1432e66", "sighting--3b7307c0-ca17-4821-9f48-87bc5885040a", "sighting--841750a3-cf48-4287-8bdd-b8a6e5ef5bab", "sighting--d079a643-e027-49bc-931e-2e10dfe9eb4b", "sighting--c2713155-0750-466b-b8ea-722d7f1c5e46", "sighting--e2882c10-6c45-487d-bbde-bc583f97d9d2", "sighting--2b71ef4c-17d6-4037-96f8-4f9e988d6bed", "sighting--0fff1f23-69d2-4684-8324-c72068549f3c", "sighting--77a3426b-6cb8-4ab9-8976-cdf915e9ef1c", "sighting--7c76d07d-7cd9-450d-a7b5-4a5f250eb13e", "sighting--b17ff142-adc5-4cad-9096-da84df2b4ccd", "sighting--b29d79de-61db-4c32-92de-138518fd6afc", "sighting--10c611b3-53b8-4e4f-ac24-8b904738e071", "sighting--9c44536a-f292-49ba-a7cb-0b3f0512c35a", "sighting--c7ec8857-b2eb-449b-8928-ebb2c5b50ff4", "sighting--acecbbae-1cf4-47c5-92bb-e2c88561d457", "sighting--817c7e3b-065f-4dc3-b9a5-461c825333c4", "sighting--ebf9ae63-71ff-4f17-93e3-469efbdb0d50", "sighting--6da766bc-fdf8-4df7-a761-af584bc8203b", "sighting--88df234e-dc7d-4d4d-9967-1e60797a0ba4", "sighting--ecf74166-ae6c-4d15-9829-14553c79abfa", "sighting--3dc3a1d2-1843-4d94-a282-b0dbfb3f287b", "sighting--62c56907-55da-4e35-9090-c6d5bb1d08e5", "sighting--0ea43e41-2ae2-4e6e-a502-ecdfaf822fe2", "sighting--e99b7277-3047-4b93-8c61-cd42efa9dc5a", "sighting--178ac838-ef0b-479f-88d7-20b4912e44f5", "sighting--843d5222-f71a-43b3-a066-5cd985cbe5a4", "sighting--070eaf4b-e481-4b12-922f-735485ee66a9", "sighting--f83d8f07-f87a-4db1-b2cc-5b801a0a7700", "sighting--7e6cd153-1c67-48e4-9ea1-a73c00fe1f31", "sighting--d37b9415-c0a7-4a2c-ab0c-c7aa309c6243", "sighting--282b684a-67a3-40fe-8277-9e9940847401", "sighting--24ad594f-b187-4d84-9496-a73b6944b6e6", "sighting--624f2ad4-2688-4034-a011-3929b5139280", "sighting--a1eaddaf-64b3-4eb0-aa2f-f177224634e8", "sighting--90e82431-f4b3-46fe-9a71-a35d1f570e3f", "sighting--8ebbbe66-59e1-4bbf-878b-e13336578ca8", "sighting--268d0a51-bf0f-46fb-9880-b6ae727e9fe2", "sighting--c57613d1-e940-43a0-9eeb-17c32c330231", "sighting--d9b7698c-d237-4a38-a001-0750a0dd57ef", "sighting--11ad8fca-af45-45a5-9935-3343a5e28fa6", "sighting--4d41f090-f4f2-409a-87b6-ce52e97c7c46", "sighting--a8ce4ce5-48ef-4ba7-a0f9-79688f27f05b", "sighting--873296a6-1c7d-4ad6-9d19-f913eff08464", "sighting--379953a6-8c31-4942-948f-eafc3e79d28f", "sighting--8c5e66b3-b792-4277-b8a1-839d5a47429f", "sighting--f322957e-b7a5-4136-9c78-1925846df0c0", "sighting--bd7b9f58-9f78-45be-bf77-4ed3968ca17c", "sighting--9c02196c-3bc0-4612-8519-42d56f8ac506", "sighting--badb6d07-2d7b-45ac-b61e-b581efa1ecad", "sighting--234b73f7-272f-4148-b390-e9c1c4fd33b2", "sighting--d01a9778-df19-4451-a564-1e3f09f1b25f", "sighting--2bdde46d-2b4a-4006-90bc-415907aa59e4", "sighting--08deffeb-7d3f-4f01-bcab-65f652933c83", "sighting--8f4e513f-a48f-4f83-bd1d-8a79e8c0afdd", "sighting--38fc444d-3931-4ea4-b999-7c8a46ac7360", "sighting--6754d298-f067-4368-9b05-e63a88978d76", "sighting--0808ada7-bbd2-450a-9965-279beee22ee1", "sighting--92cfe06d-b7f0-460d-adec-977fc659e044", "sighting--b374fa93-7b48-40d0-bd55-d1a59ff4bf48", "sighting--60dcd33f-0870-403f-9f1d-fdc21d889e88", "sighting--71e4c5d7-e130-4aa1-bae7-0b8d6d0ab8eb", "sighting--c6dcea7f-7699-4d17-b0f7-6e9158c2b112", "sighting--22feb9b7-3c91-499c-b23d-1a31f7a364ad", "sighting--191c47e0-2d64-4ce5-a939-98b802779cd7", "sighting--73691c37-f5ce-4766-be01-c350788e8dfa", "sighting--2df5aa0b-9525-4fe1-b659-51039fa81a31", "sighting--5adf092b-f4af-4662-aa95-0656d1b9ac01", "sighting--856d1884-dd59-4aad-b980-f64159dbcaec", "sighting--c531a68e-a966-4c83-805b-1a68a6e2df25", "sighting--e37fbf2b-75dc-4d96-bf25-0613fbca38e1", "sighting--5ffbb08c-ccc4-450f-8b91-4c2657b56dcf", "sighting--be0e5562-7409-4847-ba64-afefdcb01e88", "sighting--b02eae0e-69ab-4651-9cb5-7535618903bb", "sighting--888963bf-5499-4d5d-b366-aabbe7aca779", "sighting--e3c91ffd-523b-41dd-91f9-31b694c4d0f9", "sighting--e80f5e97-9ff2-4d6b-aad2-bdbb1747e181", "sighting--6c07a31b-4888-445c-a9c8-319bde4e3ff4", "sighting--fc8338ef-d157-4658-b0d8-28be1e400ace", "sighting--6ff0302f-d214-495e-a81a-dbb986e01434", "sighting--b6780ec5-86a3-486b-97d3-acad0a9d1d93", "sighting--db91945c-fb62-4604-9480-dac593b2051a", "sighting--229f7074-f102-4070-aa99-e35af7a90436", "sighting--0e421085-ad3f-44c3-8ce8-d358f58d0f06", "sighting--e2c5c498-bb47-41fc-8e05-9f0862cf8369", "sighting--653706d1-3bd5-4df9-a8e5-9226c20a23bf", "sighting--e156db1a-f076-4663-989b-189caf170c59", "sighting--3ea0c4c3-6784-49f0-b133-4bc6631b05c6", "sighting--7e7798bf-bd13-47cf-9b6c-aa79c449401b", "sighting--3bc99524-58ff-4189-84e6-ea9c36929716", "sighting--0a09f614-ce73-4074-b4f2-59a4af3ddf9a", "sighting--ebd7e2ed-5625-45af-82ba-2d57208ef244", "sighting--a137104d-f8f9-4d47-8582-5a98f9535d82", "sighting--0dbed31f-d962-439c-9bb2-4413b31f6535", "sighting--6c85f42d-5d2d-414a-89b3-c23468ee289c", "sighting--b4f7676a-c941-4d97-ae88-01a4300bff16", "sighting--d93d5c53-9c91-4c80-aaf9-ee64316da2dd", "sighting--d00f7eca-24b8-4f1f-893f-e29e52bee61b", "sighting--e127ae0d-ef98-44e3-be1d-605602b4c545", "sighting--05071826-4b1a-42c9-9742-d999683540f4", "sighting--3aabcb43-38d3-452d-8d4b-e8837851ae18", "sighting--8608c58a-b57d-4327-ab12-7b6323cfe47b", "sighting--06006488-7b44-44f3-b962-f8f5727af6b3", "sighting--3395d5e4-a98c-4d15-8e7a-5bda9b4bb684", "sighting--1d9a67d7-5b8b-407b-8f04-83a598309a59", "sighting--ec2deb18-e2fe-4cc6-b4be-e446e7e1f406", "sighting--fff07a4c-24a4-4be4-af93-8eb1eb9d2723", "sighting--b74e3c4f-c1bc-4898-af41-fa8d75e71fcc", "sighting--92257cb0-5cee-4d33-8db3-9807f858c7ed", "sighting--b428ba49-fc34-44f5-b364-d595b894d733", "sighting--f52f8d56-49f8-4b67-aa40-c7a789c55429", "sighting--48d62e12-23cd-4bc4-8d97-6be207491032", "sighting--2e6d9366-a28c-4a0e-b679-8f9e92fbac46", "sighting--b6492dd3-1bc1-4eab-8630-5a740a7f31c5", "sighting--2a9d9862-0229-440c-8c7d-32701ad3723d", "sighting--8db04c04-d4c8-402a-adc0-fb1f3847a4ac", "sighting--b6937069-e5a7-470f-92ac-395fc14aaa8a", "sighting--9bb067e9-b824-4aed-afb7-288854363728", "sighting--1d78933a-7952-43f2-b220-f1c253216c1d", "sighting--db3b7f3f-38a0-4ada-a804-4a307737f65c", "sighting--f3efd631-71e0-4a15-ba5a-bdac0d7e76cf", "sighting--37e861aa-bfae-4e2e-bb66-f3e348b7284c", "sighting--9f44bf3d-cc76-41bf-9e9b-882502da4810", "sighting--1872e94b-2049-4c3b-bf55-8ded4127f7b2", "sighting--5e098158-4156-4ccf-90b4-4b76c268bd65", "sighting--a358f3c1-92eb-4fa7-8bf1-fff150956420", "sighting--c436c0cc-dac6-4f2e-9f49-09e5e32ae33b", "sighting--32cb8118-a282-4812-adcf-7e395b1fe1c0", "sighting--4ef9f9ef-7214-4000-9cf3-173cdac1ac94", "sighting--0ea27b39-7ba3-4eea-84be-65f9d216895e", "sighting--ba3f0a63-858a-4709-9005-824ba82abb11", "sighting--717206cf-a499-46fd-917a-743a4ecb54ef", "sighting--7a00fd44-d47e-42d5-801c-fe8a8512fe1b", "sighting--c51cbe2d-77a7-42ee-ad99-4f6321db2645", "sighting--96056d74-6f6e-44a0-8c77-51ff7828b696", "sighting--5312fe4a-3bf4-4c7b-a553-c40cf4ef9769", "sighting--3db93ee6-0de4-4fca-9e57-ee65c74ee616", "sighting--a72f6ab8-f990-4687-a250-ad681d96034d", "sighting--0e386fb9-ec8d-4f57-b7ba-e4c1ff708a3d", "sighting--265f6b1c-74df-434c-a626-c6d7e1b08259", "sighting--ad47fd37-fb00-4039-b900-6cdbf5269fb5", "sighting--98377eb8-40b3-4dc0-86af-e5d827e85439", "sighting--7d2eea39-0765-4499-9c07-9cf025232e7c", "sighting--fe8209cc-be7f-4839-b2c4-0628e39f7cf8", "sighting--fb58577b-b2ff-4dd5-9bb4-94fc28e0535e", "sighting--e3d7d783-b4c2-48d0-86ac-66e918d4b682", "sighting--66e0e0db-a2ac-4e34-a175-2b061419955e", "sighting--6798bf95-ae1a-4f74-b534-752c81aab4b4", "sighting--d3de3d55-d402-4d7c-9df9-8b66d8f39cdf", "sighting--be33d8cc-bd91-4e58-9414-0169fd3be8ab", "sighting--403b517c-c0f9-4ca6-afa3-091e710cf23d", "sighting--25d9f649-0fac-480a-9ef7-fd7cd3d60bc1", "sighting--ccdfa85b-4c66-4ccd-9b02-350af98fffff", "sighting--34ed51b5-faee-478a-9900-c97d9967cce1", "sighting--25955511-35b2-4de5-b777-65e7eab4c9ac", "sighting--b4d6f681-3c12-4015-963a-0531750f1aa4", "sighting--b90f1467-3a8f-4784-85d4-896ab26670be", "sighting--a586a962-51e8-4053-8f68-52b730bb5c9b", "sighting--b7799d79-48c0-44c0-80c2-b062fb2ae8fa", "sighting--d35d3c72-764b-4178-a807-acb2a36a3a3d", "sighting--52e3fbad-d113-481b-a7b3-41d35a4884f1", "sighting--b7ad35dd-412e-405c-a0cf-872c33e0e41a", "sighting--7a7c1f18-f931-4fe0-87ab-b25e14088552", "sighting--1451d079-895d-4dd6-9730-8a7e609335b7", "sighting--9eb39345-e1d4-4013-bfcc-c0e808f76b1e", "sighting--32b05656-0621-4bc4-b5d6-5b29580fbc80", "sighting--cb38fdb6-1afd-4910-a947-26af8633e750", "sighting--e14c948e-1fd7-4fc7-bfd8-42d26fdb1c64", "sighting--c0077235-ec62-4cd0-bbec-d369034e9584", "sighting--a7b8f024-ac9e-4645-98ed-88a41672fac8", "sighting--4d9f7be8-f967-4e56-9423-7b74225c38a6", "sighting--f23ed083-7f22-4dea-a5e8-12f372f0e419", "sighting--07bc6bf3-53dc-492a-8a4a-e0f1251ae421", "sighting--a29e7254-6c10-4435-b9a6-9fbd97873d09", "sighting--06b38ae1-a58b-4886-86d2-fb04ea4a31aa", "sighting--e04c4d50-1221-4e8d-a6ae-4445bb8f2d9b", "sighting--bb3ab1c7-748c-41a9-ba0f-eadb4990cab1", "sighting--04c695e5-f907-4519-bd2d-7f7642e09b9b", "sighting--c41092bc-1cfb-4609-8dc0-bf733e675f1b", "sighting--b5d1f08e-1c3a-4810-b5a0-52370270e674", "sighting--e8b4a01f-6098-4ade-bf63-7feae0ebe116", "sighting--420a8509-6f3f-46b4-9279-be56b3cd9a66", "sighting--f01af041-cfdc-486e-8770-54e2e1db43fd", "sighting--9e61d41e-9507-4be5-9492-b0bb2fa3d06e", "sighting--f64be63d-e207-4ae1-ad4c-624c6ebcde00", "sighting--04ed2cc4-fa23-4204-aca3-7022a95d67cf", "sighting--70e8ecfc-d989-47db-bacf-523643a65265", "sighting--b2e987a3-fc68-44c9-a513-78693f17729b", "sighting--f1ccaeeb-759d-49b2-b41b-3b0b8ec53c8b", "sighting--da3be0da-c4ff-4c10-a463-1bff5e7dc619", "sighting--1a35c4e3-f916-489f-aced-a5b95a6ece35", "sighting--943ac04e-16bd-469c-8a73-88c7b164a093", "sighting--8e1618a4-3a39-480d-bfb0-47b8ab630cf9", "sighting--74d1c4f2-2eae-45cb-a9b1-26358e767aa1", "sighting--b7afbf82-158f-4764-9f42-b59e399170dd", "sighting--b4281711-a8a7-493a-bc9d-1afc177f50ac", "sighting--8b5af62d-91fb-4d3d-9887-6f0817fb8d63", "sighting--30e77ea4-8138-4029-bb6e-63a7c2d0825c", "sighting--77bb9d6f-9afa-4bb0-8c3d-dc99669e820e", "sighting--b74b3bc1-a17a-4d5c-a5dc-3dcffa43301a", "sighting--63db4170-6c22-4bbd-8b38-2ae8ce85a8c0", "sighting--1f75deca-38e6-4f3b-b3b0-5a3cc04cfeeb", "sighting--fd538802-d37c-46be-8324-8ec9ded2130c", "sighting--556e989f-7a2d-4ee1-8fb6-7651e041ec64", "sighting--935d2678-0cae-4348-89e5-0947ee7ffb37", "sighting--63b3d069-c00d-47ad-b424-2aba9be5547d", "sighting--3e7e173f-1e73-4f20-a5cc-4fe33d793a2d", "sighting--41307a6e-7168-4fae-9935-d854a8fce00c", "sighting--fed77e57-1659-4c82-9e98-6bcd1f60eb89", "sighting--d9f29c51-755a-44cf-ae52-c0d186b5f39a", "sighting--4f451977-48d4-46cc-8e2a-4e31e74bbe13", "sighting--fb3efe2a-6d9e-40c4-a380-5810c0aff5f5", "sighting--1c89fff9-98bd-4d05-848f-0a0fd4cb166d", "sighting--351b65fa-7a08-48b2-9e84-211e7d9194fa", "sighting--ac2de488-aaa4-458a-b5da-039c0d988fc0", "sighting--06b1099a-0e15-4768-943d-194395af4aa8", "sighting--5d83347f-66c3-4a16-8e2c-c2d3d6d4b8c7", "sighting--c91592cf-60e1-4361-a42b-6d4d40ddc093", "sighting--d147f00c-c511-41ec-98e1-e47157de5f3b", "sighting--08c8cec2-736b-4996-b760-fc94f3fa01ee", "sighting--b004f080-1f0c-4115-b6b1-a2169bc6e4bf", "sighting--62af32bc-e9aa-4850-9d2a-5315af1719af", "sighting--a2eafabc-afc5-4b09-a211-d5a015287c35", "sighting--79914059-584d-4ce6-9632-7709a60209b4", "sighting--298b4d09-55de-48c9-a42c-d7f5ef333b15", "sighting--f3c73d8b-4843-4692-91c8-2e7653457db4", "sighting--daf1f433-58aa-4a20-9806-1cdd466c7535", "sighting--c6748453-5ff5-4cad-9335-5a1c91219938", "sighting--5d86bcc7-6a40-4272-a1ef-9d70a97ca43d", "sighting--022ea4d9-eb52-4b3a-839f-5b9f3c870ed1", "sighting--45a52266-81de-4136-942e-d4dc115d8d94", "sighting--58440b72-6e40-4277-985d-db5c277c9dae", "sighting--d9318cb7-594f-4f3a-8329-751ea2d9172c", "sighting--b21b5b0b-12d7-4bc6-a2ee-6dba7567f8f7", "sighting--ac9f1255-d512-46c5-94fd-b42af1ee0a49", "sighting--510d8d98-cae5-4ea2-9a4b-c27de038838f", "sighting--5a93134e-d5be-4676-9b28-dff3e2a2493c", "sighting--7cfc46a4-df5a-40eb-b742-444455379f70", "sighting--bea4ff87-73e5-4843-ae1d-9c0789256ac8", "sighting--efdf4452-4bfd-4a37-92bb-33c005f4d2c1", "sighting--6eb987a7-6cfd-4790-872b-219b9b66eaa0", "sighting--ce81d171-913c-4f3a-b671-93c600687c61", "sighting--18d96add-2528-499e-a1c3-5f6d5d447390", "sighting--ef4bdc46-6998-4579-8dc3-aaa5c68e0c36", "sighting--e92c02fe-3625-41c5-b643-081a59cd2071", "sighting--cd1a1230-2c6c-4f51-9895-0be891db7daa", "sighting--aa5154b5-dbfd-4567-98b4-4a64f3043aab", "sighting--a6bf1008-d54a-450a-b78c-d167e55e341e", "sighting--a58665b8-00ba-47dc-aeac-bc4739c98381", "sighting--ac14e96d-ee3d-41b2-83e7-4f725e00b140", "sighting--670b803a-bbf5-4d04-ae54-8897216d9d5e", "sighting--72f29a97-c6cf-4545-9464-169f3343d4df", "sighting--24b86b47-8b8e-4490-bdde-e4c6f4aafba2", "sighting--4562a279-368b-4324-a657-eadbc453379f", "sighting--0445cc6f-8cef-465d-a3de-43570f75e03d", "sighting--61ff97c5-4348-45a0-af13-88cdae35e70d", "sighting--725240ef-c01b-4d27-84a7-3458c92101c2", "sighting--81fcb958-48b1-4511-8a4c-10b5d0bbc0ca", "sighting--2d30ffbc-b1eb-4b73-b798-e2cb36794aab", "sighting--4819292c-37de-4ae2-8a09-cbd589f9dfd7", "sighting--3ccdcbdd-db07-4362-ab94-1e75da3795d6", "sighting--5ea37c30-fb43-4160-89d3-d2e880afa342", "sighting--fac8f60b-5150-4709-8bb1-6e42c5ab7166", "sighting--3c2d76ff-94ea-41a2-82dd-047a0524fb71", "sighting--e308b31b-cb46-4f1f-90f2-dbf586bdfd0e", "sighting--12db3c13-8538-4639-9397-7f6ba4ab0426", "sighting--f28f9f2f-b901-414a-b065-a30f78571e9a", "sighting--df64466e-3e34-4223-8d8e-c8954d8b88e8", "sighting--961273f3-db84-4556-bb23-413590a80151", "sighting--665a3a43-9c56-4ab5-b638-e31d7fdbd7f8", "sighting--4f021d5c-6dcf-462c-b13b-1ad6337a0e36", "sighting--222d9c7f-2b14-4f04-9b54-e01057442dd3", "sighting--daa744a3-997a-4493-8892-c5cb9d192016", "sighting--1b7699cb-b4ee-4a76-8a1d-523955a92425", "sighting--eb836df0-c2e1-4f91-ab00-c4b8727b1537", "sighting--cd31100b-33bc-444a-95c2-9e4d83b3eb9f", "sighting--358714a2-6d5b-4ae7-bb95-4dd90aa1acbf", "sighting--c56a2f69-7604-4eb6-85c8-916ecbb0c80e", "sighting--e10c8bf3-19b5-4743-b842-1fbf010c30ef", "sighting--016ec5c1-272c-4627-b7ed-d1f0a58c41c2", "sighting--f6050e7f-e076-48d8-9bee-8cff61f21012", "sighting--e0e14650-c1a4-4d0f-90c0-2d3a1a0cc306", "sighting--83b661a6-5462-4db8-b1d9-d0939e6f6369", "sighting--e987fec6-4aa9-42c4-abf5-1e0248f5938e", "sighting--4d2c33f9-ae7f-47c2-afb8-5872986a3002", "sighting--f5024edd-6e4f-4ef0-8d01-c39d100c6f8c", "sighting--8fdaf40a-0b40-4893-ad5d-ef74ce6cee30", "sighting--22a98c60-f9b9-4463-8bed-f63f346b237e", "sighting--78bf4142-5363-4935-a2c8-83195a13e2a4", "sighting--7bfbaa12-7044-4b1b-8edf-f61dc507de85", "sighting--f939f5e2-bee8-4885-8c31-f0a48565d142", "sighting--afbbc09b-356b-47cb-8688-b8e7baaa528d", "sighting--445745f5-f23f-4939-b504-1b3f0712add9", "sighting--fc28caa7-89bd-4062-8de4-a8f5f12d2388", "sighting--5f260e36-0622-495f-9f36-35d5d6b81ecf", "sighting--ffc37964-dfdb-40e9-9eae-f37fd4688f2d", "sighting--d01bbbb4-1b79-4c6b-9bee-47bc66af3388", "sighting--fa38e02f-c8e7-499a-8b9f-4553e7972276", "sighting--8f3b9ff3-9b8d-4bf5-8e33-544db0278bc7", "sighting--d8b61266-2287-42c0-b81f-27049ad342e7", "sighting--03cb9c92-bf35-4e55-a0f3-e4d4fa86f235", "sighting--87d44e7b-70be-4dc4-ab14-0d6d562c51f9", "sighting--85bc9ead-19b6-4a4a-9d67-6e83c53dac94", "sighting--78ef6601-f5d1-4a6f-bb78-67cdde849203", "sighting--21e699f3-d3c0-458e-b5ac-d6ff5983584d", "sighting--18156988-9220-4b6b-9ad5-b741b05e1d91", "sighting--30a10ce9-0d3d-433b-a32b-f776c9184d3d", "sighting--5c84dc92-a4f3-49c0-bdc0-d87e4482765c", "sighting--25423cf8-3031-47fa-b44a-449d5a617cf3", "sighting--6935ea4f-1173-4ee2-bebc-2c573a8dd84f", "sighting--967acc38-3952-4f0c-86cd-c7555e4e50bd", "sighting--712de116-a401-4cf4-b3ad-aee85f8d9709", "sighting--9cdda17e-d61c-4ee8-8bcc-64cf089c2d3a", "sighting--ac193379-c02c-4130-966f-7f7793e84ca6", "sighting--c56dd434-75c3-4106-afd7-416612440086", "sighting--73a82bc8-79f0-457a-b762-70584b9b15d6", "sighting--cdfe4cc0-dc68-4898-b2a1-b338446aa230", "sighting--28e1d1d2-125b-4f59-8573-56a801cd43e7", "sighting--d5a29e7c-ccae-4659-a2c0-e1bedd5670cc", "sighting--4c3194c1-02d3-4dea-92e1-06998ae4f090", "sighting--e6399ada-83e2-4963-8b94-21b8b591a50d", "sighting--f56d716a-b5ad-4cd1-bb6c-1fec6876bfe1", "sighting--24ad4d71-5bb0-4409-8d9e-e26924d9290f", "sighting--e8a3748d-fbcd-40d2-b7ea-39a86944ae7a", "sighting--5cc383c8-579a-4347-ac75-59448c70ee1e", "sighting--42ba6e94-fdf8-4260-a938-d72aa9a579af", "sighting--2c0c14b8-805e-4d11-af72-72fad141dcf2", "sighting--ebc115b1-ecb7-48ca-a060-3586cbd17e16", "sighting--b83a07d6-9385-42a8-a00f-d8c475f58af2", "sighting--0aa77713-fc27-4d6c-beb9-4ee13f0f9ad4", "sighting--9fafd1e4-a28c-4d64-895f-8c0188311b5c", "sighting--1fed84f7-fecd-417c-b4a5-241a84306dc8", "sighting--dab2c20a-3fce-4f1a-8bdb-d2fbd594803d", "sighting--94285192-87d4-46ef-a7aa-98d24d535a7a", "sighting--66c6f746-af64-44b6-8117-a39505bdcd72", "sighting--6e8cfce6-9df8-4700-96cb-63770cc254ce", "sighting--d282dee6-bfc0-4a33-aa88-2967779f2ac4", "sighting--fbfdf5db-a26a-4391-ac5f-3ffeaa3eb3b3", "sighting--9c21387e-b601-4267-9f78-cf09d41338ab", "sighting--7fc310ce-f251-43e1-9856-8199cbd3bb7d", "sighting--dfab86d3-52ba-4d4e-ad57-62b417afc008", "sighting--43a30ff6-4b1b-430b-8c31-6b3bb2033d36", "sighting--5e41f175-92bc-48c4-8cb4-eb823ad4677d", "sighting--380cdd95-e9a6-4f03-a4d0-da81b12ca95b", "sighting--876e1b3b-11a2-4a45-85c6-86035148b31a", "sighting--d27d05fe-71c0-4c25-afdd-5344b2888910", "sighting--b53b24bb-8f60-4e4e-be85-82a38e3aeb72", "sighting--62fa8e8d-bd2a-41ae-bdcf-d0d2dad74aa8", "sighting--78d3e31f-585b-4f47-aab6-7322d50ed67d", "sighting--59afd70f-ef5b-4ccb-8736-d71ce8b4aef5", "sighting--4c04e23e-b548-46f9-aa7f-79ac630f53a5", "sighting--325c7971-8764-43e9-b9d6-3eb38dacfeec", "sighting--3491fa8a-8d7f-4ea4-8439-535cd98454d7", "sighting--1720cd98-21ec-490f-9ca5-26e57a68502e", "sighting--51ea8d93-c505-41c0-a5c6-33e6db710f44", "sighting--f58ab774-3b39-4980-b336-793507ae2b03", "sighting--603ad48e-c338-44c3-87ac-b3962fcd7792", "sighting--f0e36e93-c98d-44c8-8d1a-d09e8d254c09", "sighting--91dafb9d-6bf2-4dca-9aff-313f8862ea57", "sighting--07d3b597-90ed-477b-b355-8d633c44b917", "sighting--1fc1b65f-4e4d-4312-a47c-018ea9705413", "sighting--de116969-92cc-42e1-81d6-87ccb6194ff0", "sighting--9e31b577-81d3-4ebe-993b-7704db1c2c51", "sighting--365786e4-8f85-43fd-a763-ac1328f1b7e3", "sighting--743133fe-f1c5-4f74-8b19-22e217eeb92a", "sighting--bde2ee0e-4308-41d1-bbcd-07aceb045241", "sighting--8aeb7997-ed8f-4957-935a-1d796a910ec0", "sighting--baa1626d-8e9b-4dfb-b159-71ac4cf3f282", "sighting--d44b00a5-d655-4e47-8dc5-fa7f8d162397", "sighting--9c39af27-be75-4563-be60-4f6fc9c4901c", "sighting--358aaeca-2e11-4ed1-9e64-a52ac5d728d8", "sighting--eaf41ab1-7af3-4f90-902d-3ebd5abe3e3f", "sighting--e5e8504d-721a-40e2-a168-5d248491df95", "sighting--d85ad6ac-268d-49e0-b475-57ab507ac883", "sighting--2774ec80-9ea1-43f4-97be-c741c9b198b9", "sighting--462a3c49-9981-4d6f-a106-bb765617af37", "sighting--d9d04e5b-9076-4c2b-849c-afc7a5d5ef99", "sighting--8d0f92b0-1ac4-467c-b149-133e5d510fe1", "sighting--f36d12a2-ec46-4764-9086-b015caa14f70", "sighting--a4974b9c-02cf-4abf-86fd-fccb03745326", "sighting--ccb716fa-0d3e-48b3-97bf-1f5d22cd41b5", "sighting--01d86d92-a6b0-47b8-b318-5c4b5f55963f", "sighting--495ec48c-6eb2-4298-8901-02f5b68c911f", "sighting--7309419b-39a1-4ce7-b7f6-2f9e0e6f2121", "sighting--b3a41c0c-095e-4b25-8167-8beaea07857e", "sighting--fca04283-8977-4d7b-9d09-f641b62337be", "sighting--0de98e8a-f70d-40d8-a682-635f0873fb29", "sighting--120e2bd5-9fea-44da-9887-d61f0c418327", "sighting--47f870c8-d9d1-4390-9046-79b28c45dd44", "sighting--abe76825-23f9-46c9-8322-22536fce399d", "sighting--215b25b8-cf90-43be-945a-e9bfe8212e64", "sighting--14dd3a54-c835-409f-9ab2-118e5bb3a373", "sighting--8ddabd59-7e66-4bbb-8149-a39d43f4719b", "sighting--856c4477-a861-4098-b878-e45a1906eee9", "sighting--9b88813b-ba49-49c7-b1e9-86ac45e6d3d7", "sighting--f465966e-075b-45fc-9bbf-433429a43d11", "sighting--cfe5eec2-3615-466c-94e5-56f234a41dfd", "sighting--c2ff8a8e-23d2-4e9a-aa3b-4684be529af7", "sighting--a4f95c00-e420-455a-902f-d7de865257a4", "sighting--40063833-434f-4ee7-a1b0-1f29d7efd44c", "sighting--67d4e6fd-57b5-4eea-ba25-3c4312aa18ca", "sighting--4cd45155-86c5-4654-b24c-beab03d5532f", "sighting--021611aa-723c-4d04-a682-0a0aa4a0fc2c", "sighting--3697f9d0-fb81-4fdd-99ea-0f7d997cd8d6", "sighting--9e382e8d-16f8-4eea-8e37-85a01681ebda", "sighting--eebccf7b-2989-41d6-babc-03ffbbf19f9c", "sighting--dd5544f6-befa-40e3-9ad7-24b37f2fc36e", "sighting--a35974bf-32f3-4114-976c-eeaef10202d0", "sighting--44bc0b19-1b87-4aff-b972-fc07f5952af2", "sighting--bbc80b32-d23b-46ce-904e-56bf76d60727", "sighting--4f2afb5d-1b48-4994-95e7-778ff4dc35dd", "sighting--0fab725c-8b28-4df4-a0ba-211b7868ea42", "sighting--7914496f-6cfa-44c2-82f9-ceb228a95b77", "sighting--594bd0b1-5bb5-4ee2-9f13-b624d6a21254", "sighting--76aed593-4066-49c6-95a4-e11a92bd8cea", "sighting--3cde6d22-9218-44c8-88f3-354120540756", "sighting--0db79338-b3a7-4de3-bf49-637a9e7b4b3e", "sighting--a7f7e2dc-2a3a-4112-b98e-58ca4dc2c07f", "sighting--277e40f4-4a84-4eaa-967b-ad78098e5917", "sighting--f66f214d-25d7-4e19-a39e-4cb96bcb3935", "sighting--21a74be9-e68a-4433-80dd-7b4c40075bbf", "sighting--7567c247-4592-4d90-977e-1fb8d4766bbf", "sighting--376feb97-5b43-4063-bbce-cdb55e8c4496", "sighting--a40d3d3b-fd36-48cc-9799-9e53b403daa7", "sighting--0bdf9226-c8de-4b98-8e89-098a43d4b9b6", "sighting--448f357c-1fa7-4968-be14-80d2cfeb85c6", "sighting--2352d0d7-0684-4120-ad2f-dd525ecae6bb", "sighting--06f6d2ec-c447-487a-826f-c4f10d690f63", "sighting--08bc68c1-ad15-4eb0-85ff-9878df721fdd", "sighting--1e7f05ee-a854-408a-973c-51bc7314b199", "sighting--39448ead-3d20-43d1-863d-b60e5c6cdd75", "sighting--28c4fcb3-7a2c-496e-b78f-a390ddb294dc", "sighting--f3c1cc1f-766c-4d5d-9155-9fd24a258aa4", "sighting--266ab48f-1e33-4b2b-87db-8599fee7b0de", "sighting--a367d495-167a-45e5-aa88-5470473358ec", "sighting--1d23faf7-83b1-4a01-8021-24984384240d", "sighting--480e9a84-bd2e-4002-9b27-496da54113fd", "sighting--d95e7b2e-e9e9-4c6e-9f5c-99deeb6dbf71", "sighting--c8f66fe4-67e9-4045-a5af-f4793139c0cf", "sighting--60fc3a5b-489f-4eb5-8d18-eb29b5c8fa9a", "sighting--3ca94e9e-420e-4bac-bdc1-985a8ba1ba4d", "sighting--eb198fb4-c365-4a9c-8e55-036f50ffa0e4", "sighting--40f7db34-7d70-4bfc-ae82-c0f700d94d0e", "sighting--9e7e3503-ca0f-4dec-8536-72020c028eca", "sighting--9499089d-ce0a-48f5-90f6-93d20f0ed6cd", "sighting--09f0d259-2301-43d7-92ee-442d4b08494e", "sighting--6f634d50-d2b2-4b03-a2b0-a7da5d524572", "sighting--7bf6711e-c5ec-4646-94b2-b66bdef08cc9", "sighting--d07a9fa8-6d26-4c9d-bba6-be80807365ec", "sighting--92fa24fe-051c-4352-b0c8-076c0c1ef6ec", "sighting--86245857-4b60-478d-9bdb-cd91f96b927d", "sighting--eb36f25f-ab64-4518-9d68-355c933fc0e7", "sighting--b90130cf-ad96-4ed1-85fa-20309a384286", "sighting--38821db0-978e-4b2f-a7f2-29b71b082851", "sighting--e71e9afd-0dc3-4aa6-8ffa-487e964d2698", "sighting--ea2c8301-f01b-4402-a87b-73a3c7d78b81", "sighting--340be338-4442-4d21-a0e1-ad3731d051b7", "sighting--6038ab9b-3322-450f-9197-112ffbfe594e", "sighting--2ba966e4-69f0-46cf-bc35-871656e4940e", "sighting--866a7b79-b1be-42b8-8198-a04b107f5dcd", "sighting--8025198d-a90c-45f3-8afb-0132546adc24", "sighting--31dbb13c-4826-420b-9427-5cd8431dfedb", "sighting--2c262f74-4b47-457f-acab-e5280ca04d9f", "sighting--1553798b-cdac-4301-9c45-c513840a33ee", "sighting--3b17c796-7218-4f9e-a3bb-722424cd806e", "sighting--b749dba9-0c90-4663-bc13-eb4a94e14f81", "sighting--181dd699-aacf-452a-9ff7-563b8c1ae755", "sighting--26cbe221-34e7-4083-ac4b-6e2cd8ae0762", "sighting--514c3433-f145-4ec1-b4b2-0d7a0db2a4a1", "sighting--07d4674e-0727-4173-ab7d-7847552b88ea", "sighting--343885c7-ff1b-4baf-8f87-face38d48f08", "sighting--c9e3b52b-ceef-4177-9865-66b4f7c32e91", "sighting--a90935b4-5322-4265-896e-135291185d0e", "sighting--4d1ed0e7-539c-427b-96b7-fb87c0459f17", "sighting--98a55bba-18dd-4099-97dc-74d1dbffbc16", "sighting--93204f39-5444-4c28-9a28-72425ba40dcc", "sighting--2d0c4253-625b-451a-9202-e24c513d4ffb", "sighting--b0e69ad0-e86b-4c13-b7a3-3c91c37524f6", "sighting--eb2c1629-f80f-4921-8049-5b7f5857a396", "sighting--647d27ee-3a04-4ca5-b591-f9bf7f42c62c", "sighting--c7a29c1a-1c69-4c05-8403-9eef48eb7377", "sighting--bb5e24cc-6c6e-47f9-9a33-e5adaf2af36a", "sighting--2340b433-4a2a-4e94-9042-91fe0c1a139c", "sighting--1d078285-d104-459f-9eae-a33de16019b2", "sighting--44682c03-9b03-473b-be34-161c8f95a511", "sighting--a76b7b40-739e-43ca-9988-3b7b10649312", "sighting--6a591456-9fb3-450c-83be-21b6645adf75", "sighting--b7bef2ec-7b6b-4f60-9d31-74c8190d1e3a", "sighting--9593dadc-f334-4645-b28d-6751987c2b67", "sighting--56aa714e-0544-4d66-aeb5-75083ed43382", "sighting--c845d25a-32b8-4a63-9667-0884fdb7690d", "sighting--dcdb8e0f-a10a-4fc1-859b-1566497ee45b", "sighting--9aac7d3e-7610-4789-b9c5-33257a30cde2", "sighting--858593f0-bc51-413f-a83e-b9bf13f0d3e9", "sighting--9d8ef01d-b60d-4085-a175-399100bab3d2", "sighting--3114659a-f08a-45a0-bda0-491b00ac0bad", "sighting--9f998e88-5848-4e91-bb41-94366dced22d", "sighting--b87b5c25-410f-4327-b578-6b86d181ca84", "sighting--b995c184-1b60-4fdf-a7b4-8458b820f994", "sighting--58ef7ae2-13db-4ed2-a925-e9e049028487", "sighting--64bad581-6d34-4e27-bf73-2e5d3fae9ec9", "sighting--742202a9-dee5-40c3-a5d7-ea5c3b579495", "sighting--e19190d5-c376-41a8-9de9-e223a478ea50", "sighting--844785cf-88a4-46fd-b6b2-31aa51965196", "sighting--a418fee9-871d-45c0-9005-23fe9f3095fe", "sighting--c53e3b53-e45f-4c28-88b3-6663e1220a42", "sighting--288f3ec9-24ba-4f72-9536-97d655369c2e", "sighting--27be2b56-d3ab-4e6d-9feb-6c747da49ef1", "sighting--c11c3fe8-929b-439f-a5c3-29b2deebcbbd", "sighting--3cae4d52-10a8-47e7-82f5-b02584baf179", "sighting--acffa257-524b-4f18-b61f-de20b45693db", "sighting--bcc846d4-9e44-49d8-a4f3-67b110ad0868", "sighting--4e4aeca7-1d99-4585-b0be-7e3404bd7430", "sighting--10860ad1-f134-4f0b-a946-324293248c99", "sighting--c96ed838-23e3-4ce9-a005-9aca0381f394", "sighting--0a709a7e-b619-48d5-b354-7d29d4761d0d", "sighting--b2e5f4c2-9319-4b15-bb5b-539a23d4a879", "sighting--3607f5a4-7adc-4334-b6b4-cdb64a439a76", "sighting--1bcd524b-638f-4a36-ab1d-abdf5a800f4b", "sighting--aa3c80dc-6e8f-49ef-820c-d75cac349469", "sighting--fbeb1ba9-4a1e-4cbf-8293-8047f1b7a945", "sighting--d519724c-9e71-4672-89d5-70c043148c3c", "sighting--f81be10e-adb5-43e5-9eb4-504da32a5026", "sighting--d61d6237-7a94-42d9-b4f0-fc460cb7eddb", "sighting--346410d3-ea8a-4a54-91e3-34ea213cbef7", "sighting--6420795f-defa-46b9-931f-fbdfeebac3be", "sighting--52efb64a-12ad-4a4a-be5a-a85bcceba7a9", "sighting--f1a43303-5b63-4e86-a250-13ab4e6a3773", "sighting--b05bcabd-78f3-4919-ac6a-ba34a26cfa2d", "sighting--e9c34827-b368-42be-89a7-7bbc40bf1e35", "sighting--25c4290c-b4d1-46ac-9f55-11fb6a06855e", "sighting--8b74636e-6bce-46e5-9670-ef6bccc4a794", "sighting--cfe59842-a85e-4625-8730-27d1f4f34b29", "sighting--cadfe532-25f7-42e6-8e2a-a1a9680fd6c7", "sighting--02758513-8605-4ebd-a4d3-c6111cfa8e43", "sighting--b676e85f-ecd7-42b8-9660-ac416387f16e", "sighting--4f0e616c-659e-4cfc-826b-ae2fcd718646", "sighting--5d72e380-bec0-492c-8308-8c2184175051", "sighting--dd2ce355-a8a0-45ba-8162-31b87d1c9f6b", "sighting--6fbc6829-347f-4ada-8fa0-115cc247b0a8", "sighting--23503774-cb91-42b6-9149-58e768a69154", "sighting--de5e31b4-e6e2-4afb-90d9-1e3ebe5b74f8", "sighting--62ad1d01-1208-4bfb-959e-f485f2092ad5", "sighting--56bd0c90-98df-49c8-acf6-a1c6d95a72eb", "sighting--1d5f86bd-c443-46bf-87ac-bc9bab03b02a", "sighting--ef56de94-02cf-49d7-9c7d-7f9cb59e1a1e", "sighting--1293444c-ac5b-41f7-84a8-f21d4f595238", "sighting--e9bd42c7-a0d3-4c38-8cfe-0c8f5adc47c8", "sighting--f7932ba3-d0dd-4180-a8eb-05ea65daf3e9", "sighting--7b2ec4ad-43bf-4d38-b4e3-8bcfa3f8fee4", "sighting--de745764-3ef9-42c1-bbe8-be08c1234f68", "sighting--950f1ef6-8e68-4770-98a4-464c7c4505af", "sighting--970fab27-3b11-4033-a8f9-ed115574f2b9", "sighting--85f18c11-6c11-471a-ac29-1dd42acb6cf3", "sighting--a1fae2d1-3f57-490b-95d7-79748b92aeda", "sighting--d043fce4-9ea3-4c80-a671-06d75146cbef", "sighting--4d9fce4d-40cc-40b9-b096-c34df1824a01", "sighting--417817f9-0451-4fe6-b1ec-1f831dac888e", "sighting--5b6da5ff-7427-40c2-81f4-3634334dddcd", "sighting--8afc3931-c46e-40fc-98ae-558c04e7ba37", "sighting--4751c8c4-5707-490b-8dd8-dff96ade3105", "sighting--b93c3b55-4d9f-4a23-87ad-28b436fa2155", "sighting--7cf71c94-e930-4c31-9db3-f3571717946c", "sighting--431c6d31-16aa-4227-b117-e1056cfd0ed3", "sighting--894f9bc3-1aa0-413e-a98e-1df2b0b13db8", "sighting--57ea346b-6223-4ea4-a317-0b2880b6da1f", "sighting--70b19f5c-5171-4727-b78e-b2dcbf0766b9", "sighting--068e269f-a05c-4c29-bfe4-11d5805b84c6", "sighting--fa44dba5-aa48-41da-8d8b-44a0f743abde", "sighting--75d0283a-f531-4f08-ad79-8bc63691b75c", "sighting--03bf5e34-a579-42c9-80db-15d8a3f12e3c", "sighting--dcaa6728-a4c7-4d30-a9c9-f803a63b55eb", "sighting--6168d659-121e-42d2-94a3-4b95fb7d32cc", "sighting--9271e249-ac43-40c1-83be-02455a7ee651", "sighting--2bb9b6d3-45ba-4fd3-9be0-9bfa14b49ae4", "sighting--f93afc53-aff1-4da9-b078-b7f5e62e3c08", "sighting--c64c31a1-5e2e-494c-a043-8f14540b3bbf", "sighting--bf4b9ac6-bad5-454d-b733-2b7c04214f37", "sighting--27c87520-a088-46b2-ba3d-6d5a72f0e9a8", "sighting--21200fba-11e3-4dd0-ba2c-d961d4ef37ae", "sighting--b18743af-fe7b-42ca-834f-2eb9e9686a2f", "sighting--53098ec7-a782-4864-a9c0-7c8160570f1b", "sighting--b9cc22e2-8ac2-4499-b425-833e52cb7739", "sighting--e42a76a7-8c7f-4845-a7a9-76d2e19ba80f", "sighting--1d913a62-8c8d-481d-9abe-a8a70d6f1762", "sighting--5834dece-fa3d-4d35-8f78-655b8c03ed97", "sighting--cd80b407-216c-458a-b2f6-08e29465d633", "sighting--a28d76ed-ae02-4703-b73b-b379b2fadcca", "sighting--09ec5051-9920-4cc7-aa0f-a1f9151145d6", "sighting--7ce75e76-7b5e-492e-9135-0c61324e2e0d", "sighting--3d6177b9-9d78-4c3f-9ae3-a51c6484bd41", "sighting--6e899191-53d4-4092-91a5-d13f15fc4925", "sighting--122a185e-a5ce-45c8-aa7e-0e8613aba69b", "sighting--e1661efd-1dfd-447d-a2af-7b663a619584", "sighting--eeff1f21-f0aa-4721-9070-9ef9a3a76f58", "sighting--4161ea85-7b8f-4ca2-90da-c106dd4ef39a", "sighting--24123803-cf51-48be-9f81-e544233d46ab", "sighting--f0de045d-9aac-4d96-bd1a-7a78e06b6a82", "sighting--53f41e11-9ee7-440f-865a-4874690ec0a1", "sighting--aeaa4c5a-11d5-42da-8034-090c69bf94b6", "sighting--0d061d25-bc75-49c9-a248-e7cae5412f57", "sighting--d0353b5c-6936-443f-a9bb-35be387021f4", "sighting--f9fbda06-1e50-4048-9401-f326f8d4b3f8", "sighting--86cc6aea-116e-44cc-9e1e-424269e00300", "sighting--5d67c877-f314-4d55-874f-c4b00a478023", "sighting--aee93645-3bef-4017-929d-0a2347621243", "sighting--3a53da13-bbf0-41dd-b5d3-7eea35cf5ad3", "sighting--4f2b8c6c-e432-4cdf-87a3-3d8bb744119e", "sighting--607625dd-12ef-4c4d-b1e6-7967eddac2e7", "sighting--756324d8-c8d0-464f-a62d-a91f83d693ec", "sighting--aa46e132-57e0-4fbf-aab0-ef25862f5070", "sighting--eb176993-e562-4383-84cc-d99fc214a412", "sighting--626afb87-53f3-490d-a766-d6b94793cae6", "sighting--ea8ff72a-378a-46c8-9cdc-9141d4ff8d64", "sighting--ebb6fde3-e3d9-4fd6-815c-8ecdde722094", "sighting--eb3fa0ad-f5db-4aa3-b953-93464f55a366", "sighting--b331fb71-ba4a-4676-9e81-ae239ef399a8", "sighting--6c4327b6-425e-4a40-8c9b-c36e2d6ce8f4", "sighting--0ad50055-9b86-4dfa-8568-1eaf65e4c3dc", "sighting--7f08e0a8-0c63-403a-85ed-1dafda20337c", "sighting--c515ff0c-d227-4bd7-973d-4f869667fd00", "sighting--85a741e2-d033-4196-9589-28af8cf0fb97", "sighting--e47b8e93-8d43-41c5-bcb4-570dfb7895e1", "sighting--95061b51-1a4a-4548-8bf6-098598217df3", "sighting--90a85de4-2df7-4bb9-b3bf-245af5723238", "sighting--27a607cf-3a77-41cf-b1b2-f0bdb12fcc03", "sighting--b9956db1-a867-49d2-acd9-693c11f10a5d", "sighting--6972a42d-41b9-4fc5-a52a-237342b0306e", "sighting--6defee20-725e-4277-b532-322c95eb38ac", "sighting--b600e7d3-d842-4892-addf-fdba843f47bc", "sighting--e94fd91a-3968-43e1-a768-22c135e107d7", "sighting--fb6c2216-f014-4a87-a2a3-15aad79a286e", "sighting--beb2cf9e-5828-491e-a103-d27fe239ebf9", "sighting--b798dbdb-ba4d-48ea-9ab8-08199041824c", "sighting--7824c188-6db7-4e60-8311-7aa778644629", "sighting--4ec1b649-e0bf-4c1e-8648-92b274fc50eb", "sighting--af6162dc-2442-449b-be5c-d1b0eb8b30ed", "sighting--1bee15e0-80a2-4939-a3d5-e0eb6ae43c29", "sighting--db797f80-ad6f-4334-921b-6a28af35ec22", "sighting--59e7b1a7-2ef2-4cee-b432-c3b1f9b8c2dc", "sighting--8628b114-2103-4724-b484-775213c9cbc3", "sighting--be6e7c34-4b8f-4bf2-8af0-a2d394bee29e", "sighting--58160308-9168-4d4e-9112-35c870431731", "sighting--dd784b88-6659-40c9-9faa-5c32489f8968", "sighting--01f83e02-d2a2-4e40-a529-25654dbdec83", "sighting--a86c5357-3a37-4d90-a57c-34e8fd72d970", "sighting--1e96c06c-fe0d-40f2-89bf-3fae0ede8e2f", "sighting--de690fae-0886-4430-9ed2-f663674f34f3", "sighting--f8c473b0-2314-4b35-8898-bfd59a5c71b3", "sighting--f1c208be-20e1-4a7b-a77e-e0e2c1e1bcbd", "sighting--75bd04a1-98ac-4c22-860f-da3244692cad", "sighting--3bb6363a-9403-4687-86c0-130320a54ee1", "sighting--b9cad01b-2487-4601-bc67-78fe88321a99", "sighting--de1b3634-dc94-4059-bc4d-9ff9ac289ce9", "sighting--d0b9987a-c4e7-434c-9817-a6566219fc2b", "sighting--28d37a44-39da-4dfb-bf30-6f6c7e6d2c6c", "sighting--115a3c31-103c-407d-b739-1c9a4fa45482", "sighting--f692fb3e-58ba-4ce8-91f4-6d86a48f97cf", "sighting--d800faec-1479-47ad-8c5f-840b8133b9bc", "sighting--03fb921b-4b6f-48e7-aee0-0a83674ecd9e", "sighting--6ba3394d-4fb0-4017-b0b2-05b66b949562", "sighting--0b33b1cc-ba17-4a2d-a403-7740ea453268", "sighting--381ca18f-461c-4f0f-ba04-2bcb1609c3f3", "sighting--ec3ad438-64b7-40ad-b84d-18e6ae85bc1e", "sighting--c737420a-3223-4e51-a45d-beda82537edc", "sighting--9e86af35-5a82-4fc9-8868-84e5f294ca11", "sighting--19e4b63e-597a-4a77-a32c-b287b31f6bbc", "sighting--5700e003-2bd8-4bbb-81ef-1e282f8fb9df", "sighting--fafe318d-3677-4004-b78a-623a1393623a", "sighting--7a8cbfa7-eab3-46ae-b231-cd66cf90d01f", "sighting--3ed66097-8494-48aa-95dc-b271d1ca0195", "sighting--52c00a6f-4ad7-4eef-b981-f2c05d7dc35f", "sighting--cb5d21d5-1afa-49d3-b443-184a8eed493b", "sighting--a2011b3c-a97c-4dee-bb1c-8d100afa8749", "sighting--3d309aa3-802f-4419-a52c-50ecde4b9e78", "sighting--e651f7e1-304a-4248-9093-5fb11d345b84", "sighting--9f85ba8d-bf3c-4b6f-8396-dbdf857ccb2f", "sighting--a6e78739-e0ed-4193-b221-e258d307db11", "sighting--858d611e-a150-4672-877b-3a512f048696", "sighting--331f9923-9378-42ce-b9d2-d1ec2f5fad99", "sighting--4d6ee208-5f39-40c2-a857-802251085b0a", "sighting--e0ec6d19-9bd8-4ef6-a72b-0a2b2d2bafd6", "sighting--04a3e560-afb6-4da1-84ff-cbd4e8e9caeb", "sighting--b050087d-8365-4f9f-a419-d3d01628c40f", "sighting--0640b26f-d9bb-4a2f-bd62-edd8ae437f93", "sighting--0a2c74f3-1e95-4260-bb40-67f8fa21a0c8", "sighting--c97bbfa1-3e40-404f-ad48-f76353869df6", "sighting--7dd09d50-fdf2-4645-978d-3cb87c14606c", "sighting--7ba6db1a-dddc-473f-aac9-cba031b01539", "sighting--07da4f0b-f813-4279-9fc8-eb25ea9bb065", "sighting--1cac54ac-da35-4cab-82cb-9bd7834b0528", "sighting--86efbbeb-4e75-479b-a25c-82ebf9b6e296", "sighting--060cb8a2-2a35-48b3-985a-99a797e7ae52", "sighting--f078a3b9-8025-423d-b916-2b90fe4037d6", "sighting--a3a1eac4-9853-481a-b682-208510afa64e", "sighting--f740f6a8-57e1-4a07-b338-dc07477b5215", "sighting--e83a083e-9a2e-46e9-8813-07c8ec7f0860", "sighting--7875305c-478d-471b-a95b-fc2f46472198", "sighting--3dcedb68-235e-4e52-89b5-4574f1567334", "sighting--cc76bb80-3685-4918-a8b0-835228604ab5", "sighting--87861bb7-2150-4263-9b06-d94897077744", "sighting--aa45ed32-ba66-42ae-82d0-3ef8cd50ded9", "sighting--be5d26bc-3625-41f6-ba6f-a6d55a2e8408", "sighting--a742cec3-07a6-43e0-9ccd-02f01cf9605a", "sighting--e346aaeb-975e-4b03-9971-f827df0cba54", "sighting--6c1585b0-3aba-49ae-a8b7-22af8b10fefe", "sighting--a0532c3d-dccb-43d9-9ba9-ec9a7391e8f0", "sighting--6b1d6ea8-26c4-4ccd-ac10-6ccf3c1721d3", "sighting--12eab44a-9d4a-4600-8138-8867beb6602b", "sighting--b3d4fd9a-f9a8-4237-b6ff-ca6cd7ce472a", "sighting--d61a5f5b-63b6-453f-8165-f99a764afdf8", "sighting--5d6889b6-1c70-48ce-9b92-7f0cd7a33301", "sighting--36100a18-a252-4f45-88c5-242151b06c34", "sighting--f6e98519-fb98-4e62-b82f-c7d56bff92cc", "sighting--91b5bb21-729b-4ac5-8107-6f2ad5ac816d", "sighting--068202ab-429e-4d48-be81-8bbd95348592", "sighting--a0078ebd-364f-462c-bc37-fc1935e86a77", "sighting--60363410-bd13-4e14-973a-bccbaaef699c", "sighting--28da2883-2adf-4976-9c5e-f6bd654d6529", "sighting--4a37399c-ac21-47cf-89c8-12133d5c3fcb", "sighting--b5b06b86-0fb8-4bb5-a02a-da7e1eeeaeda", "sighting--1040a5cc-867d-4586-a456-ca6c22b547e8", "sighting--79a64550-a6fa-4d00-ac91-25f8376189f2", "sighting--a1211076-f4c6-4534-b142-7589adc2ef2f", "sighting--ce420d5c-0cc1-4097-a373-f0d736bd7f8c", "sighting--307c56e2-06d4-4031-978f-ebc1c816ea6c", "sighting--ca836d00-c12d-47f3-abfe-76f3db89b11d", "sighting--0f4a0e3c-ad94-4e95-9118-aba3924650a0", "sighting--f304c9ec-397b-454b-862f-1e466ae8e339", "sighting--588cd9cc-5db3-4565-a7e4-a2f79660d9c4", "sighting--e63d48d8-a10a-4bc6-a1a0-5049aa37d602", "sighting--ba304e3a-ce66-4a5d-8473-050893fb3f0f", "sighting--3ea6c576-a91d-4ee8-8672-775d736b11e6", "sighting--ee422dae-b41a-4adb-92bd-29adbd9f10c9", "sighting--eb626076-1a0c-41b5-a4f4-1990add7eada", "sighting--8b666552-ab2a-4a29-9b96-a423e9b37f91", "sighting--f9a6c0be-7908-4b48-97ac-1f9328d00aee", "sighting--4f188e11-ecbf-4c68-be78-e0caeec32018", "sighting--39a004ad-2b21-4ad1-9b88-d1ec12b3afc5", "sighting--f639bacd-de80-4d92-98d7-afc8dd011bf9", "sighting--9e01e15b-1daf-445b-b8f0-78a60096412c", "sighting--f1582066-b817-4895-88ca-126332b2b36f", "sighting--e4e6d18b-283d-49ab-a287-bf562e740bce", "sighting--7b9c6c49-4c0a-471b-a9eb-9066ba1cb137", "sighting--61fc29dc-0d0e-492e-8b72-e1f2e9290dce", "sighting--074da990-6669-4ed2-95bb-a6b1cad37367", "sighting--7c2edf50-e5ab-4b76-baef-e20dc89beb58", "sighting--98a4c2fd-8f9b-42f4-9c3c-bb6981f8eb01", "sighting--ff7e14dc-b8f1-405e-abde-4a3adbfd7fc0", "sighting--da58cd83-e2e5-4a11-b8c6-919310732ecd", "sighting--9a47c81c-c221-4097-bc5c-481bd329fe89", "sighting--04ac09a0-c143-4015-9882-2d53720d0c42", "sighting--9d5ba01f-2aff-4a42-9e9d-5c5a6696bb24", "sighting--d565a621-89d5-46b2-93f6-7668dcd61b43", "sighting--552068bc-10bc-4345-aa07-4f06a9631b44", "sighting--b5541189-1640-481f-ae26-12ef60adb40c", "sighting--b9c4e9eb-6b27-40b5-9306-fb174d1fee34", "sighting--7d71fb89-6f65-4bfe-86a4-4c3381faf52d", "sighting--c5468e00-57ac-4b57-9c36-668f39a67efe", "sighting--a597df29-a272-42d1-ad45-97d4b2eb9646", "sighting--f563d571-c6ce-4009-b0cb-58851ade2264", "sighting--b60b4966-39f7-49eb-a62f-1aa514dfdf5f", "sighting--53b61ddf-a4b8-4d4f-a194-35895b5caa5f", "sighting--28f5f802-e2bf-4ccc-b779-a7d14f48e5c4", "sighting--ac0d9552-15d8-45e8-abf5-2ec896f79e06", "sighting--2a6365d4-c1b6-4063-937e-704b17052fbf", "sighting--7439f077-1319-4b3e-b85d-965405cf7153", "sighting--861e139c-32c3-463f-b099-01adb9daeaf0", "sighting--8b4919d8-b196-4518-a7e1-0591cb925fcd", "sighting--6917e304-3b26-4dee-8f4c-3681f1529dac", "sighting--714a4a24-65a6-44bb-8d59-b4d59ab0fab0", "sighting--d377a679-7443-4844-952c-584d62b5cb6c", "sighting--37d00c5b-d1b8-4423-ade1-475244b099ce", "sighting--d642c671-bb5d-4725-8f38-72661f2b3a68", "sighting--9fffddcc-7935-4fa4-b1d7-021f07938bd9", "sighting--2f8ba3ee-d873-4afa-b973-56580dd9dcea", "sighting--5a9980ec-aba0-4a31-a4e3-20fe4d7ea708", "sighting--c21410aa-2154-43b5-b538-8e798db46658", "sighting--aad31f09-44f8-4b5b-aaa4-619b74c87433", "sighting--09f129fe-3d3d-4e7c-9009-480278fc8075", "sighting--ea2ff488-c201-4536-a3a9-fb2d784eb6d4", "sighting--150a0410-6b00-4339-b5d6-d5c050499a4f", "sighting--05834685-162d-4abd-bf4d-104e90f319f3", "sighting--810720ec-f31c-4932-badb-b3f9f98d87ef", "sighting--35219e59-c8c7-4668-8977-009faf4128a7", "sighting--988c133d-96b3-4a1c-bf3c-ff8c72f57c41", "sighting--2c3f2863-3ddf-4acc-8d93-f08f10166c3b", "sighting--209af64a-5d87-4d23-8ba0-cd004cb419cd", "sighting--9cd998af-fc90-4f76-be4e-b107c69dab96", "sighting--96739157-3fa6-4690-bc68-8cead98128dd", "sighting--b7b0f291-df07-495e-838a-1520ac90d67e", "sighting--d7ab3f95-6b1d-4a6c-a6cb-aa463f827696", "sighting--f2270839-f9ef-4a99-a4d3-28f68dceaeb1", "sighting--f3cb9752-f7b1-42dd-a5b4-ea521c331967", "sighting--92947cb8-55ae-4bae-a308-eedb671bcd93", "sighting--14a2717b-a49f-44da-89f3-9c4488e0b13e", "sighting--054d01a1-aa4a-4a1c-9f17-7aabc9edfd20", "sighting--67ea52ad-1e7c-4eb0-87e0-f2a6bcf3f63e", "sighting--466a6ba8-f939-471e-9d84-ad16cd83083e", "sighting--ecab1995-6dab-4d5d-ae3f-3f1a4bc8f8c0", "sighting--bb13ba80-6cac-49b9-af88-d4810a6a8848", "sighting--1f6a4d7a-b890-4cb9-b29e-d1ed7e9e12c7", "sighting--02a54153-891f-4d9e-8316-369874c25e62", "sighting--62118279-46ae-4231-a9da-9c82b21420cf", "sighting--88f7e774-1f84-4e51-8a7f-8e27fe3904d2", "sighting--baedaea2-f827-41fa-a5e4-9cd1fffe8443", "sighting--740a0bcd-3d73-462e-9365-dcb85baa1233", "sighting--4fef7efd-f390-4c26-9fc8-4317a9b42afa", "sighting--db13e01f-314d-4610-9f41-bd861090cd4f", "sighting--388f8115-dde4-4ed8-8f95-fd526ec56e0c", "sighting--5de143e7-950d-473b-86f6-d359d8c3a0ab", "sighting--b1f4c7d8-5298-4897-8e91-6e792743c85d", "sighting--0df230a9-bd08-4f68-8dbd-9509c0fad973", "sighting--94bf9983-ad58-498f-b7b7-d0b6a75e98dd", "sighting--73b87b10-de4c-4042-bd86-ef8e2e87afa2", "sighting--fa8ed3a1-57f6-4eae-a9d3-dc22b2eae02b", "sighting--49907a56-feed-4df0-8a1d-c87a81a50078", "sighting--5b08b8b6-77de-4ded-8ea6-0b9d8873807d", "sighting--5ca845c6-8032-4503-af99-71ac55534f9a", "sighting--6bd695de-41dd-4d6a-9f15-e5ab73eb8c56", "sighting--f6546cb6-70e8-4116-b8c4-3258f71545c5", "sighting--aa3d08a6-e6d8-42e7-b16e-b2caea7416d4", "sighting--d6d5891a-191a-4e58-9afb-2ed8235b355b", "sighting--c1dc5d63-12f8-4ef4-9951-689bd6eecfe2", "sighting--cb996b67-4f31-4220-bc2a-03d2b3a68239", "sighting--eb6eb3e8-96d8-4e79-8ed1-828a686af574", "sighting--ee028255-62e3-4fc1-a39d-ff07c5b7bcea", "sighting--71d3048d-8db9-4993-80a3-5c30f5771306", "sighting--76a67e69-80e2-46ec-aed0-2331fe32863c", "sighting--4bf3d47e-9e79-4fd0-9fe4-7aa07dcb1ced", "sighting--45bf0488-7bfd-4504-9b7d-38375c3e0752", "sighting--4bbbd740-b142-48f2-af9a-44ec5123bd8c", "sighting--78c26149-d620-4a74-b609-239291b447be", "sighting--097d0626-e339-481d-b40f-288dc89e8243", "sighting--f5611c38-8e13-439a-9a38-8173d20421c0", "sighting--8c5dd3df-bbea-4758-9b64-00aa776e9883", "sighting--136e848b-27b7-45ef-ac61-2119b6a8a798", "sighting--f48b490e-4bf7-4195-8afc-db31fc2c5c56", "sighting--7ec4cb5e-35fb-4f6d-8311-53377d309332", "sighting--18d8c794-5d9a-4c40-8f4e-a3f65039913a", "sighting--8dfb6685-f6de-4e9c-b6b5-2d723e768a09", "sighting--fcfff6de-0ccf-4a78-a713-ac6a8b129e2d", "sighting--cd2bf4e0-882a-4f64-94d0-1f452f991717", "sighting--de73406f-2cbc-4a1b-b0c1-46ebcfa12bee", "sighting--128b1a88-0dd7-4b99-aa64-a5b03e77dfc2", "sighting--8e630d8c-6d92-4c07-9c3d-15a9ead44094", "sighting--d699f14e-f07c-4c33-9394-13cf3bb3602a", "sighting--d32b4c83-48e2-4e62-be79-abc9d5c8132f", "sighting--d338d5ca-d528-4316-9e09-e4ef134c8e90", "sighting--5c978d64-a8fa-44bb-86bd-ec04baf063cf", "sighting--3702c85c-10b8-45d7-b41c-d91ade5f0094", "sighting--15b2991d-0acd-4047-893a-242ca47fe3e3", "sighting--3b2e6d3a-e887-4232-b50a-2814ee419285", "sighting--b3c084cd-a53c-46bb-b39e-b7ce7f52ffb2", "sighting--27ded3d2-f94f-42e6-aa87-7c79cdd4e008", "sighting--c024f383-93d5-4c90-a986-22e55448abca", "sighting--66f1d9a9-2d6d-41d9-972b-03aaf93ae4e0", "sighting--6ff196d9-f0bb-4918-a8dd-f069fb81ca40", "sighting--9a6773fd-b2f8-4d56-9c4d-8cdc3d1dfaa8", "sighting--9bd1621d-1b9a-4211-8ff8-ddf449b35962", "sighting--9debfc6c-9266-44bc-86b8-86fe9374ee51", "sighting--33bb9542-0267-4b38-a60f-990fe57cbd82", "sighting--8d2fc61e-2fc0-4241-ab44-e627652d5404", "sighting--38548352-d4d9-4d6f-8111-8967e123111d", "sighting--97216f57-1297-4c9c-8794-3544ca53a61d", "sighting--61916f92-6d7d-4074-94e6-78130dee89a1", "sighting--f644191e-ffb1-4d6c-a76f-827e4ddf27be", "sighting--f699adcd-9998-4db0-b178-f9f415b76ef4", "sighting--1096cf5d-e790-4fa5-ac1e-c77217a7e9a6", "sighting--54985f99-c9b5-4513-9fc4-4f37f6718f48", "sighting--128afcee-6994-4cd7-93b3-78f766026977", "sighting--996de285-c589-43cc-91e1-4f40e2f501c5", "sighting--fbed3892-b70e-41df-9502-f83be5e52fca", "sighting--fd5f27e3-614f-46eb-9257-42641198d79c", "sighting--a58d3bdc-e8c5-45b6-87be-f2c64fa7d5de", "sighting--5d30ba13-bcb0-4eab-96b0-c914ebbda0e4", "sighting--d315ed5e-01ec-43f2-8cc2-d8a0daf11b45", "sighting--88e112ef-3308-4c3c-a56c-374b5ef5374d", "sighting--2f04c8eb-c59d-4209-8e7d-7465800d7996", "sighting--2acc370f-6947-4444-9a5e-12288a5051e8", "sighting--f9167ca5-357e-45b8-8eea-aa94d720e708", "sighting--72be77c1-7f3b-4c6d-8e58-ceed60ce03fb", "sighting--5b557a9b-bc8f-490e-81a4-f3a06846cbe5", "sighting--3a303574-6a87-4d74-90cf-00e1f3dae0dc", "sighting--c45d1dc8-3132-4fe1-88d4-b421c07ed725", "sighting--30e55d84-0ed3-4bf8-b944-17856f27f9bd", "sighting--2115f9b5-e62e-4ec9-9168-e4d8e28e8971", "sighting--64a24582-0d16-4cd9-97a8-25abaab8e89e", "sighting--c594820f-db61-43d8-a9ab-7e239a981b53", "sighting--eff070dd-6258-4c7e-b06a-e72704c6cf5a", "sighting--c33889bb-febe-448a-890e-031dee0f1cfc", "sighting--73dce496-04b4-42cd-95f2-717edf6b54a7", "sighting--8750da93-dfbf-4c5e-ab51-0ffdfb99e08c", "sighting--030633f4-51d0-4c2e-aa8f-882b9e646785", "sighting--9c8dc24a-7232-41ee-a9e8-063c80bba79c", "sighting--f9edcd3a-0132-47e8-9afd-f666dc6e8509", "sighting--820cb0bc-8651-4fef-a71a-77dd73bfb3a5", "sighting--4ad297f8-8e3c-4c13-822a-0966d4091156", "sighting--662fefad-5b99-4419-ae75-e29b045fe650", "sighting--febab398-b6ea-40a7-8b10-8cbb4c95b58a", "sighting--20b078d3-2e86-4f0f-86c6-8b9f4158abf3", "sighting--e3232abc-d3a3-4cbc-a21f-fcb67c4ee285", "sighting--14f11108-6b4e-4493-bcb6-bdc8d40bb5ff", "sighting--1fde4e04-37da-4b7a-93d5-fab5f0c64ada", "sighting--ad0ea70c-1c59-4cad-b4ca-414e51daf56e", "sighting--ee866c59-198f-407a-ba86-dadc40683d4a", "sighting--5f0159a1-3cc7-4868-aea2-dfda42a69298", "sighting--17fbcd3a-185b-4559-ab12-2f75e0dd4157", "sighting--78d9e489-cd1a-427b-ba99-99798e4124f3", "sighting--f3bc299a-da96-48ed-ab21-db5ef43bf8e6", "sighting--1fb6a8a0-f568-41cc-8c69-ed7872ab7004", "sighting--1e73e069-daae-4934-b259-d892ba9c7a72", "sighting--9286f770-62bc-4684-a729-95ebd8491b07", "sighting--e2ab4270-39f3-4779-9dd9-c4c6e8970d8d", "sighting--33d80add-dc9f-4f07-992f-8c181390c381", "sighting--87c81bb8-3541-48d0-93f7-11ca071b1c3a", "sighting--043ea847-55db-453a-9ddc-2ff5dda81141", "sighting--f6f578c1-70d4-4e69-b007-32fe99484be8", "sighting--e4d94bbf-2892-44ab-9369-31f369815e1c", "sighting--6d853544-4c16-4fd1-9b53-631e1b261ac6", "sighting--36e866af-55f1-4fc4-84e8-d2bf41d9dd23", "sighting--ae2afe36-a801-40ec-8c6f-77c6f9288583", "sighting--08cc5d96-5f13-4abb-bb0a-9f847b1245bb", "sighting--540c7a59-0103-4439-9b34-9cab53f85042", "sighting--54e0cd67-e40c-4839-80b8-0b2f293f5bb0", "sighting--64407dc3-59dd-4be2-b4d4-b1682d3470dd", "sighting--c2ee4503-7142-4d60-96ed-f7ccfe1c11c2", "sighting--1428ee82-773f-411e-a870-ad1aa0d38684", "sighting--27bae499-082a-4c8e-ac56-4a851d300363", "sighting--c0e0ed8e-213d-41cc-9612-a33c0064aac0", "sighting--3e722c1f-1c57-4a0d-9b66-8cd3613d798d", "sighting--01130b8d-e25b-4b4b-a49c-b7917b0e5b9f", "sighting--12615d1f-f16f-4d3d-b6a8-64bc89e95b42", "sighting--c81c56d2-c9c9-47e5-a2cb-47d1f90e86d3", "sighting--0fda9f93-cf6c-4a7f-974a-47f9d46af65a", "sighting--954e7bfa-6b5b-478b-826a-796979034304", "sighting--44c36986-ad63-4730-a1a4-d25404fb0e55", "sighting--0c392b04-e0bc-43e2-a11c-eef00cc84758", "sighting--2f9aa53b-f338-4da5-aa7d-97cca4eaec76", "sighting--ca09625d-c321-4b82-a31c-c50ddc076cab", "sighting--d7022cb3-8f8f-4bc5-8e3a-27a512d43f0e", "sighting--c417b835-828e-47d2-a406-049d466a27a8", "sighting--f35ebee1-b16a-40cf-8fe3-69dd1860b2f4", "sighting--65ed89b9-afdd-4d0c-b2bd-bd3d8c512c38", "sighting--c0b28930-d6fd-42f4-a092-6a4aff71d493", "sighting--6f094cd0-6655-4f7b-a894-dacc026131c8", "sighting--01e5e645-8011-4387-825f-beb3ea0f5e5f", "sighting--d52b78e9-87ba-406e-8cd7-4f172101a28a", "sighting--85f64539-8f29-4b06-b8f4-84d84e8dd75b", "sighting--0cd07833-6fab-489d-893d-3d68f9d3efc6", "sighting--58b36550-5c26-41ee-83cb-3b4c23a0c6c1", "sighting--009ae68f-e69c-4eac-a0db-b3799df32d2d", "sighting--c8384419-fbc5-4647-ad64-3e2f4860f6c9", "sighting--5cb32c16-7490-4bc5-b95e-dc031fa935a6", "sighting--962fb5b0-79f8-4ac0-98c9-5d040b3c58a4", "sighting--b198caec-f5f8-4b36-a480-023cdee3b691", "sighting--591cd756-87fd-4258-85dc-087cb4a432fc", "sighting--5e849299-fbc7-4424-a68d-cb03ec90edf4", "sighting--f277cf18-0cdc-48e9-a19f-9bb4aa38bc02", "sighting--a5f5b1bc-6e67-4521-b2f1-de5cf0924032", "sighting--f92bab43-71cd-4791-a0e6-ac881c7747ca", "sighting--998ec084-3b82-4059-9704-1f8ad054ee50", "sighting--dcd62c96-9b48-4051-9ce9-f2e22a9634c2", "sighting--9722591e-0141-48af-950b-0fea57d990dc", "sighting--b04560ba-cb19-4cc0-bf14-8d8c886bbb88", "sighting--88b44bdd-4404-4baf-b1a9-5e1596a7ea6c", "sighting--c7ad07a0-3a11-4260-9611-5a411ff82e45", "sighting--3dc46757-683c-40ac-a250-56b881f516f1", "sighting--84799dc5-4364-4462-8aaf-b8a01214ed05", "sighting--6fcde2af-6176-44d4-96d1-b5fcd582eb7e", "sighting--8e39cc32-b25e-4bdf-969c-495a9790283a", "sighting--fd9e6e2c-5640-402d-a061-5bf0eb12fc12", "sighting--51095bfd-9981-48b1-bb68-9e42150df770", "sighting--0c026b13-6f87-403a-ae2c-0231c398d98c", "sighting--8351fccf-edba-41f3-b890-f565b0dedaba", "sighting--0b7fb8e1-7137-429e-ac91-824308b9518d", "sighting--b66e03cf-8807-42dd-a0cb-f073bcf2fba8", "sighting--6b5526c3-5c5e-4985-b9df-4101e6e7509e", "sighting--fef56cce-8fb6-4386-9ff5-4411226c72b2", "sighting--b51770c0-dbfc-44b1-ac63-c680bbef6c44", "sighting--57d36cdd-a1b2-4432-92dc-0d11880a33f4", "sighting--4c933fcd-53b2-452a-a63d-084f6e4f8513", "sighting--bc62f568-71d1-4e13-97d7-5a38f7ee26a0", "sighting--1a85b284-4259-4bbf-a8df-992a11d691ce", "sighting--bb9bda1e-bda7-4867-8162-fe6030f31dce", "sighting--6ebc2664-27bd-475e-875a-603aab287b5e", "sighting--b4963ff0-328f-4030-92e0-e194a2285ac9", "sighting--d207cfa1-0f0c-49eb-9cb6-6844241b4b70", "sighting--55b5e3e2-2f73-4b2d-970c-0842093b82ae", "sighting--8798a493-1f19-4025-ae93-13da3ef676c1", "sighting--dd92a9fc-6b1a-4ada-94fd-91af7ec96977", "sighting--5c606b2c-2e44-4c83-a3ad-8e42bb274ca1", "sighting--2b378454-d71e-4f29-bb59-22bdd720c913", "sighting--14b62fe0-d1e3-4bb3-ba5f-a742c757a721", "sighting--b6699484-2ff2-40c2-aa3b-9533b2b9de20", "sighting--1847ae36-ca84-4060-9b5a-a517a85e96d1", "sighting--3bf34f94-fbba-4859-a872-554100662673", "sighting--ea665521-9932-42e0-896d-e67a5e852e79", "sighting--3056a4e8-dede-4488-85b5-406966a1340d", "sighting--5c472709-d381-43ce-8f6b-558960566b58", "sighting--35477937-d6b8-401c-b4b8-a4e1c61dd985", "sighting--5575fc3d-b5ad-4511-87da-b144410be7f2", "sighting--d55fd356-2e7e-46ef-b8e9-e5eca741edc0", "sighting--84061443-1f13-4d29-814a-d30586cddb5e", "sighting--921c5733-08b7-453a-bac3-a5cd381d2ae3", "sighting--230cbbd7-1058-4fef-a7ab-a5400c1bf41f", "sighting--214ab7fc-4ecd-4ca8-a24f-8ac63e194d5d", "sighting--368bbb07-f9d3-4d94-8938-1d89f01f93bb", "sighting--056d835b-3119-4730-a486-9c48b25923ac", "sighting--dd749cbb-3aac-46ae-9637-aec4dbff5920", "sighting--14b2ad1c-79bf-4627-8ecc-45d0e1f40764", "sighting--7ff05402-b265-49f3-a409-0f6b1d5e04bd", "sighting--09d826c4-f163-4a58-815b-0fe8b21e9288", "sighting--69efdf44-622c-4697-87b0-b9bc48979e28", "sighting--9906a960-811b-4cb0-8412-4e962c93a285", "sighting--b95e5916-4c69-40b8-a90c-b67d070fdb91", "sighting--433309ac-301f-4ce6-82d0-438dec4bf573", "sighting--ff36b2ff-2017-4f42-aa80-68fab339c429", "sighting--ec8f30fe-aa13-4b8b-8598-85441af72174", "sighting--0b0df0bf-9f72-4528-b35e-44c0c8912219", "sighting--1c3dd5a4-5f0b-48fb-93f9-bb018e15e748", "sighting--c662061b-185e-415f-a7b7-09ba7697e5ce", "sighting--ee248225-f7dc-4cb8-8a0c-55a90e25f13e", "sighting--2d1a1f38-702a-4dfc-b91a-3adb74881b2d", "sighting--7eb5841a-f2e4-4cb8-b727-1c5ae9d86b4b", "sighting--4e4d843a-3406-424d-b130-2a0c243205c8", "sighting--a217747e-38e7-4a80-84db-6a37e3217ce3", "sighting--4c1bc8ba-ea50-463f-adcb-a376840d0d6d", "sighting--0951fd57-b853-434f-b2af-90fa63baddc4", "sighting--8cdf922c-09c7-48ea-8a8e-6f53b770d8d9", "sighting--8c5e643f-9aac-4b1e-921d-0d31290cf982", "sighting--94a754a6-a024-4ac6-98e4-f375fd1fb19b", "sighting--26334ddf-2f9d-4801-a5a3-372f0195d01e", "sighting--fbdacdfc-02b6-44c5-b485-b82b36d726d3", "sighting--134a5cac-8148-4928-90c2-68cafd9bb849", "sighting--197bae08-0508-47c2-a6c5-82f49bcab058", "sighting--8f28b487-1b28-4a35-aff9-c44538a0d857", "sighting--a734d1f9-1635-40a9-8381-cdeb842649a1", "sighting--833d896f-c529-4f12-b763-c309afde7bc6", "sighting--eff49ffd-b1fe-447b-b650-8b52ea90c854", "sighting--66342d1b-4e63-4aa9-a3d4-0d9fc1aa6f2a", "sighting--1ed3ad88-9086-48f6-af0d-be8504ad0d04", "sighting--b2eb1b23-7c59-439a-8a43-098e88af33e3", "sighting--8ac4fe99-80bf-4264-a146-08576892d31d", "sighting--049cb091-98ba-4379-8360-119c43674512", "sighting--1922975b-a572-4917-8986-3ad3fe351342", "sighting--8eb43520-2866-4f89-bc02-65113393c665", "sighting--560d6461-2079-450c-a3a9-feca59bbfd1b", "sighting--86eb1ff2-12ae-4296-b3c1-f4f11a4b1e38", "sighting--97ea53f8-5d68-4862-99bd-892d8f6afa9f", "sighting--9148d422-aa75-4917-8fe3-df84e4e9910c", "sighting--9bc94319-4691-43af-a7b5-134f487d1b30", "sighting--48a91ed5-6936-40e5-94f9-71341ceb6e38", "sighting--8245d11f-4574-4f70-84ad-7f2952681e51", "sighting--e3221403-4197-4a85-a92a-8811740fc4c1", "sighting--b17075e3-93c7-41b0-a85a-91bb0acebfd2", "sighting--8a4e17b3-2472-4fec-ad15-5605a11e4f94", "sighting--98d63695-1840-4703-99ee-de33585e673c", "sighting--4cdb53eb-bed1-4bab-8cbd-32f2eb6eadc5", "sighting--b8b549c9-2385-4588-8c51-0e3d3f52642d", "sighting--2b9604b4-b94c-47b3-9cbc-242bc715367c", "sighting--b5eb3540-56ec-426e-a189-c65c3c5c9c69", "sighting--f31a3002-7e64-468f-84ce-c586b76e621f", "sighting--e043ac37-84c5-4b93-8048-0ab4cd45f44c", "sighting--97e3e504-ef7c-485b-af8b-434969cf30b8", "sighting--cdd2ed48-b137-4afe-ab59-14dc830747e0", "sighting--ff92651c-602e-47c7-a93d-fa18b3df24b0", "sighting--13fab1b5-8b30-41ec-81ff-70073476643b", "sighting--34b16fd5-6037-4216-9994-63c3fe80cc2c", "sighting--3d7154d5-7ad3-49af-826c-cd2951944ab2", "sighting--9ab38fba-56bf-47dd-b043-e57805dba5e6", "sighting--8a0e7d2c-846b-4927-8e37-712cdc7d61d5", "sighting--94276f51-c6f4-4118-bd08-77a95b53adbb", "sighting--7f3fa544-3928-404a-8613-1ad5c5909353", "sighting--650dcb07-f9db-4480-976c-b5905fa943d4", "sighting--7e65c92b-b788-4b44-8624-d720011acb67", "sighting--7b24eec9-54dc-49bc-8976-e4e55b7c628d", "sighting--e2579108-60dc-4faa-817f-fbeb9a57fba3", "sighting--d9b9da77-4c40-47ac-b57a-cf2cbbb0e3b0", "sighting--6561f587-7f6e-4ab1-abe9-83ede2a2235b", "sighting--8d318db0-55d6-4158-88a3-8e9456473bcf", "sighting--626d138b-710d-4515-92f8-8ff04f57793c", "sighting--f7ab1e39-6e8d-4bbc-aa21-05a29984a227", "sighting--562fd644-8a62-4c65-bc7d-3dc60f9014e2", "sighting--93d5204e-7621-4b54-9e3c-5d38fb93f3b4", "sighting--3c71113a-570a-4f48-889a-8a9904258d0f", "sighting--4eaf71e6-6b8b-4a56-a168-4028ce523cca", "sighting--9fd7d1ac-dee6-4eb4-90a6-33e00656a8aa", "sighting--36ca4af7-a423-46a5-8b00-6f90d81ab925", "sighting--15310e95-0ab5-41d6-8f85-b655ae8881fe", "sighting--cf7ebbb7-cad7-42df-9707-e16fd871c961", "sighting--c8a91e28-b259-4e11-962a-8f38bc0a3fe8", "sighting--dcebda9c-4d84-454e-9b84-4eea4d8fdb14", "sighting--d7cf9d4d-e09f-46a4-998d-724c4b3f0d02", "sighting--f8aafb3e-78e1-47f3-92f0-18006397ad21", "sighting--41cd5981-0e4a-43a6-815b-69847c24913f", "sighting--ddfc8923-6f82-468f-83d9-2ffa591a16b1", "sighting--92922e74-80ca-48a2-ad8d-402276b66f81", "sighting--c7e0516d-c1f0-455f-ad4a-3047d361dc54", "sighting--5890e698-8cbc-4f50-9163-92c7f7ce24a3", "sighting--90684030-9ba5-483c-ae99-c5920a6e3eab", "sighting--ac469b9a-c6ba-4ef9-a27f-fb641cf41b9a", "sighting--34e5379f-2c87-445b-b492-e456e9848c83", "sighting--31b2566a-f543-46b2-a887-b647e3582d1a", "sighting--868ba940-5f9d-44d3-9566-596c9d17f35c", "sighting--622f2552-d3cf-4236-bbad-cc42dbe436a6", "sighting--455ceed3-e03b-4253-8493-92440adbf974", "sighting--720d6449-b8aa-460f-b12f-54a8422066ea", "sighting--d2d6f750-a280-4f2c-b893-7703eae97207", "sighting--60e4d181-f89f-4dc4-b1ef-0d9ec4f3287c", "sighting--04c23e19-2bbe-4cc2-94d1-c231e8da42c2", "sighting--46b10c96-1454-491f-8701-fcdb5d260c62", "sighting--74c3b0c6-d6ca-44b5-aede-fc5c52efc461", "sighting--dc3b6e0a-6421-481b-bdef-108d57517628", "sighting--b129713d-d303-46c7-8822-9ba79ccc8407", "sighting--ce9663eb-8b53-4fff-9a2a-d7f074fff742", "sighting--361eae90-9d1e-445d-87d0-49f6be66f29b", "sighting--bfde036e-cf2a-45e5-b3c6-fa50ae02c08e", "sighting--fa730e8d-7c0d-4809-b317-bfebccd5a46c", "sighting--3e36bd71-a9d8-4473-a940-6379c7fe7777", "sighting--831147e6-4dba-47d6-aad6-675fdbeb9448", "sighting--824ec39a-055a-42cd-9208-e1935860e8fd", "sighting--38e9470d-f270-4eaa-9c11-6181dbb728e5", "sighting--c741b6e6-48a1-4f2f-b8e0-037f63a37fb4", "sighting--cc2dbd02-55a0-4588-892a-9f75f2b96644", "sighting--37d9d3dd-8047-421b-af85-f9554cbd0d72", "sighting--2d93a3bc-45bb-4832-9214-753889a701a2", "sighting--9daf18d8-1c99-47e4-904f-44a817d649a9", "sighting--c2c55449-62ba-490e-9cc8-14719c76fc48", "sighting--138dd88b-e7aa-4b75-8637-61b9322a6f8f", "sighting--bf5bf565-56c0-4306-808b-e9e7de526cb8", "sighting--792647eb-4c28-49df-92d4-c4c7e7b52629", "sighting--1dac8980-6c61-442b-b64a-946af590324a", "sighting--64f33f0d-0b04-4ad2-a2b5-f1830ee787f5", "sighting--977dc2d5-a1d2-419b-9d7b-bba30f779281", "sighting--12394c6c-a957-4fe7-89fb-1630193769bf", "sighting--91c6d614-26e0-43ae-a1d8-a7fc46672916", "sighting--172120db-4793-483f-9177-50c0e667bfde", "sighting--2f4ac4f5-521f-47fb-bfbe-7ac5018eb1e4", "sighting--45cbbca3-1e52-4487-affc-34b2efcde0ed", "sighting--78abb8ee-3692-4dc1-8975-e5b3345dbe3a", "sighting--166cd6cf-8b85-4fa9-b9b2-e307fcb77ae1", "sighting--5e904679-8e04-440a-825a-679d92074052", "sighting--0fef33f6-da14-4fbb-95be-4b335e391acd", "sighting--39f93076-6381-4128-a9ce-984e6f6a239b", "sighting--53027bae-76bb-49e6-b590-ddfb565dd413", "sighting--bcae25af-8505-416b-8b75-fe33d90e2f2e", "sighting--e91ec928-4f83-44f0-9364-d92db351f341", "sighting--6618a3dc-072a-43a3-9778-ceba7028d799", "sighting--b4fcf61f-88a8-4433-bd69-d72f8833a186", "sighting--d105e4a5-10c1-4d91-959f-41efd39d5ef5", "sighting--e2c072aa-172b-43ea-a8c8-6ec78e0ac7e1", "sighting--1844e34d-1df5-4de9-8f36-5f4fe2cb2137", "sighting--2625e79b-2b3c-4189-904c-ad319604c023", "sighting--2624361d-e6be-4314-a8fc-5975fc2dc472", "sighting--63c8778e-0026-424a-a818-6591126f429c", "sighting--c3f1d46a-266c-4842-9548-3de68c3809d2", "sighting--6bcab55c-4081-42d3-8f20-8481e8e3fed9", "sighting--6068f0c5-b4d6-4edf-8e28-b9636921456e", "sighting--07dce1cc-6280-4fee-a125-585e6b2014e1", "sighting--a352173c-a598-42b8-9f4c-c4a3a92efb59", "sighting--ab0a83a0-bc29-4c11-bb62-f872ec0afcc3", "sighting--62c87476-472d-438c-b89f-0026c5c93e7c", "sighting--32c48244-3e7c-46d3-b1e9-722ce7b4e371", "sighting--fc7a043d-2e7f-4f40-a586-c718a427d1f8", "sighting--68b9544b-e364-47af-b011-d279b76fb26f", "sighting--cf7fa45c-4613-4dde-99d1-75d8173c0200", "sighting--e15e2943-8f20-4f65-b5cf-6cd692e4fdb5", "sighting--5108bec8-1c4c-4c96-88e9-f08daa8602a7", "sighting--556ad2a1-ee25-4586-bab8-b34a4ca6fa21", "sighting--d936dadd-cf3f-4bd9-ab3f-40df99367010", "sighting--59d8cfb2-225a-4c6e-bd5a-925e0956e829", "sighting--9dd3e9d7-24a6-4a49-8571-4e13a96671c1", "sighting--55b0e065-96dc-48c9-90c8-84918e68203c", "sighting--fddf163a-e99e-47f7-9290-4ca6e6c2cd07", "sighting--866cef71-ad33-46a5-b3d3-0ae8c221b181", "sighting--59880ba1-ed51-4382-a7aa-bb6e48388467", "sighting--535bc680-8bf4-479e-998b-537b252b0253", "sighting--55d9a2d5-1ecf-4e01-bf32-f1f44bf47c2a", "sighting--156ce7fb-cacd-474e-947a-0ee69c3aa1b3", "sighting--feb64e9f-912a-4078-8637-49b5a5fe786d", "sighting--eaab4e4d-07cf-4aee-9b26-1be10f2f0cf6", "sighting--d57323f1-a06a-40da-b963-a7dc0bbe8cf4", "sighting--e083c8fa-644a-44e7-b6fa-2b8971eff996", "sighting--df7ed067-807b-41ce-84be-f2a1679d71c1", "sighting--080c4e23-58c4-42e1-843c-a93cc1057c3e", "sighting--4c2dd1a0-84e8-4b36-92ea-f14aa061d62f", "sighting--a0889b6e-4e6b-4491-94cb-1a9033b37e7f", "sighting--125f0dd1-d5de-4391-b534-66789c964b18", "sighting--5fabad12-9026-44ba-b484-96bbd5aea293", "sighting--4c2ce16e-70fe-46f2-b578-54f782afe279", "sighting--c10228f2-0d89-4fff-8891-8bb3eec5353e", "sighting--eabcd60d-ca51-46ad-a28e-be5ab187d67b", "sighting--42216206-c835-4efb-bc2b-5f4bdeb7a28c", "sighting--9de3f1ce-7e1a-4fb3-bcf9-263d8b0fff2b", "sighting--098443eb-eaaf-407c-a121-a643d3de4fcb", "sighting--1f718223-784f-4b5c-973c-82a0cd6f95c9", "sighting--542e7145-469e-4313-affe-c6ffaf381e53", "sighting--be676087-b42c-46ce-b5e0-818b5279f1ff", "sighting--bf3964c0-ab84-4353-bf05-70ead2fdec2f", "sighting--7f69adb5-3ab5-482a-b697-c112d79fb5bd", "sighting--d2a79304-4418-4d2a-a6e8-67d6a57e8a56", "sighting--8ccf5993-44ec-47c6-98d9-6147830a029c", "sighting--5eba9fea-8025-4551-badc-9351d44659e4", "sighting--f26fb6e8-6097-43a2-9803-4161a2b98950", "sighting--075e9d57-19ae-4588-938d-0336f042338d", "sighting--063f57a8-81bb-400e-9dce-99da8f69d819", "sighting--d82f1f61-ad39-42ec-ab2e-8d7b5d8099da", "sighting--d26f572a-0ab1-4599-ae4c-f8ed3b07e226", "sighting--c3b31124-2df1-4883-bd92-44033d5177db", "sighting--d1a9d373-c31f-4734-9d5f-5eeccfcb436b", "sighting--356f3c60-c454-4b2e-a403-3a9acd42332f", "sighting--ea456b93-61b3-4af3-8919-9642173dade1", "sighting--4bc6d289-6bcb-4d97-8255-4d0d70c43cc0", "sighting--56da1913-2943-4c38-87de-475009e9ebf1", "sighting--65fe0103-cdb1-41f7-907f-4c43a3b62519", "sighting--6a3b7287-9205-4e73-a1a8-8f175a08f1e8", "sighting--9d68528b-50b6-4dd7-8ea9-49e05ab91986", "sighting--7bed73fb-9e62-4a65-b06d-314edc440594", "sighting--ac1164bb-10b5-4572-890d-a1f006027f23", "sighting--b6a115fa-3868-4b9c-93e0-2cf0e69a5b89", "sighting--614b7802-ef74-4db4-873f-fd32e6757fae", "sighting--1e8bdd96-3862-4dd2-a37b-97ced36faf12", "sighting--9baf9c8b-39b1-43c6-825f-4de698eccfc9", "sighting--0e97a558-ea66-46d8-81a5-ae53e55adb6a", "sighting--fcc235ae-02c9-46c9-a53e-945212b57005", "sighting--665d05b0-1d15-4554-af3c-c234ef1b516a", "sighting--3bcde5f5-a945-44b0-8641-59e42680b57d", "sighting--dcbc504b-5386-445a-bb8f-7df908c10593", "sighting--a8a9168b-f7fb-460e-bb9d-d0367f136808", "sighting--cb7da0e8-5d88-40bf-8c57-bae7d0708970", "sighting--aaf1b7dd-9638-4558-94db-04aef71e66e6", "sighting--5284b828-62a2-497d-8691-18c3558e2760", "sighting--25934671-f115-4e7a-bf69-1dbf9a93f3ad", "sighting--40352e0a-4866-4a05-b8ba-9f5b3b85f577", "sighting--8626956d-396c-4a05-ac1b-c2577b7cd3c6", "sighting--6af5d8cc-3c7e-4461-b972-d129045df23d", "sighting--337eaa5a-2032-4c61-ad22-0fe41615db8e", "sighting--5b75fa8e-f41e-441c-b5bd-6df1b6a4853b", "sighting--d825408b-6fd8-4705-9ceb-c4de6e64e24f", "sighting--360d885a-5a44-4558-b781-ea7abc361c67", "sighting--93656390-c64d-47f8-90b4-01e648a01e63", "sighting--e8174dea-0aea-4ec8-bba7-f936c665f709", "sighting--f7969e98-e5de-4a89-9add-029ec1140d81", "sighting--d4dbad92-c66e-4c47-954c-53b048b48c30", "sighting--1b33287c-66be-48f4-b767-3ed801eaa89a", "sighting--39328971-abb7-4a6b-a062-619c66fc75f3", "sighting--266d0600-7580-4d56-865e-14479f17f8c8", "sighting--ff7d3c09-5c99-42e7-84b1-5d39e17add02", "sighting--962f3d26-f9c5-4344-8cf3-95721d302e58", "sighting--dc7a23f6-aa5f-4a43-8bfd-f942aecf3b8d", "sighting--6a41f446-5941-4202-aee3-7d5b33c5ebc1", "sighting--c18bc4e4-121f-4952-8c07-8242499bf964", "sighting--f68d5d4c-a413-499c-95e6-0eec62ca8ab3", "sighting--78257824-b75e-41c4-a288-4d4c563095ee", "sighting--52b03733-1d2a-48ef-97ad-fa25797d5542", "sighting--7888a74f-e7af-4a0b-8a16-00177ce96e5e", "sighting--daf0a0ac-2a4d-4051-9817-8e2cd49c2dd5", "sighting--12a9f0fe-4a41-429e-8191-0e6c9b17fa88", "sighting--c3215251-2351-403f-a869-2cd1957d98bb", "sighting--30e025ab-c702-431f-acde-4ac008d77a6d", "sighting--c71dce37-c128-4121-b2bc-52870c8cb234", "sighting--68d5b6ef-e321-4be6-942b-b830cccfda76", "sighting--0264aa28-209d-4330-9634-0765f07a3bdf", "sighting--b683bd7a-df7d-488d-97bf-d7c65bef66aa", "sighting--ecf51973-3934-467d-a029-8d71a49b79c9", "sighting--84018270-1a68-42c2-b41d-73839a19a620", "sighting--05d2af76-fafc-4ea4-84b8-e38a92806e83", "sighting--2932dcfb-578e-4ee4-a3d0-b79954681155", "sighting--b407652a-bfcc-430d-9042-55cdd3bb0796", "sighting--030075b9-761b-4107-9774-2b2eddba9205", "sighting--40c2f98c-e318-4901-9e96-b2a7aa8ccb06", "sighting--616a4b77-e3a0-4a19-b732-e3f0609069cf", "sighting--879a1af5-29d6-4590-8500-76d76323e0f8", "sighting--61b26d7f-20dc-4d4c-8c13-fc19434293c2", "sighting--d04d1f70-c6af-49d4-abae-c1e95b97c0c1", "sighting--49375cac-abf2-43fa-826d-c946ca7421fa", "sighting--1385bae9-4362-4ec2-b7e7-f35f840c0d34", "sighting--8cdab576-7693-4d64-ad92-bbf165d41640", "sighting--de9d634c-fc3d-4e7c-ba99-065728d4721a", "sighting--6ba41eb5-7b4b-4203-95b6-6d34ef2a2c08", "sighting--8dae6cd9-9f99-4d0e-8400-aaa3ec1f9d65", "sighting--cd7f4e0f-ca5c-4076-9caa-698e34eae531", "sighting--610e4140-3ea2-4b9b-9e9c-b4277421ee46", "sighting--ee434e2e-bcd0-4634-8466-2981a0b25f90", "sighting--3b94fb92-bcc7-4ce4-9819-5ed69fdfe925", "sighting--46086a0f-ddfe-4fd2-9b36-9965e5deef87", "sighting--64770a15-f039-4faa-8a02-d9c89d8e00dc", "sighting--7751d959-e525-4c5e-8968-ba4326761c23", "sighting--97487aaf-edec-47cb-a527-2c971df83d64", "sighting--4f0772d6-93c9-425b-ba5b-0960f901f660", "sighting--8b2e8d68-6546-4199-8e0d-b54383ae8be2", "sighting--9067feb6-04f1-4967-99d0-6e621ada065e", "sighting--a30b46aa-1ce2-4b25-bc8a-3025ef5d39a3", "sighting--78724f71-5a0d-4e3d-bca6-ae003e7e70a8", "sighting--152f35d7-ed44-4436-9419-63e2a1d2f2e8", "sighting--6d409849-1057-40ad-9c35-9b291121ef2a", "sighting--b15731d0-6496-4399-a35b-21cf23317edd", "sighting--9621401f-32f3-4c0b-96ba-f34b6791c1f2", "sighting--9e43c104-1098-4223-b27d-846e5b5cf9e9", "sighting--17bf1591-183a-4ecc-931f-61ae490f7812", "sighting--1cde5053-16df-4e3f-9cc0-5a5d104d7076", "sighting--77e6b006-fbc6-4b01-9373-7040c4952181", "sighting--c0aa9ba4-5a5e-422c-8d3b-c1322bdf67ed", "sighting--4777cbd8-bff9-4aab-a655-a02187cd0e85", "sighting--6f53a733-7c91-4618-a895-8db16e365bc2", "sighting--70ea5efd-1d4a-4bdb-a29e-6c87b5407ff5", "sighting--e8a6588d-b478-40f7-96ea-4f5bcae4c145", "sighting--ece5274d-3ca5-450e-b4af-14fc279f7933", "sighting--a53fc190-b551-47f7-9403-996a9ce1eb23", "sighting--0f2dda89-e11a-435f-af11-0198c59b4bbb", "sighting--c73c9f86-6993-4b3f-9347-6b94dcd8ebfa", "sighting--8309d964-2492-4ca3-b4a1-d709ab0f6ca8", "sighting--d13e5b37-f2fb-4e13-8178-5563f71da93a", "sighting--0eb668a6-f324-4f15-86c8-69fabde0f98e", "sighting--426df512-3eb8-4831-ab96-10d72489afc7", "sighting--3fd3b47f-9d51-4fc4-ab8e-717ab6eb4df7", "sighting--2a747775-7f64-4550-a153-8f9f948d7a4b", "sighting--d76b577f-edab-4751-8d5f-26722639886a", "sighting--3ee59edc-bd91-43d8-8b80-f58939655f9f", "sighting--0e05a45b-395b-4d77-8358-fafac39ba7b7", "sighting--bece1939-de2a-4e74-870a-9527a46cac53", "sighting--67795185-e428-4b4a-a1a3-ed60fed9d812", "sighting--267beb36-6075-4dbf-8303-2164c45f8642", "sighting--40d2cd43-0a3d-4c6e-b97f-cc5b70c1cf5d", "sighting--ed946393-a5f4-47f3-be39-10977997798d", "sighting--3bc18a97-cd13-4eea-beb2-d641f3e6e592", "sighting--b38cef24-b25d-491b-a13c-86bedbc0dca1", "sighting--cafc157a-cd83-4377-9738-a62f420a020e", "sighting--f5dbdb6f-48fa-47b6-bf6f-2c64a52f8289", "sighting--6b31f7b7-14c8-4022-a3a9-4029b0ce7f0b", "sighting--6ec1bc76-1bfb-4903-b017-7574532e28af", "sighting--ca98dbfc-f274-4e65-af10-20d4c92e09c0", "sighting--fc798545-d6e9-499a-85ec-ea0adc943bfb", "sighting--ff080155-bd61-46f2-8396-079201149463", "sighting--fbfd49f0-80d4-4a01-b913-8da49cc4986e", "sighting--111aa5d6-d7f9-425f-9116-7e2bff947453", "sighting--449d44e8-2f9a-46b9-a245-f7c387662654", "sighting--ad5e4357-6485-4622-9d72-1b206355645c", "sighting--881cf3d5-151d-479d-97aa-dbca2debbaf7", "sighting--7edea494-45fd-4c00-bbcc-836b18aa4e92", "sighting--23bb5ae4-7d15-4beb-a8a4-3e2e358af80b", "sighting--5b5e3e79-4285-46bd-b7e9-492652fba93d", "sighting--77b08c07-19de-40dc-9243-fc02b1cf1acb", "sighting--ee1f7e2a-c3af-408f-b51c-3b8d44f94ba9", "sighting--0ca3510c-238a-40c3-8145-58e67d500ecd", "sighting--ad7dfbf6-f11b-4807-9ef1-cd41f688dc23", "sighting--9de03f76-7b36-4fc9-aa58-7a6a0e2099a8", "sighting--0f1eb65b-3d24-4833-bb40-537ea7a1ab3b", "sighting--40f724e3-63b7-4dfc-97bf-e293f3acc1a5", "sighting--d8dd1a70-4bd4-46cf-b3e7-f8ac2260bec4", "sighting--ff2bbc44-41da-46c1-bbb1-d3c846d89156", "sighting--c8d3bdde-0e36-4c79-8f5a-5781a000c87c", "sighting--f33ddf2d-9432-41eb-97bc-5d544d490b97", "sighting--52e8380a-8f39-4629-a487-65ecd5dbf2fe", "sighting--ef44789d-e4c1-4947-aee5-dd84a77936b8", "sighting--f6633b97-448f-4031-a233-faf329db5b64", "sighting--a92b406c-fd99-472c-ae36-19c9740677df", "sighting--03002cd5-f0f2-4899-a168-2f183e7fe6f7", "sighting--d9d9cc37-15ba-49d4-9568-f46a378a2d2e", "sighting--4585d168-4652-426c-8ed7-c0d4cf91e5ee", "sighting--81cefd95-cf45-4cb4-904f-33086a3d8aed", "sighting--ac22f2b3-335c-4dea-a69d-8660ac95ba09", "sighting--427186ff-3bc7-4686-b70c-bf6ed48a2dd6", "sighting--81598939-488a-4ba4-927c-f65d564e25cf", "sighting--da433386-d6bf-4923-945c-ac9e680d5612", "sighting--113b8d49-6e2d-42f2-a1b7-09c9803332c2", "sighting--9a49de6d-e085-4c15-8849-a7c943fcadc4", "sighting--72b16712-1188-4448-b47f-f3edcff11b77", "sighting--0b020b14-5185-4f36-b7e6-6f0f7890bf36", "sighting--baedcb15-7c0f-4fe3-8fd0-5d7e39e6f73d", "sighting--b5dbed1b-cce7-4931-a0c0-7212e65d9587", "sighting--3bce6daa-1726-4f7d-89c7-4603172a42fc", "sighting--404c2f99-c3cf-46c3-bcbb-c7bde020f2c4", "sighting--8152fc78-6ded-4f08-9fa1-a42e9b163ed3", "sighting--1dfd6ed4-f7b1-4c7d-a95d-e735bfaf085a", "sighting--27d5b912-f122-496a-9e53-6d13aa28e77a", "sighting--c4c82284-aed8-4256-87af-1697aa3f612b", "sighting--30abaaa0-8977-485f-a1a3-68ebdcd89128", "sighting--5985cbed-bca7-4140-900a-be6b5e635f77", "sighting--af945b08-5b29-475d-bcce-9e46f0d49797", "sighting--6390741d-dad3-4597-adf4-aa1cee27e7a4", "sighting--b71c293f-e855-4fae-bc5d-5a83de671920", "sighting--4962516c-231a-4001-bbab-13d7b60a3552", "sighting--593c2652-4cbf-4463-96ca-5f0bbcc9d96e", "sighting--b18f8d8c-762d-46c1-84d4-f04166136ca3", "sighting--eb3af428-8363-4a94-ad44-0ccf48c4ba71", "sighting--06a18e8b-dbf9-4986-a7b4-d899e355bed9", "sighting--ef13d770-937b-4f28-aaeb-15f48fd2f9eb", "sighting--0cff7d18-9003-4c82-9fed-59597a012477", "sighting--7017559a-aca5-4f60-9a1d-9027416e810a", "sighting--4a4fdbae-d41f-45bd-bc4a-d2ace912ff42", "sighting--1bf94e47-c324-41d7-941f-cbe47f3972be", "sighting--b54a4caa-b14a-4853-982c-6df65c3b0ae5", "sighting--6fc4c893-b2a5-4bd6-95fe-4f7b4f63b3e1", "sighting--352f7663-8d0d-4a9d-a5f4-1ef714015193", "sighting--f470d578-8384-496f-ae6b-1830ff01b41c", "sighting--b52debd7-618e-40b2-b8f1-98bfc3b0361b", "sighting--d3c562af-335e-4fc0-98cc-1577a10e4578", "sighting--6f072563-1e38-4df1-b46e-c3b3d92d5eb8", "sighting--8ca7db23-0380-4fc9-bfa2-20ab52439717", "sighting--8232c589-bd60-4ce2-83bd-0930b06c31f8", "sighting--cdf50e9f-6eeb-4b39-9f96-236e821d52bd", "sighting--17fc9b02-6cef-4cb0-8713-2a3c28a97d85", "sighting--b1f75a14-0338-4a10-94a7-9f2b4d76b33f", "sighting--54f7045a-7beb-4f8f-ae6d-922106990ee0", "sighting--221aa312-5128-4140-9c1e-caa6cc4e5558", "sighting--33f7b207-dfe5-4b6f-919b-923cedf8d99c", "sighting--61627db3-075b-4d5e-8f36-b9e281a1ee94", "sighting--f1b84a4c-590b-4824-b140-439b199a9f27", "sighting--d4eb645d-6fe3-4778-83f7-959fc0f0367d", "sighting--37a73493-eb83-45e0-8985-219c03480cff", "sighting--cafaec83-4f26-40a0-87da-d18bac161099", "sighting--2627f369-aecc-4223-8dbb-8ace7dc484c1", "sighting--91908a5a-f9b9-4af8-bc85-bcacaef507d4", "sighting--67b7be6e-0b1c-46d7-9690-6417890cb2ee", "sighting--640f12ab-1933-4751-8147-ff07c69fecea", "sighting--8c684616-bc43-44d7-b1c0-e8edca5343c8", "sighting--662f3b62-e1e6-4045-a235-1daca34381ba", "sighting--b863aeef-a5ad-4e2b-b08c-35ac1e2bd664", "sighting--f8b4954a-71cc-44e1-b635-0db6285bcbf6", "sighting--07b6e0fb-bed0-443b-84dd-e9a65f2dc950", "sighting--a1e98839-733a-4d8b-81f3-fa207b642a89", "sighting--a3c0184a-450c-4929-bb68-ab16a8cac078", "sighting--dc39f23e-a7e1-404d-a56a-c90c348f74ec", "sighting--1ddb1e0b-3390-48cc-9757-4b1519e413af", "sighting--7d299fb0-9bae-488c-a3a7-3fb1e80e7fea", "sighting--7769f0fb-511e-4ec6-87f4-53fca4ec6b9a", "sighting--1a3f2bcc-61f2-492b-894f-3d33e018d447", "sighting--eccd3fc8-ee17-47c4-b4f9-eb7ae39bfbde", "sighting--f1468867-5758-4466-a2d7-49a671ed445e", "sighting--2aed5c7b-caf7-4174-8c3f-3f83f1d533c0", "sighting--3d0f3581-c415-49d3-a520-5dee89bda31b", "sighting--23b0a8cd-5c78-45b2-947f-1758f268804b", "sighting--d7012da6-9835-46c9-b966-7831eae268fa", "sighting--f7361f5e-1a46-4c82-9342-7942b499ef54", "sighting--bc1ff633-9ea6-487d-9cf4-21d14b1bb946", "sighting--a582d9a5-a2c3-46a3-97a1-23931e14a923", "sighting--cf5bbc4e-0e9b-4601-be90-9f218db5cf36", "sighting--40ae085e-212d-4308-b1e5-798cd8d8b68c", "sighting--5a509a93-e475-4dc9-97cb-b37d88fbb34c", "sighting--2e104b64-67e0-4041-9b8c-2289eb3aa0a6", "sighting--ee1c939c-7a0a-4ef2-8a3f-631b02aa70cf", "sighting--22dc92f9-9499-4ef2-9c74-6e0c3a042b96", "sighting--6fee2cc5-15df-42e3-a84c-0ea3a8968027", "sighting--bbb203ab-b27e-42bb-97b7-c526aeb7fd25", "sighting--3a8a0a87-76c1-4050-8264-dfbbc2f094ed", "sighting--50f326a4-b777-4cf0-b8a4-7af789f005ac", "sighting--2ec266a8-b452-45d4-bc0e-0c9144c1a024", "sighting--071fb177-d498-4e6e-9dd3-7a3e324e5acf", "sighting--d0b01369-8ef5-4837-9d87-a119b1716aab", "sighting--8b01c2e2-b938-40ca-a72a-a4bdfc01ec65", "sighting--3e9cc89c-662d-42e9-b489-13904454a762", "sighting--eb7ae06e-3590-49cb-82a0-2ceb63efc84c", "sighting--b0feead6-3213-498b-85be-c71507f68157", "sighting--b4b1e617-acba-4a58-be13-2150d7d7dc7d", "sighting--18f80c5c-b220-4130-8810-a62f0abdabfd", "sighting--7be23133-c3a2-480f-a63e-28da26b7cbd0", "sighting--d5770a4e-a1b6-45b3-b913-bbaf2f0d4631", "sighting--6f827f86-6b9b-47db-87bf-3c9f68b6b37d", "sighting--78111a2c-1304-4845-87cd-ace20404e88a", "sighting--7692e6bd-d2cd-40a6-98ce-a86114f1f478", "sighting--66267dc0-07ff-4476-a484-8c190d52b061", "sighting--79e3b590-eeea-408f-9b00-c859cd934bcc", "sighting--fa7faafc-7463-4203-83a4-86abcff0e34b", "sighting--4146e122-5818-475b-bc86-eec41483dbe9", "sighting--0660bd69-6598-4175-98cd-d05223ab1369", "sighting--1aa03a1a-cb1d-4e00-9d98-6efe12ec3467", "sighting--e58783fe-73b6-42c0-9c02-17f653868222", "sighting--44c105ad-1a12-4dcc-a7a3-242ed3c5d4fe", "sighting--20a02dde-0873-417a-8c23-a54b78e3717c", "sighting--321ce272-e1f7-413a-98e4-a0b627532150", "sighting--01a2cbc1-41c3-4a17-abf8-85ef727a6a1b", "sighting--76137bc9-5eb9-4c6e-84e9-ceffead1ce9d", "sighting--247ad6df-388a-41f5-a733-cbcef1790cb2", "sighting--2a8f822a-3f9d-4992-9a5c-18c07fdb2d8d", "sighting--1cdd48dc-f20b-49ed-bfae-a46a98887c3e", "sighting--aec0e0ed-5b6a-4e00-a0db-9863a1677992", "sighting--0f333325-6a1d-423f-8bb7-e09372c0c6ae", "sighting--8ecb701c-1c6e-4def-b5b0-b143f01bc718", "sighting--a56aebb2-13fa-4467-951a-2b7eadec84a1", "sighting--08490f02-7f63-4fa7-be85-d261661e39c4", "sighting--351a336d-25df-4308-a0a7-c99c532a0a2c", "sighting--a5a896c3-fa4c-4097-b4af-01ef2bf05f0c", "sighting--46a7cddc-9fab-4d98-a2b6-7cddbb3adc8b", "sighting--da2c6748-65e7-4892-8bfe-1be5ec4fe571", "sighting--c3bcae9c-8af9-4ae8-bb36-ef4d35bd9556", "sighting--dbded85b-f57c-4a27-94a7-49d4dcb3f1b8", "sighting--6004d027-ee25-43b3-b210-1a8173a45901", "sighting--b2492d93-4750-432e-a2a7-e454d2df5b56", "sighting--d3511a23-ccd6-420b-9038-3df0f6f03593", "sighting--4889fd45-0b52-4da9-a003-3d7f8f5b6d9f", "sighting--af119ab8-c848-42ec-ab8f-d7d199b96d5f", "sighting--b0049586-f0d2-486b-a019-8caafc96bdcb", "sighting--f3ec9f7d-56f7-41d6-aab8-6deadd0f25fb", "sighting--bfa8e74d-e17e-4adc-bac7-a8e8de1b9967", "sighting--fe245194-f341-47a6-b58a-ad2287b9f665", "sighting--09df2f66-a644-48fc-8e1e-286384b214ea", "sighting--7ec3c031-0d9b-47f8-a590-40a1f5dcb64b", "sighting--78e6fd98-092c-4045-865d-d815eea8d93d", "sighting--24396c3a-6baa-4983-b5e9-17152960d6b6", "sighting--b7f9ac45-b867-4e67-80bb-edd690943bc4", "sighting--505191c6-4abe-464f-9c5a-d1f1060e4252", "sighting--d972ad2a-d90f-442c-8976-c24a92934a9f", "sighting--c449f0fc-5737-4409-80d2-adc64c4faa8e", "sighting--d2f57464-b646-48b4-9053-9360395535ab", "sighting--850f2821-749b-4a88-a27b-9fe40357003b", "sighting--7f882eca-44cb-4141-9270-6d28286d3bd2", "sighting--273bd887-2158-435d-8439-f8675c3fa68e", "sighting--3665aa92-c13c-4b6c-8d0a-dcd02017f698", "sighting--6fbacc1b-de87-431f-9a1c-a127061aa9ef", "sighting--d64b0e64-6622-4809-aa1d-0110c42f1f1d", "sighting--b8226dc6-d98c-4c37-acc5-1a22b549db75", "sighting--1058add1-f17e-4c63-a02e-3941cca582da", "sighting--3b351410-2093-48b3-8917-2743d59b729f", "sighting--e90a09f3-f3f0-4f33-9f53-d6da7dd8466e", "sighting--0a8ddfb6-32d6-4223-9b13-76df10f8c3f5", "sighting--4ced7cf0-022a-4211-abe0-5e9abf274854", "sighting--db762978-1ab9-48be-8de7-ba9893e2d799", "sighting--cba932d6-6bfc-47a0-9bcc-c5cfad047b9d", "sighting--e8becbe6-1092-405d-a44d-16639125ecb7", "sighting--9167c6b8-9f32-46ee-861b-61a95ca66eeb", "sighting--a7dacb45-a459-4d73-bf36-ad3e5d7c4a68", "sighting--d049913a-db75-4315-9cdb-1d9ed52eb87c", "sighting--7492a7b3-e367-4f4e-9156-bf8ccacdb30a", "sighting--5ad88fe5-95fb-440b-ab4e-c204961e6d41", "sighting--5b303e5e-2c94-4ba6-af00-b1bbfc9c8cef", "sighting--e22c7091-47cb-4508-994a-ba63392d03f9", "sighting--563eb7ff-5046-40d3-8fcc-f9899d211d09", "sighting--35e6d91a-1e92-468e-aa59-ab558f623d1f", "sighting--2c2cb31a-b3b0-46bd-8c45-146baf36a00e", "sighting--3cec3468-0968-4c9a-ab9d-03c697c638e5", "sighting--a9eda502-ecba-4a10-8766-3c2991ccb001", "sighting--e85caabd-68be-430e-9252-05a8fab5e729", "sighting--273986b9-833d-411d-94fd-2596fdbc10cf", "sighting--657e9acd-c84f-47a3-8347-b2ee5e6ae870", "sighting--bec54602-64ee-4ff4-9004-f2ed8d5ecee1", "sighting--a7ed93a7-2604-4af2-9eb9-88a1e495f676", "sighting--73394a0e-86b6-4f14-b179-dfa9345f63da", "sighting--d2017a3e-0566-4550-8930-e7789d5326fa", "sighting--27f54dcb-09d7-4775-a3a4-bd50a515294c", "sighting--eac3e7e5-7d15-4ee5-9799-49b448904064", "sighting--15253ea1-6f22-4aa9-8cb4-869bef377d74", "sighting--15b61156-491b-45f6-9424-ff2c180d6293", "sighting--e7b7ab76-5ce1-4225-bd5b-052bc1b22680", "sighting--25d25c3d-8795-45c2-a117-e7d2affd101c", "sighting--9266ed6a-bd65-49c9-90ab-edefaf085a86", "sighting--c6adbdc7-ee8d-4fa7-8c28-b175dae9685a", "sighting--ecc169e7-9278-46f8-b6a0-b31e7b7ba1d8", "sighting--7a5483cf-e605-464a-898e-3037ae31f5f2", "sighting--a6a39f5b-c6e8-4e4e-a4fc-f5634b4176e9", "sighting--6520228c-67d7-4675-a117-ea2754c2400f", "sighting--66a788fe-8eb2-46d4-8356-e08c022d2fe8", "sighting--2dee8709-69fd-47c9-8adf-09d3f521a304", "sighting--d0c1aea5-1139-411e-9c8b-7a3078280e21", "sighting--4f773cdb-601a-4478-8bc5-411747f88831", "sighting--3a96ef38-c68c-4117-bee5-003b40ff4c8d", "sighting--f5ba605f-32d6-4e39-b10d-30b547f225ad", "sighting--3d14f640-d5a2-47e4-846a-c304427ca3f1", "sighting--8c4bae40-3590-4c28-a63a-7c5e37866838", "sighting--c2a1d7d2-6c7b-426a-88d9-97b47dc24ff8", "sighting--665958ee-2636-4f9e-9578-e3b025be00bf", "sighting--7b4dd69d-d38c-47d0-b813-b13c6420d7b0", "sighting--05494819-fa5f-43aa-a40c-92bd0454a8b3", "sighting--40c7eaf6-6d0a-48b9-9c0c-d9567085e1d4", "sighting--528992a6-bd5a-467a-a84f-d0cfce5881aa", "sighting--eb55e53c-7944-46e6-b322-f1c96a23101a", "sighting--2fc150cf-5d41-47d1-851b-fb5a7cc3df37", "sighting--9115d334-352f-442a-b0e4-0171775237cd", "sighting--26c0cf5c-71a3-406c-a5d7-017778c4e981", "sighting--e11aebd6-1132-426c-80b8-2f054ca17d70", "sighting--54da1e52-3da3-4eef-8a94-3e290060c827", "sighting--6b986a3f-59d2-4e36-ad37-544699b6e451", "sighting--5e9e8787-aada-41c5-9c7f-a3556036e220", "sighting--ac2c8882-669a-48f6-960f-796b64ba4bd7", "sighting--16b4a74b-b67c-4837-a2e0-b4a28b886ba6", "sighting--1d67fb3e-5bc2-476b-9377-1abdef074451", "sighting--23945f46-418e-431a-ae47-635436535245", "sighting--31660cf6-bca1-48b9-80a6-fab7dd9c7c50", "sighting--1d7b729c-b42e-4a14-b563-af80d62e349c", "sighting--22183f0f-a1ec-4e7e-b638-67921664b7d7", "sighting--39bcbba1-5373-40a4-aff7-8ce96576a5fb", "sighting--04237227-a38a-45f3-b8b4-1375362166e2", "sighting--b10e2393-91c4-449b-bfbb-9413eb2cfdb8", "sighting--f50f14f3-aae0-4a5e-9751-c8e3b198e47b", "sighting--f5939590-fb72-44c9-b58d-fb9d21a2848b", "sighting--89f6cc5a-f905-408e-bd89-1e9d64798b1f", "sighting--ed182883-c562-432c-94d7-50bf6ea9bea0", "sighting--38070cfb-03dd-4095-9c1e-eb8e5a035c70", "sighting--3c7b78e2-1b0a-4304-87df-e19b9bd14729", "sighting--5d9e7a39-6ad9-4465-9525-aaee33590409", "sighting--533ed81f-e625-48e6-9696-08213eaa9f75", "sighting--e5aca4db-a35d-42b7-a713-4e2ee72bdb51", "sighting--73111399-0f70-4d7a-95dc-905df0e2ddd0", "sighting--c1fabc2d-0e79-47c4-9b20-c2f1846620a9", "sighting--a02f6a5b-4ebe-4e74-aeed-cabf9e5aa419", "sighting--6cbc02e8-1d40-4363-9b67-0b67f738054a", "sighting--2bec06dd-7147-4703-bed6-58e94e5f6f94", "sighting--84f14b21-48d5-48a9-bd96-81d4c12faa0a", "sighting--827e7b67-5564-4a42-a144-b6bc79f9ce0b", "sighting--7243f64d-4f6b-4be7-9453-7e2e23868ec1", "sighting--fc50feb2-6c63-42a8-bc5c-d4c6cbcf9a90", "sighting--a6a1218f-7931-43ab-a22e-1075ac921eb9", "sighting--39b98f3b-cf1e-481a-b3bf-34163c784e20", "sighting--e1af3629-42ee-4bd1-9c24-2d560f590693", "sighting--c0b7d843-f737-4963-9f67-37ddd44c64c5", "sighting--7539ed5b-37d3-42bc-8398-15ce52733532", "sighting--074bbf81-ad4f-4e08-8ba0-6007d1810fe9", "sighting--c512ca23-52b1-4ba6-a8eb-3e9db8c536c7", "sighting--2443cb73-fbb6-4d7f-bcf1-85ab178d98ca", "sighting--5b9a07c3-ff2e-43d3-908d-cff80416ed67", "sighting--cf1878f8-54b4-444c-a3b7-93de8018d621", "sighting--a297bcc2-583c-47b7-b781-b3355777bdfd", "sighting--58b70178-314b-44d1-8c4b-5d493d8b027d", "sighting--7ec9f76f-5c35-4d9a-a4b0-618e4ac69363", "sighting--c68b780c-8413-41bd-9435-9b661cc78def", "sighting--bc156dcb-3348-46a5-853d-e04902511b60", "sighting--fa84c3a8-4fe3-4d6f-83cc-25f5185b49d9", "sighting--41953219-5da6-417c-9be6-96851dfba138", "sighting--55f4d12e-c77a-4347-b448-bc9e380b8ed5", "sighting--412b5c72-a4f0-452d-a518-5104ba31d4bf", "sighting--f06c3d52-2d86-426d-ae32-6dd8a668c653", "sighting--2be9aec7-3725-4f69-94b3-1a030dff56ee", "sighting--3478487e-4f6f-4c22-8ed2-f1557e43404b", "sighting--a0e48921-e6b6-4771-aef6-006b9b9ef44d", "sighting--20acf03a-09ca-490d-a2da-38414733c711", "sighting--89234c64-5a03-44db-9dab-a1f8436f91d7", "sighting--06ff5c2b-4186-47ab-bb6d-4560c61bc61d", "sighting--363f4721-631e-4b92-bd77-d918fbda5ddf", "sighting--73eea0d5-5930-40e3-8ab3-d8e681350d9f", "sighting--e9149e29-a8dd-4ef7-9c10-d3b509c2ec79", "sighting--ab073c27-0f56-4aee-8a83-d17b7dd13540", "sighting--ae394c38-2bbd-4d25-b6bc-ee38ca88453d", "sighting--ebeff865-b3b3-41fc-93ff-9bda8fdda068", "sighting--e39b2616-52a9-423f-95f6-05841ac10b3c", "sighting--a24a4469-9895-4be1-8077-bdf1acceaea5", "sighting--ee6fa3e9-ab8a-4470-bb81-2e072fb9c323", "sighting--35d6c234-f1ef-4d0b-8d44-e95234ed9481", "sighting--feac9c6d-fc82-4044-a40e-8f982990bf0b", "sighting--940f1b76-ee52-4c9e-aba7-f5de5b30aafe", "sighting--a6a8ba93-469f-4532-8b63-152e15bb48e2", "sighting--dc011fa9-4054-4ce7-9dac-331775359402", "sighting--491d2edc-3f0b-4fad-9743-d2368c48ce6b", "sighting--67e0b89b-f368-4a1a-b937-ee994d5dbb2b", "sighting--636abed6-0d09-41a0-bad7-916eebd0eaee", "sighting--e75bfcc4-248e-4ee9-a758-de166f58c512", "sighting--ba6dbd28-112b-4e0f-9940-8a0eea60d2a1", "sighting--d534fa12-7bd2-44a0-88e3-5f78fbc39cba", "sighting--dcd0cb25-fb53-463b-b3d5-43e51bf50bd4", "sighting--9fda147c-c9f4-4057-bb35-3e0cd2c3c6ae", "sighting--fdb0915a-b97e-4806-a2e8-ea9249ee6b5e", "sighting--6deb2011-b355-4cb5-9fbf-659be90802a2", "sighting--3e44d953-c191-4615-b8ce-db2590964879", "sighting--9f1b58a0-85e7-497f-981f-167793b7580b", "sighting--96df736c-2226-4d7c-a652-c723939b91ca", "sighting--3d858e44-310f-4927-9ae0-bf7b59298f96", "sighting--484467fd-8aed-49e7-8813-8a63419b0e7b", "sighting--a831efdb-f0ca-48a3-949d-38af87073024", "sighting--f3328fb2-b12b-431a-89bf-391cded8b9bc", "sighting--77c7edb7-4926-44d6-9b62-08df44a6efd4", "sighting--a9d9b0f2-cedc-472b-b3f4-3719aad2d2d4", "sighting--e52d441c-237d-43ae-a477-1bfb072dd8e3", "sighting--8d901243-bcfe-4aab-86a7-16209052c8ea", "sighting--1e84f806-e032-4d2b-8d9c-7749ef20cfcd", "sighting--e0d674c6-96f9-4c1b-9c81-0188b8903b97", "sighting--5890fd1f-4769-4c07-ad80-4fe0d9a1bcae", "sighting--641261ad-022c-46a3-9848-d20b087fae22", "sighting--318ae664-75e6-4f60-9a37-2a381a7a70eb", "sighting--a2cba137-fd4c-43b2-a8d3-d41e74a2a94e", "sighting--fc409b9a-0441-40b3-896a-1f72c68c8152", "sighting--efafd87c-e9b1-4e40-b819-faa2d130defe", "sighting--ed9d98c8-7f69-4ea0-a29c-6e120574dc51", "sighting--7a8e0a93-d58e-4384-9f76-6d9152ac64cd", "sighting--3f3c9234-409b-4fe6-a9ef-6cc328fac7cf", "sighting--4f4e7d5f-482a-4a0c-9a48-128d672cac65", "sighting--85d28caa-4886-4b2a-86cd-a04a62013f03", "sighting--3a32f178-e2dc-4b6d-bb88-ae7e1187902e", "sighting--440ab87e-b142-430d-a637-732df87cce0a", "sighting--b088a9a1-c08d-4c1a-8c70-b0e43de09866", "sighting--97576a3f-2535-4fba-a34d-0f19f24d90a5", "sighting--40267871-c3b0-44c8-b647-906f16afb298", "sighting--c90ba8dd-2089-4b89-b731-7458e2dfb2db", "sighting--6b042121-b687-4789-8072-99d51bc9d2ef", "sighting--26a4d2d5-739c-428f-a543-1b84373eb793", "sighting--0f11371b-3328-42ef-9e0a-fd7eb55db02e", "sighting--53cd8881-4e94-40ac-8c49-833a88d5ba1a", "sighting--8d194200-c181-47b2-95bf-052a07b5a6e4", "sighting--2f98d50f-3aa1-4b02-9a13-6948b3ea17b0", "sighting--7a88b5f1-6d46-452e-917b-7e969f11e554", "sighting--bc774589-e0e8-4ff6-9a9c-89551d306b4d", "sighting--b91283c0-eb06-4b01-804d-efa562970cc9", "sighting--6fc4aa8d-87de-4c8d-a2af-3748325862c9", "sighting--600cd5e5-b2d8-451e-a6f6-3039b730002e", "sighting--65c96855-1986-4392-a1a1-141c5357d63b", "sighting--fd0a823a-028d-4d00-b16e-9e7f212e840e", "sighting--0b805082-d44c-4ef6-a69c-50a777b6d8eb", "sighting--d23c0fb2-bfc1-4dc6-8920-adbb3e1b3f96", "sighting--cebe3748-2f99-4b8c-b2e9-31e92f7a2c36", "sighting--5dbc285b-9c1f-468d-b486-e5b304ce1560", "sighting--946101a9-7a72-4cfe-8d58-cbde26c264df", "sighting--c2b4cb07-d059-4bfc-b1c6-b90345ea73c6", "sighting--c74c94b3-2043-4bc2-9ca3-bff50bede1b9", "sighting--6229e01e-fb48-4661-bf2e-c1a23e2c443a", "sighting--589e7b65-4303-4eb8-b509-c0160c835c2e", "sighting--6667f759-9f48-4088-98c1-36e44867700b", "sighting--47b72157-b689-42fb-8c0d-f1daa32308dc", "sighting--1445e576-3944-4ab7-8a0b-8df7374e18a7", "sighting--41c435f1-141e-4a32-a9c3-5e98d4660cf7", "sighting--31b490e0-7c91-4dfd-9caa-f33f73a5eb93", "sighting--2a2a1f13-83c3-416b-af7b-cc353e27da03", "sighting--f88e82d7-bf10-4870-8e51-c33b888c50fa", "sighting--419e360d-5afd-4bd3-b87b-17978f89dc1e", "sighting--f22929f7-95cd-480e-8727-8d57c5cbdf60", "sighting--299e49bf-3305-45b5-a657-6c9a03ee748a", "sighting--9db03ad8-39e8-448c-9725-d93bd89a6361", "sighting--27ccc398-c0da-4c1e-be76-24c19287bbaa", "sighting--38a114e2-bcb2-4007-9f91-9e318466e96a", "sighting--c5e3df4d-b80f-4436-ac7f-f2c18bb78e3d", "sighting--bdaa854b-5b3d-489d-aa6c-7f5b2c0c50bf", "sighting--fd0b302c-cdc2-42d0-abcd-f21608ceada1", "sighting--c2470525-a96e-4c97-bfa2-d79e08e32cb0", "sighting--7c082af0-aad7-4a2b-93d2-f03133a7da5f", "sighting--8cafc7cc-557e-452d-8dfc-11a4e192e252", "sighting--d8718c0e-9738-4998-9393-2115976fb64c", "sighting--7bf739c1-a8c0-4d09-bf82-09070c4b17c0", "sighting--e922a483-41c7-4519-bfbf-088b41b4ba11", "sighting--def37a5d-8cf9-4b22-9f3a-767fa1a33a64", "sighting--533ce5b3-bc9e-4663-aba0-42cf97bbe307", "sighting--d7239f86-8f28-4562-adb4-b2a54f01dd61", "sighting--982f5fd1-a547-4415-bc4e-124fa0d5a360", "sighting--af035adb-46b8-4ed8-a54f-8f14e3059d3b", "sighting--c2a880e9-5d2f-491b-bb9a-31c8ae24f3c6", "sighting--8c4b1cba-5d52-4b37-aa50-4d318208938a", "sighting--16ebafa7-5006-40be-bb81-50febaddf3fb", "sighting--7d323f59-b61a-43af-8425-4e09413f8def", "sighting--e122fe1d-220f-4140-b849-cdc5dc2e46b2", "sighting--bb78111a-04ff-4f32-b045-c916b6b6d394", "sighting--faeb8566-e0de-4e3c-a83f-5ae34983cd81", "sighting--8a6cff76-2237-44f9-8ed0-009c14da9f54", "sighting--fc68a2df-edd9-4042-8474-ada867e4d7f0", "sighting--487ab06b-c11d-4ab0-b3ee-395e594fc908", "sighting--037a7e3b-73b9-44e8-8a4c-f6fb3a014706", "sighting--3ec551d1-0be3-47c2-b61f-6bdd16d6caa9", "sighting--442ba3a0-bc43-40e6-bf84-d8752f12156a", "sighting--7121f97e-8de5-4e79-b0ac-7f84f2078c9c", "sighting--7526b9e2-b82f-4eab-9c44-023c4243dbd6", "sighting--7f73ebef-f4e5-4546-8872-24bdb58c715e", "sighting--f223863b-88e7-4bab-a743-f372d718e67d", "sighting--7a4a7b48-7e97-4a2e-85b8-54014165e360", "sighting--ce788f2d-9b9c-493d-a5c4-89e699b7f980", "sighting--2c49a823-25ae-454f-ab2e-32d3207baf38", "sighting--7f4410d0-cf1e-400f-a021-a3becc6429da", "sighting--870cdcb7-567d-48bc-910e-a0ece0e1e6e9", "sighting--79a38588-71e1-4e92-8be2-f2ec490c4767", "sighting--bcb1ada9-e1e1-44bb-b155-2d46e3290151", "sighting--d88dcb4c-c963-45ba-969b-5106d517587e", "sighting--3e64adf6-8071-4fe0-81d7-55855badd7ed", "sighting--21de213a-2617-4007-b882-aba5f551ca0b", "sighting--580dbf5e-0230-468e-a219-7ee58475e27f", "sighting--fe4731a9-10a7-491c-a926-c695a632852c", "sighting--e7d74682-8e52-46c8-a050-6a1f80ac73aa", "sighting--514cb242-eecf-49f8-bd2a-6c9ef6400c37", "sighting--5dbe8fe3-52e0-4bf7-a93c-a88bd8cacbeb", "sighting--74ca48d5-6f65-4fed-b436-007dbf77953b", "sighting--c4e784d2-0ddc-429c-ac58-f163ce645c8e", "sighting--0c767575-5de1-4000-8f02-e5eaacc7002a", "sighting--c944570f-6f99-4551-856b-768df797c816", "sighting--2a1de0f2-8e70-4bdc-8b41-56b18ca945dd", "sighting--08340441-27b9-4bfa-a97a-6057768b0f6f", "sighting--9fe278c7-5778-4fae-84ae-64b0c4916d49", "sighting--9ed4677c-9133-49ee-a896-6f811ff24560", "sighting--49f42c25-1927-43c6-9b57-82a699be5057", "sighting--0cf51698-ab98-4352-84ca-a2c088a4f2d7", "sighting--6d8d09be-cbe0-48ab-af66-13c7d3de8d94", "sighting--0ed7ec9a-36dd-4780-b4df-e4ccff6316d3", "sighting--be7ca40b-62c9-40bd-a090-2ffb0edb96eb", "sighting--bad4e9a9-763f-4c32-8a4b-1e00ad763876", "sighting--2960ee66-67b5-44cb-ac33-f98fb5c316b2", "sighting--c46ec191-5e17-4963-8264-3083abbb05a4", "sighting--cff7d156-b0b9-4f2c-b0d6-ba3bb30b0313", "sighting--45304a0a-5d9f-4612-aa2c-5ec58e1d3f18", "sighting--fe79cd85-b76d-434b-97cc-87ce5f9e416e", "sighting--f789dcc8-750f-4199-86d1-2c3f561c25e7", "sighting--4c202c34-fcfa-4be3-92ab-931289051a23", "sighting--7cfa7fd8-bf00-4f47-a73a-689ead528156", "sighting--4b7fa318-84ac-4b81-8bfd-80d146b0139b", "sighting--6d3708f9-5c89-4844-814f-ccfb0c042a09", "sighting--023eda61-5939-4362-b193-d67a22ddc046", "sighting--794c9055-3c79-433c-ad53-819aab80fc48", "sighting--a25e7336-9c8c-4b59-acd2-b7b59113c00b", "sighting--be9785f6-f5e2-42b2-b05f-d7fc0febb829", "sighting--81f702e6-a66a-4bb1-830f-5cfee9f75bf9", "sighting--f11c6081-3058-4ebc-a6fd-18a08c413a9e", "sighting--f075748f-1a21-4b91-af5f-e2847d92787d", "sighting--c78d1238-f87c-43ec-9a06-8484c2d40fea", "sighting--2d79901c-aa04-475d-9775-69a967e20f17", "sighting--4103957c-7c5e-44e5-a5a6-0a816fcefcef", "sighting--f3f11f8c-2373-4205-8482-4923bd18c6eb", "sighting--70f33923-3b25-477e-8eaa-6b9383e4a737", "sighting--d957b506-7209-4816-ab41-34b597561432", "sighting--dd3ffb9b-8c5c-4644-8d6b-17b3dc3aa915", "sighting--1d36dab0-bebc-4e06-9345-e9708110d52b", "sighting--21f56106-28f7-4063-b612-65a86361be2c", "sighting--6c752abd-ba47-495b-a450-8118b0d34dd7", "sighting--f56880f2-6e35-4138-b08d-b471bbc0d76b", "sighting--38b486b7-9e79-4267-bf2d-9d8e03afa039", "sighting--3f60495b-7cb7-43fc-8138-5ea443138b13", "sighting--e4a02cb9-b923-453a-8971-5913507c8c05", "sighting--c24208ae-ba8a-4297-85f8-11812fed9bd4", "sighting--7f79fd27-c9f2-4965-8d6c-361bf8795eb5", "sighting--f4b73713-7569-4f93-aadf-fb126ea6d070", "sighting--7c937d5c-e7fe-45fa-94ad-e65658d433ca", "sighting--9034278b-66aa-4132-9d5b-84ae30c16d66", "sighting--e389e84b-8443-4e96-ac31-c4b44e9ec994", "sighting--8f660675-b9af-4867-b169-e640b5a8e005", "sighting--6840e17e-a95d-4172-b0e1-7b2edfffb91b", "sighting--de8ef4fb-03c1-45e8-afbf-2356f5eda772", "sighting--c0707176-aa09-456d-93f7-80e6c0a3b77c", "sighting--758f3075-a00c-43fc-bdec-dcff5e15d41f", "sighting--29029d9c-e292-4a37-b19f-3746e9c07bd3", "sighting--988ef089-6e94-4049-ad5d-5461d16ea5c9", "sighting--c69ab82f-fb7e-4ae2-b0d5-5593c2d466cc", "sighting--49d9babe-583a-4a0e-9ec0-31ce06472ad1", "sighting--d4bb004b-adeb-4818-a05a-71da5b3b3d58", "sighting--da2d1ec3-a0d3-434d-9225-93801ef543e9", "sighting--056202f0-aa99-4809-84ac-2b3f7ed8d0b2", "sighting--05d52556-46c5-43b2-9a60-038b5f443bc9", "sighting--58ab5c1e-ad08-4da8-942b-1285503977d5", "sighting--2d2a2da9-dea9-4474-bf80-e2a5a0ace89b", "sighting--57c1d1f2-baa5-4ec1-97b6-2d2da70bc21a", "sighting--ffab1b3b-23f6-48f0-9648-63769382d52d", "sighting--dbe617fa-54df-47a2-865f-a13e2721f886", "sighting--8893bdc3-3ee8-4416-9da6-c45295ee1e6e", "sighting--4fd202f4-83e8-4815-976f-711e6c223fd9", "sighting--64a22e09-7128-4366-b59e-cabe7ae815c3", "sighting--0c49a1b5-06e4-48bb-9203-144fa3fd44ae", "sighting--1816e5fb-8519-4e97-b816-130f79244a33", "sighting--61a6bd92-de7e-482c-b55d-6bc2e923dba0", "sighting--ae185c15-6fc6-4929-bae0-6fdc90c962a3", "sighting--41429515-e242-48b6-94aa-34bb5024d9d0", "sighting--8acc25d6-80e4-4007-9ed0-badefbea0bbb", "sighting--aaea54c7-e23b-4ce8-bafe-a2125fb6c4fa", "sighting--c773606e-b2bd-49f9-9b33-74b684220d66", "sighting--5513f4f3-69c9-4d14-b3f4-099d5b4d21f8", "sighting--7e28fa06-0c90-46b5-8490-86e1a8168b65", "sighting--a2386af9-da7c-4d57-a2fb-4d1a8c03fd09", "sighting--72c74c63-a939-44bc-823f-d2dd40f370c9", "sighting--2f2f0ce3-a840-4428-93c9-144616f45544", "sighting--c6d0231e-5ac8-4b1e-b9f9-d7e7341a609a", "sighting--a40bae13-c6ac-4cd0-b04c-6d2ab5931b58", "sighting--0837d7aa-fbd7-4f8e-b07e-6cf795c50669", "sighting--07ebc61e-41b7-4750-b416-15c8d8a4ef35", "sighting--b8f665ea-f8e8-4931-9a95-2935c1424cf7", "sighting--0e18311f-9891-4c2d-8bb0-7807149836b7", "sighting--c53e484e-425e-43ff-b7f5-3c0ca0af194c", "sighting--0bb416cf-915d-4a70-bb40-5401cfe8117d", "sighting--ffe64db4-20fc-479b-8f40-967133d60d3f", "sighting--fec6983c-84e4-4c9e-8e05-10c7064106aa", "sighting--879238a0-e4f9-4d79-b798-0eee9c910254", "sighting--c25deced-fd17-4f0c-9d17-3aa5fb8c3194", "sighting--baf7ebe4-be49-4d2b-b0d8-5e80e017494c", "sighting--65826793-0347-4418-8f6e-c34e3039d83f", "sighting--aacfca42-1e09-44f8-8295-10e07ec9b74b", "sighting--66eb6ec9-6e51-4d51-a340-5becbaabc0f5", "sighting--07687580-74f7-4609-81b7-c7d3c0a8a1bc", "sighting--e669da88-39e0-42b4-a09e-79e4eb42167a", "sighting--2d6135b3-cda3-4e0f-ba77-9a1b54224d94", "sighting--0c206bf5-ccd2-4760-b1dc-f680cf0819ae", "sighting--ac7035e7-a83d-4ad0-90d3-b5d6fb827c4d", "sighting--3168a380-8f44-4d32-a9f1-5c6b779543c4", "sighting--777007d6-1547-43f7-92a0-7cd4e1f1cf25", "sighting--53dbd612-e3e2-42f0-87df-5276499ae846", "sighting--7ffb07e2-b9c5-454e-b235-bd1ed1bf0acd", "sighting--d2ea3bca-8a27-4fe6-8256-80b2e5448d04", "sighting--adbb75dd-33d4-4f29-aefe-b9f991eccb97", "sighting--fa6bd096-cc8c-482e-bdda-2e9632554671", "sighting--2fe99990-7425-4f7e-a3f8-1b5ac1dd0e29", "sighting--a28f5a11-a926-4d90-8296-f340dcdc4b8b", "sighting--8dd64dc3-ba77-4929-82bd-2255e6c6f941", "sighting--361e3bec-731b-4e28-81fe-8820f55b85a9", "sighting--f2d84f91-c05c-42e9-8d9b-e003cdb60b24", "sighting--c0207ab8-fc1a-4909-963f-e8c51893a115", "sighting--1844aa53-8e03-49e5-8772-6c219c782e6c", "sighting--fad70e3f-d29b-4a4e-9c59-353c7c6ed466", "sighting--f7bc47fa-2947-4bc9-93ef-35b2ec9eafdc", "sighting--59287bd2-ba26-446a-8822-aa1e46fc55ac", "sighting--8bf294f4-ba48-4de0-9ac9-cf3470c749d2", "sighting--640ec40b-e82d-43d0-81c9-e2bea065e50c", "sighting--dc41376a-c6dc-498b-88a8-9979a61b094b", "sighting--81d76da0-461b-4573-b5d3-99f7fc8d91f7", "sighting--17a8529c-3d88-4056-9fb3-9b5925c07698", "sighting--39d8fdd2-19f2-4042-81f6-f1a05bc04b9f", "sighting--a122bdf8-f4a8-443a-b1da-6dc994604ccf", "sighting--90a743cc-1a65-425c-80dc-e36059f1db7d", "sighting--49fdf5d2-41ef-4bee-ada1-a3ba65c43a14", "sighting--9b903435-0e0c-4caa-8d89-a22760850989", "sighting--7fb8b44d-b10a-42ae-98e8-75ac64f843dd", "sighting--d88a71a6-6501-4345-9034-87c8a89fb180", "sighting--afac4e5b-4f6f-43b8-b367-1799c5de5983", "sighting--68c6f23c-80a3-4888-a1f8-9e9d3db7b878", "sighting--e969fed1-ee03-4693-b9e9-1d833270fcf5", "sighting--5b81a95f-96a5-4e72-b731-d110558a220b", "sighting--859818fe-3cd0-4de1-8ae8-d3bbf1f84fc5", "sighting--c279db99-3ad0-4872-ba44-d16501935b52", "sighting--db7950f6-f6d5-4d00-874b-8a1b97310839", "sighting--c71dcc5c-46a1-4b52-a074-bc3329710406", "sighting--67784775-4497-4ab7-bd61-6e33134c341e", "sighting--0ded9abd-00bd-4872-8ed3-aaf40a99449d", "sighting--2a15b820-541c-4b39-ac27-1e9005ead973", "sighting--621ad9f9-f3c9-4446-be1c-bb470eb593e2", "sighting--f0e43f46-647d-4912-9fb3-20633c21d988", "sighting--cb036cf9-1a45-4333-b06e-28ef0701bc1c", "sighting--ac11df1b-4e7d-4545-b782-da7a02c8a6ca", "sighting--1f1cd784-49b0-4cd8-8db4-bcef75c7be8e", "sighting--42734ccc-c387-4a71-81c4-6ac8224a47df", "sighting--79a6d454-d448-41d2-9865-104a3f3e9245", "sighting--ba1998bb-54e6-4a48-b084-856a59cbd1d4", "sighting--c0ed11c8-86fb-4383-bcd4-844a1ce2713a", "sighting--04093803-ae34-40c2-9055-edef80cc1815", "sighting--5d077c2a-abd6-4119-8791-04cc7227b18d", "sighting--9107b686-0267-4ad1-8411-cb38d3a52611", "sighting--c23ed3bd-c881-4cd2-a8f8-efa49a50a888", "sighting--4564c5f2-a670-4ce5-a7a0-4307452ff2c6", "sighting--25a41ed6-ff8e-49f2-be4a-873e9b8a1121", "sighting--5e7a911f-dc67-4b96-8fce-32b9e772f1d0", "sighting--9627dfc0-466f-48eb-b3f6-6787cb0e9bf2", "sighting--5dcfd4a6-e8c7-4c71-a91c-da36502c368a", "sighting--be1fff21-5659-464b-a40c-a5e380453db6", "sighting--bed86c1f-f6cb-4a02-9d74-9abbd8f2584c", "sighting--1846bcea-fa9b-4be0-a673-c31301c90f65", "sighting--9b49e6e0-533f-402e-a5a6-e5225e4b4264", "sighting--c1b5c322-fade-44af-a7de-bfe14eff2fa2", "sighting--5748aff6-f0d2-4259-9dcc-d48a29ad48e8", "sighting--df1362c4-b2e0-4f4f-8ca3-bd64edb5e301", "sighting--231f4519-5971-4b6e-9488-6b46667cfb0f", "sighting--e17786a2-31d3-47aa-bb6c-5b13c93565a7", "sighting--fbe383f1-d91d-427f-a770-692aafa80568", "sighting--bb94b2a3-b58f-4f97-bad8-df3fd1e62ed6", "sighting--38ae5b90-82a9-420c-a8a0-e5aeac6ca241", "sighting--206dff3f-6f72-4424-8328-0df0eec6f66d", "sighting--9a34444b-ed3a-4d13-b49b-ad8c538014ad", "sighting--09c16c6a-9999-48f8-ad87-687c7291a267", "sighting--38fd7716-0f8e-4882-96c1-849654abc63a", "sighting--ca9944c7-10e7-4fb8-a037-f5ee16d0760e", "sighting--b1c5adf3-6a17-483f-ac56-5432300ade09", "sighting--276aab44-1857-4798-b1b6-87e97c29bcc9", "sighting--a8adea4d-552f-4b47-8c1a-9e271e79d69d", "sighting--29d224a1-6806-41db-ba07-69d9ec274eb0", "sighting--a31f586e-552c-4bc2-96c8-b00eff0d9ad7", "sighting--50e8bf3b-aed5-4a54-9afa-010301e7f062", "sighting--42e712a3-59b2-4b3c-8fd7-972db9856914", "sighting--a63f80fb-ab36-4529-b37d-8476939ee57e", "sighting--ff185316-255f-42b3-9977-af73ef713f23", "sighting--5c02b14c-58ca-40f9-aa4e-243d600cc055", "sighting--8d6f1830-89fc-48e6-a8a2-f7cf24d8bc76", "sighting--55cc7c13-c397-4b48-9642-9a163fae5f3a", "sighting--96d59b75-5d63-4b01-91ea-567ce7329fe9", "sighting--515ce05b-b74f-4654-842a-d964a5871d0c", "sighting--61663f4f-ea4a-41ab-85c4-b2120a62aa7c", "sighting--783a02f8-7d2d-4c8a-9a33-6feeb01f9758", "sighting--2a336553-aa77-4973-8c8f-f8cd48f45489", "sighting--07dd7e94-5d99-4388-966c-52bb0e1305cd", "sighting--3424e39f-e47a-4d16-b5d9-0a9aafad0b78", "sighting--7c7f6647-aff2-4548-8598-511f06338b59", "sighting--c92b6646-724b-4c1c-88f6-73cc275f5c47", "sighting--3703c589-50b4-440a-8d02-f7c88ed2299b", "sighting--1b9ed058-be40-4b07-9427-9b83acd2bfaf", "sighting--903adf9e-e440-4150-b2e5-7abc20f40e2a", "sighting--f83a52fd-4c99-47df-a11c-f82ea6aa608c", "sighting--83f2c1c6-6226-437c-854d-eb16fdbd911e", "sighting--130b0e12-5405-45de-a1f9-4ccb4fb9340f", "sighting--cd57e894-094a-4ef5-be60-7599ba69cdd4", "sighting--05f2f9b8-5551-4643-aee5-ac84fe5aa154", "sighting--25721fbc-756f-4d52-8077-60e02ea632b7", "sighting--d4abac5a-74d6-4caa-8e9b-e184dacad107", "sighting--fb182eae-2266-4e44-8767-972e0d1bce7d", "sighting--015ebe52-a558-47eb-955b-ef4a32fb9b9f", "sighting--c39f4bb5-2c61-4b74-bceb-9e35f81aafe2", "sighting--c93730c4-af0c-441d-91c8-56483cf419ef", "sighting--f14c7437-4329-4c55-b9c5-69a29c9fe5e5", "sighting--f1483802-e7f7-409e-93a8-54651d9127bd", "sighting--eeb2050f-97c2-4d23-bcb8-2091cc48cfb3", "sighting--9d494cba-74ca-428d-be77-c237505a768a", "sighting--44bb2979-8ef6-433d-81db-b04ce138223c", "sighting--c35983a6-7c58-4aaf-b021-e8de20a0e8ad", "sighting--f5270d6b-ad9e-4a59-afbb-5695c712ce3e", "sighting--1a4adccd-3420-4186-9ef6-cc8f7203be9a", "sighting--b8dc3556-6557-440a-a050-9265a32db7fa", "sighting--fb47bbfc-4ce1-4a3a-946b-37aaa0a50e7f", "sighting--f5551e9b-2fe6-409c-9d0c-8ed7c7ddd516", "sighting--d5819b7a-d325-4c38-b8cf-c64cca1595d0", "sighting--e73e36c7-a306-45a1-ab66-f5aa5e86f738", "sighting--840a4afe-96bc-4d3c-b784-d724cc266986", "sighting--dd64feaf-afab-42a5-8c92-c169dcfd4909", "sighting--ef36e13b-7870-4b0e-8cbb-fecf3e046d49", "sighting--5aa7b3cb-541c-49a6-ae31-570b6cff55ba", "sighting--91bd5268-2f3e-4d3a-bd7a-14b682020ff2", "sighting--837ca785-c382-4267-bffd-21915c9c61e0", "sighting--2b479525-6303-49d8-ab83-7ec250365f85", "sighting--ee5307de-0189-4fff-87b9-31db50e979ed", "sighting--8c2854ea-7dde-424c-a618-c73f22d83df7", "sighting--a4109deb-969e-4abe-8592-0af0998d765b", "sighting--25aa4a5d-a201-4574-9d04-a03d09c2fcfd", "sighting--f8e766e3-9739-4b16-a378-6d511ad59c9f", "sighting--a95f7a73-aae4-4626-9cfe-b8e0cc3b1140", "sighting--a1815e70-b7fb-4a9e-91e0-61475fecea5c", "sighting--f5eb782f-b2f5-4e76-ae6e-a3ea6ae10324", "sighting--d86e69a1-b389-49b0-87e1-beeb9e8b3edc", "sighting--923dd9c9-05f0-484f-b6a1-7235a35884e5", "sighting--8172f9aa-24ef-453f-87c9-73dea6901721", "sighting--82a42241-d6b5-4ada-b759-9def4b16da2a", "sighting--e0fcaf63-63ae-4354-a3d1-dbe7f1b3b699", "sighting--4c187425-2546-4c8d-bb11-d7be587ab114", "sighting--127d4d4c-cb3b-46f7-ac9a-cccd48ecae97", "sighting--383c4cb6-3fe5-41ed-926c-1c5ff5b8490e", "sighting--ad01f58d-c750-4112-908d-b5dd0b398a94", "sighting--7b1e93dc-9adf-455b-a4f6-48908c348592", "sighting--509eeac4-e4e2-49dc-986d-184be51de4d3", "sighting--ab70c24a-f8b1-432d-9b86-378f369fd663", "sighting--f960b830-1e6e-4f06-975a-3c6db7cca094", "sighting--01a96f64-5337-4e25-a219-e03a7dd1a5a1", "sighting--b9071818-5bc5-45e0-a5c3-3413a121f079", "sighting--672bbea8-1b20-4c15-8016-0393f78396e5", "sighting--ad0b8c84-94c9-4c1b-8b95-e415d9699e58", "sighting--270601d8-8f87-4fa2-bb4b-eec0a7a083e9", "sighting--60cb0cda-b474-4466-9ac5-fc99575aab05", "sighting--61ae7a97-41e7-4a4a-aef4-8a6ec7fed8bb", "sighting--3743bd0b-a303-4781-a2bc-89240d773346", "sighting--58cbce76-e006-42fe-b097-8c655f852416", "sighting--2b9bf426-030f-47b3-a4da-a8a00d50cfab", "sighting--0ca1827f-dc1b-414d-8d0d-7c866a3beac0", "sighting--31e30fc2-fda9-43fe-b72d-4099512f2b67", "sighting--e1f49e36-8cb4-4a3f-801c-ea8603d13205", "sighting--a078ddd8-4b4d-4984-9b92-7f8cef92d8dd", "sighting--a78cf0db-b2d2-4005-9e1b-38f71a449890", "sighting--29a7b905-c6ce-4a88-845a-e005fee61dd8", "sighting--dd07c524-669b-4902-9d2d-71e0bc578a7c", "sighting--f74da803-ae94-4034-9fab-7d2c2a45355c", "sighting--4edc82a2-fc63-4ee2-a798-1df79900bfca", "sighting--ae06451b-62ba-48ab-8ae4-256341542b6e", "sighting--c96809d2-7152-42fe-acd3-50ee35c789ce", "sighting--9a7c92de-ba19-4368-8c2c-3ef2ed0450df", "sighting--703a76f1-6e33-44f8-a674-6dc15acb275c", "sighting--e403a162-2c60-4d64-b12a-7e7cc8da4105", "sighting--cf066e9a-5f0b-4b56-8206-59e2b7ed9caa", "sighting--886d3d9b-a600-4662-9999-09ad4886f39a", "sighting--f0e8a834-fe94-412f-92dc-ff8e9e0cd27e", "sighting--93ab03fa-7c87-4969-87e9-7c9c37551b7b", "sighting--0905b302-7902-4ed6-95b7-6794ed5840d9", "sighting--2e396666-ed5d-42bb-9567-cc5ec69f0cf8", "sighting--d62fcd48-e0a8-40c0-8e5a-960f3f3c2812", "sighting--b54d4b33-9fbb-40b0-9128-3361a441a013", "sighting--5f316b76-cb30-428a-b8c6-d358ea24240e", "sighting--7f456209-8fb2-4958-90ac-a2065a88ed1a", "sighting--8acf4c22-7f24-45b6-bad5-eec0344d5a31", "sighting--46ccda47-37fa-4b5b-826c-5634dcec7327", "sighting--03b0824a-825d-499d-9550-d3eaa6a5ee56", "sighting--7d0b28e9-40b8-4849-8325-c0c89864c8af", "sighting--74eece8f-05ac-4131-81ce-5ce2c48e777f", "sighting--753211ca-8aed-4b27-b352-b29aebe6489b", "sighting--cfaf0dce-89ce-4c2f-af37-6e035ee91c54", "sighting--8d40742e-9bf0-49fd-9053-5627d01ecd96", "sighting--5fe40fa5-3cf9-4f35-9ec1-9c9d6f3f9402", "sighting--b9b2d5a4-96d6-48b1-b2f0-bc947557ce25", "sighting--6c5f10db-8dd9-4103-ad2f-74b269e4143b", "sighting--db299af7-d28a-421d-a15a-b1f25d5e2606", "sighting--929f5e6a-8b38-4a99-91d0-ea62a7b5cfca", "sighting--1ce6228c-6de8-463d-858d-ec4111178ff5", "sighting--1ec55fbb-1045-44e4-915f-ff411b060cdd", "sighting--13be757d-7904-4af1-9363-8e202631cb9e", "sighting--bb45b218-74d5-4a83-baab-e2e7134b4614", "sighting--861cc93b-49d3-42de-a1d1-199e97f446b0", "sighting--00d4e183-076d-4526-953a-7e9987032230", "sighting--8e13e4c5-275d-40cd-9cb7-f69504553e85", "sighting--398049fa-1760-4077-8cf4-2d7d5d8f4f1c", "sighting--2d70cbbf-8a39-4e1c-a37d-56bd6f5fd6fb", "sighting--69b2be1e-5318-42ef-802e-e3ce294f2355", "sighting--42348706-2286-4fde-97f9-af77b0756fb9", "sighting--be4be94a-7a47-417a-a250-53c030f6f262", "sighting--8fef6305-5748-4e0f-9385-a2bfabdd05ff", "sighting--0ce4cac2-b618-4ef8-991e-aa84d4529e0e", "sighting--9e4aac18-b6d6-49a9-9480-16ed696fec37", "sighting--85ed14df-455c-4f0a-a2eb-b796d720b5fb", "sighting--a7d50703-7ec7-488a-99a0-1e3053552021", "sighting--eb1fb64f-4bb3-486d-89e0-071ce9f69b8e", "sighting--25112dc2-b810-4fdc-8d58-85e7b8813506", "sighting--e843e08b-d6fe-49a3-bacd-5fb40e687ec7", "sighting--03439d60-c4f7-4f12-88b1-05fe7cc90dec", "sighting--9834a915-c6e7-4e27-99af-9c4f560206fd", "sighting--ddc4b545-6068-48dc-82cb-3c899028c39c", "sighting--324b9ac9-f1ab-41c7-a071-836e183e262b", "sighting--84cb7a3d-f279-44d4-b51d-75af65375876", "sighting--21377183-d695-4247-8705-cb5c27d8462a", "sighting--b8be1c96-775f-4893-bc5c-042dddb56eb9", "sighting--0bcf81b8-5e4b-4423-a325-7aacf9b3c30a", "sighting--e596f6a4-345b-44a7-a34b-9074b428bacc", "sighting--41e3a09a-5df5-40d9-83f0-7b62e9818d91", "sighting--c2ec80e9-4af3-4d8d-a37c-784118e82af3", "sighting--baaf4a36-4ab6-4b98-89ba-2caafbba3669", "sighting--27d01e7e-0d61-49bf-a7c8-d6de0f45dbcf", "sighting--b30b9f02-7c13-4e47-83d8-847e1ca4916f", "sighting--53146e28-d606-4e11-b0f6-415ba0075100", "sighting--ecbba476-607f-4b7c-a1ec-d881e742ff1b", "sighting--4ef2cf90-3853-4db4-93c2-f4d781d45502", "sighting--5472a8ba-e339-4d59-b364-102d1e9045e5", "sighting--d0fc5d57-6cde-4c51-9137-a01ab18ba77b", "sighting--4da34275-5563-46e9-a509-fb2c890a3ba7", "sighting--82a60bd5-e273-4192-833a-2a968dbf2411", "sighting--6831e121-9ce6-48da-a816-4bbfbcc568d2", "sighting--cbf30a9c-4bfe-4fc9-8c57-7c4e1812c1ed", "sighting--847be67f-d873-4a62-b2cf-92734464a4fc", "sighting--1da24982-f8d9-4138-a8f1-b4be1ec2daff", "sighting--53102472-9dd2-4b87-9a85-db4725f66caa", "sighting--9a675b25-1721-463c-92db-e6a39d934e29", "sighting--7e4b1217-dad1-4a1e-bfc0-a4b7e232bd1b", "sighting--b04c3a2c-9710-4f8b-a377-80f435a193ea", "sighting--49e0704d-eee8-4f00-9229-9c2fc1e6f776", "sighting--d4ed20b8-048b-4fc3-b128-8b5affbc2b96", "sighting--2c2f978b-7efc-44f9-9be9-2e1872130547", "sighting--9d085f59-4326-45a6-88bf-fd041b3ebeed", "sighting--d3e85c92-c414-4132-851f-0d23b8d8805a", "sighting--396542d5-d4f4-47f8-bec1-e8de8da595a5", "sighting--c1b5a15e-7364-4df6-ac6a-3ad43e9e2b15", "sighting--b8b1357f-7d3f-46ea-a9c9-24cd45fc728a", "sighting--28d17380-7d9a-4e23-9c91-b042aa0eb9d9", "sighting--5b36cee3-3893-472d-8a53-3cc12e3ccbe7", "sighting--38ce306d-64bd-4f14-be22-fc64c7c2b4ce", "sighting--d3716690-ae2d-4ca4-b7ee-b11d29d847ad", "sighting--6dd5e514-bc02-40f0-a26d-108458c071f0", "sighting--e170ca7f-2fe5-4bc1-a42f-b3a2cca2fda6", "sighting--23384bf7-9c35-4eda-861b-12e037bfc06f", "sighting--34bc1de3-e1c2-474b-b0d6-b4554a43dc7e", "sighting--c68f1f3c-3603-46a9-bdc1-fce6fd5570ea", "sighting--51f27e41-4050-4cb3-a334-e4c8548a6b8e", "sighting--5c842fc3-b9cb-4362-92d3-bcdb59ce8059", "sighting--87ee4eee-db8b-4d45-9e4a-8721c8aa364d", "sighting--4c474aa0-1224-4008-a362-eab31f103373", "sighting--988d57a1-a82b-4ee9-873d-c87b8d2c5f43", "sighting--b97752d4-2152-494e-9a2c-4aa85ce9079a", "sighting--7e6e1bd1-5c6a-4e4c-821c-1a2726e85cd4", "sighting--e0fc1d60-d419-41c6-ab28-b7d37e64b306", "sighting--d36e90db-c3bb-4854-8538-978b272d9650", "sighting--98233f65-8011-472c-80b4-131ab8c32b3b", "sighting--9b22b153-b134-44b1-a0a8-8189f3db8523", "sighting--de1b8a6b-3ad7-4386-a13b-e4a51bf0f43e", "sighting--2b12070f-655f-49bd-931a-0192b544229e", "sighting--08b6adcd-7c8b-4440-9912-1644ad7963a0", "sighting--01bd29a8-7c74-4028-a4b3-2028b749af92", "sighting--e432f1a3-cd10-4bcb-b84d-61e7e376b1ad", "sighting--dc9f0859-97ce-43e5-81d2-8a7ef49c5abe", "sighting--ee3950c0-c09b-47c7-83ba-abb0a1bab266", "sighting--a79e83c1-816a-4cc0-ba9a-1547c206a3c7", "sighting--69a7ef88-0734-47e6-86b6-17a8553c8f11", "sighting--ca40b180-fab0-4c3d-9fdc-3bd1f97d3902", "sighting--e2e969c3-6393-447b-8aa4-c34af3b5d00f", "sighting--cdf42d04-26fd-419e-bd06-30cfc42e4ae3", "sighting--2201f160-983c-4f0e-9580-810e6eb69380", "sighting--37dffe3f-8900-4a7c-b746-b13528f724d0", "sighting--315901fa-a0c5-49d7-aaea-de904fcbe145", "sighting--e229b32f-d9cf-4225-815e-8387062a0da0", "sighting--fb25d819-acfc-4d13-a634-aa29ea1f7cde", "sighting--d4cc5256-b6d1-468a-9c01-8bc13662f54c", "sighting--c7fb5c4c-17f2-44d0-a4b6-a3e78c5b04c8", "sighting--2c4457a1-0219-478c-9cca-29aa602baf60", "sighting--1ab52f8c-ab6f-470e-92fa-6ddc8057e064", "sighting--91cb914f-d792-4458-a917-6e538d2c3d3b", "sighting--7465c8df-954e-4587-8020-966950992250", "sighting--fc9c85cd-2f41-4910-b6cc-9e40b8431d25", "sighting--310435be-541d-44d9-88ee-4b1805977e71", "sighting--cff8d83a-e911-4ec7-93b2-6b5acac1fb3d", "sighting--7e86ad3e-0102-4338-9eda-2d4dcdfe05c9", "sighting--7d5d141c-336b-4558-ab9b-4cfeb4c4b974", "sighting--0672e0ad-4a7a-416b-949c-7861d95f0a3d", "sighting--a1c3627d-9267-4d1c-bd8b-f80238abd4d0", "sighting--025db84f-f7a9-4826-9315-cdf1eccfe70b", "sighting--cf22bfb0-f374-48fa-8ad9-ed38fd524f56", "sighting--4bbe6f40-d1f6-437a-8cdc-cc5ada3e8af3", "sighting--27f24a5a-019a-426f-b0c3-62c0d2cb5eb5", "sighting--4b702575-e3f0-4b3f-86bf-dfc45db7864e", "sighting--f1b78c35-8972-48d1-900e-1f02e25ef2a0", "sighting--aa40fdd7-c338-4ac0-955d-67c721e02ae2", "sighting--8ea0fac4-e818-4300-a7ab-cab69cb06d93", "sighting--867e7f33-6222-4d15-901e-d1074edee73e", "sighting--7a382048-c41a-4412-89e6-c0777732c0b5", "sighting--f163665b-be7d-4518-8c1b-bd90371ac481", "sighting--b0a48fcf-2f82-4827-ad3e-68b5be3d713a", "sighting--c3b9de11-6d3f-46c3-838f-cf1404a91fb9", "sighting--ae78901c-c7ab-4120-9a34-9df1acc2818c", "sighting--b7086bd7-02dc-4ff1-b92a-b0167e60c4cc", "sighting--134ac9f9-7ee9-4538-bdc6-caa99291c656", "sighting--e84924a3-19bd-48d4-9b65-428a56a49f21", "sighting--facdd966-554b-448c-be37-3a8cc212e32d", "sighting--b94aeb4d-22ee-403e-b7e9-66c93b55aeba", "sighting--7031357e-b0bc-4297-9d64-ed0c57977737", "sighting--f84522ab-badc-44cd-9223-77bc684d7d37", "sighting--02963e30-478c-4334-9d79-f6b33fab1e51", "sighting--321ffe0a-ceaf-4e3e-8644-60796091dc5a", "sighting--c7791f6b-4c81-42ad-ad28-29643c60f3cf", "sighting--641ffdd2-df9a-4356-b470-38892891b9f1", "sighting--e7340141-4c07-4d71-a2cf-8a7a07817dda", "sighting--9c7496d3-8e22-47c1-904e-a5338c57c01d", "sighting--f71078a2-681b-4509-a595-692642b2f7e5", "sighting--aba3d388-64f4-4e14-818d-5bcd4cf0378d", "sighting--f40a1891-43e0-414d-9b8b-b087ab75496f", "sighting--7b13aba3-0525-46a4-b101-75816aad2a68", "sighting--2cf36014-c497-47b0-b745-72abe99222c2", "sighting--96ad090b-ab77-45f8-a2b0-57df6aa08003", "sighting--c069ba2e-c043-4379-bb8c-9d5d6a5498e7", "sighting--d12176d5-12c5-4a3b-ba0c-ebf7fcc53a14", "sighting--8cf8c0fc-700f-4a38-b9a3-3340bb78fcb4", "sighting--af0cd20b-4582-40c6-b011-56b2c6571a56", "sighting--23689efc-3b71-47be-a188-aea8327f7e1c", "sighting--3fe49fb7-a789-4ea4-9545-ea3f7be015a9", "sighting--68876739-1ac2-4ee2-81ee-ba207c4e7dc2", "sighting--d4d04dda-2110-4aa4-851b-dc43c1ac4953", "sighting--90a07acb-d155-4d37-bece-d15ed2ba6e41", "sighting--7b8f8bd7-6ea8-430c-afc4-fad01a7b7de4", "sighting--b0d2a1b4-697d-4547-bdbb-b7c99faa7727", "sighting--473537b7-3380-4ecb-a66d-b8c618225782", "sighting--3e42ca51-a85d-4420-8af2-861952bc1088", "sighting--62ff3527-cee1-469f-b7e2-63bc668148ab", "sighting--874511f1-6061-4ec3-b8d3-19b7f7c53cb4", "sighting--e857db35-769b-49d1-8651-d29594fd4d61", "sighting--7beffd40-9230-4721-bd1d-8f6cde97dbd0", "sighting--4138cad3-7631-49b6-841a-158aa3467852", "sighting--5cf10220-985b-4416-b8f9-a100ce6380aa", "sighting--8ac93d41-0a7a-401e-b06c-14b933a880d3", "sighting--1cf4cae0-8c70-41e5-b775-2d16474fe026", "sighting--4f574c71-e3ba-4468-9b82-ad106e449270", "sighting--493eccfb-89dc-476f-9f08-7f31cd23bcfa", "sighting--f6673507-895b-4094-bacc-4635130ca82e", "sighting--daac863a-3e67-417a-980f-ce00159d3d19", "sighting--aacf2d60-3796-4f32-8af6-f55c64aa6c46", "sighting--cfabb19e-4d40-496e-8fb1-979bc42a82ce", "sighting--5711c166-d7a2-4b6b-a0ce-7c7383d68c76", "sighting--60ac30b1-9d0d-4354-a4f8-2bb231e88350", "sighting--0cf26daf-a9d5-45a4-921f-26347364a501", "sighting--a8b9d018-01a7-44e5-b210-cf67e4aa8f58", "sighting--456b1498-e803-4007-b6db-22a186ce7797", "sighting--2e534cfa-1567-4634-a696-707fed2736ca", "sighting--cd768b5f-333d-4bee-82a3-c0563e17ba1f", "sighting--ff62c521-232c-4313-90c1-1a45fcac5657", "sighting--92638d66-9e97-4b0b-88ad-8fd17261ad23", "sighting--a0b6e369-d8ff-462d-88e4-eeafda93a291", "sighting--2725af5e-20f0-4d10-8676-ab0f52b71d07", "sighting--95424769-94f8-419f-99b0-ff07ff5b38d0", "sighting--ca905d2b-cc80-4ea8-acec-c582a3ba748a", "sighting--8febb05b-16e4-489d-9fc7-2f2c9dcac839", "sighting--a20a6a9a-80e8-4958-8640-80d7e3b42de9", "sighting--41622d9f-99bb-44ca-a066-5074d6a08dc9", "sighting--3776cebd-0698-4634-8bb7-32160f83ac0c", "sighting--25d70d65-55e0-4888-90b1-210e28fce3f8", "sighting--f701e409-0c8c-41d9-bd50-fa3530ffed59", "sighting--25d34fcf-6904-4532-a9ca-b3ff16506d21", "sighting--12755122-8b2a-4879-b9a1-6ed2e9551db9", "sighting--876df31e-5c96-49ea-814b-74c0e747a8ab", "sighting--1234d18a-e9aa-4e96-8120-d9f40bb03448", "sighting--7fabe436-5b45-4e16-8aa3-57a728a67a16", "sighting--345285ec-0caf-455e-9336-5b2fd0af42c2", "sighting--23cf32da-b3c0-483c-a3b4-e3b10d04499f", "sighting--c6acd67a-fd59-4da1-a4ef-058ecfaa6b52", "sighting--d711b17f-b8d9-4ec3-abde-eabf6bd9357d", "sighting--68072b3f-fe61-49c0-ba06-9508bbc2b178", "sighting--76774106-8e3a-402c-a315-f50acaec2741", "sighting--76a4aa5d-23a5-4b88-b0a2-4e93d7ddd767", "sighting--56ff7c08-483e-4562-8636-55225ddd6250", "sighting--5dc590f1-e715-4dbb-b89c-dd0f4fcaca9b", "sighting--6d30192b-b0c7-4770-8706-cc891163498e", "sighting--ad1fe01f-f5ac-45b9-8519-df43183857df", "sighting--5ec86be6-4589-4427-897d-2aa33ec61c40", "sighting--a2c4417a-fed9-4253-b6b8-36672eaa81c8", "sighting--e4980ba5-c56c-4854-9999-6feb003a0036", "sighting--515d7c6f-d326-4d59-ae22-d53ff2ff2e06", "sighting--b52bb95c-df0f-4879-8f51-99413153a98a", "sighting--ddb4f4c1-b7c9-46fd-ba3b-6940eebe7735", "sighting--73a8d1ff-6e88-46bb-9e3b-bf4fa4e17c5b", "sighting--c87c465b-cd11-4a50-9aa4-10fcb9865af9", "sighting--7feaf4b7-ff16-4341-a2ce-573c470d1c61", "sighting--7d607e55-025e-47e8-ab82-7cf35e32064d", "sighting--863df636-c927-4e68-a8cf-dc5a42dfb512", "sighting--02f16335-a35a-4c9c-bee2-50d9f782eddf", "sighting--c237419e-f8dc-4f57-b303-5851bc1da214", "sighting--77093bfb-d744-4f3d-805d-33eea52bd326", "sighting--f433b69a-6453-4744-80fd-f27253abf6cc", "sighting--6a4d1c78-b765-45a0-ae8c-6b4b56814cd7", "sighting--4e07120e-41ae-4081-8e66-40bd2d11ec80", "sighting--bd39b3d2-6b01-4128-a2b3-085641fdcc07", "sighting--fe76cfda-669a-43a6-887b-6b83e9edf65e", "sighting--f5836857-982d-4147-9387-8b8dc35e25b4", "sighting--80ad5984-5880-4eef-bd80-a1e2ebacc59b", "sighting--fb1a7b27-aed4-4307-aaed-6c260365dba8", "sighting--5611a71b-12d4-435a-a32e-922499a9bf34", "sighting--49805a3d-4f57-4fbd-a5a0-dab15c632c1a", "sighting--56f68856-332d-47bd-bd9c-df3e73b5b2ac", "sighting--111f66f2-c981-4d51-845b-4e98eb0cb2c2", "sighting--b91f41cf-8563-40f0-8487-bd1a40093fd0", "sighting--ddbb6b29-2244-42a4-8de2-e6be019c52d9", "sighting--7e74f593-6ddd-4a8f-b170-d070d111cb0a", "sighting--2c132130-9733-4f33-8f2d-12ae7a44dd6e", "sighting--f7bc7110-d27b-4df7-aec4-03e142af26ec", "sighting--82e41721-79eb-49c2-b6a3-f5b43d491567", "sighting--4374b278-0462-4e5d-ba4a-df6ddae5fdf8", "sighting--04fb3f29-63e7-4902-b72d-2f371746aabb", "sighting--d289fc1f-0e49-4c92-9a55-a70d75566114", "sighting--34170223-9009-49d4-97c4-529fe06b0551", "sighting--f0c8405b-a3e3-463a-95e7-0035947da754", "sighting--b407333b-9414-4a2a-8f77-e4c42f92b8bb", "sighting--0e2ec974-786c-4e3f-ad5e-4fbca8f0a2f1", "sighting--97dd6916-302d-44ba-88a5-dfa8fc59e952", "sighting--196dcb08-fca1-4956-9d0d-36654e8aaaf6", "sighting--8d9a8217-cf9e-4d0d-a9c9-8c353e71a9e6", "sighting--84e4f0db-553f-467d-be11-987e7a8ef66b", "sighting--89e71511-58b5-48e3-9553-dfab88b11fb6", "sighting--80be5eba-2570-4160-8629-e12b154b7128", "sighting--dac465eb-353a-44e4-a773-623b10e4acc7", "sighting--7ecbd39f-92fd-4970-af4f-7504f83e393a", "sighting--4b7e1103-2e1b-496f-ba8a-da84405fd297", "sighting--d78d4f74-3588-4e73-bcc9-c6c6ff52a240", "sighting--bf10441f-e68a-45a7-885d-cdf9fee06231", "sighting--61104efa-e0da-4d26-a332-813b4177caf2", "sighting--1c940712-e5f2-4f47-a0da-31e65c001927", "sighting--a80f6af3-e8a7-4076-a1ef-13dd38f0123e", "sighting--ff19bb56-25f2-4ad8-8e0a-faf9fedd180a", "sighting--5f311d2b-8f20-45b8-997c-5e30290e3ea7", "sighting--0da0e229-9474-4fe1-b537-f80d304d8ae5", "sighting--e098c2fe-cb43-40cd-912d-74326367e47d", "sighting--13b70cb4-3ab2-4eaa-93ad-8c07ea1e51f9", "sighting--4b94b5cd-acea-4f44-897e-35e9b8749765", "sighting--e029679a-3e9d-4d0f-942b-71e4fea3c5c2", "sighting--f1b1bbaf-8c78-4eb4-8764-c90e7607ed3d", "sighting--799e4d90-9826-495b-bfcb-e078d64f7cdf", "sighting--6d647d52-d71c-4c35-8895-ccf9fa1f280e", "sighting--0f3f42d6-1dd8-4450-9975-50304025c42a", "sighting--90b9d669-5c0f-473e-8868-0d61031490f7", "sighting--fdaf7567-854f-4358-ab7e-a0f59d16b414", "sighting--20bc7e7a-c081-4649-9d66-fe61d6434cb4", "sighting--cbadcb9d-870b-40c1-bd8f-0b508c48b629", "sighting--ec387c93-2ef5-49cb-93f5-e9da8fb788b0", "sighting--51205ca9-909e-4089-9d0c-495ed6e401cf", "sighting--4ebe4271-d3ff-499e-b815-9b2b5ff62d3d", "sighting--9b6aa877-3dc0-4fd2-b988-dacce94e3048", "sighting--8ba6375e-e75d-4588-a393-4eccf07d497f", "sighting--3b19d837-9dad-4a15-bbbe-399ffe195987", "sighting--08dc7a61-fba9-4297-9def-28669e9e60e3", "sighting--95285a49-eafe-4a8c-9f66-261bbebc2593", "sighting--a5f5ac73-9fb0-4bfb-ac91-f88766b54f93", "sighting--92464e65-006f-4377-b0ba-d4b12bf56a9b", "sighting--09bf9523-8c09-455c-9a60-63cf4d4abdc2", "sighting--d19811c9-5d41-48cd-bb2e-7e9090481c9f", "sighting--07bcd945-8607-4f39-bc4b-010494b101bb", "sighting--d726b40e-44af-41ec-80ca-32c08ffa933c", "sighting--c37c5a1f-fbeb-4100-95df-281db18de1a7", "sighting--be14e63d-417b-4549-a7ee-9aa09c90ab1c", "sighting--dee3d0ee-554d-44cc-857b-cecbf478dea9", "sighting--b8a55412-f985-47b7-84bf-f5b18bc904d3", "sighting--976f5931-9987-4d85-b461-9580666dca64", "sighting--e23b6ed8-f665-4722-916b-f1ace4371ac6", "sighting--58a3abad-aef6-429e-87ea-5cba0a75682b", "sighting--db8756fc-087e-49e5-a385-abe477f489c4", "sighting--2e0a94fa-89e3-444f-9582-8157b70c6fd7", "sighting--800372d6-7d50-4c8a-a009-6725b8ad5f20", "sighting--33753af4-b3db-44df-b23f-c55b2e4920ef", "sighting--599533b6-cec4-47c2-937b-f7e27fc2b851", "sighting--8786e1ba-e8ac-4ee9-9cbb-595b6da8d5af", "sighting--a0200bb4-3e89-47a4-9256-fef8567fde8c", "sighting--78c5555b-9727-4ef7-b327-a328700ea092", "sighting--c364b064-1f20-4d0c-aab6-9d001fb7116a", "sighting--097281ac-d96a-48d6-97d7-f4e2d30bc4b5", "sighting--8fba14b4-0540-4e0d-ad5f-a6d3e454a6b0", "sighting--4eebd196-2723-4bfe-8eea-56015ad41c95", "sighting--41617894-96c1-4f1e-b568-c44a65f5ed22", "sighting--e49b8495-141f-43a6-aee3-540607e3c109", "sighting--f7c909a1-a08d-4ead-8e66-14bb043d10be", "sighting--8ba0e804-41de-435c-9659-771bb3141d59", "sighting--591d1e50-0891-49e0-add5-dfa78957c84a", "sighting--fb622fbe-b3a2-4555-b587-3666033f6090", "sighting--0aa2032c-4938-427a-8e1b-8db3227c967b", "sighting--2219b929-e832-485b-afbc-6aa77a6ad802", "sighting--f902e028-bca0-4cc2-8679-24011d4cbfb1", "sighting--3c69d5d9-7135-4867-89c9-7dd87d7651ed", "sighting--f899855b-298f-4be6-915b-94e61afd2fc7", "sighting--3a910c98-b9eb-44db-a794-068e1cad519f", "sighting--3f0dc9e6-eb17-4dae-8770-1dfacdd7c98c", "sighting--7bfd6c0e-b9b1-4e92-a466-c47611d1dde8", "sighting--07f84ccc-9d0b-4a36-853f-2cfe6d79d118", "sighting--24989e1c-45d6-4388-9bf0-e6a2ee9cd9f5", "sighting--304db1a3-0667-406c-99f6-b902261ecbbf", "sighting--e4a7ee6e-f82d-45e5-b191-6e520a991a4b", "sighting--d07d492a-340e-43de-b0f3-d51cae73b384", "sighting--cd58487b-e906-445a-ba48-fe319587c1d4", "sighting--72081244-187d-4247-90c8-77adfc828967", "sighting--e3c78098-8938-4fe5-96b9-0aefb1c59c02", "sighting--e4997b17-d17a-4c78-b6a4-76f23b0d0adf", "sighting--7420f797-4254-4d62-861f-a16b185d113b", "sighting--4b831216-17f7-4a20-a4c6-67f06445c6ff", "sighting--1f45f78b-8aac-46cf-972e-32c8828728ed", "sighting--b67c5343-ec0c-4ab9-9856-5828d9c13b94", "sighting--ccdf79f7-790d-451c-9101-6cf9688cdcfb", "sighting--70e86d1a-8f2d-47d1-8e7e-cdad35f400f3", "sighting--2386986a-70c7-40a5-86a9-a3120f039f1b", "sighting--83e82f61-b4f9-424d-8931-6cd7c96545ff", "sighting--5ff6ac48-879d-4ee6-9c86-7120c0dea880", "sighting--fe977410-8353-425d-93dc-b5c6043674c7", "sighting--2786fb6f-ab52-46dc-9640-bdfe7e72d9ea", "sighting--f4eeccef-2623-4d1b-8a90-b52ed83409aa", "sighting--e6a9d92d-8301-4f8a-92ab-435a364ff630", "sighting--7779ab5f-263b-4b39-aa69-882b2c50fd1f", "sighting--fba8ee73-8d35-4f97-a603-955bdd2468be", "sighting--f1b8bbcc-681f-4454-8e1a-bf67f119c4b9", "sighting--7558e68e-e843-4773-8c9e-56f927ea414e", "sighting--914b59a2-8d07-4970-9f3e-ec1a9f532972", "sighting--93fa3a2f-5098-459d-8581-97847386ec13", "sighting--8b61db1d-bd86-4a0a-b755-4428a035e5be", "sighting--f1111983-f568-423d-9c6b-9a21c7b8d44b", "sighting--3173f693-2edd-4e11-b29a-b34203e8f065", "sighting--cda42838-0f71-4e7c-b8f0-3fc1a03af6bc", "sighting--d5b647c8-9cd1-4c3f-a5d6-aafd5b359dc8", "sighting--ab324daa-10c0-4972-baf2-c36854cb93a1", "sighting--4d347a2f-0ce6-4bab-a934-612b415014cc", "sighting--9a8d6f0f-5861-4f3c-bd6a-6f7a57a5416c", "sighting--2478b12f-44a3-438f-94e9-87b779788016", "sighting--1387d7f0-5cbb-43ca-be9a-a2dab42693c8", "sighting--d5810aca-e1eb-46d0-8949-684f8f262c19", "sighting--fce5bbc5-d5e9-4f56-9c3c-d1e8976c0fba", "sighting--af0a75d1-04cd-407b-9dc3-e0b3bb6c94de", "sighting--d30d8b76-3bae-4d8f-9877-c78fb75c262b", "sighting--8640bebc-0460-43dd-8d8e-e9c66bad013e", "sighting--f50d1fee-2401-46f5-8414-8b2343dd91b0", "sighting--3478352c-33ba-41b6-b7db-ad45679f474b", "sighting--c1acfd86-5d06-406c-b3cd-05600f37e2c8", "sighting--5903c0c5-24bc-46ae-9035-0eaddfe02262", "sighting--0509fa74-ce6f-42bd-b0de-93b735678de2", "sighting--57d36582-da99-4117-94f0-9b478319b052", "sighting--c1ed553b-263f-4a84-a908-cfd30eae11e3", "sighting--751b6a1f-07d5-428a-a613-9d576d4e8a1f", "sighting--f69f30e7-b1db-434b-bc33-3835945d921d", "sighting--f06b4611-09d9-4cff-914e-0814667fa245", "sighting--47828a0d-a218-4eb4-b229-0c8a25d8dddd", "sighting--5b57eef8-4cf2-4722-b129-b3d72393c062", "sighting--7b1d60a8-6dfe-42ee-b10e-30645a6cea59", "sighting--f227df21-8f4c-4b03-9389-f26bccd7e5d4", "sighting--61eec591-2e8b-4bd3-a36e-972d6dfb019c", "sighting--bfc6c6e9-6405-40a2-9b6f-84c3d93a66b9", "sighting--314d07be-47d3-4bea-8826-8ece7a96de80", "sighting--2c796fa7-cf52-4b44-9ba9-b6b71d20f2bb", "sighting--a65132c1-c473-45a0-96f0-b22ba1562f9a", "sighting--f64961c9-973b-4197-97f4-8f7ae9c8231b", "sighting--a0947adf-db02-4a8e-bad9-ce7ec997abe7", "sighting--53984202-d0a6-4391-9eb3-06cb3e3d6d74", "sighting--af3d3958-dec5-4086-a778-5b267136039c", "sighting--a598db78-fd69-400f-9078-ac5894bcd085", "sighting--b767208d-93af-4b9b-833c-57ea57161627", "sighting--539cc2e0-aefc-4b56-ac28-53de48a9f8d6", "sighting--f1fe799e-d13f-4521-8971-bbec83aaf623", "sighting--57146370-11b0-403e-af15-f90650ff84a8", "sighting--4aaa0475-05c5-4027-a633-92bd9a9d3651", "sighting--4cafd568-7bb6-4165-ae21-9c8c574654cb", "sighting--b4f55a8f-5058-4a57-880f-d2b678bbaae0", "sighting--7a61e109-8358-4a9f-874a-66edbe48ed23", "sighting--cd41b147-11e2-472b-a764-99a73ccd8fcb", "sighting--d78ee249-9bd3-40b5-a3f7-534464f4a2b8", "sighting--696a7074-d3ca-49f0-9867-1547bc45cd5f", "sighting--44b3c510-7b21-4037-adaf-2585b8db87b3", "sighting--953502a6-002f-470f-bf70-9caa13a06096", "sighting--031cdcc5-4bce-4d83-9351-6e15a915b83c", "sighting--e91ce916-b097-4537-94cb-84a03248ae12", "sighting--c0842842-8080-4811-b997-ed08a6c225da", "sighting--59c239df-af22-4c4a-8382-b2b325d86f62", "sighting--08054851-bef5-4bd3-9a11-73ab5ecac4de", "sighting--d4642eaa-7cca-4eb7-a70a-f44f1a94e35c", "sighting--f2c1fa10-2176-49de-8965-a286f383af91", "sighting--41252f6d-f081-4804-970e-fe3721548108", "sighting--7d2a8c40-8193-4db0-8b8f-f423a05ddf46", "sighting--049d4b30-d343-48bb-9fa3-98776baa8f77", "sighting--98989a93-0c64-4ef8-be85-962d9622888f", "sighting--f7e93ffe-1a54-4660-b0ae-8d39a39cdcd7", "sighting--99840721-caa7-4db6-ad9f-a47ad7ffd7fa", "sighting--f6eac113-1ba6-4412-b99f-ef954eb1dbc6", "sighting--700e2db4-cdb8-44d8-af1c-805234606a89", "sighting--a94da001-17a2-46c0-a3a0-38aa06c50691", "sighting--72e49d23-c6a9-4504-bac9-60c623ef7bb2", "sighting--029b02ef-1aca-40e1-ae39-b8fe753702b4", "sighting--367b54a8-1bc9-4889-a17b-18e96f194558", "sighting--2da364f0-cf4d-4ded-b84b-1ae74a161ca2", "sighting--db6bdea1-0e9e-43f5-ac92-ff94c5bdea10", "sighting--489e5184-a5cc-4950-8bb3-103a448e4e78", "sighting--8bb9682d-8b6b-4675-bae4-10dbebd1f860", "sighting--aa8e70ec-e1cc-4422-989b-0383f45e5d82", "sighting--ddabdfcf-b219-49b3-80fb-f49aee800908", "sighting--c49b3b5a-09d7-497d-8f19-1016bec585be", "sighting--a4f5c83c-16eb-4e05-b214-d75ea3f4e582", "sighting--9cfe3de5-3c61-489d-8f75-ca95372f15b7", "sighting--f09d216a-4176-4ccf-99de-798a6f61ac0c", "sighting--714b7089-e591-4eeb-aa88-8bb679a3c2b2", "sighting--43ca8ea2-e209-42cf-a958-06d563d8a37b", "sighting--035c26ff-518c-4a67-817c-ecad1f4797be", "sighting--e5e0f9ae-c995-4197-95b5-6d006cb8a098", "sighting--1129d722-3944-4b4b-997d-b9767dc4d9c6", "sighting--29adcdc3-02c0-4b5c-b3ce-d36647bcd5e1", "sighting--52e5eb3d-2c6d-44b1-9d61-a6e7e10eef9a", "sighting--258a4a0c-f89b-4d91-9c3e-c4a1e0e52d1f", "sighting--32d67366-2938-4a89-8336-82492b88bf63", "sighting--3fcf7ac9-0cb1-48ad-a0f3-098cf57c8e78", "sighting--1edadbe0-c841-4082-9199-c7851f52914e", "sighting--45e90bcc-0ec5-494c-b154-2a69cab2ab3e", "sighting--35208fd9-bb30-4e63-9f6c-7a19b08d12d7", "sighting--a174fd4e-39b8-4ef7-b52d-cbf1ca61fd9c", "sighting--b36346b9-e264-47aa-a04d-f429a17c1f6f", "sighting--ee11a96e-2ea2-433f-9354-38689a1f771b", "sighting--62fd8ee0-2343-466f-9e80-b10e6583b5fb", "sighting--5e678021-8d34-4210-abc2-af3b99d93778", "sighting--1c83d08a-0ed6-48ce-9b5e-7f86bb3a0900", "sighting--4c7fbbe3-c692-4d2c-a5e1-3208cbe2447b", "sighting--22b4aa0a-d092-4628-906c-5fcc5300d384", "sighting--e441cd38-053d-4e50-a2b1-8dfb6528cec8", "sighting--5a7d325f-8f29-457c-a18e-de84b8ac939f", "sighting--53064baf-3df9-497b-9a7e-18a836018289", "sighting--f082d2e8-3245-4147-8858-7ba3f5fa9904", "sighting--a38f8ace-d2c6-4c62-b34d-1ce5c68a3cd8", "sighting--69464b0a-03c6-438b-93d7-a497ad639908", "sighting--20d83c67-dc65-41f9-aea3-f277f179baad", "sighting--6c151032-6264-4e6a-bab5-3d03f170e2d0", "sighting--a0e06d3a-42b8-4b87-9a0f-3671066ab5c9", "sighting--c8114659-46bf-4551-bc32-557921fdab17", "sighting--51b7f39a-2633-4c45-9d0c-12a6ff0cb17d", "sighting--72511887-a364-42fa-835c-14d7a9b75fa3", "sighting--923c2282-0a29-4e35-87dc-9bc52ba222f0", "sighting--bf5758ea-f69f-4907-97a9-07a7ece611b4", "sighting--46666f77-eac7-4c84-a7a7-d9a1620d476d", "sighting--396f7782-2e7c-4e7a-9931-65589e10d9cf", "sighting--ef9db398-c679-46d1-80cd-14ef5ec45ac2", "sighting--42d5aca9-ac31-47a5-ac75-4d3b1be5c792", "sighting--7ac86719-df0b-4687-8a28-b456ae5670d3", "sighting--630f58f9-0731-429a-acb7-9baba14b585b", "sighting--c7e67c88-c7c0-4ddb-8192-121ff46363e4", "sighting--37dc7546-54c5-434e-a9da-fc61da5d7ef3", "sighting--7da5f3d8-67b3-4a18-96bf-968bc343ec41", "sighting--b76cf6c6-b385-48ed-ac15-27fb29b95eaf", "sighting--de4c0ecf-6268-41a1-af07-465e32aca395", "sighting--e3ad299b-0f40-47a7-98f6-a033d257e5d4", "sighting--7e439f83-34f2-41bd-885b-6545cb0773b1", "sighting--8848b4ff-7db8-4309-9b34-37e6d01c4c3f", "sighting--68ddf19b-0486-4740-8168-e9063bbcce7e", "sighting--97438550-35fa-4ec8-a7e0-32209894d719", "sighting--2208209d-c197-4ed8-b91a-07cd02f0ca6e", "sighting--16f7e894-ad1a-4591-9f37-6fddc1dcbdc0", "sighting--de66899c-e222-4bd5-901a-4d07ad48bfc1", "sighting--de53548d-1979-4f76-9341-e950807ef6b6", "sighting--d1529d98-0577-47f9-b230-f1dde787ad29", "sighting--7ffe9db2-2c40-4009-b50d-f2defff0af2b", "sighting--85154dfe-9eb9-4ef9-ad23-f3650db15ff8", "sighting--e27ffe45-ee32-4412-82f0-2dc1564dd6f4", "sighting--3eab5f7d-2901-4a05-aa8c-8aa833d55bca", "sighting--34cb2fc0-14d0-44f4-b62b-c803fd367944", "sighting--56514cac-7221-409b-be9b-8a1f74e2a5c7", "sighting--bb82afea-18c9-4c38-93b3-8713413ae4d0", "sighting--f30edf32-22e8-404a-bdd8-38ac679c4999", "sighting--1b06b2bf-afc0-4512-9b74-f689e737a57d", "sighting--708cb126-72f9-477a-8950-8cfa083b348b", "sighting--026cf9b8-a2d1-4266-8c4a-62f3ebd11968", "sighting--f92a284a-e4f5-4ed9-bd15-28a2a52a011d", "sighting--9f21d9f2-d7ad-44f0-9be3-ade1d8cbc44d", "sighting--1eb017e1-836c-4daf-aeac-defb0c6fefee", "sighting--f3260240-5944-4989-a668-b3ceb9b6dc92", "sighting--760ca2f3-3e57-46d7-855f-3abd48ca82d0", "sighting--4637d80c-90cd-4f11-a299-aba39886bf48", "sighting--10ae1119-1d09-44c9-a020-2a49dd92c4fe", "sighting--250fb92f-72a5-4b1f-b1bd-1f7c1da37ed4", "sighting--ecde1fb3-b40e-429f-a67f-96d511c3afba", "sighting--8aec001a-54a7-4915-aac1-b27d4064d104", "sighting--c78cee93-a01f-4a76-b316-f563f5685acc", "sighting--41209114-2322-4d64-98a9-e64fdcb118f9", "sighting--3ecace7f-a702-4689-902e-06d5a28225eb", "sighting--532984a8-95ca-41be-93b9-c8ea4b15ed01", "sighting--ea50ad1e-a4bb-4d4d-a8f0-c30c435a4e1b", "sighting--b76e72a9-e18f-4c46-bd6e-561ed82d48cd", "sighting--0d248a62-e531-4ff6-83c8-2070f8ce8810", "sighting--602b6362-1726-436a-ab10-72c5aec8e20d", "sighting--251035ad-c5b7-4912-967e-45ddefa96aab", "sighting--26037050-eabe-4ea8-af61-6e1f36dbd8c7", "sighting--b32a3fe4-0475-4f38-a558-e2b43a39ab24", "sighting--5f15145b-0ade-4199-872d-4b9efcac7da9", "sighting--cc051376-c274-489f-b5e0-4999d0cc2e3b", "sighting--850ad825-b36c-4b59-b389-a0256f208850", "sighting--a8d37615-8836-48fb-ab7e-c515135fd9d2", "sighting--eb76a73c-9b99-476e-883f-9b0988531d53", "sighting--2e1b5acf-2b3e-44c1-bc63-4f813e8a340b", "sighting--df6455c5-c895-4847-8918-ea89fff6a40f", "sighting--de54a845-02a9-4b58-babe-983b0bcc8389", "sighting--6676adea-1b5b-4b6f-9dbe-ea396f4c0ffc", "sighting--f40175fa-88b9-43e9-9e7a-d1f1fb24abe1", "sighting--9a329014-b39a-48c4-892d-e116c8f9a6ed", "sighting--3406d883-9c8f-4e69-b41f-3674a162a30e", "sighting--0465f236-3fc8-4b14-85e3-886207e73694", "sighting--3a7c1650-12c4-425a-aee3-0488234ff414", "sighting--bcb33886-5293-43b6-86f0-50d1efc9db96", "sighting--41c8ef14-11bc-49e9-8a03-281d1e3e4acf", "sighting--c1fbacf1-e038-48c7-85d5-f1031993cd68", "sighting--70ddc645-f704-455a-bc08-db5811ef0928", "sighting--f28ec748-30da-4cb6-9541-49888bdd0991", "sighting--2a5731be-6787-404d-8c56-0ed5794d5a3e", "sighting--4b9afaa4-69af-4f77-a0ef-f51df25c2a99", "sighting--fc150a24-4144-473a-aeed-21ceed6f37a0", "sighting--8878d010-23b1-4169-bb9a-d16495024501", "sighting--8788f37f-5595-4e91-a106-799fae58b491", "sighting--3ccea3cd-c54a-43cb-b008-ec053ebfd791", "sighting--2c641e39-5cef-40ca-bf1b-d835d4d3ab9c", "sighting--4eadbc27-b2a4-4c34-9a88-4becc10fc3f3", "sighting--e2425ca0-0464-4cb6-b7f4-8da2f55aff56", "sighting--017c5eec-af3e-4793-97bf-5b6a22a56fff", "sighting--da0b08d3-b111-4e40-a188-12580a2fb152", "sighting--e83de867-bb07-4e12-956f-ae26a84fdd7b", "sighting--d202194e-5ae8-44e1-a201-7bd426454e78", "sighting--d6111df3-3429-427b-b531-650923957b30", "sighting--c9fe27d3-6d88-4cc8-a384-3e2cf02534d1", "sighting--0cfd9ebd-7c5b-427b-91f7-8801f3406466", "sighting--dde31560-7d79-434e-8dd3-b470235d60b6", "sighting--35dc68c0-143d-4a64-a229-0fda6828a624", "sighting--0410c111-bda2-4aef-b922-edfef6186729", "sighting--21f78baa-f9e6-4a16-b110-1b018d041469", "sighting--69347d86-9bd5-4a77-951b-0be7de47c976", "sighting--2114f8b7-ec78-4cb4-815f-8f8fa3877c49", "sighting--bb99250d-cd58-4fd7-86c3-32d779f2176b", "sighting--55b7f116-43a3-49ad-91ec-18f421d9f24a", "sighting--df11ad2f-75fe-40ef-915f-8eb8dcd9505b", "sighting--8ca97241-1fa0-4c52-9aaf-4c4b6f9a4624", "sighting--200a8490-0f47-452b-b09b-63113836a0e5", "sighting--84ce6555-4925-43af-a647-1fb862c7bbf2", "sighting--f9fb3370-0e99-4ad0-9d59-74e656d79bdf", "sighting--2e2e75aa-4230-44ba-ba1d-5c7aa13529f5", "sighting--9b9c5972-0867-421e-a9ba-ce2c90e8df6b", "sighting--7cfdac6c-6356-43f4-9e6a-d5a2d369384b", "sighting--ce9cb4d2-3214-45da-94c7-c9d4f9177f0e", "sighting--b816d927-a7ab-4a97-bcef-626d33ecd759", "sighting--882411c1-7bb4-4902-a81d-9f77485e6ead", "sighting--9e43b397-8ce6-43e2-bc5f-bf1bb4f802ce", "sighting--2ed8a879-c666-45ed-b4f0-d927c13ff6ff", "sighting--c49e33e6-c189-4052-a5ca-14025305e8c1", "sighting--2b64e431-c0e3-4000-b612-edfe23ed78d7", "sighting--b343c5bb-3de4-476a-b552-7c783aede047", "sighting--b06e6021-12cb-499b-9d05-7fd3784b677e", "sighting--85ee6caa-f8da-4b00-97e9-3ff4e31d9c96", "sighting--5f02a075-24ba-4b4d-9214-6d2e919d8086", "sighting--2a6592f7-b5b9-4aa2-bdbb-6cb6bf10f5fa", "sighting--19f3d93b-f6fa-493d-85b1-7b2b047c3296", "sighting--7bb98c7a-110b-4be2-ab7d-77ef4841cc91", "sighting--270a8090-8337-4ee0-8437-6064d0ebd632", "sighting--a180405f-abca-4737-b2f5-d4f8caece07b", "sighting--9636d96c-f28a-49b1-8173-6fb7d079b0be", "sighting--74c110f7-8a65-4afc-8692-5f85ed05b1af", "sighting--80412dfd-616f-4583-a446-ea3a9ee40d0f", "sighting--5cc27c36-9db9-45bc-91a4-7f0e70c82fde", "sighting--1420ffaa-3807-4965-950a-cedbefec456a", "sighting--1aeca5c6-2b71-47b9-a581-e763d4650a75", "sighting--4c6bd6d6-409d-4ffe-8f8f-8cd57bcc15c6", "sighting--1cec2540-8217-4503-b6c8-64511a8bc792", "sighting--1d367034-37bd-4f4d-8c81-82ac6ceb6f25", "sighting--505c82b8-b6e3-42e4-8672-fef786ccfa2e", "sighting--4ef79cff-d5b9-481a-8a71-536c1d151c95", "sighting--93c8e382-7bed-461f-990a-155f26da823b", "sighting--f9a3b3b9-750e-4c7c-b55b-b71e7b4b0e2e", "sighting--0a916d09-15c5-4f42-bba6-e165897c906b", "sighting--57a17f5c-5e0a-463a-970b-8bc02ae554b5", "sighting--268a2d9b-3ee2-4a86-9eea-342729eb6dc6", "sighting--f0823a17-8c65-4bea-8724-b00f3ce885bb", "sighting--28c300d3-08c0-4fab-af8b-af9b28295f00", "sighting--1fd07ee9-4742-42e2-869f-6e6327e2a410", "sighting--0dc4a2f1-5d4c-42d5-bd34-4a46bc3839c7", "sighting--edd2abb4-da15-43a3-a5f0-917488d1517a", "sighting--ad5aadb6-aa07-4719-a4dd-992738ea1b7f", "sighting--aa5e6fc7-94cb-4ab2-9cec-a20ba4df0845", "sighting--ccf49741-108d-4e89-9c8d-1cd16e2a7471", "sighting--98ea73bc-f249-49ec-97a5-57ede714f9e1", "sighting--baad5d32-9612-4b97-9db5-bce12db44586", "sighting--1fcee21b-6775-40ca-875a-cd4ae73af2b8", "sighting--e9924251-1adb-486c-a347-01b5b5262ab0", "sighting--238a0be2-ac3e-4068-9c49-60e074d89188", "sighting--edebc3a1-35d2-45b4-8742-1c1f07b0e2b1", "sighting--17dd07cd-56e6-4d3e-afac-1eaab2a2c10d", "sighting--a258c573-c0ae-4adc-aecb-e2077e1c491e", "sighting--31780569-0290-42d3-a812-d4f66b67492b", "sighting--f0beb6d1-6911-433c-bdb4-2c8415831532", "sighting--7dad614b-4531-442a-8a17-8bdd927bd2c2", "sighting--12d68c02-3c2d-484a-aaf3-bdef1d79f063", "sighting--c87fa50c-080d-4869-8232-5ba9f9f80f13", "sighting--891c2227-8c95-4ae3-beaa-19bd596094ae", "sighting--3bd45ded-b586-47df-a21b-101c46b56928", "sighting--fd150b36-e22b-4db3-b3c3-ef1974529701", "sighting--7583177c-f871-421e-9ab3-e19b27e83532", "sighting--aac91966-68f3-4079-9799-b3a6de52362e", "sighting--beb4e027-2ceb-4954-aede-1e3ec525b852", "sighting--9fada1db-b9c6-4a63-b3b4-33c7304b55b7", "sighting--5ec1a421-9d1c-4c60-a194-1651f650cc4d", "sighting--823a235b-95ce-4cb4-a3ca-befbcdbcc68a", "sighting--43f5b2f4-5e2d-41a0-b096-f6a4dfc1b291", "sighting--98fad2d4-90e2-4928-93aa-24a093dcddec", "sighting--99528e2d-d332-4d42-97e6-4751d63098e5", "sighting--f8cb44c3-cb6d-4f1a-98f4-5691c7d7aed7", "sighting--1df5a13a-dcc6-420b-a7d5-13409c744f7e", "sighting--55c3484b-56fb-4474-afde-d8361a0cea8b", "sighting--18ec054a-f894-4931-94ae-c7661ddfd8e6", "sighting--17180150-260e-48c8-b5c8-a9167bf44d0d", "sighting--20de0041-75de-4c73-9258-70ec8b1724a7", "sighting--3edb31dc-5840-4797-aa9f-b8fafa46e71d", "sighting--626dd86a-9542-4fbf-8cbc-a85a9d9ba3ac", "sighting--d306330a-506d-4244-bbb0-9b6b4d99151c", "sighting--0a899160-958a-4041-93ea-7b3619d93b70", "sighting--545be70f-350c-45cd-a5fc-3cd5a9f6047d", "sighting--00af49f3-b5d4-413d-9abc-867315f42325", "sighting--a28ae04f-14f4-4972-879d-c833ffd0c00c", "sighting--5979deae-03e2-42dd-9240-3606c5a7deca", "sighting--108157bd-b612-4f9d-8d61-64a3e81c9f6f", "sighting--838e5e11-ac36-485e-9358-0285f52fc622", "sighting--89be804f-618c-4669-8044-f737515b6c23", "sighting--25a87fe3-98fa-4290-82db-293f1034c046", "sighting--4c300154-6db8-4468-b5fd-410b9e41086f", "sighting--4f1097a4-91c7-4a20-a8ec-b63f5b2a7c53", "sighting--a03ec2fa-01ef-4d9e-82fc-1c2cfce0cfbf", "sighting--fe0be442-e85c-498e-88c7-75f988629972", "sighting--9fdad375-81b9-4a84-8a12-21c5875ed42a", "sighting--b027b7a7-f9ad-477b-be0d-7acaeacb8962", "sighting--ebdbff69-6e60-4f5d-bfb0-4e57ffe9424a", "sighting--821c827b-7da8-44c2-b01c-72dff8df30a3", "sighting--b85e4a25-f3c1-42ed-82c2-56575ef165a5", "sighting--804e984c-f9b3-454c-952f-a419c8a2b3da", "sighting--8a35ba53-d9d1-41e0-9cdf-c2703200b41a", "sighting--6d442417-2b9e-4c88-a7e3-95597b12c2bc", "sighting--e98b037b-85aa-4b38-86b4-1f6cbb2bebaa", "sighting--f5cd3f78-0356-4b01-8fef-756efa72e8d1", "sighting--79b6f828-c650-4e93-aa77-0a7ce724e5d0", "sighting--4464fba9-95f6-4a01-beb3-c7fa372bc76d", "sighting--67bdf0d6-a314-4cc0-bb60-0836d0c64abc", "sighting--eddbb959-c36a-46aa-9f20-fd3c10226e31", "sighting--37e8a082-5fdb-449b-93be-88aae62badb6", "sighting--d425c3bc-99ed-46ae-acf3-94748abdd5f7", "sighting--60827883-3faa-493b-90ad-d4348006c9c7", "sighting--b9b53f4c-fd91-4678-a3c6-afed0f3c600a", "sighting--8c69d2a7-3f11-49aa-a5b6-10eb02a0b369", "sighting--5ae33d1d-2c3e-46d2-953c-410ee4c08347", "sighting--dd7ad911-650a-4904-8b67-41d6417ff5b7", "sighting--44aa210a-57db-45e5-bbd5-fb0174d0b8b1", "sighting--e1a299d9-cdd1-4a5b-bde0-bbc9226beda7", "sighting--71cf19c7-cca2-4b6d-8f66-79f1e7419014", "sighting--f78f0a34-cf22-47e8-abb8-fe5f637f98e5", "sighting--726e1f49-91f3-4667-9f73-efcf835379bd", "sighting--4f6f76ac-509b-4891-b0d1-f6d0fd241129", "sighting--11488801-ed5f-4737-b87f-39e7f16077c3", "sighting--a864185a-97b1-4c72-a194-cb771857bc46", "sighting--0456d164-9c52-4eb7-8eaa-8c398db21b22", "sighting--1dfaa31e-f6e9-4be4-8ee8-a3c3194d2305", "sighting--f1ecb1c0-2f08-4e7b-b53f-8b198600937c", "sighting--a4ed01a7-67e6-4e59-97ff-73fcb007c7e4", "sighting--0f2f14ee-cadd-4f65-b7cb-971ce9eb57be", "sighting--92531ccb-1f11-4ce6-910c-d6f818786ead", "sighting--da98c434-c99d-4f2e-b188-887d35af2b2e", "sighting--1600d3ae-2f6c-4fb3-a0c1-2e001499b9b2", "sighting--38b2f1f9-778d-4d9e-9ed3-d8fa9acf1423", "sighting--c5f2e31a-a93c-4a22-a3fd-30e470cddb62", "sighting--ae00e6e5-a96b-4c2e-a876-3da7d9192cfd", "sighting--c865652b-9e39-45ea-b03e-f52a111b3915", "sighting--17b8a291-f228-4c55-8faa-5f1ad09663bd", "sighting--0dfbfbda-65b3-4099-8fab-242bd83ea028", "sighting--1a107a47-dfc3-44e5-bbf3-7e65e7c14860", "sighting--ff60e70d-47d6-4674-9fed-b164998e5155", "sighting--a90acd0c-fe21-4d7c-ade7-4e812662241a", "sighting--96489853-423b-45e6-ac6d-0bbd2e9011d7", "sighting--7f0b7cd3-40d9-4635-b9c3-5d48557f63b8", "sighting--504f5751-1157-4e50-8cb2-3bc853506996", "sighting--a8a83f1a-bc85-4526-bbf5-30eaf7ce6493", "sighting--358ad2e4-d6db-4800-abc5-fb4a70fb15d8", "sighting--e61950ef-1094-4f1b-ada8-8e16edd23c97", "sighting--2f4ff1a3-d3c5-4059-973c-b6d702bd730a", "sighting--8537d081-9b24-4866-af58-e721c81b2f90", "sighting--8b08c1d0-bdf4-49e0-8b68-c0fbb7ea21d3", "sighting--29f0aadf-3a9a-4387-91a8-dff5eb4c2cbd", "sighting--8d7af91f-99b9-4b20-8412-9bbaaf187549", "sighting--bdd6886b-feca-4680-9bc5-119c32088cf8", "sighting--593496cc-56d5-418c-b098-a07e9083390b", "sighting--33506202-8b3f-4e52-9fce-ccbb1d80ae95", "sighting--9576c801-1fb9-4765-92c2-22077952f6ff", "sighting--070e0fab-3bc0-4f4d-9b45-c7489840c393", "sighting--680034fb-b95b-4cd0-ad68-d8d9bb726ade", "sighting--e4080392-8b79-4af8-8b58-516f4c1ec267", "sighting--3a27cbf5-16e1-45b8-9f5f-c7c1eccee146", "sighting--3492df59-7787-47e4-ac4b-23de3cc8b1bf", "sighting--093c22fd-8e5c-46d2-902f-fd0cfb9f5bb8", "sighting--c89a578a-ef85-4078-9005-54bb8b760cfc", "sighting--9ff522bb-ae22-4e08-a73c-69204b13e4b1", "sighting--5c08e72b-ef1a-441e-bc97-8686b0ba6543", "sighting--9c8865c3-ca14-40c2-bd5b-7ed2d3922a59", "sighting--8469725c-1f24-44a8-bd49-9a91f8d7a0ff", "sighting--1b37f5f7-3ca7-4359-9555-c32f17aba16c", "sighting--27c29d8a-f2a0-4d36-99f6-a443cb8fa2bf", "sighting--92e3c04a-8c6c-44dd-bbad-08ddf0ed4e5d", "sighting--c5344e99-482d-4c51-805e-e6adfdf621d7", "sighting--fae073a3-9746-4741-8f4e-a17d7d1e3087", "sighting--914f415f-7abe-4752-94dd-7ee52dd37ed4", "sighting--101c3e81-e3d0-411e-be8d-a6fd3c02e686", "sighting--f12e51ec-67e7-4e58-8c9f-2b9174c5782e", "sighting--aac9801a-c4e5-4f32-81ca-98e74d3d008a", "sighting--86f73c02-f7ff-48e9-9763-c6a2b7994ec9", "sighting--7fa9658f-4fe8-4dbe-87f8-a1dd010f15d5", "sighting--af963f0e-0ba9-409e-93ee-03e2a68b4a2c", "sighting--f3206419-1a10-43c1-afad-70188202344a", "sighting--50de8af8-ab80-4c70-a4ed-e85608a0a0a7", "sighting--63a1af34-97d1-4898-8d32-de4d1695379d", "sighting--e711c625-581b-4c55-868a-91d4bdcf7a5e", "sighting--e49cc6a9-6f39-4af4-8152-e67dda5bb905", "sighting--2421e79a-04f8-4aa8-8246-b062f42d6df2", "sighting--5e43d704-1d29-4700-bc49-e2c6f1221fa9", "sighting--b9894f0f-396c-40c9-9947-0f172eb286c2", "sighting--1c7744b0-1594-4a36-976a-4b55c22355f3", "sighting--b8042a3b-9a67-4299-84ee-1a8ffee7ba86", "sighting--643028b4-b3ab-493f-9a67-e318349ba04b", "sighting--83d2267a-4a84-4c84-b90e-eb2e5adba0d9", "sighting--08fe8127-685a-4070-83fb-783bb3d24816", "sighting--ee540d1c-144c-4ee4-a429-139c2c9c094f", "sighting--66a5ef5f-7142-4ea1-b669-0f24cf4c6884", "sighting--f0a952da-6aa1-44a0-9039-f3abdb0a799c", "sighting--f3787397-ddbe-44ad-aefb-00de41dda397", "sighting--73914be0-7313-4925-b851-e9f71f3ce474", "sighting--73d61b97-edb9-4a83-ad51-595bcf884caa", "sighting--fd052070-65a2-4ce4-860d-d44942971353", "sighting--5c1eb555-294c-45c8-826b-3862dcc28013", "sighting--c96f6eb2-bf82-48fe-829d-6a81e701d438", "sighting--4690280c-5a0b-4fb2-96a6-274884c1bc62", "sighting--a78e52f3-a0c8-4c5d-b07c-66b811ae8b8a", "sighting--eae4ff7f-7374-41ce-91b0-422625b480ef", "sighting--5f000ce7-afef-42f1-8d87-bf6ec89c8586", "sighting--38bf4ec8-2f75-42d1-a19e-b8a7f68b7532", "sighting--08f609dc-038b-4f36-ae5a-e8d5713ecdf7", "sighting--90fd013d-0bdd-412f-86d7-5382ae19f20b", "sighting--ca35dc67-570a-4d34-a0ae-b2bfbb277d72", "sighting--51848e2b-4fc6-46bf-8519-4e58e44e3e24", "sighting--9a3f83d8-d109-477b-9abe-9b1ce5c2fc2f", "sighting--321914e2-6bbe-487a-b885-0148f5523ad0", "sighting--db3fda56-78f1-4ba9-923b-39452c32f05b", "sighting--9a3cb638-c349-4bdc-bb73-43ee93a1cf54", "sighting--e22bb16a-8e0d-4159-a7e9-426c57a38666", "sighting--e4f19d6e-7c2f-4b9d-ae0d-d09328f11c46", "sighting--36a311bd-8c07-425c-b6c7-742fe02a03c7", "sighting--8ccab277-6cd1-4b73-88eb-e922c97c9909", "sighting--28ab6e52-005a-4082-9430-f2db43f1b9f0", "sighting--1a7b8ad8-e82b-4dcb-b595-f42cec195a67", "sighting--12426722-d2c7-4b94-a17d-a9aa89804f3e", "sighting--455c52a9-f2ce-4d00-a92b-e99adbac3b4f", "sighting--e76012d1-c830-4652-aa6f-df3b0ee8aea2", "sighting--3a0e27fe-411d-4d53-aa76-73ff32d0f0a9", "sighting--c0ef23bb-c70c-430c-be7e-c14a84b064f3", "sighting--122c6f10-0007-499c-82a7-00a3f604ee89", "sighting--ee7aa665-27fa-44e3-b9ff-c7355d08f154", "sighting--b3de49fa-1cab-46cb-a7fb-9e31125072ee", "sighting--2bc7cbad-c257-4f86-b38e-63258372b2d7", "sighting--8bfdfdb2-aa24-49e2-9980-01294430894f", "sighting--8f3216f2-516d-4023-a474-f0c504cf48b9", "sighting--6a83b5a7-0cf4-4536-a9f6-f6b4a173a44a", "sighting--66d116a4-f3d0-43fc-a0fe-a24291549cdd", "sighting--88f27bad-cf13-4742-bd92-95930ab0024c", "sighting--6b423beb-5986-42c2-891d-debfcbafe8ac", "sighting--7ffcefc6-9039-4ab3-9bb2-28bc97c79e03", "sighting--2e29ea55-caae-4f85-a18f-ce4a296ee3bf", "sighting--62c393bb-1fc9-415a-817b-e807f1ebb9ee", "sighting--a0d37992-55ae-4a96-a52b-d149e6c413d1", "sighting--0e70dc09-db64-4447-925d-3b4b5a727814", "sighting--acdb59f0-edaa-4743-99f7-ed6a29e1c762", "sighting--e3c047ee-e5d6-468d-93f4-62d7165bfe49", "sighting--b8f66559-e97a-4acf-8470-84e5980aa2c8", "sighting--51b93751-9c48-4417-880b-89e6ffaab4b2", "sighting--fc828f99-fd4a-44ef-a7a7-b8b464d238c2", "sighting--276b14a4-4acc-4229-9241-ee83dc47f60b", "sighting--0ffec996-b032-4477-8406-19ae241d1495", "sighting--f6956d92-a76f-4df0-8996-274a09bd89cf", "sighting--975e42d6-9e5b-4ac5-b25a-1dbfd197fdb8", "sighting--395221a4-aa1c-41bc-a55a-d744e23ebecf", "sighting--81663444-ccb1-461b-a248-bbc2c0245d29", "sighting--6870719f-1975-4714-933d-44262110651b", "sighting--40126334-3df9-41fa-b87c-2d025ee2e01b", "sighting--79b9944e-b668-4ed1-a7d3-d816eb4ba41f", "sighting--4f579d76-e307-40b8-bc9f-e30b4e3a063b", "sighting--d38efe19-266a-4b77-8fa3-f3daca5a83f5", "sighting--a866ae3e-414a-4eda-a908-67d5d21326c0", "sighting--10d4142a-f384-4288-bc54-15054791b987", "sighting--34ee3a37-d973-4c44-a388-6fc9bb08bd62", "sighting--873c9f92-bc36-455e-9286-73bd04312f34", "sighting--0ff79114-4e1b-4631-acc9-afcb885ea5b6", "sighting--e5dc7ea7-7093-40ab-bc47-05d025669d55", "sighting--41876222-401a-44fd-bc66-0ade30b02290", "sighting--9cf9264a-d1e8-46a8-8e4d-b633bc4f0917", "sighting--f8316af6-b409-4385-84ba-6af3ac6eeac1", "sighting--28ed783e-ba56-440c-bfa6-3197f6d2bba2", "sighting--0df8d52e-e432-426e-978a-6095035416ba", "sighting--0f41b971-2f34-42c4-9b76-11f3f9d22463", "sighting--6b23559f-cc58-4444-ad12-3f070be6cf74", "sighting--2d048c1b-00ca-4fd0-9056-1cbe6a22d304", "sighting--72fbac0f-3240-4b62-8403-67cd347ebed0", "sighting--dd4edd25-96ec-4448-9cf1-ae336953dbf3", "sighting--e6ccaca2-eb35-4afa-9da6-ba40a5069b81", "sighting--292d99c4-bc98-4344-b18d-6ad684b0667e", "sighting--32e1bce4-9eb5-4b10-b922-eee515fef6bf", "sighting--653ad0c0-9eb3-4fbe-b5e5-915379427793", "sighting--cc53bc66-b6ae-47c1-8e04-a59642ca3a24", "sighting--6ffa3621-3005-41ed-b724-f2f58c5e21ac", "sighting--122d2d68-8c90-484e-9ec9-7dbf1289fff1", "sighting--61e87396-a73e-4f2a-bef4-2197627c121a", "sighting--a069bd2f-7d8a-4779-b843-2435b00edf63", "sighting--2a440965-fcfa-46e7-80d7-180a7038b06a", "sighting--bcc2b947-27ad-4fb5-8a33-198f63ac0645", "sighting--a4407d06-c1be-4d03-9951-0e0be1750629", "sighting--deb1451d-da9b-4ba1-b028-9fddce52ee94", "sighting--ed3afedd-638a-49ad-84c4-f88b0d97b25a", "sighting--6e6ebbc0-2b1f-4354-aaa6-f21c3e4f5093", "sighting--48c1b77c-6589-44cf-a0be-56439d8bcdb8", "sighting--adbddf1a-2204-4454-8d8c-ab7044803d45", "sighting--a3182638-9be7-41bf-8a81-5797c790bc87", "sighting--0928c734-e224-4242-b698-ac71a547e80e", "sighting--46365a68-91cf-40fd-929b-d6d662fe7ad9", "sighting--1abcacbd-59cf-404a-9759-9d2a0a9b0c15", "sighting--2a9b01b2-2b4d-4510-8edc-299acddae78f", "sighting--c24cf3a5-b699-46f3-9e3d-366ee5001d5d", "sighting--2e53a7b0-b85b-48a4-bb1a-8592ba9ce999", "sighting--b8e1234a-db5d-40cf-ad18-1ecf06b3c341", "sighting--82c95a61-f051-4954-8a19-ab2dee419a55", "sighting--490ee6cf-102c-4bea-8793-9b6e8d3ebbe7", "sighting--cb6435a2-39e6-45ba-b7e4-f97ed994bf1a", "sighting--8a6d3c1a-5305-4011-b6ce-2dcf4c545370", "sighting--3baafc35-3910-4724-8443-4dee592db9c5", "sighting--667d980a-e449-428a-bdec-96cb5131de47", "sighting--0bb033c5-952e-4d87-81ba-3ed5fac23997", "sighting--87d0a20a-d745-479a-93f0-90e14e3cbb74", "sighting--782f7ee0-3cae-43c6-97f5-6e44d96b0b43", "sighting--252d3db1-dbd1-40ff-bf34-48e6aeb319e3", "sighting--91075b36-6106-47f2-b2bb-1d5e7329e415", "sighting--71124d79-1488-4a25-9caf-de32ec292cbf", "sighting--8ee6c0cc-2f60-4f95-b267-ebeb0235275e", "sighting--2c70f850-661f-4bb8-9811-940f7ba5ea8f", "sighting--745f2298-6a68-46ee-9deb-ceaae1fc12ef", "sighting--9e610fec-6dd9-44ba-b4fa-d0e44294b303", "sighting--3fd3eb86-f9c8-465a-8c03-da04ae4d8cbe", "sighting--9c190c4b-5a2e-48c6-9d0a-e461f7a92e2c", "sighting--4c8840a4-9b54-4fc0-b8af-6af7192438a3", "sighting--6a4d7e4b-7764-4aa4-bc2f-46b69113ca54", "sighting--523e36d3-b5b0-474e-8113-b6f41284274e", "sighting--a60c7897-1785-49e8-b1a5-d9180a78580d", "sighting--d0ddf94b-f10f-4cba-a077-90afbb4e580f", "sighting--0e0cecd2-e6dd-4b17-92df-96ff046bbe55", "sighting--724e8b18-5abd-4631-bac8-9f13c8876b41", "sighting--745010d8-15f1-478b-ac1c-b8c2d551b408", "sighting--15423b79-d888-40bf-9c16-82bce39749a4", "sighting--b1232139-b7a5-4a19-9515-b7697c46eed0", "sighting--ffda96c5-6b31-411a-998b-ad037a54c126", "sighting--94086201-6dae-4fbd-bdcf-016226dad8b7", "sighting--aa733517-1867-42fc-b8ab-a0361a532172", "sighting--d2042614-19f6-4b8f-99f7-755e59dbbf00", "sighting--cdc606ed-9bae-46c3-84ba-97ce61541997", "sighting--df7c3429-3f1f-4799-a361-5c0867779ba3", "sighting--f9f3baf9-5f48-4113-a825-2a4a52a47676", "sighting--da4d0b9c-e6c9-4655-8802-94239c7a6521", "sighting--751a8047-ece8-4798-ba71-82516a3a2a37", "sighting--ce01974c-0562-4239-a573-f400b9749404", "sighting--96a2cc17-13da-47da-b803-7185355abe5d", "sighting--5d64fc9d-68ab-46f4-9ef5-9c2b9c9927fd", "sighting--04f2293a-f728-4af5-ae7d-1d8f7502b3c7", "sighting--d1591699-3e5c-45ce-b874-7a22dbe174de", "sighting--09e4a356-5b3a-47c7-89ab-6f7b78c78d94", "sighting--21a904e3-8989-4e6e-adde-023c6857ebb7", "sighting--645a5e2d-de34-4e50-8e51-1267d7a50427", "sighting--69922938-51b9-4794-ac88-7f028d1e5bed", "sighting--7e13e728-8076-4a7d-8b20-e7e27db313ca", "sighting--d93b55ac-054b-418b-b778-b4493c7d4f21", "sighting--615afae8-da97-4145-ba36-6d3fb801dd71", "sighting--232f5e37-3383-4d33-92e3-d283d96f34a9", "sighting--96e5a962-70fa-4412-bb1f-c335b7108761", "sighting--642d88d5-aa45-4cf3-a0f5-e4d6e810316d", "sighting--3ee1341e-0463-439c-9300-70d0661e1fb2", "sighting--4d30deda-c467-4619-8fc4-3f33b2ee345f", "sighting--61466f7c-5e92-4c0c-a981-dc086abb8e66", "sighting--28faa34e-e542-4460-bf22-68bf35eac010", "sighting--8a412232-e4eb-4f8b-a487-71598050d57d", "sighting--d4922b36-ed36-4b49-8066-0c68a406c8ed", "sighting--8205b018-6a7b-4a16-b75f-1ba96960a1e0", "sighting--9278972d-751c-4c48-ab18-79e09dcff9ab", "sighting--58341a70-d1f8-4ded-a27f-aa8622a4e8c2", "sighting--08776cc0-c49d-44b4-a3d4-91323e7257f0", "sighting--d9c5c563-3b69-4211-8271-915dae74da25", "sighting--4eb724ea-b147-48e0-ad3b-f0142047393c", "sighting--8aaa2c00-ea09-4649-b82e-5710f44df74e", "sighting--61bc6e0d-987b-4be5-a3fd-95e8a7b12e2f", "sighting--eaf4117a-c750-4336-83e4-88ec7becf962", "sighting--ba248c93-8537-408a-89d5-b41087e89565", "sighting--e05edc77-cca6-4332-884a-bbccc6ffad8f", "sighting--47e297e4-b55c-4084-9b74-4fc3f11bad46", "sighting--3fe41aaa-f483-4fc0-bb60-4911201b1ea6", "sighting--3db9f277-e4bf-47a1-9e47-ca02fabebceb", "sighting--930aa2d9-dd82-4013-b67e-1bc2391ac2dd", "sighting--f261c396-5a48-4db9-b945-9f4398f55a83", "sighting--be7c0da0-9c2d-483b-98c6-0bc3bf0760e1", "sighting--f7cac7fd-66e2-4923-9a70-ed43e0d1b8a9", "sighting--61d95cae-d5cf-42c5-9ff2-2afd0aab196f", "sighting--a35501c2-5704-424e-9d85-3f6e4fce91d6", "sighting--948720c1-9491-41fb-8b40-d8e78fd88f9c", "sighting--3669c76e-173c-4bb6-a854-2c51d4faaff6", "sighting--87674a62-f039-4e48-b926-896d91717b3a", "sighting--ade785a4-9983-457b-8dc2-c79c55194243", "sighting--42fa9006-7451-4ff9-978f-56148fabcb58", "sighting--7d192a6d-2546-42fd-8305-131a6ab62245", "sighting--e6fd8cc1-aab7-4993-9532-5c24b399fa8f", "sighting--bcc072b7-2817-4dd5-bb47-7413cd536f73", "sighting--42b2a810-3949-441a-ac88-256fcab14ef8", "sighting--7d2307fb-2f7a-488a-b1fb-ce0a57b58f6a", "sighting--a5ebc450-5c24-473f-aea4-e66b071867e9", "sighting--b543ffdc-2560-4eac-8b41-a47e275553bc", "sighting--a0b8a2d5-acdb-457d-b88d-9fc011975cbf", "sighting--433f6771-22ed-4439-a782-90b17cffd1e7", "sighting--24bbdda2-48b8-45c8-88bc-cfd5b12c3c5d", "sighting--f33e87c0-c0df-422c-a06b-6356ca83c1a3", "sighting--8398d5e9-e5e7-432e-8c3f-1c9925f7d06e", "sighting--497e1765-7375-4664-8ca3-b1cf169d7167", "sighting--e9284048-0341-4097-99b9-33336d76a2c1", "sighting--5c2abb88-9729-44c5-bab9-4ec56254c396", "sighting--b47eb00c-0507-4526-a6a3-3d8836c072b7", "sighting--da748600-5a20-4711-9f84-19cf7a71ed94", "sighting--04121731-19c9-4a9a-ab90-446998ea8c10", "sighting--888c77e7-dbe2-4e2a-859b-39d53ef9de6f", "sighting--a62b048e-cf44-48e9-aa38-0dbe63b3c111", "sighting--b5e46970-0bd2-4ead-98be-1e8d9366104e", "sighting--a5bf3355-2856-4c86-af51-169de0c7b046", "sighting--97c3c40d-39bb-4977-9885-faa3306bbc2e", "sighting--e50344e4-e6c5-4bbf-93fc-70b29572027d", "sighting--96f7ef13-b4d3-4ad1-8a83-1318b99caae4", "sighting--6a6ae148-7633-49a2-afb0-ce3e5c3bc0e2", "sighting--4ed2b0df-0393-4184-8f60-824c0d7d2e43", "sighting--ba3134c6-a3a1-4413-93cd-454e6a292e37", "sighting--3a405a85-6aa1-4d81-9127-7d80f1c72c47", "sighting--08632d34-48d8-4f8c-aac8-3e40e051ea23", "sighting--e375432a-77d0-4c7e-a77a-82f096c32641", "sighting--0165bf06-0102-4343-90a2-95d72e27269c", "sighting--46474daa-976d-4b84-9f21-c600d4f4e61e", "sighting--d789c430-2e40-4179-b851-2f30b6b19d2d", "sighting--693c5167-163f-4c3f-837f-a52878ed24da", "sighting--535bb9f7-4bb0-4b4b-9f4b-c900aa0ab9c2", "sighting--0147e070-74bb-4de9-8a27-0313aa5c9253", "sighting--02d4c020-93e7-4c4f-be27-702cf501401a", "sighting--3c37c6bf-cc53-4c34-8312-30379f2a1962", "sighting--37551b02-cecc-4b02-bce5-a59278555cd0", "sighting--6c6cbb0c-1732-4afe-ae43-499c6848bb45", "sighting--bdb6a092-255d-45ee-903f-e4651b4b1ab1", "sighting--9b2a7ac0-7f59-475f-aa9f-a87555770b00", "sighting--b0322397-6aa9-40fe-be45-aaa0de274111", "sighting--1664cc8f-5009-456f-b147-02a1c788b273", "sighting--5540163b-b0d0-402b-949d-8b29cb3e2159", "sighting--31c5bfc6-94cc-46db-b969-b8bc5ccbf64d", "sighting--2a856fc6-c681-4fc6-af09-dc469ed34aee", "sighting--6401d35d-b4da-46d6-bb29-81b8405c5dc2", "sighting--d317d7d0-d01e-4e65-aef6-d8f3f2f8c3b6", "sighting--1da594bf-150f-4d1e-9c5d-2d97c699c8e6", "sighting--f0b930b3-cc14-4cd8-9e48-6c985c1e1e07", "sighting--c69e8762-9164-4236-9157-e528af8d76b6", "sighting--34d69c1e-5713-4e1b-b8d6-5e201da419f2", "sighting--fbf47e9c-9ec6-4662-b38e-1b72dd36f4da", "sighting--90974134-6991-432d-8fd8-1ee6734958e0", "sighting--739d5853-7fa7-421b-8ef7-316174dc4413", "sighting--a26a9e93-b083-4340-af71-b97829cd3bb2", "sighting--56d79980-a8f6-421e-a547-803c6b10ca26", "sighting--e567a7ca-5eb9-4540-976c-27b8368a6829", "sighting--6e95efc9-f995-452e-b0dd-8a41d88f2a02", "sighting--425a9449-eb45-4ae2-8414-123961f63405", "sighting--6f4a0110-47b9-45d8-bd84-3014554afeea", "sighting--3e5a7414-c7d5-44e9-8cce-91081f8e7d0b", "sighting--a33ce0c4-cbcf-4a2f-918a-7a8c222bf112", "sighting--560297ce-41eb-48b2-8906-c7fd2202e158", "sighting--61618614-a378-4325-930f-c4595843ced2", "sighting--0e2efd4a-69a0-47b9-8259-1b3d09cbb82b", "sighting--415199bc-61cd-4ef4-9a8c-0905d53a78bf", "sighting--39690744-723c-4866-a0df-59aa21e7a179", "sighting--95cc2f3d-4ac8-44ba-93ba-8beb01a1b47e", "sighting--dede305c-8236-4296-a5bf-3f2443765f2b", "sighting--88ba28f3-d8f7-4963-abd9-5509388ba18e", "sighting--2e438ff1-8f18-4de4-bb8e-514bbfbf9fed", "sighting--7e3765b9-f034-4c3e-9c2d-229101a7e2c6", "sighting--3df0f4da-a20c-4631-b538-ff16dd665b36", "sighting--1f4ec782-65f4-4332-ad6f-30fb9bad58b9", "sighting--61e67fe6-6d3c-495f-ba88-035bfbffabe2", "sighting--3dd97fc6-909c-4cc4-8689-db700f5b3f9c", "sighting--09fe7c2c-246d-4025-9f61-2068cd886652", "sighting--b49f527c-357d-4caa-b667-d3083d181eac", "sighting--63e056f8-dc30-4833-9a17-6fd4d464c3e7", "sighting--c8bd7e20-a4d5-4dc6-a1d3-13932c8fb668", "sighting--797b502d-56fe-4d62-bb5e-7dd0be23baf5", "sighting--7a827919-0f17-4bd8-9bdf-b182edb468e6", "sighting--a49450b9-4449-4f80-bff3-1c81efb803bc", "sighting--f189e9e1-8ce1-4ae0-9dad-cff1e2fffe68", "sighting--fb03a608-ff9b-49c5-b488-be9a1d63a28a", "sighting--b89ce450-56a0-4051-a245-006329037266", "sighting--aaf280ec-dace-4c0d-8d74-3dfa0d583be3", "sighting--8bfc19f2-b281-4e97-9729-07ee0d90a7a5", "sighting--d240a346-0889-4a78-8c5a-c878aafcfdde", "sighting--56bc9ad0-c834-4398-97bb-ec2b35cca715", "sighting--b1929cf4-a17f-4ca0-b1ce-f42066f3d5b0", "sighting--f97e1508-4529-4e97-b504-8cd4d92facf5", "sighting--09ae503a-c2cc-4df9-aa99-01d34f7dd3d1", "sighting--b252a459-1991-4b95-b0aa-12d59b4bab09", "sighting--f685737e-d6d6-4401-854a-27063b0bdcca", "sighting--2cdc1c5d-6c03-413c-b8bc-c907908d7e75", "sighting--d75b0706-abff-4a48-9ecc-2e2bd6030ac4", "sighting--b304a269-58b5-4ffe-85b8-1df807d7d726", "sighting--99c4609e-6bdb-4884-add7-50987e88f5b1", "sighting--95960e8e-2c98-437e-a319-c6804d284beb", "sighting--19240ecd-c784-4dbb-99b3-72e634120585", "sighting--b928dc04-d8b6-4e61-99c6-a97a88a15c4b", "sighting--036dfccf-1f3d-40ff-a420-88e81fe7a245", "sighting--15cdcf6f-75ae-4144-be21-702aaf9834fa", "sighting--9cc506c8-e317-497e-bef5-6bab1eec2448", "sighting--ffb5f72d-b6aa-4178-9501-19a6e51a0563", "sighting--d2125249-9051-499c-8252-1f8967462d4c", "sighting--ec08a23d-98bb-47e8-9f3b-f3e4818f4a72", "sighting--14b90590-8d93-4007-90ff-d9e7c6e7c984", "sighting--f3b43c49-0b5a-44d0-b32d-7abd9b719bd7", "sighting--9d3a5a36-980d-4aa0-9fe9-e663939569de", "sighting--ef74dc0c-9429-4063-9afe-c60bf1959a15", "sighting--903ff85d-5616-4483-aaa8-21a8ccccc428", "sighting--b803856d-35e2-4f98-b89b-a3d2aca65f25", "sighting--64289ce5-6391-42e7-a6e4-a35042c15d32", "sighting--1b8eb789-3e57-4aa8-a059-01bf89e176dd", "sighting--167a73e3-51b5-48eb-a6c4-366508a0cffd", "sighting--7033951c-bd4e-4e3a-af11-7e752bd562e6", "sighting--ade5919d-8d76-4948-b3fe-cb2f94dd9664", "sighting--68a30cb5-d57a-4faa-85d7-57df4118963d", "sighting--9cd5f6cc-c2af-4755-a9cb-6e53878627ad", "sighting--46e48249-b883-4796-bfac-86546224e12d", "sighting--beaf80cc-8970-45c9-9236-7b3262336ac9", "sighting--04d64e29-40e2-48b1-b2e7-4c7ab880ab1d", "sighting--fed2dd4d-39c8-41ce-91b7-ae4f68e0a2aa", "sighting--77bfa8eb-f9b2-4b90-9a2c-e92bb4360978", "sighting--40a11ab4-6049-4ece-adac-065759b5bb79", "sighting--d6aa4730-cb5d-4269-b9ce-e3acf2bf5d47", "sighting--41f7e74a-1d28-478d-9b43-297f9e647eea", "sighting--06ec9876-beb0-4655-aa1c-7fb1a871e4a6", "sighting--977efe55-96be-4364-9b72-b38dfe2ca5f6", "sighting--ff53e8b1-d0ed-4dc3-b0b2-21933ed27e07", "sighting--c6fd9bc2-f1ed-496b-9a90-153b87fff461", "sighting--26de6f84-e2f0-44ad-b05c-5357a3232ed8", "sighting--c89b8939-4615-4ace-a20f-eef5cde11de4", "sighting--10662391-8354-461f-a106-47421563a819", "sighting--e4a8ffa6-0891-40bd-84bb-5279028a6f16", "sighting--ba2f0197-5d94-4707-8bd2-2c5144239550", "sighting--394ea677-6108-4ea9-a117-07dfecc21f77", "sighting--c6402576-08cc-4aca-9501-7c350d4672f5", "sighting--0a5f58ca-aea8-4ab2-a408-81adcd565fb0", "sighting--f8427550-1216-482c-8a07-7d6f7fcd4d70", "sighting--cd89ce9f-dc47-4202-9da7-8d47b66c732c", "sighting--953aef19-63bf-45e0-a16c-3d14cc254526", "sighting--878cf3f0-1145-4f21-bd83-947444d12d4b", "sighting--7d4775ec-8655-4de3-a06e-b02f33364422", "sighting--ab3b4f0d-2d2f-47cf-a7b4-9ae5ea9dc3a5", "sighting--e9c41e9c-d177-4328-aff6-409bf9c44135", "sighting--51cf2ce8-e5a4-4ec0-8278-afae3f8b6215", "sighting--5d68c6c8-21ab-48f0-a399-ba3eaf086197", "sighting--06e1ff83-c810-4872-8bab-9682528ff55e", "sighting--f0d64d92-4778-4343-a599-84b424fc6edb", "sighting--8ba9a6cf-300a-4099-aaa0-5b6569766744", "sighting--d218f9b4-3539-40cb-be9b-813410657803", "sighting--70300b72-c47b-43de-bcf6-e06205992d32", "sighting--83ca3f94-de39-4060-bffb-98b38db8fd8e", "sighting--114c9d9a-7a93-43a8-9428-00a32d7f1fb0", "sighting--212b5853-ff2f-4b4e-93f0-d04024f00679", "sighting--4856d1c9-371e-47ca-a2aa-a52f2a7de988", "sighting--694c9372-4bc7-45b5-a31b-e92633697def", "sighting--a0981fcd-0687-4f43-adc9-3484486b87e8", "sighting--ad2af3f2-1fba-48c6-8cbe-8c1749b972c9", "sighting--8605d4bf-576f-4326-b845-6f8c81738e08", "sighting--48b55e39-aa0a-4f97-bfc7-45638eacb87a", "sighting--eacbe67c-151a-489c-9a3b-a7f309776930", "sighting--c29ce0f1-f478-47ea-9110-0b0ccab2fc40", "sighting--e36d2237-0e91-4a35-b2c7-cc0d45929767", "sighting--2aa7faf0-0258-4af9-aa54-99e04626ad4f", "sighting--3305e9f0-3493-48f6-adab-472534c38694", "sighting--a545b480-a5ae-4097-8656-b42cb5cfdd74", "sighting--df308942-6ab9-4e46-aae8-d38f11dea7c4", "sighting--016d09e5-4941-4226-ab20-f10c6bd24b4c", "sighting--5b3bf631-550e-48a6-98e4-812adc2f982f", "sighting--a3631dd4-e774-4362-bf12-9426336d79dc", "sighting--01374933-f7c3-4013-962d-f0a65438d2fb", "sighting--34918001-0c6d-486d-9fb5-737980efee62", "sighting--421a300d-39b9-4097-9d58-0cb4bdad3fd6", "sighting--f7dc3042-e7c7-4652-bb97-96916140d31d", "sighting--2e5db55f-38f8-4d3d-8ec1-fc5aad7e3b85", "sighting--8b1bd670-7809-4695-b843-87ab62dda3e1", "sighting--c4782d80-6331-4b86-b2c6-62e21ee1a443", "sighting--d988a362-beec-492c-8658-f95a9e3ca155", "sighting--9a5fff19-a9d4-4a0c-8a46-083b0c41f241", "sighting--828e658f-2c56-4d64-aef3-37e156faf029", "sighting--5b40222e-f46d-4f78-bb86-b285478f613e", "sighting--2c83ebfb-49ea-4fa8-907e-87b9b331c4e8", "sighting--9b8ecc34-6208-44d1-bbe3-1b692d95e444", "sighting--16dd492d-76d0-46c6-92f4-4ed5c717abca", "sighting--996952f8-1ddd-48b0-846f-8065b1b574a5", "sighting--77335fae-6a13-4bfc-a629-8c434c0a0cca", "sighting--399c2675-211a-40d9-858a-1a009b4e5772", "sighting--b2419d94-710f-43a2-88eb-09df185ec101", "sighting--c6ec9949-e09e-4a56-bd95-61175886495d", "sighting--62ad1c24-d8a7-45ba-967f-37d5a3b1cea6", "sighting--8fe68271-29f0-491c-8459-57d84325d096", "sighting--af3e6a6c-64b0-4998-bb50-c87724028474", "sighting--7c1d4cd9-68dd-4001-90a8-058a2f1caeb2", "sighting--b8851c50-bf57-43a4-805b-b409aa99a60a", "sighting--a577a26a-fad2-4f93-bfbe-a8a21612a7b6", "sighting--46f46834-932f-4a29-a032-be682e4bd437", "sighting--a0151f58-882b-4af0-b302-d1cb94498325", "sighting--dbc21ee7-71de-4899-bc62-b6faeb33a121", "sighting--c5cf9962-0b81-4e6a-99bb-3eca4bc3a3fe", "sighting--5dd67036-a191-45e2-a087-f16c3289c846", "sighting--6cc300b8-1c50-4202-8f47-4eb595eb1604", "sighting--4232e8d1-0b42-4a12-9145-ff52847a6fd4", "sighting--93d269b6-b1fc-42b5-998a-749e2e25b225", "sighting--71af4214-764f-4d9c-abd9-11641bb8c1af", "sighting--2c28634a-28a1-4cf4-8b75-2c7987553f9d", "sighting--d2725f0d-fe2c-4653-8085-e5637af7c280", "sighting--e9b75bd7-c820-43ed-b77d-534b2e194e0b", "sighting--3294d904-98bc-45c2-ae2d-296b5e9e3dbf", "sighting--e1a9ee7c-cf4e-4f66-b61a-198cb4e813f6", "sighting--f2c0be3a-7e2a-441d-93cb-b6cdb940acc8", "sighting--dc2a12e6-3378-4516-9c0b-7fbb19ce5cff", "sighting--6d8d920c-6396-46d2-bd39-ae9c904136ad", "sighting--4f7b1473-4f40-4682-b37a-a025575747f9", "sighting--60f8bedb-e579-4a95-a327-e6879aea61ea", "sighting--cccdf989-67d8-4a98-bd83-014a31e063ba", "sighting--46006452-8915-4a52-b4b4-11f2abbf351e", "sighting--54bf9884-287a-43aa-aaf6-18796293920e", "sighting--44f457e4-ccd0-4631-a378-e85f2e9ff4cc", "sighting--78f9c0c9-f19a-4cb5-86f7-a070e6d72fc1", "sighting--b76972a3-9c2b-42ba-bd30-e392ab93afcd", "sighting--668c3094-de99-43be-bfb2-b06896415cd8", "sighting--2182ff9f-4935-47a8-b90c-f710350b5c71", "sighting--0589ee08-da7e-43f7-ba4d-d9db1a23bdbe", "sighting--52743075-1300-474f-b577-5f8cd048b2d1", "sighting--d6832e10-17fb-4a76-af00-941267b9e67d", "sighting--11cd25d4-f215-4d31-b4aa-d035022ce5ec", "sighting--d3767342-a8a3-4a45-82eb-1efc4a65bd2b", "sighting--86e35a3a-2e36-4396-971f-436c51fa9fa0", "sighting--d2151021-44c7-4893-b938-ff79644d59e1", "sighting--11796ad3-955d-4b16-bf15-3c30f4c5879a", "sighting--43417829-84d3-4527-92b2-e3cc86ef4438", "sighting--775d82de-6cb2-4e39-adb0-6122ad1ce5d1", "sighting--ad9b2e9f-3186-4039-8767-b0ae835a29c7", "sighting--f8013c0c-9bea-4e67-abd6-2ae9886f267c", "sighting--216276d2-9ee2-436c-a8a1-3da288b5654f", "sighting--c453c6e5-c500-40b6-bc10-533f13c31166", "sighting--5c52b52b-f33f-4ee5-957e-c268901ec8ac", "sighting--29c01120-07fb-41a6-8800-fad37ae02c0b", "sighting--092dbbc8-67e9-4379-90f6-47723089f85e", "sighting--7dc35366-ae4a-4051-9a92-a91e5f26fdb7", "sighting--c625c658-a295-4074-a890-92d4f96c8acb", "sighting--9707687b-fe9b-4bfe-ac56-094e305bc508", "sighting--7ab7d9c0-f77c-4a1e-a5fd-cb601403e370", "sighting--1c498e35-1410-49aa-83be-85515b0dde86", "sighting--343f54d6-caf7-41e3-b141-dcde234a2a75", "sighting--51b86c87-55c3-44a4-93cf-5d13b0f6d0d3", "sighting--c1045000-dde3-4a52-866a-36fb6b5d45a2", "sighting--44f9dcd6-7725-4590-a289-3631fdd2532a", "sighting--f7183861-66de-40e2-b82f-b99a18980547", "sighting--2e3cb779-c54a-4f61-b18b-a66649470aac", "sighting--8e894d3b-1c79-49ae-9589-ce91d5a7f7ac", "sighting--ece9a186-e4ca-4856-ba30-ad7a94ed77ea", "sighting--6da5339f-f940-43b5-9398-cecaed21d78d", "sighting--6dfafddc-1d23-4e6f-9b63-722b38079ca9", "sighting--73cbe6b1-6afd-4d22-849a-bfc1d14b81d7", "sighting--feecc756-79d0-4143-84f9-8a5907e615c5", "sighting--30a25223-9794-4057-80d3-6e4888721ddd", "sighting--bb471ebd-d218-46fe-805b-09fb8529b047", "sighting--13d1ad90-3193-46e4-8c52-e51baf65f5ac", "sighting--3d942437-9bb5-4b68-ab53-fc49b5f7faca", "sighting--870c339e-43c5-4a4f-ab90-cad9c81b558b", "sighting--602ac3b9-96c1-456a-9c88-da3dfe0acab4", "sighting--558723b5-34c8-423c-930d-06cf2e9006b6", "sighting--258249c9-1725-4a33-9569-9203ebfabd55", "sighting--489c15d1-77b1-4545-be60-e090c3bf90e9", "sighting--70892649-765c-4acd-a868-dad526f1a1c0", "sighting--001d3611-28b6-45e6-99ad-9be995c23234", "sighting--f7ab3a7c-0ca9-4b29-b6d3-935c6e40fe70", "sighting--0d20b05c-a3a9-463f-8200-a72629317fea", "sighting--83dd2707-757a-4e35-bd87-19332daa8f51", "sighting--1b617895-1cf1-482f-bef8-a097334ec764", "sighting--6b77b6c6-171a-4410-9067-ca30559ffc8c", "sighting--dc41d492-c210-4034-a46f-26db9165fb0c", "sighting--09ffaa5f-bc71-4315-a293-bcd1f8c6ccdc", "sighting--7aa0abb4-44bb-4dd3-9df3-623932066120", "sighting--0749667d-043b-4a18-ac55-56447cc89042", "sighting--3bc32f03-6b8a-42a7-9874-823749c98acd", "sighting--6aea39df-a316-4efd-be0c-461402426a88", "sighting--7c4d70f2-12ad-4cef-968b-12c5b2df0904", "sighting--dbf8c50b-9ed4-485a-b7d8-e5702a861b0d", "sighting--68f6bc15-5666-497c-a81d-4bd35c53d0e4", "sighting--0bf250eb-306c-4c7a-8a5e-856a7083bb83", "sighting--17a61743-3db1-461d-b800-f027d9cc0d8c", "sighting--23028dcd-0631-4740-aeba-693d56063536", "sighting--32d5931d-593d-4fba-8d32-8aac5c40363f", "sighting--0526231c-80a3-4aa8-8bf2-1f5f53a86448", "sighting--d8453a7f-2468-4be0-b35d-ad9fe577c9a4", "sighting--07b86276-a92c-4e20-a5e2-9e9a80646933", "sighting--9f684b78-e32f-43ea-b88a-1ea16ea75220", "sighting--7e852174-95af-421c-8c4a-d82b09d2d9b0", "sighting--93986473-05c4-4a95-863f-6200dbecf41c", "sighting--0af1d7e8-0a51-44e8-aa69-eb0ba0540f09", "sighting--b9a63e26-0821-43eb-8fc9-b79ca0bf4236", "sighting--dd8e0579-523b-4580-a40d-2f7a05111cd4", "sighting--226e5b82-0dac-43af-b3fa-4a54160e63de", "sighting--a8394d0c-e860-441f-b60d-2f1b842a6aba", "sighting--72f65e8a-5774-4606-9c2e-bbd1ff7f984d", "sighting--954b6711-dd8a-4c6b-818f-96f1cfeb345b", "sighting--ea603a67-a776-410a-8c7e-5e2b26d69e8e", "sighting--6183ac10-e45d-40d1-a780-e37304c028aa", "sighting--00bb4e7d-fb67-4dfd-8d43-6ad3430a811e", "sighting--c14d7329-57ba-4743-b722-8e8607be8f52", "sighting--d70dbd96-7f73-43bf-8887-d33caaba024a", "sighting--1b841213-bdc3-4bf0-bb77-6c1462d8076f", "sighting--1ecff1c8-0089-4fab-a461-d21b3c31f024", "sighting--2e19448a-e736-4502-b8d1-7e646ceb8037", "sighting--d108c717-3f4d-418a-9c5c-3ecd1095f630", "sighting--b92bb02e-1c6b-41b4-8065-84a2c1fd98fd", "sighting--e0af558e-b3fd-4bc8-8f6c-98d9f03e1268", "sighting--ebbff592-e20d-4f2e-8d31-2adb9fb054c8", "sighting--955fa511-0d6b-4c3c-8de5-55a6195c3983", "sighting--a1014e65-343f-4535-af9d-2456b62d32ae", "sighting--e19b2d71-e45c-4fe5-8c27-95fbe4b31946", "sighting--013707d1-e73e-47f4-be01-2cdda304eead", "sighting--19179dbf-b866-45b5-b6c7-02ad60bdef06", "sighting--66c1fc6f-932a-45b8-b02f-01463444b45e", "sighting--659cf64d-5c7e-47af-834c-80ca5e449a33", "sighting--278c39f3-59f6-46fd-8054-46e1173374d3", "sighting--04fe647a-bc9b-4fc2-830f-9bf9f49b59d5", "sighting--c8d201dd-d2f4-45af-b724-0180235e5200", "sighting--d9f47e85-8648-439d-b9be-218fd940a5cd", "sighting--c2007546-42a9-42ba-a495-5e75ae40cc54", "sighting--509b261e-c1d5-4112-983c-e5363427260c", "sighting--b0ce03c7-d8ab-4d5d-b62c-ce39473a2570", "sighting--063e5cc1-5ae4-4490-bab5-1da81f4600f3", "sighting--3229d6dd-ccd2-4e0f-913a-577fe9b8bd0d", "sighting--5d33758e-8f51-41ba-b219-192c5db3c370", "sighting--bbcc2c18-3091-4078-9e89-1ee271054086", "sighting--c23c3ac8-3319-4343-8f9a-44446c710177", "sighting--e430acdb-ebca-4044-88cb-b62dd1d33f0b", "sighting--bc096f92-22ce-4175-9990-e9d39f6bd2bf", "sighting--fcb50087-3d45-48a6-b813-a51b5a5ad660", "sighting--5d11b221-5cec-48e7-b405-aeda8f6e13ec", "sighting--06196fb7-4390-4309-9ab2-6828ae8e8888", "sighting--eaa107cf-c395-48cb-a6a1-87be2c9269ee", "sighting--518ed977-4080-4f3f-85f2-e5bc87502bf3", "sighting--ea55eab4-ab0c-4470-8f0a-371a80521bc9", "sighting--d15c63a2-3ff2-4655-9f76-b65428f55f43", "sighting--6f741972-a725-4e78-b51d-b65554013a85", "sighting--e3ed15b2-b609-48d4-9241-39c9224ae74c", "sighting--5d23c2a7-0c3c-4ede-b000-ec3f08a20677", "sighting--ee556ef9-1dee-43ba-a910-52916077313c", "sighting--8c982ea6-8f7a-4484-a475-c3ab91da0aa9", "sighting--0f507c36-8eb2-4e35-942b-aa89ce624e92", "sighting--0cc8bc4b-b219-4813-a767-4bab52fc5be6", "sighting--829ac0a0-209e-48c3-b8e6-d55cedfe1a5e", "sighting--e997378b-352f-4ffb-959f-0d3d896e940d", "sighting--893a7c12-6c31-4c18-afae-2d479ce7c572", "sighting--1db8ccaf-3da2-4b22-8405-43651c703943", "sighting--944fbaae-baa2-458a-b895-98fa5092202a", "sighting--507d9cc5-ea4c-4f41-8eb6-1f8e00fcfbf1", "sighting--9b64d778-1d81-4304-8348-8e40ac0fa6f6", "sighting--6ea21ada-2b6d-4e14-8ced-654810be7031", "sighting--fc141aa5-44af-4dd5-8a32-7af56725ba7b", "sighting--005830c7-06df-4c45-be46-69bee55d1be9", "sighting--6cd8a3b0-c733-408d-99c9-0b37d14cd852", "sighting--5b24f0ab-8fca-4baf-bf1b-4e106e8214bd", "sighting--fd584097-36a4-4f5d-9815-b4c87106c8df", "sighting--023e3570-a8df-4567-a1c0-c8c38d31e1b7", "sighting--cadd3fd7-893c-40ec-b60f-260a4bdc4045", "sighting--2cf1d0d4-dd9d-415f-aac6-9eab17f006ce", "sighting--3dd88d9a-e2b8-4708-99a7-fcc9c4357817", "sighting--a775036a-fbf9-4ef1-925c-3a96b981b7f7", "sighting--a369b049-7c5f-49d5-89a1-85a3b40182d1", "sighting--bbf8cc0e-f72b-4194-acbc-a34f527247fd", "sighting--4c220f41-86ee-4c99-b0ad-50e72717f1df", "sighting--292b6c80-66a3-429a-9a35-22c5729e0276", "sighting--a7307db7-60dd-4369-8eba-551fc0070bb1", "sighting--87a79907-0ab6-4e67-8264-933b869f58fa", "sighting--023a4551-a4ac-405c-97ec-361ba175f3d5", "sighting--7944d70b-2daa-4aaf-924c-ee83f818b4f4", "sighting--52247c62-decd-4ad6-9777-7b8132b2289e", "sighting--5068a72f-adf9-42ae-8c61-fc0d38c4382b", "sighting--0d7a10db-1fd2-41a5-b293-0f12ad063a10", "sighting--f8f4d65f-6adb-41b9-8467-e90afe1c635e", "sighting--72addc45-ae74-4c9e-8133-a0b28a01127e", "sighting--6a1ef8e5-ef75-4659-8ff6-d585405b7896", "sighting--6e2dbf26-2930-4632-a92d-d27c1d5df256", "sighting--3170964e-d548-434b-a69b-669b36c2e3f7", "sighting--533c6be3-c643-4ce3-98d9-08b8f52c2580", "sighting--aa0ccd6b-3cd9-4730-b4d0-d25f5ccf3771", "sighting--752d5124-83e6-473e-8135-9ceadf2baa5e", "sighting--55a2f68f-c3ca-4091-b40b-f203a5fcd5a6", "sighting--f89fecfb-9e04-4ece-8e5f-1aab6634e54b", "sighting--b2e1d939-95d0-4682-b71f-cb717f850c26", "sighting--693d85dd-c57f-4227-8830-5f49e80f0c9b", "sighting--e15818a2-512d-478b-b3ae-9283ad73bb2c", "sighting--bf7fa90c-32b5-4f53-99c0-9f9ca509c71c", "sighting--b981bfc0-060d-44a9-aa85-dcd43ab4784b", "sighting--75ddff0c-3fd7-4590-80aa-6634b941f394", "sighting--0c8009f4-ebc0-453f-8d58-268f36ce6036", "sighting--8edb1c77-34af-45df-bd71-9589f1389bfe", "sighting--d7889bcb-84b8-4d19-b39d-468fd4e4fba5", "sighting--67b941a0-acbe-412b-8348-f850fa9e16dc", "sighting--565e42f9-fdc1-46d1-bdff-fd8c4a431ff8", "sighting--45349ee4-824c-47de-b17a-c7b407703fc5", "sighting--17784713-5d8e-4bec-a606-912d25f1c0e2", "sighting--0791955c-29a9-4c00-b212-ed1dc0a19623", "sighting--7baf9c93-335a-4fdc-9bee-dd4a1f95f592", "sighting--02690204-3725-48de-bedb-3a6c41854b25", "sighting--e0ab3f1b-ce64-4491-9493-fc068fc3eff7", "sighting--ec572f09-ba69-4e7c-80f4-094a322692de", "sighting--60641dc1-a4b4-415d-aa5b-9b7bd79d82c3", "sighting--c837e4aa-d4ad-4899-87dd-ef10f120fedf", "sighting--f11788ed-82b1-4d66-b0bd-d1625b34b522", "sighting--021cf4ab-b810-4326-bf70-6ffb5998a58f", "sighting--45a62bba-ffe3-4a7c-9370-86493db2c949", "sighting--6a554cb2-bea0-4cd6-90e7-0d4054cf10e8", "sighting--893e8b5f-206f-4963-b4d3-1732bd4ce6fe", "sighting--268ffc6b-5e90-406d-9073-0dcc7a2afc08", "sighting--a44a068c-3545-40a4-ab89-c91d0b406420", "sighting--ce740e29-4467-4aa6-8924-85448cec2fd5", "sighting--b940cbec-8289-4619-99f9-15e3f6e7ed9a", "sighting--be6aeea2-f3b0-4f6a-ae48-466c787bea38", "sighting--ddb38766-5835-4ce3-9657-e1d3ed50e8f4", "sighting--470f5db6-8363-4a47-bf7e-7c5c3d291920", "sighting--5f6d8f81-9e88-4602-87d3-bb337ce24914", "sighting--62b3c1b9-012c-43a2-b561-893e8eec34ef", "sighting--19005cef-ecfc-4788-9049-5c29236976bd", "sighting--2abfd2e0-9124-4e04-b3dd-8fbab31e7da8", "sighting--c1018561-266f-4fee-8ef3-f25f1de30f75", "sighting--2395700d-07e5-41a7-91db-52316c3a580c", "sighting--3ed1696e-c3f2-4d20-a283-efd85d883795", "sighting--34fa7418-4a68-4293-98cb-1e13a06026f7", "sighting--06cc9173-0b50-4909-9fd3-0bc6f2e9aa92", "sighting--502ffb68-0f00-4c56-9e6e-62d9d11503f2", "sighting--cf625daa-48c2-47b2-9742-2c366660c257", "sighting--017839a6-1a58-4fac-bc29-06e89df4767e", "sighting--071e7bb3-9df2-4f39-8fe9-dc535808e103", "sighting--89271740-f614-4758-9ecd-7c3c853f1be3", "sighting--2ec4593f-4fbe-4d1b-b258-c66a6bb5a44e", "sighting--59dc886d-b7e3-41bd-97e1-c3cb5ded1cd7", "sighting--afd1f488-1099-4864-8d66-c2a0cf1d6b1b", "sighting--6a2a23b3-e3b1-4804-be17-1141d11a4dfd", "sighting--2a118491-95da-4e35-980f-e8773a910b12", "sighting--794d7fb0-1664-4c4b-822f-6eb212a85fb7", "sighting--08660e32-c835-45be-a194-b41d5750dd74", "sighting--7b4dfe33-09d5-429d-ac3c-a5857e8d41bc", "sighting--8dad8226-5980-4f52-af62-b9587bea4c46", "sighting--a4c2e0f1-76c3-4b88-a964-b3f0906f6d8d", "sighting--7c2d7fd7-92e4-467d-9241-78f566c2d13b", "sighting--76c1c16d-cf47-4154-904a-fd411a9a39e4", "sighting--4578f78f-b5af-4785-97e2-f37c1b6635af", "sighting--8607f7da-4d66-49ce-a550-204b781ff454", "sighting--88c2ba8a-5813-43f1-a4e4-1ac3e72e81c3", "sighting--ed74a17e-4f32-4851-be34-efd785386841", "sighting--61e01a76-a6b9-442d-b55f-f838c76829b7", "sighting--37cb7e5c-b26d-4967-8243-bb441b82a2fe", "sighting--b477267d-4ab5-441e-ab48-f7c398c0b1f4", "sighting--ab4e0524-5540-45eb-8f62-d41dda9da33a", "sighting--6ef79322-e78e-452d-860f-ce19cef0b52c", "sighting--a05d26b1-7954-4def-b5f1-303c1e174cb8", "sighting--368e829c-cf26-4bba-95b7-80dc848b10b8", "sighting--41cb1d47-fc23-420c-b76e-8ade379dc044", "sighting--f8bc4e4e-b57d-4234-91fd-0ab36c5ecbb3", "sighting--1770076d-b826-44a7-9a53-9668833a3fe2", "sighting--04b75bc6-5f13-4424-aef5-7707624ea20b", "sighting--c6db04fc-77ac-4726-894e-102d0a1991d4", "sighting--0891138c-d830-4eef-afd5-a7271b53a9cf", "sighting--e3dc2530-d33e-4334-a806-b09f33f9fba3", "sighting--5e8f9b06-9f88-40f0-905c-403ef1d38d7c", "sighting--80fcfd35-6f03-487b-9983-9d5cef02520a", "sighting--22059e72-0133-4cfe-93c5-1d9e66b8a80e", "sighting--f3a08022-43e7-47bd-9182-2114ce6b183b", "sighting--6cd892d1-9320-4ce9-bb8e-1995b2f5d82b", "sighting--749a54c2-62b0-4ddc-a7e9-c4bd7538afdd", "sighting--f39dab08-ae5d-467d-8f3a-044e8a4b82d4", "sighting--e17f4d1e-4e39-4dcf-9082-d8c2de5079b0", "sighting--853adc9e-a0f6-4004-bd63-e61e5266f23e", "sighting--0eebfdfe-01d2-4f9a-9509-d93a2cde3520", "sighting--224a35f0-fe40-4521-9c42-7990525dd741", "sighting--3fe13fbd-09a9-474a-b3a3-c25811b2893b", "sighting--7e3d20a6-e889-4d54-a590-ae80fe9354af", "sighting--47ab250c-4995-4ebb-84e9-c510941b1f68", "sighting--097fa20d-5447-4524-91fc-fd0204984b33", "sighting--f27a4d76-619d-4fda-ad3b-0441a012e25f", "sighting--f71e6cb9-a507-492a-9aa5-f8a2d4d8faac", "sighting--31f5d42e-abdf-41a8-9086-fa9b8d4b8b13", "sighting--35dcba41-7f25-4407-928c-9435a209a469", "sighting--90a9fd6c-bd32-43b7-964d-43b247c0eb77", "sighting--70103af1-7a78-41cf-bab1-fc8ebaff92a0", "sighting--aa7c5dbd-e535-449c-a7c0-ffdcae72e280", "sighting--e65d1ae1-7640-4288-8235-cf7402c00537", "sighting--36229050-96cc-40d1-b67e-68b4e4b5ab63", "sighting--fe2442e1-868c-421f-ac94-d69f4374f0a1", "sighting--61095a55-8c8c-4622-8046-85eb47c41dfc", "sighting--1fce7023-f104-4eeb-840e-b5edb1f2c894", "sighting--0558114c-5fb3-48e8-8a73-f3ca192b8c00", "sighting--76e3589b-2928-4d84-a67c-47fc54cab88b", "sighting--842eac83-717b-43b3-9196-93e59f72eecf", "sighting--ecbf8784-bee7-44f6-a143-b1625d8a24a7", "sighting--34b7e02e-765d-44ef-a415-d6c54ceaf222", "sighting--354e7656-5247-40ce-b7e1-aa7f2df2db45", "sighting--3ed77fbc-58b7-45dd-8800-f41d7fec1d15", "sighting--16032390-976c-4538-a2f0-37a6c115ad8a", "sighting--eca0e257-7913-4b11-a6d2-8f7a46ac5641", "sighting--32efca03-523f-4c54-806e-463575ef5658", "sighting--61129db1-25ad-4415-83eb-191fd6cd9574", "sighting--7a7be263-439e-44de-8c17-b184f16034d9", "sighting--b9425f33-05fe-4a57-9343-443df9db690e", "sighting--a0952339-16d3-4d39-a488-14a1852ef81f", "sighting--45528805-a4d6-4420-9aba-d16563becb3f", "sighting--c2debb63-abb5-4fdf-87e1-c93056b9493a", "sighting--6496bc1e-efb0-4126-b6ec-eba8401ac804", "sighting--553a069f-a993-4fbe-a4ca-fde785966234", "sighting--f4935bf8-a307-4662-b1d8-02117339d555", "sighting--005f4b11-d5f6-41f2-8c8b-97a2f0fb8e6d", "sighting--d392d44b-8c6b-482a-898a-de8e586c6857", "sighting--495024d8-72fa-4cd2-954b-ce19e63b5302", "sighting--29592b79-8bd1-4bf8-91bc-e0bab374c277", "sighting--16c56f51-6fb1-4410-9983-95bb53a58432", "sighting--3584f34e-af6c-443c-ad42-707bf1debedf", "sighting--2190c13b-18c3-4cd4-a7b1-eed5789fc0f7", "sighting--408e19be-218f-4e47-b054-9c05ad2ec40a", "sighting--51482261-576c-42e0-9745-51bda8e286ff", "sighting--f976e170-6c02-4fed-824a-cff9e087f632", "sighting--cb87c0f8-678d-44bf-b5aa-74ff50fde1bb", "sighting--66d23a0d-1c1a-4292-983a-2a5c6ccd3079", "sighting--121ce938-417b-4322-aec2-52d4655503a4", "sighting--d23f4c93-f3de-4bfb-9955-b6ea44021111", "sighting--9ef8a090-c27c-45e9-a0a1-e077fedc0a80", "sighting--9e18ee0a-d71f-41de-ac88-3d1d2048ddf1", "sighting--f07cf247-daa7-4d4b-87b9-7770f69c6f72", "sighting--f677c552-ceb4-46cc-a757-bbc5a3f8cdcb", "sighting--dd6a0f98-b47f-4b68-9c21-2ef06d3846e3", "sighting--ee53cd94-b65c-4360-a9ee-541e113b3117", "sighting--c3b85c94-876f-43ca-9464-14ea04ef34de", "sighting--6826dd6a-ac68-4107-87b1-44a81603379f", "sighting--2f5973b1-58e9-4a61-999a-d0c971b8ff80", "sighting--2ac9e5d6-25a7-4814-8e09-234ad554f57d", "sighting--f085005c-841b-47a5-b4cd-3493f142f561", "sighting--4f3f539c-c5ed-4c56-b7d4-b4452eef8fbe", "sighting--47804a5f-dd4b-4927-b5db-225d36d4fa4d", "sighting--ce59d3d7-4ced-4895-814f-5c8dedaa3f02", "sighting--e2410cb0-0056-4f29-af32-e26d8eb10e51", "sighting--e1717b78-03cb-4f89-aa38-1036d229ae5e", "sighting--c4f23236-1ecf-44f2-a0e8-e9bcdb566d1a", "sighting--c2ef6fb4-f303-49ab-a9a7-9f3a022372a0", "sighting--1d1cce67-f4f6-4d9c-8532-4ee9f1e04a89", "sighting--0e5c3b5a-92b9-450f-ab38-664f19a03e4c", "sighting--e8172563-5886-445d-8d83-13dade8e8b5d", "sighting--4d67e763-353e-44cd-9f7f-295220db2110", "sighting--96e0dadc-f569-4e40-8069-e4fa9fcc6dd1", "sighting--9f3227bc-36c8-417c-979b-3120bddd66d6", "sighting--47e4be77-d773-432e-aa9a-e04199ead3c7", "sighting--7465452c-acf9-4357-ac84-3bb5dadf40c9", "sighting--32851533-2a75-4ab0-ab00-62fc53c639c1", "sighting--27d62cbe-2d2f-4ca2-9200-0fc96e545ded", "sighting--4051514c-cdb8-41e5-8896-9202d57999a5", "sighting--0bd4f38f-b149-4555-94de-e935c46de229", "sighting--648b3999-6c96-4bc0-a929-d5dd244869ae", "sighting--b1480848-b73d-4741-bcb3-35326157fe36", "sighting--860a327d-fe6b-4294-a2a8-afdf92923d73", "sighting--da6c9586-89dd-4cde-a928-127f5e5dc61f", "sighting--ace50305-0028-40e9-9b5a-a92a401bb847", "sighting--3259c2f5-05a1-4651-a90a-55898919d4ea", "sighting--ba78a9e7-fba7-45a1-bceb-40de886aea97", "sighting--da0dfec0-ceab-4fc2-99ee-570f8e22c624", "sighting--41c36a27-bbff-433a-a40f-65738e5c6615", "sighting--3dc1780d-7510-486d-9617-450020c30c08", "sighting--893aaffd-3637-4751-8377-7a411017ed30", "sighting--fa4941b1-5d14-47b7-ac04-e3f09be8e00b", "sighting--d2145b16-b3ea-4135-850f-8aef59646302", "sighting--0ffdb637-ed32-40af-9da9-78db9edac7cb", "sighting--d8fa9252-1e58-4d1a-ba05-1b6b5227ef36", "sighting--5d33e0e7-97e4-4f2c-8234-a0777b211387", "sighting--44b61c95-7845-443f-82fd-38b552b329be", "sighting--49b1d264-91a1-475d-a1b7-6b9c813acecc", "sighting--86f9b72c-0e70-4925-87ff-4c8e97b12806", "sighting--e3ee8adb-737a-4318-b751-0b4adc6e98d3", "sighting--c5ac84fd-8322-402d-9e52-b05e58a7fe72", "sighting--ae10a64d-d326-499b-8d1c-91e09784c1f1", "sighting--1bfa67d8-bfae-4fa6-a2ae-b67f8b873266", "sighting--02ef996d-5aa3-4c94-9cf2-41b9a6e91893", "sighting--a2177b53-5a5a-4103-aa4d-fa7285ae676e", "sighting--aebc7ef7-8f97-4644-8b06-e861e018991a", "sighting--956bf37b-cdb3-4d7a-bc02-a080306e80f0", "sighting--0fca032f-bc9c-4032-b8c0-f3f91860c67b", "sighting--377caf78-c864-4af7-9768-0bd7311b83ef", "sighting--da3cfa18-431e-4058-ab43-eff38aa359d6", "sighting--34f4c4a8-5100-48d1-bfdf-b17b10d6f2c4", "sighting--949d6d47-60c9-48df-bd08-68bf1be6147f", "sighting--22bd9579-c996-4941-9ac0-c5fb448aba39", "sighting--a04d6be6-55d9-41e2-8d10-5bb2e9fa665a", "sighting--1c80d757-ec2d-47bf-acfb-c66206f3a05e", "sighting--7eb90fe6-d1f1-46d5-be5d-648f0247dc6d", "sighting--1589e415-b0ff-4e8c-b3c7-e817790080b2", "sighting--ad60f022-6cc5-4031-bb3b-45ac2be8978e", "sighting--31d6dc19-b5f7-4ea3-99ff-9bd32e999148", "sighting--e964f0f5-30b1-431d-89fb-1719550e89e1", "sighting--7be83bed-f03f-4b67-b91d-bf305c8fceaf", "sighting--217560fa-d556-43b0-957b-3fa32fd49fe0", "sighting--3cb7a93e-9cf4-4515-b721-1f334c1d6694", "sighting--43f10e5f-6dec-4763-b226-7533e9a9b4c2", "sighting--6365aed1-87a1-48a7-9ccf-57dab7bfe474", "sighting--a0af5f7a-69b6-4a1f-8d84-b4455626b3b4", "sighting--48bd3922-6147-45e4-b817-ec0f848fe136", "sighting--25bd600c-50ae-4497-bf7c-98b649068265", "sighting--b58c67cc-2a27-4b44-8b65-59cc888bd7be", "sighting--e00585d5-2a20-4c5d-8a8d-de2da40c408c", "sighting--3de77d8c-4f31-46b1-87cc-2f8522dc33fb", "sighting--04e67d53-398b-4d39-ad62-3f9c383176cd", "sighting--a0f60339-c5ed-4f77-80e8-ae3468b714bc", "sighting--75de3c61-fd43-4dcc-88f1-692634928336", "sighting--2fb5e154-fb3f-448d-b197-9dcf58563aa0", "sighting--a351f082-4894-4dd1-905a-d0ec81d5d847", "sighting--528b3f01-2bcd-4010-af46-4db885326ae4", "sighting--1e98640a-0c35-4bbb-b005-936e7f536708", "sighting--5f9d57a1-7e18-4cd2-afa4-740a0c319ada", "sighting--ae77ad5d-2a47-41c5-a63f-b02bf09ff52b", "sighting--025b27b6-7978-42c2-bcb2-3577e2bb8763", "sighting--4e94ae74-e62b-4b18-8f5f-bc536b3ab7bc", "sighting--a5cc33bb-e546-441b-ac1f-bdee3b5fc37d", "sighting--33d7f717-c916-43a0-b22a-a9008897af18", "sighting--38453073-f094-4ecf-a066-dd07bdeaecc8", "sighting--4784c74d-33e9-4ceb-bd01-e39799ad0e91", "sighting--fbeb2948-dcfc-4863-9468-d389f0d9aecd", "sighting--4a004ec9-7e1b-474d-b8fd-90fccd8e2a99", "sighting--7e6dfaee-62be-48d7-8d23-acef8895b814", "sighting--a63bf5ab-b983-4fcb-b2e1-555b6d451ff6", "sighting--3c995daa-b8a6-462a-ad8e-b1667c826093", "sighting--9a89f9cc-56ba-404b-8f7a-e8e0ffeb3f6a", "sighting--f671f7a1-def3-4014-932b-8f69f31b2873", "sighting--3127cfe3-3187-47df-b8f4-d8da12620d4b", "sighting--8481275f-4911-4ae8-aff4-1e51daa81615", "sighting--e20c6156-4df4-48f5-9687-ff3578cad235", "sighting--ec5df08b-c445-4e95-a6e1-c228518ae46d", "sighting--d40f3dd8-3ac2-4b40-8883-dfd4b5ca59a7", "sighting--b11ccced-c94a-471e-acf2-2f5e225a71ef", "sighting--40d4683e-e608-4f2d-90d8-be6e12787508", "sighting--aeb9d463-5e2f-4ed3-a82a-fca85a348bbf", "sighting--e8d6919c-cafa-497c-b1a7-1629da51bbea", "sighting--405fd5d4-c7a9-4d0b-b013-830a19035851", "sighting--f8e8b021-6830-44dd-a422-dcd8843b113f", "sighting--49e5d014-d659-4f81-8d54-cd7759d3174a", "sighting--4861410b-a442-4329-b976-bb6ecafb57f7", "sighting--6a26317c-3769-4a93-a16a-3968fc22ca5a", "sighting--3e51be60-971b-4050-b539-b65c299ad079", "sighting--00eae992-096a-4a28-b7c6-94871587fd4c", "sighting--4cc58b38-2a23-4cf6-9867-a53d34e5a377", "sighting--5e6ac69b-00e5-46df-a188-5a0c88cde871", "sighting--efccf635-d365-4d27-b1c4-37960141ed8d", "sighting--c2768df9-b83d-4e35-b16c-5f45115216f4", "sighting--3b6ecadb-0b76-47be-8779-37e583071353", "sighting--7e1c4af9-3706-4cb0-a998-835c4e6b5044", "sighting--cc81e09f-f087-4580-b9db-ccf448cd9e27", "sighting--5a48d04b-0cb4-4fad-8356-53dc3679064e", "sighting--2dfc8305-0ee2-4641-bb41-864ea87bcfad", "sighting--22c830db-3ca6-491e-b259-e1bb1fbd14dd", "sighting--32daa645-bdcd-4833-8641-500855b04adb", "sighting--b23d4ae4-1273-45ed-9e91-a0e8b932cbfe", "sighting--dfb720ad-0c1b-4bb6-8c00-b07e8991e3ef", "sighting--2100b20f-e87a-45dc-83bb-819f7ae4afd4", "sighting--f9e3529f-92fe-44d8-ab38-d1c27768f6d8", "sighting--0fd50c7b-4240-4bbc-9c79-b4db4ede5ef5", "sighting--3c08b862-4e5d-43d2-892a-59fa47fc95c1", "sighting--e0c2dff7-6e5e-4988-ba47-53921c33ed94", "sighting--83b9979b-2f1a-4fd4-b401-0f9ac4da0170", "sighting--658dee5f-5e65-493d-9ed9-98cfe0ed40cd", "sighting--33d16314-bd54-4550-a7cd-633bfdadc1b6", "sighting--1831a10a-3e98-4f91-8c12-8c791a382ce8", "sighting--d61823d9-755a-4a12-938b-71f5e4ed5d52", "sighting--82b61992-b381-4ba5-9ff8-bba68610c4e3", "sighting--e490742f-7a81-4969-a7e0-72426e7e365c", "sighting--d4abd084-e668-4951-851e-984e48174a6e", "sighting--c0fa4f78-1448-43c0-b910-4508df44e60c", "sighting--e3be3d2e-b1dd-4a18-9acb-0c63efb3a051", "sighting--89471cc0-ba17-46e7-a89a-118925d411e9", "sighting--46f49fa9-3f65-4cb2-979e-be3e408d3a4f", "sighting--44b7e341-8957-49e6-afe2-845c52c050b5", "sighting--9d7d47d4-77b5-42b9-84b7-55d1d368c200", "sighting--9d3d0fd3-a666-48f8-ab36-13bf367e4c05", "sighting--b3be0f73-da26-46a7-ab84-cc9cbec8ffa7", "sighting--95e6cd9a-5dee-47d6-8d60-da657c78a8db", "sighting--e2759725-07a6-4d1a-8018-8c6dea89d944", "sighting--fecd3c5a-ab6f-4d14-ab27-5c027ef197cd", "sighting--9547b9ca-d94b-4410-9ba2-5bce39b18c87", "sighting--4f3c9129-d3c6-4c2a-bb5d-e65a0cf7d1e5", "sighting--1624e015-08c2-41b7-ac4a-7ee64bef2db5", "sighting--c28c49c3-64fb-41f7-b782-072c24857c48", "sighting--bec8a6fa-8fec-414b-b099-f20171df0c4f", "sighting--06145641-e2ad-4809-b8f0-5fd643963bad", "sighting--4bfe25e2-b2ea-41e7-88d7-4402a42ed9b1", "sighting--ee6c7c8b-3cba-4e9f-a5f8-00787c001e83", "sighting--dc3e42fd-d2dc-4fa3-847e-c8e240257489", "sighting--60458532-1806-40c2-a0b3-f91dec3439d6", "sighting--8c719c03-2b17-4e7b-b87b-1c9dd3624548", "sighting--f8e21a44-2164-44d8-9416-1f55387eadc0", "sighting--f35b49f3-e1b9-4de7-bd0f-fa8f307142ac", "sighting--396a4707-b199-48f2-bf0d-b50fc314292b", "sighting--6e87f625-daec-4e61-bd15-55d8c5ea0daf", "sighting--9bf55adb-0024-4286-82aa-93281bffcb53", "sighting--20d3badb-3ff5-4575-867d-24c680b45d83", "sighting--ad613d84-9135-467d-a328-81fbc5f42958", "sighting--60c67e6d-9b29-433d-a596-f7e27b4588d4", "sighting--e2aed9c8-e198-45bd-a0b7-0c0d7f93b3a5", "sighting--0a3df895-6404-4f24-b7c4-721fab6aae96", "sighting--c76d33a8-8110-4340-aa3e-bb622d59151f", "sighting--9ca53303-4d54-4468-91fa-bfc14bf7b05a", "sighting--512d1960-10cb-4a51-9301-1664d370fdfe", "sighting--a204b3c4-f6d9-4c7e-a75a-9e5c5af2f4eb", "sighting--63ac42b8-4dc3-4873-b337-fa07085cedc4", "sighting--455baf2c-2851-43a8-a056-720fdf18321a", "sighting--a4ed8ebf-ddad-4bd0-91b3-afba6f188011", "sighting--7d98fe05-3d71-4a1d-8007-97e74db93834", "sighting--de099078-6026-4169-a42e-518c5d826b19", "sighting--064498e7-4524-4359-a77c-a5a711ddbfe5", "sighting--bdf6ba87-9f95-4fef-96a4-4698ad1f31e0", "sighting--b88ea86b-c259-4cb7-befd-9bcf5654c770", "sighting--29f62aa1-86a5-4507-a773-438fb2bea9f0", "sighting--f3a354d0-e6e0-4be9-ad3f-96093e2b81e5", "sighting--80db481b-f1d4-411e-ac03-cd250f91282f", "sighting--29fc2a45-0030-4dfa-88c7-aa6d3f93b3b1", "sighting--d61372d0-6d9a-4328-8b8e-db52d99d4165", "sighting--37958697-938b-4940-9595-2db55bfac49b", "sighting--96088977-2d61-41b8-944d-fac936b27cb6", "sighting--c5afb470-5d32-49df-a650-b7efb2bff7d5", "sighting--43db954e-7b75-422f-aa52-408b78050b48", "sighting--354fe8f1-ef90-45d3-8982-ac51762bf650", "sighting--4292f3b0-edbe-4bac-8313-dfbda0341e71", "sighting--d7a9a580-b286-4a11-8314-d4e71a375a41", "sighting--fae43020-4cfc-4326-a255-f53f839a3e7d", "sighting--e649ed6f-608c-4294-8dd0-7472571e7cda", "sighting--e7c955a8-535c-44fb-9999-0a279bbc5a32", "sighting--e3140692-b606-4c35-bc6f-ea1ee362594b", "sighting--c4c4da72-ad79-4b23-ad43-5e5b8072ab06", "sighting--c752b5cd-2086-42ec-8d73-0acb55ff6ac5", "sighting--a0f9a4c5-225d-421a-8813-abe2abf6520f", "sighting--98366ddc-a238-4ebc-a918-ab50ef6d814f", "sighting--ae517cec-efc9-4e24-b259-48aba8fa42e1", "sighting--75aa0c7c-70e0-4cad-a20d-543f00809b8a", "sighting--7054a85c-379f-48ba-be30-eedcdd61c9a1", "sighting--a7381058-eb56-40b3-a866-23d84828f4e6", "sighting--54003a7a-ad6f-41a9-8d5a-db864fbc43e9", "sighting--4a09dce0-b61b-49b4-8d37-dc8daa548be2", "sighting--ad326db7-4fef-4e79-9f19-68bbdc1c9728", "sighting--a6552c78-d5b4-4ad5-a733-68a393ddf76f", "sighting--0bdd355b-735a-417e-8fa1-bc41a9a26af4", "sighting--4a6619c5-c8b8-431e-a48e-b50cdaa3bc7f", "sighting--a125163b-21c6-4801-826c-10d6f04fe10f", "sighting--69f6fac9-ff22-49bd-a7d8-23a5f9240e00", "sighting--6b847033-c6ba-4ea2-b8cc-0d6d93cfe2c9", "sighting--52faaeaf-7d88-4cf6-bdb1-57a7708fac84", "sighting--cbbeb402-daaa-48d2-be52-a60b5236f8e9", "sighting--8c65ec69-8c7b-4430-b7e5-0a23784a3006", "sighting--39185930-e3fc-41de-8cc2-91842583620b", "sighting--bd74e982-9203-4a53-9e92-186d136bfc64", "sighting--dd04bcf5-5296-4058-bf3e-c473dbbb62fb", "sighting--b5f1b6bc-4374-44ac-9faf-f2358ffa53a7", "sighting--133740cc-9878-42a8-b1a3-aa1d9118c855", "sighting--27247d71-9bb5-4019-9d8c-a798e4e50232", "sighting--508726c8-65c0-4aa7-8008-1927f6304680", "sighting--071850f8-7096-4957-b3bd-9d2e1507f512", "sighting--62f5c8c7-e270-45dc-adad-923757b2e0d0", "sighting--aae9dc8a-b13d-4d37-9f67-b53b6723f383", "sighting--c18acbf3-2d37-4302-a6b8-21d6f327f941", "sighting--33c7dcf2-a53f-49fc-bdfa-46c43a289bb0", "sighting--c99862e1-e3b1-4605-9d27-3c2836520240", "sighting--4e1c8740-c6cd-489a-a1c7-d29d4f62ed3e", "sighting--8d48494a-886e-4514-8d9b-9a96575d36d2", "sighting--3e89a3ab-3313-40f9-a930-6ed80b216948", "sighting--1b58b6ca-7da0-48ad-b404-d7f3d797bc84", "sighting--9e45e15e-cbf7-4514-90ae-2248365010b0", "sighting--993bdb5f-38c0-42cd-84a0-a6958e2ab90d", "sighting--a3e24ff1-8a57-44db-ab52-8df30cfacbbe", "sighting--c92c5e0a-26db-42cc-96ba-f030baa1d4a6", "sighting--1181dc75-1d81-49e3-bd17-91ea78c080ef", "sighting--cde645a8-3ba2-4017-bbcd-3bc006712ae9", "sighting--ee61d1ae-dff4-49c0-a0ed-a3183925b309", "sighting--2956cec0-a6cd-4dfc-8d87-ae0d9ff97d7d", "sighting--46a068c4-93ee-42d8-83d5-ffdf01b110f1", "sighting--40935f25-bcf5-4511-ba53-159648ec4f89", "sighting--7533ec5f-0bdd-4e11-be70-f664318126c2", "sighting--c5dfddac-46a3-4f03-beb5-29b0f3f7531c", "sighting--89d5f56a-0f9f-4ad5-99cc-b64b3f1f0d1a", "sighting--5855d09b-68d2-4213-8ff9-bba00fa8e55f", "sighting--15cd7b44-512c-4e4d-9bab-0e09504b8f63", "sighting--e79cd3a6-b412-4e17-b143-3d00865bb3fb", "sighting--82129cf0-4217-49fc-8838-e3426bb172aa", "sighting--270d81b9-ef36-432c-a267-e5fc6b191495", "sighting--cf3c18b3-090d-4ebc-9018-628f5b3d04ba", "sighting--84414c01-60d4-44dd-994d-a21bde6e151a", "sighting--2b1ef90e-d3f1-40b6-aef2-710108b57f2b", "sighting--dc87c409-c9d7-42a9-9d76-f21c6003657d", "sighting--cced2e09-ef7e-416b-97fc-b81988f22755", "sighting--4fa7663e-9bba-4d8b-b66b-c70b64a686b0", "sighting--105749a7-c2f6-471d-a266-fa32d8c92016", "sighting--b6d6dc86-ac91-46a6-9021-83e4ef6c705f", "sighting--b3b71fbe-e83f-4e04-af41-1b8da929ab97", "sighting--7a500b81-b57a-4565-93b4-f1a1ce68e1d3", "sighting--cbf3c006-fc4f-420f-942d-d9273d81cf32", "sighting--a0a358cd-a093-44d8-9424-5322625fbb1e", "sighting--179531b5-d30c-4f6f-8c7c-59491c9f2d97", "sighting--829babfa-800c-46f2-b4bd-6a64300e0d03", "sighting--29d314cf-f21f-422c-b80c-76bdb7b3ea0e", "sighting--7c9de5f2-90ca-4c24-b8c7-efbb06ecad16", "sighting--6ef9a93b-2aee-4845-96bd-1718bb852a78", "sighting--4cbcb944-0ecf-44fe-8e8e-00ed0fbf4dee", "sighting--ebe1c04a-9e4d-4ba3-b0a0-6d45a54b8c41", "sighting--d762bede-34f1-46ff-a80f-1d31351a5b9a", "sighting--1f2c9b05-a373-4784-ab85-75bfd6a1becc", "sighting--8d324168-c31e-4baf-8783-22926071ad60", "sighting--014c2a4a-a97c-42cc-be1a-84096ad55571", "sighting--1f18283b-2eba-418f-8951-8cf6e6f63dca", "sighting--715fc8e5-9ab1-46b3-b1e0-1e9fe5230783", "sighting--f5a53351-b3c0-4a70-8168-8bbff0c11aa0", "sighting--b8109efd-42ec-40cc-9af3-6215678b2a64", "sighting--e9864467-43bc-46a6-b2f5-a71ab9998fdf", "sighting--dfc168d4-fe18-40b7-a97c-c10139e2915b", "sighting--4f902854-3905-4a50-805c-509a98411207", "sighting--e30aeaff-5946-41a8-b183-fcbf16356294", "sighting--f67e033e-282f-4dc4-a61f-4e575400cb61", "sighting--47bc807c-7774-4ae4-96e5-f4b73003f414", "sighting--0d6e8ab6-d1e7-4401-95e7-d74d3503d873", "sighting--41559a57-1191-46bb-818d-1fc4b638368e", "sighting--51227c2a-acd9-4afd-a171-22bc9960a4aa", "sighting--a7ece5ba-be61-49c5-b488-c24a580e2649", "sighting--239ca781-499e-4fd9-be20-f86a3cea4749", "sighting--28e7ec26-7f94-4579-a69e-78287df718ae", "sighting--d6c352dc-4b96-4eac-9eea-2bc7c085a614", "sighting--3ec75d15-613b-4948-802c-81cc9515c666", "sighting--e9ac300c-916f-48db-81e7-ddb4c546d4e3", "sighting--0efd3ab5-4f2a-4712-a247-79cbb49fa1e8", "sighting--bc562ed2-e8f5-4cd2-bc68-4c806efc65ef", "sighting--90ca9a4c-28b5-4753-ac81-0cf04b8cee2a", "sighting--7194b0cc-bc11-441e-b920-602acceeb162", "sighting--6f9958da-0b28-4196-93d2-4ac11e5e988c", "sighting--57927095-96e8-48f8-868b-af0008ec8e83", "sighting--e681ef5f-6429-4c9c-b118-23713ba38387", "sighting--2802d1bf-0a1e-4689-9d2e-2f7373e0051c", "sighting--0d8e1449-8d7d-4fc3-bdc4-806676427a04", "sighting--5de6f1af-0cdd-43bc-bd32-b73a77d849b2", "sighting--4fc04998-1da1-4e8d-bf07-36dfcb15b1b7", "sighting--3d0c263f-6277-4224-a4ce-24504f2c0a3d", "sighting--fa5777ce-9cd3-4e41-b659-641d3cc98d7c", "sighting--07c19ee2-8396-4fcc-bc0e-eda40499d036", "sighting--2b951716-3ba4-4460-9707-29b5e2545bf5", "sighting--e33cbb14-a835-4731-820c-7ebaa70d042a", "sighting--346c29fe-bc29-4cd6-a7b7-03f8a6588dd3", "sighting--36474ff6-f067-46dd-9281-8eb5402f5f68", "sighting--e59eec42-0f8c-4956-aa5f-329a3b39a63d", "sighting--9d4d58c6-0ab4-4f80-9dd3-d56c98024302", "sighting--e2aa3b8f-680f-41d1-9e36-33e8a5a3dbaa", "sighting--c97e7cb3-3315-4c7d-a51a-363f9400f6d8", "sighting--7ef37e51-e5a8-48f6-b3a3-209dcc4710fe", "sighting--4a82c232-db7c-4fcc-a7fa-3049517797f2", "sighting--b4c1a49b-b7f3-4caa-8ff2-adbd7e567445", "sighting--4f345041-b8dc-4886-af70-b96b24a57b9c", "sighting--2ea2af14-d9be-46fd-9c48-4a4d8af92a6b", "sighting--c3747dc5-d908-414b-995a-5ede5c019b6e", "sighting--90e74026-a6d7-4481-b0e1-12890e8f1282", "sighting--136f26e3-5de9-419f-9cf2-aa4bd6df3b27", "sighting--4bf3d60f-4233-4125-ac03-10798e89990b", "sighting--16ae268e-1778-4ae7-9995-d94611560bfe", "sighting--53b14759-5a55-4eab-b644-78b4677d78f0", "sighting--a6a226cb-4e18-4984-bdc2-24d999aed8b2", "sighting--608a7544-e4ea-4a28-9e91-8a46c094964b", "sighting--5eb9ec95-01a0-467f-90c0-3f64e9773f59", "sighting--2a30a46a-0f73-4c55-9f46-12fe0414fb59", "sighting--90506bc8-f538-40de-882d-0d4dc4ddc0cd", "sighting--fbbc7e31-d71c-45f8-a872-6fbae32f4233", "sighting--2aac7a7a-1d09-4d9c-a424-9835adc04978", "sighting--59deee0c-dc73-4e96-a0c4-a5210707a3eb", "sighting--e9d348c9-5eb5-42de-bf76-dee969629a5c", "sighting--f287752b-93ef-4477-8c4a-fc953ce22daa", "sighting--344b61e4-a7e5-40d3-ac40-942378f5054e", "sighting--d5e0f776-73b1-4803-a52b-85c022ef1b34", "sighting--f3536d40-dea0-48c1-af69-486082e02951", "sighting--06007867-b1e1-4ab6-bea7-78a3e52c9be6", "sighting--0500b1cd-8a15-4e86-9da5-50660f17c223", "sighting--0916c71b-ed65-486a-b89a-eee2863a505c", "sighting--07e285da-302f-4edf-99f9-6397beed6bb1", "sighting--3b450391-8fa2-4eb6-af7c-1efcf0a4c0aa", "sighting--d52fe855-10dd-4ad7-9c96-528b5d4bd84a", "sighting--ae1cc6f4-0987-493b-a812-815374846cc9", "sighting--8adc5f5f-3652-44e6-9776-312cac72540f", "sighting--bc6a7d4e-c715-4148-b4cd-a82c1bc32fb6", "sighting--cf271da0-d0d1-425b-9685-d9bb3126228d", "sighting--c482ac09-c8ab-4af6-a5b8-1575c8996605", "sighting--9c78b586-1b4f-4273-800d-2b14af2ee0d3", "sighting--7a82121a-5303-4335-9076-cf63b43ef9ec", "sighting--27e372cb-6a00-457f-886b-2bfceed04075", "sighting--a66c29c9-4d8f-474d-9ebf-2225bff98e1b", "sighting--b19d70da-fc77-4089-b985-d483bbb82e9a", "sighting--c70141ea-7bc1-4e67-9bbf-533afe5f2308", "sighting--ce330483-42c6-44d7-8833-524f712b2a33", "sighting--d43dc610-9e3a-4415-9c50-a95b18f96d8d", "sighting--07758188-28b7-46e1-b129-c3f05af5a493", "sighting--70bd6c77-fee6-4ad8-a233-323d75e1a523", "sighting--b82a8a92-f30c-4a2f-b8f6-7517c5e87f7c", "sighting--263773eb-aa7f-4d5c-8ca7-2e35a6c5adad", "sighting--9bb70830-8ac5-4e01-960f-d1ff55ad37c5", "sighting--f6382485-629f-43af-bed8-f9610a5b1471", "sighting--46255986-0a0a-4960-b91b-caad220aaa2a", "sighting--6ffd67b3-b565-4e21-bd93-8796d7111178", "sighting--2f0e4277-6a09-43ab-9de6-722aca1448d4", "sighting--1ce8ae39-564a-4fda-a842-ae430021bd42", "sighting--85da0665-5b88-4f07-94ab-7f650be18da4", "sighting--b61a16fe-f3ca-4490-a163-1564bdb52eb1", "sighting--82ea419f-794e-4a60-a2f0-ed21fc2027e1", "sighting--57fd1db3-33ce-4ab9-9a6d-185ffda2dca1", "sighting--13ced3e0-8768-4b8c-aa3b-cf56f527f9a6", "sighting--b29de77f-575f-4477-9e44-765223f99fb0", "sighting--0f592c69-60a4-4813-aa51-a9f993d6eecb", "sighting--9f014184-5397-4cf1-84d0-2a4187e86576", "sighting--6df653fe-6a9a-43c2-be6c-3592f7e3470e", "sighting--b5771483-c4cc-4088-b5b9-444cd7d4ff50", "sighting--ef1f6f74-236c-4b62-9080-7e4da533bdd2", "sighting--ae6af108-fdfe-4909-9ee9-ddc8b3bf05b7", "sighting--7ecb3a10-e82f-4a6b-be3f-e741f7ed7876", "sighting--2165ab4f-ab37-4a66-981b-e51846c1bfd5", "sighting--5fb76ba3-09e6-413c-9390-f3541b9de087", "sighting--6e07b450-866a-474e-aaa2-143041fe044a", "sighting--866a1796-aaf8-4fe2-8d8f-d2e61a7eb00f", "sighting--d5650ef1-dfe9-4f7e-9577-29dcff0634f1", "sighting--9042adcb-73e2-4b03-bb02-d5e31ceacfea", "sighting--4e039168-f2c3-4ef8-8e75-dc07cde1932d", "sighting--83d8dab5-7cf9-4454-95f3-8ced07ca8293", "sighting--3ea9f825-1822-4b2f-b98e-58cd29f2e8c3", "sighting--9ec2e4d8-9200-4e04-b912-c5022f3c0c83", "sighting--cab1f033-dcfb-47f6-87dc-8293701d37cd", "sighting--254854ae-2eae-45d2-ae21-344249e61b1c", "sighting--0c9d4ec8-fdfe-4ee5-b602-30166329ff37", "sighting--51a23a0b-166d-46a9-a933-6d20879b8e8f", "sighting--e910fb5b-134a-42a9-9210-14041a0b0e56", "sighting--83d36918-9a60-4bf8-945d-faccd0b51c5c", "sighting--b5a80544-ecbd-4533-91b8-28f51e9c8e04", "sighting--64bb5590-7b32-4a03-b00f-e8c8a5ccb285", "sighting--45735f55-a3a4-4ac4-8491-b96bb79e7d60", "sighting--52e917d7-4c88-4b9f-8d3c-873e4e58ad25", "sighting--69273b50-bf4d-4c73-8408-d899bb3ae345", "sighting--a97de156-bfca-42e9-98ab-577b819306ca", "sighting--90ea486d-8c50-44de-b703-9c4a8ae200b6", "sighting--378ab455-491e-4883-9afe-1173db5c8f65", "sighting--00d567cb-1038-49d0-b68f-b004c2d3ef0e", "sighting--3d936c1c-8cd8-44b0-899f-c8445df5ac74", "sighting--003f5e3e-c364-4556-9b22-1c0b84cc2696", "sighting--38716a00-3f18-42e2-9202-0233e2b1fd16", "sighting--28bb64dc-65bc-4a43-912b-dcc835f6b105", "sighting--426c2e40-7104-4483-b1dc-a3fdd829d52d", "sighting--29c69f1d-e92f-4ac0-a494-02d2653144e8", "sighting--5ec53216-9ab1-45df-b360-7624088c1f1b", "sighting--b5faad0a-948d-449c-967f-675c6c679908", "sighting--969f7ade-77f4-4e53-8ca2-97da58531ef8", "sighting--92db0dee-477f-43c8-8acc-525f0588cebb", "sighting--14911543-1587-4bc1-9c72-10b202a41e3e", "sighting--614d488f-4999-45f5-8a1a-03c138202639", "sighting--b0328e8b-21d2-48a7-b1e0-cd334d175d43", "sighting--ee429342-8998-4594-8c84-867a4decafe9", "sighting--13aa2380-7822-48f7-bb10-c0f15cb19983", "sighting--51648a6a-358c-4019-8b79-7967b759af33", "sighting--7812ed46-5f8b-400f-9841-5820521c0771", "sighting--6fe59550-2760-4c01-9c4a-009b1e6ad84e", "sighting--8bd5a946-abb6-4fc7-9b50-b787fa42e14e", "sighting--1b5ff04b-126b-41a1-bd78-30312ed19655", "sighting--1179dddf-470f-4d77-a7ec-03b4849dde10", "sighting--36389529-83bd-40ca-a622-4fa54a24eba9", "sighting--38a17094-6077-48ad-afc5-72db9885e457", "sighting--e1b9e91c-df19-45c5-a12b-77821ee7cc57", "sighting--c6b8ff0f-0b6f-4e69-b739-ae90a3dcc5f8", "sighting--613c502a-a9ea-43f8-8024-4a820d8d507c", "sighting--36611d9f-6e5e-45a2-991a-20176c7bbd11", "sighting--71c49525-6e3c-4a88-8788-c88abbfd21fa", "sighting--9ddd5ffe-60e2-40e0-a6f6-268dc455e2c8", "sighting--d8f020e9-81df-4c61-88b5-a6b7eaed0a05", "sighting--0f77b22d-504d-4a39-bf57-15768ea3a27b", "sighting--567dfa0a-59d1-427e-a662-2e266e2763a3", "sighting--90acf452-0bdb-4a24-a119-479e4cc5e00e", "sighting--2ecd7035-92ed-4ee2-aceb-3a9e323f25ad", "sighting--6512f07e-fa1a-42ad-b3c2-e7a002c5c91c", "sighting--03628aba-b313-4e56-9f09-69dd74506672", "sighting--ae8264a0-8d7b-4c37-8e66-0091cf8f88f1", "sighting--3b42fe46-d990-4c30-84fd-18d4808aae18", "sighting--e44ac68c-0121-4ba4-bc01-23a21d4c7231", "sighting--070e7874-ec13-48e6-8644-d47ba54c141e", "sighting--05f98168-7b18-42af-825e-0d8f60b124c7", "sighting--89ff75c1-9b69-4bba-bf26-f4eb06eb8360", "sighting--6f40cb43-f793-4b34-b6cc-e5092255974f", "sighting--c246da4f-50cd-4d4f-a722-f24e4b37d991", "sighting--20ce44d0-8ef7-44f9-9469-d72c188b9e0d", "sighting--fe7db8a9-e4df-4725-84d7-2073f9d813f2", "sighting--d06ba86b-f0d0-49fa-b317-227698bbad99", "sighting--c78cae1a-b02d-401e-81d3-acd6b07eba7c", "sighting--177b02d6-2c4f-434e-9da1-e2b36e00df13", "sighting--41d8b0e3-b717-4bde-baf9-b387600f5fe8", "sighting--ef9b0d90-d0d3-47b9-8b10-ff0172394c8d", "sighting--3a00288e-ca64-4d6a-88b0-42f83c139d8b", "sighting--1a05f1fb-c0a5-452d-a034-736663fb6138", "sighting--a527fc6d-b185-4d51-893f-9d1f8f74b7a1", "sighting--540f2a01-d3f5-4be3-b738-c9f5e9d6e449", "sighting--ce6ad837-5a13-4d46-ac90-1f20b4d0a9e1", "sighting--9c07308e-40c2-44e8-8362-dbb0a59b2e91", "sighting--876fa265-abd8-44b8-a772-433b01a0d2e7", "sighting--b80c1d23-0e9d-49d1-8e71-11962e958c8b", "sighting--b968b45b-6d50-43fc-8105-fb51414aed93", "sighting--fa6c191b-8543-4913-b838-b653fd21da4d", "sighting--db4417f1-2255-4f0c-92de-45b1bacccbcf", "sighting--cf700d72-7c97-46ed-9a22-42f739df9e45", "sighting--19652dbc-e59b-4cf9-9bc8-a9cf01d24ffa", "sighting--e3634d36-df4a-48f8-b847-6a6c71cc4de0", "sighting--b649b3af-0ef0-497c-9c06-7a49229a95b1", "sighting--1a774cf3-d056-44a8-b200-35226fcb49ec", "sighting--a7eec21a-c343-4b02-8af2-e0d3c8ff3b1b", "sighting--25988c0f-708d-4496-b6a3-2424e8f29d8c", "sighting--df85f823-9fc7-480e-ae06-6d3b2411cd02", "sighting--a82f32c3-5fc8-4c29-9057-5353d688fbd5", "sighting--7319f8f2-c2aa-450a-aaac-103f305cd7ac", "sighting--d93eff8d-9e69-4212-a346-2e86f4db962d", "sighting--fc859d40-62ef-48f3-87b3-c285c9a953ea", "sighting--69ddf1aa-9112-4c0a-ba21-bef1901f367a", "sighting--5f83b162-1294-4490-8f61-9402b22b7980", "sighting--307269e2-e152-457e-8670-c0ade6771339", "sighting--482929ef-62f0-4343-b0e4-a14ddfd84dd0", "sighting--35cdb5f5-7cd8-425e-b7de-d3839cbf2efe", "sighting--56d446eb-37d9-4ac8-bc99-c7a92aed497c", "sighting--a4ef09d1-c69f-40e7-886d-44eddffb6273", "sighting--cde89e33-5d73-4c9d-9ab7-0591f9ae8933", "sighting--be0ab75e-2350-433c-8efc-c6eb008ed4a6", "sighting--a182c298-98bd-4a4c-8a26-f9e00b152619", "sighting--91861251-fdbf-48f6-9acb-af9c75ab4e64", "sighting--1e2a2e08-9d4f-4bea-b53b-f33139801756", "sighting--f624e53c-85e0-4f3f-a115-db29d2c88cea", "sighting--fa65d11f-5ca7-4ca9-a468-848b14e31d7f", "sighting--7e2b8478-8e42-4004-8933-67dd825d986f", "sighting--52602592-0334-4b44-8596-527363a17263", "sighting--3a5dda21-9e3f-463b-a2f5-79cb788d3431", "sighting--48fa3d20-bf9b-4729-ba06-4d80afe8c6f2", "sighting--d2b4b75e-39ba-4e14-aa1d-9b018fdd2638", "sighting--b531f982-588c-4882-8055-955f35e16c12", "sighting--376d1ec9-be16-4702-894a-cbce56c80d89", "sighting--5172aa3d-d6d3-4831-b385-93eb7f5de27d", "sighting--da1dbf97-a00e-4a94-acb5-2e6b526e8a74", "sighting--8e06ffbd-c009-422d-9bed-ac0ca5cab7bb", "sighting--c89cd993-4535-44fc-9fe2-225dddd0bc15", "sighting--a3dff1a0-355a-4e1f-9b1b-192866cbfd85", "sighting--4e41995e-6ed0-4389-9bd4-d2aeb8958d6c", "sighting--41e978fc-8de0-4bbc-978a-515c7a70b862", "sighting--d201a8e5-bf87-440b-813c-454c52b9c91a", "sighting--c0639c7f-f4fb-4287-b170-aa5684f08342", "sighting--e537b279-4a8e-469e-be7e-d93c1903cc47", "sighting--0fe041ce-3818-4c0d-abbe-6779d39c218e", "sighting--39b916d7-b769-4d3b-a037-44d61f387609", "sighting--5c067e60-e1da-41b5-b286-e7c3dfb7e760", "sighting--43f0ee8c-ce6a-4cc0-9d46-ef6d431c7338", "sighting--1c2a1659-2e83-4f53-89ff-c9dfd7df5c46", "sighting--5e393abe-d0f7-4ac1-adb4-1407e3a987ab", "sighting--9a1ccc17-6c0d-4726-9d94-c22c43faeeb4", "sighting--87618b16-2cec-465c-bb2c-6b80982643c3", "sighting--dcbb6929-295c-4e0f-8baf-4603e6fb1ef1", "sighting--6bc7ff1f-e3c0-40f4-96c1-cc1ab9d0b3b2", "sighting--b96242b7-8f23-4332-a8f8-af4cda495b35", "sighting--43df66e7-f405-48d6-8603-691db6943516", "sighting--719ba743-2e34-48c9-8425-d350ad81c0f1", "sighting--dee2ac7d-b139-4869-9fd8-3d5766b36c6e", "sighting--3c318b18-865e-4756-a3f8-5359034bfbce", "sighting--c4240b23-0355-47dd-bdcc-472ec42d7ae8", "sighting--75eb0378-103f-407f-b951-fdec27ec43d3", "sighting--ab338cf5-cbe3-471c-bd9f-802427c9a621", "sighting--aa3b9912-15bb-48bb-b0f9-d5a5283c8722", "sighting--b442c7f6-91be-4973-be85-03b8cbf9e1c7", "sighting--d9b28655-ac19-4fad-a586-3f2b75dbc670", "sighting--e7d2680c-f1b1-4134-9195-bd5e2ab02743", "sighting--5c4f99ee-cd01-4966-ab99-92b57ef3b449", "sighting--f19100ef-f90b-4880-bee4-8bbb934aa324", "sighting--023117ce-7716-40cd-883f-459c77bceac0", "sighting--f490818f-5c50-47a9-8fe0-5ffe51951b57", "sighting--ffceb9a7-ef4f-482f-ac7c-ac249c977925", "sighting--d00c2f45-9b14-4325-83b4-620a578878ea", "sighting--7bc1ce6f-72c5-4277-9640-049f203ec3b4", "sighting--8aecdd0c-6518-4a6a-9c75-0dbd004f056e", "sighting--d080f5d6-1916-4f2e-8fe9-7cfe5eac350f", "sighting--812a9023-01d6-4bfe-8180-1e2ca7a68b5b", "sighting--7f8de067-ff6e-4e2e-9f90-9e697bc3f752", "sighting--56b3c2d9-d7bc-4ad7-bd1b-eb3da2cecafb", "sighting--690bc4a4-a856-47e1-90f7-670fe8361b11", "sighting--1065fd47-5bfa-4edd-a8f1-2cec065c97c1", "sighting--fda56012-51d2-49a0-98a4-17c740e7c83b", "sighting--8aa34931-22ec-439e-b8f8-c03a794ea908", "sighting--aa54ee67-5feb-4445-934e-ac135f5460ac", "sighting--ceb37659-1d50-4b88-bfc8-17f4b26cb49e", "sighting--635a5b04-d804-4e2e-a881-be35bbc097d7", "sighting--a2183e85-a6b6-423b-99ab-f50c21326cd5", "sighting--3b04261e-0d79-4c6e-a17b-c360ae1ac43c", "sighting--86fe7ecb-d505-458d-993b-05fdc3a6e50a", "sighting--5cbbf413-0e06-485c-af0a-06dd1b6cc564", "sighting--af426906-da72-4870-b39c-f2894fa7bb64", "sighting--f2b2cf83-56e6-476e-9d4a-cd11710385ce", "sighting--21bada94-6fb6-4d9a-aff0-5f8c85f0096b", "sighting--75a51983-7b43-4905-86a8-d8b2f5da5164", "sighting--0e8e65a7-a624-499c-bfcc-aa6796be1adb", "sighting--078be5bb-ba53-4077-8ea6-758a4d85e193", "sighting--a7779cf1-8835-47dd-9f32-c94907fbf2c6", "sighting--5e3aa963-5267-4a93-bb9f-9f3be1afacfd", "sighting--2a407645-6b9d-4867-8986-3966abc07cde", "sighting--490d7acf-cf69-4010-b64a-dfd691208463", "sighting--320f2fe0-985e-4699-8a12-90bd12f1c0a1", "sighting--569e371d-89db-4412-8377-ef85945edf64", "sighting--c2df2758-bbb2-432b-9e77-bb72cbe7bb85", "sighting--08040e1a-219d-4829-a087-c9d76e551405", "sighting--863dcf02-2582-42cd-ad39-5b289b2a2dbf", "sighting--71d160d5-d665-4467-a09a-fbe2c482b4b9", "sighting--c043c8dd-a3b7-472f-b717-8727e49f530b", "sighting--83cd23c6-a581-49bb-8ad1-1814f382ca0a", "sighting--ce5e87ec-b01b-4b9c-885b-8c9a29dac792", "sighting--ac2d71df-97b9-4646-876c-12fd6efd594f", "sighting--dfad0b64-524f-4024-9e5d-3c348a527aa7", "sighting--6862f9f5-b7cf-4c04-b2c9-2a13e9addf02", "sighting--ba1c9997-b09e-4e28-9a8f-86662e3076e7", "sighting--442d3d40-d505-4308-bea2-dee939dc85c7", "sighting--8acd3d77-aa92-4f65-8609-a906cfe636d3", "sighting--7fb61987-201c-4893-9ced-8f4ec9ab4d6c", "sighting--362ea07c-b42f-41ad-ab59-9994d6400bc5", "sighting--4fa8607b-77f2-4db3-99c2-a294bb305758", "sighting--3a6f524f-61c4-44a6-a32b-2efffc09818d", "sighting--0f5d8bc9-309c-4161-99ef-6350b632c4d7", "sighting--b90a175b-5535-44ad-b166-c60f0086e2cc", "sighting--465fb2ac-35c3-400e-ae0a-65230b2da516", "sighting--58b0292a-09da-4be3-9bfc-6b4c9b6a9f83", "sighting--4e0bf553-3e3a-41d3-b3c4-c5a4bed380dd", "sighting--366c0ea8-6068-485b-85cc-656491cc21be", "sighting--dcf0802b-c4d1-4121-84e2-aa89feb7dcc5", "sighting--59e52d5e-1474-45e6-bfae-d650aa49e20c", "sighting--6fc54d31-9407-4c8b-9192-c0837151d97a", "sighting--95e86137-4d40-4aca-a37f-d32e3d5efaa4", "sighting--92c9c710-3127-4c99-a460-40eebca6f8e5", "sighting--b3daf9d7-74f4-4424-9bd6-d2fc2dd0b797", "sighting--656f6805-c124-4afa-8233-0a1bf67a3995", "sighting--a4f06878-f5fa-4e56-a6a2-9d5fb7abeff7", "sighting--774e950a-8b7b-4361-91aa-d2c98215130d", "sighting--fdce48f0-6e23-4372-867c-9a2dfbfe3694", "sighting--f154a9c1-b13c-4ec4-b968-fc9ac5251544", "sighting--36769652-b049-4f88-8ac2-04f68f5eb28b", "sighting--dde0467e-9bc0-4422-85b2-dd7fbd70a3a6", "sighting--ad37c6a6-a912-4ab6-9893-7932ecdb913a", "sighting--e70b39f6-7f26-4d7a-9a93-7daa13d8cdb6", "sighting--766216e9-d865-443f-9253-50dc368bcf11", "sighting--9a69eeb2-0776-40ec-90a9-7089b05ae48f", "sighting--d33f7cba-d1e7-4f08-8540-01c6869b3652", "sighting--0ad7d654-d315-451c-bdf0-64fe9f69c312", "sighting--5fbdadfd-9311-4596-89e7-14362fe9784b", "sighting--9eec3f2e-4650-412d-9f21-dd02a2ee4bd0", "sighting--2b295699-322d-455e-b12d-043bf528f595", "sighting--9d631138-f8a6-405c-b297-da85ab05a438", "sighting--55d6a77e-4128-465c-8a12-caa3fb89149e", "sighting--37af2251-e1e0-428f-ad13-99d97dbf13db", "sighting--8d911cc0-a5c8-4772-8581-40d0d5381d0d", "sighting--e2e9f3b7-f7ff-4ca2-97a7-852fa5bc35bb", "sighting--01a6086e-4255-4d89-aef8-885dc92c92e4", "sighting--cbe73fa6-0fa9-480c-83b3-fc2f262c4cf0", "sighting--42f1b448-71d1-4160-8193-2f02a5fe8308", "sighting--b5279110-ad2d-47ee-8026-43e9e375c828", "sighting--0546c587-f613-48ec-a35e-f6a1214e6b3a", "sighting--5ae4beef-514e-46c9-82e9-f67153893f1b", "sighting--57a260c5-4551-4e96-9ee1-2daaf9b65eb5", "sighting--e8d81b44-9321-4eda-b1e6-22361e046543", "sighting--cda878dc-d171-48b5-8208-d7b529c379a3", "sighting--07d19aa5-22e8-4a08-9181-283051b7240d", "sighting--6071dcd8-b84d-4560-9afb-f202ba5dc201", "sighting--c613115b-c054-43c8-bcca-2024230fed02", "sighting--fafffe14-4ee4-45f7-9d70-c4ac3db0a105", "sighting--7515c212-34a2-4af8-bd32-34ac6e2778d3", "sighting--c9841055-afcb-4a47-ac0b-e74ac19d3c46", "sighting--92ff16c3-860f-4d74-af11-bd7ca5b3a023", "sighting--268c3f09-78f3-44c9-87b3-9cb48f14f389", "sighting--b2da0b68-ced3-4dde-bfe0-0897d8452d2c", "sighting--28ac0afa-2aa7-4991-b08c-5b8323365e82", "sighting--a8665da7-6f7f-4002-a62f-ab42b9882002", "sighting--851a77b2-e19e-4058-b841-9ce945eda510", "sighting--a426bd20-9e07-4c5c-b779-87fc0c3edf44", "sighting--8e04cec6-e141-487d-a5de-dea26558bb1d", "sighting--6c462539-3812-4e90-a277-8c873cee58e7", "sighting--c96ba7a9-4faf-40fc-85fb-68d0ba294c9c", "sighting--ca440a6e-012e-48dc-a2dd-c7770ee031c7", "sighting--aef40310-dfa3-4d38-9ac1-0fce46d6a358", "sighting--860d76ec-f568-4f9e-8565-a33d660f0f7f", "sighting--5df49475-de2c-4d97-9f2d-aef53adb1117", "sighting--b9097128-5ff4-4bf1-bdcf-f95a065743f7", "sighting--294bcc59-9e18-4c43-bb15-034ba7d9a130", "sighting--b4bd811b-b080-42ec-8e2f-88efaee903e9", "sighting--02a910eb-fa38-4e98-a6ea-1c0b40259beb", "sighting--a3525e62-84b2-443b-b872-0a8df3c5790d", "sighting--5f514ada-a635-4757-8285-eafc5b7f20e6", "sighting--c029250c-029c-48f4-9e11-4605c4ced979", "sighting--b0429707-6478-475b-98b3-a6cd3026c874", "sighting--0dc5340f-88e4-44af-ac39-f30d7f9eb3be", "sighting--0b3e8308-e9aa-4bc2-bb84-f05da1dce9a0", "sighting--c4d10171-6f5f-41f2-90f3-3d2180db2397", "sighting--d20a275b-def3-4d91-ac31-d832cc569cb6", "sighting--55e01040-23bc-45f2-a86d-dc6218391060", "sighting--5ddb25b5-397c-4718-97d0-d49feb6d253f", "sighting--edbc4be7-6ce8-4dc5-9aac-ab714de4090f", "sighting--069e995f-c6b4-49b7-b4b4-1e0ad921b506", "sighting--d088c08f-b542-4ad1-89e5-e3830f4ff4e9", "sighting--86c9f776-5314-4fd0-8a61-f86c4ef128c8", "sighting--f34732e7-99b9-484f-8ce6-b8c00afbfe02", "sighting--1a35a5af-dd21-4e0f-994c-1c99d01d1dd1", "sighting--3fcc38fe-1afc-43ec-8ae2-9f24f4ca9213", "sighting--135a378b-8088-4a3d-9f27-87237af79b98", "sighting--2349208e-c66a-42f7-9fea-cd89c63731a2", "sighting--561fa3b0-9315-4a95-819e-4e350efb972f", "sighting--7c493cc0-2258-4336-9289-6d11a932e59f", "sighting--e90ad127-f687-4f9c-9e85-ba1178567c04", "sighting--ae2bcf5d-82be-4b66-ae1c-e290fdfd2fb5", "sighting--9a89ed26-b60f-4bf0-a069-bb976ea9e600", "sighting--81d26553-7db2-467d-8cf5-4a8ca1fd0ca4", "sighting--8eb20234-6d64-4f58-b2a2-0bd6e21722db", "sighting--7079a9c9-3910-445a-b66d-034ee75d33e5", "sighting--9c61c6a9-fd39-4da0-a288-a2f14e0419cd", "sighting--d67e29c5-c9c9-49f1-ac50-0fa07980d6fe", "sighting--e3e5fc63-f40c-4127-b7bc-179cd9fa19d8", "sighting--6a06d49a-7bec-49ea-948b-c8c6b93924de", "sighting--bbe57db3-bb80-4a6e-b1d4-ed88031ea213", "sighting--e53dafb7-5453-4455-99e5-aadf3b168174", "sighting--83a2b521-8121-4314-993f-82e6632b9ccc", "sighting--9681f40a-f56f-460d-a723-4c3953267de9", "sighting--b29ef231-755b-4b30-bb96-3f8970082e3d", "sighting--898085fa-cea6-4949-b6ea-4c1f2b9cb3e6", "sighting--758a62f6-38d2-4956-b846-43650a9eedfa", "sighting--42da42d5-7a8b-4acc-8a34-d408a9b64682", "sighting--a7bf4ee6-3b64-461e-98d2-a0c7cd0f8d02", "sighting--668f6983-59f7-4851-9129-5cd77cd137d8", "sighting--7d24a389-94eb-4044-b7aa-db2c47465360", "sighting--d6b847bf-f550-4436-a9cc-7f6ac86ec415", "sighting--bb29497a-46fa-4710-903a-fdd67de2259e", "sighting--e8e805c3-aafc-48db-9c71-b79934a1a14e", "sighting--49704c03-db54-4e53-a241-ea4169c12ac0", "sighting--cbf51f20-97ca-4bd6-8b63-254317347e48", "sighting--485713f5-7755-463b-a541-f90a55847927", "sighting--90445f8e-1e52-44b2-a83e-c54ce357e077", "sighting--30b5eeea-fa2b-4e8c-82f0-eac49a1340ee", "sighting--78dff000-84c9-4239-bc05-d9c06c0909a2", "sighting--34aedb87-e494-4f49-b43f-c57f524e58f3", "sighting--511d9fe7-9413-4940-8c83-a7913a866f4f", "sighting--5f563981-bead-4eaf-8473-da1ccd593082", "sighting--f2ff579c-69ca-4c6b-a375-8df3c1d90157", "sighting--212b01eb-9e95-43e4-a49c-98c3115d94e2", "sighting--00c9b871-a691-4724-90da-d541b3a3d8d7", "sighting--24e8692b-a68f-4cef-8f8a-f44324b2d228", "sighting--28ac62b5-3a3e-4875-8720-80181a0f6925", "sighting--2ca60b91-b408-4c3c-b16f-738cf19427aa", "sighting--41e2e653-fa76-43cb-a92b-fdfa22d990b9", "sighting--21d81f38-1e6c-4e8a-9765-67b8da7719cd", "sighting--bd7208f6-844e-4563-925a-b2d80ab53ac0", "sighting--e7cd46a5-4a44-46c6-b1a7-7375a60b9e92", "sighting--decd9b4f-68d5-4e64-bae0-2084a5936bdc", "sighting--8b4c86c3-7cf8-4d8c-9641-0baafe24eb24", "sighting--68bd1814-ffca-4da1-a620-b92de9b0e531", "sighting--3733f7e9-2935-4478-93ba-86f9853dcb29", "sighting--521134c3-8fef-47c1-8769-f2878c2a6c81", "sighting--97b2c694-564c-4174-b934-1643398bf0d2", "sighting--ffdbc68b-5b09-4b25-afb8-de558bfe4f5d", "sighting--5220f8a3-e604-4b69-9f4e-7a878f16be97", "sighting--17d4173a-fea3-42dc-a904-796ec4115bc0", "sighting--1256ec24-25e0-4f68-8958-d7aa11c5b1a8", "sighting--f7dce75b-acab-4f41-8f67-65e7aba003d5", "sighting--09c52dfe-0129-47eb-b419-a349fdb0714c", "sighting--8f4c2524-5e77-4989-a8a8-87423a4bbec8", "sighting--ae636f8e-ae40-449b-9b6e-87ef62bab77d", "sighting--a13c9c96-0d56-4481-9a52-6a0bd0af4a2e", "sighting--a39a5ecd-f885-4ac3-8df5-1b4e5b87c23c", "sighting--b6439416-9261-4390-8570-49ab2d3045a9", "sighting--da759f5a-d9ef-4804-a072-24155d4600c5", "sighting--a30e7b50-296b-48ee-976d-d58024f76198", "sighting--1fa91627-f8aa-4d83-9cb3-b8bc352b1e8b", "sighting--0a6b671b-720a-4701-918e-6ef87edc9ab5", "sighting--92de442e-6c83-4237-b809-108a1ecfc845", "sighting--456b217d-7016-480b-aed0-f1938bfc1624", "sighting--0fdcec04-6c5f-4bee-9c43-1e5960a9779c", "sighting--881c2ea0-8a1c-472d-9561-d552ab148dce", "sighting--171123cb-9d47-43db-8b32-074a7a4d19f0", "sighting--d0b4a56a-e299-4667-96a7-c5ff474a15e1", "sighting--b3989b7d-b8a3-4cdb-85dd-420c82f45e5c", "sighting--be53531b-7c3f-4473-88bb-6cf3069929ad", "sighting--dba6df13-ca15-4618-9fbb-4b251b449c48", "sighting--e5978d5e-ef91-4caa-95d3-0069e9686f7a", "sighting--62964260-d890-48f9-8469-8f16b91f83b3", "sighting--299dce83-5aee-4709-bd1e-e2c8e0e47aa2", "sighting--99a98111-7786-44c1-b8b1-ee79c5175055", "sighting--6d32f5dd-af2b-4aad-abbc-40da89ada0ea", "sighting--8a5aa79c-c503-4de0-a90f-eba8c554f78b", "sighting--7d4dc60f-e87d-47a4-9e4d-5f183239816f", "sighting--880044f6-527d-439f-bf8c-6190f986b5f3", "sighting--4efe0883-d97e-415a-82a0-9cb24b784f83", "sighting--8790cd81-a6f7-4f9d-9161-6b7970945730", "sighting--a2c2d8d9-797c-43b4-a4f4-74f98f1e457e", "sighting--65de5351-1bc3-44ed-8c55-87988975f635", "sighting--27bfca96-0ab5-4dcf-873c-e99434fa5c4e", "sighting--8bd63a29-8b1b-4e5b-85d5-505268064fa4", "sighting--820263bb-fdc2-4415-93fe-0895860134cf", "sighting--d2f89c39-f473-4065-abde-fbca91c87ea8", "sighting--a5a2e7b7-cda2-4668-aff6-77cfcff78eba", "sighting--88d7ec08-da38-43e0-8f1f-5e6bd3488e2f", "sighting--66fa72e9-a20d-4768-8d6c-5484c33bb7e1", "sighting--f8ca2954-18fa-4170-b49b-5c9d8690aa42", "sighting--d6f7f7a6-5e77-482b-ac21-4e2f22e81961", "sighting--bcfdac66-1d0a-4ccb-b79c-53dc4aaf9ae0", "sighting--8125b65f-6dd7-4aba-a420-52b6ffba13a7", "sighting--a69003a4-74f2-4ce8-8e7f-b520e2b6df1b", "sighting--4c516a3a-95a6-449f-8111-6350d9924c6f", "sighting--5559d08c-6e24-4476-b61e-ba44754c10fc", "sighting--fa029975-07e5-4021-b3c1-bbc415d48943", "sighting--474a5c34-18a9-4e31-8c0d-90d2cdd17302", "sighting--d4660c5f-38a5-4e4d-86d1-7a0a411a8abf", "sighting--8bbcd313-7dee-4584-a134-025ff13bd702", "sighting--2e0198f0-0999-470e-a271-49ac1af42cdc", "sighting--204f9887-652d-48c7-81af-1a5bef6c2871", "sighting--a2a493ea-b3be-435f-94fd-0ee0407cdf5d", "sighting--af88d31c-b3b9-4d12-adb4-0d2a6eaa9476", "sighting--22709f6b-efe5-44bb-b4f0-dcbe5caf19ab", "sighting--b4751da2-a655-4107-860b-c73f116bc35a", "sighting--989a6be3-df87-4bca-9c69-cb1e32585e92", "sighting--8f7d6662-7c70-499f-b2fc-7886cf2a712a", "sighting--25801a05-ce4e-4630-98ce-f824596333d6", "sighting--e50b804c-1ea4-4e1c-a27a-fbd8167b7ae2", "sighting--fa4aa62a-ee1d-4dd3-b953-739707deff65", "sighting--391a4d67-15ca-4161-a882-4a0e017d991c", "sighting--05c2a378-a462-49ff-ad5d-1b3319834c3f", "sighting--76c3e6a7-15de-47df-bf75-0a7c9e90b56d", "sighting--e4bd8f63-aabb-412d-9f08-7241208404a6", "sighting--7e1fcc6d-277d-4d01-aad8-0051b4a0ba41", "sighting--bb03fefa-6704-4077-a221-bff3162b96f6", "sighting--3e7042c9-975b-4098-a2c1-6f13ed530253", "sighting--6680d84d-ad4e-4641-9d69-fd3216f4805b", "sighting--f9c30817-9726-42ab-9d0f-9da95acff4ff", "sighting--6947145f-673a-4b58-a638-061802cfd465", "sighting--59d2d9c7-c8e0-4c0f-a8d3-e0e69f9700e6", "sighting--f1cde631-4a5e-4779-ae61-4d2e2d015a52", "sighting--8c515214-01e7-4d62-a430-25d709c57fdf", "sighting--75a1e486-a51c-441a-89c9-fb84c1c98d15", "sighting--b395c9f5-a282-4a9a-9ba8-fb7ed166c07b", "sighting--40c886e9-d189-4970-baf5-771d98b21c99", "sighting--d59f2e68-2923-4729-babd-8570f8bece53", "sighting--e16bb55e-d2c7-4894-bf3a-7edc670f17e4", "sighting--2d11cce3-da32-46d7-a5d7-17167cd15e3e", "sighting--6116f491-6663-4d66-8d86-b1ff2cda75dd", "sighting--4693e0ff-8eac-420b-b862-d59f576aff27", "sighting--c2241dd9-6649-4496-b1d5-d6170a75602e", "sighting--689b98ae-6280-4331-92e5-a12f3b0b48f2", "sighting--45d9717a-2bfd-4b4c-b0f8-6571549e72a9", "sighting--17118ab1-70e0-4373-8b28-669dcbf71a40", "sighting--e0586205-2182-4666-ad14-a6c3b8b400f8", "sighting--7c7c3d84-80fd-4d90-a608-0ed10de6ba4f", "sighting--e615903f-b519-455b-9127-f021ce4067d1", "sighting--b1898080-c84f-4410-9e35-e44d9e6844ea", "sighting--0cf9ca12-0d92-4678-b405-0479a6be792b", "sighting--946e45f9-0b92-46cc-afa7-ed89a15490dd", "sighting--56ed00db-61c7-46ab-9f80-63b4ee95dad6", "sighting--35d18a18-14bf-45be-8ec9-76fecd8f0e2b", "sighting--09038f34-c56f-4ee6-af18-1ccb71d991f8", "sighting--d1ef2f02-1ec7-4d80-afdf-2fba22e0179f", "sighting--d0037b7a-cc70-4021-9ccd-ae59e67adac8", "sighting--bb7edc1a-c6bd-4ac5-9b74-77f029c88f7d", "sighting--50ec1c6a-4912-46b4-9c1a-434d41092ae7", "sighting--eb82e59a-ed87-40fb-87ed-2c083d6bea54", "sighting--776741e3-0f61-4f40-909c-e1934ed3569b", "sighting--e6fe122d-c42f-4980-a919-e2cd8ba9b80c", "sighting--2e72f7fb-b7ef-4ace-8fba-d3bf2c6e7c9f", "sighting--932bebd6-b110-4cb2-bfca-f8b6d92dffe8", "sighting--71c0a246-977e-42c4-a845-6f631431bd88", "sighting--0d94fe97-6426-4a39-8c2a-99a476ccfa95", "sighting--f0b009de-cbac-476d-88b2-b6fd8a5e9f33", "sighting--06d15cfe-5624-4a88-ba09-34ef54a3fb5a", "sighting--2db55f1f-2f06-4879-b73b-2bd00cab9ec6", "sighting--ccb0343a-e4aa-4a9b-9f9f-222e9d47c8a3", "sighting--77b8ba52-314d-485e-ab14-08c68b5a751b", "sighting--d51fdedd-a350-44d3-9430-0c8d008846da", "sighting--9b224111-7cfd-4e17-b035-c60b6d1f5818", "sighting--23d7e79d-f056-4037-9dc8-d106357a8333", "sighting--68027278-ee2c-4829-b03d-9fe07ace473f", "sighting--3a732c74-a63d-4323-b418-18b4d71e1bce", "sighting--2460d0aa-ab57-485b-8f75-a98accd064a6", "sighting--6d7b2745-be63-424b-a7e1-86abddca53d3", "sighting--d33f1e32-faff-45ca-a3a7-c672c6e3a956", "sighting--b3b158b1-48b1-4469-b3d6-c85ccf44b3fe", "sighting--7f350dde-e194-419f-b1ce-fa7ee112a942", "sighting--51d363a7-b841-4c80-a135-953c4d056b8f", "sighting--0d8d30a6-9b82-4d2e-b6e3-67812330ac04", "sighting--4e5a9160-cec1-48ad-b86c-057178d5fbab", "sighting--6c1b69ab-6c42-40df-8efa-8c91fc9fef07", "sighting--e350299f-87a3-43be-bc22-ec093986aaca", "sighting--31f1b031-d761-4eb0-96c8-4fe94e91f8c5", "sighting--c4849aa3-bf3e-4338-8d9f-d6a20c65d767", "sighting--448c11c7-910c-4b11-bc6f-0a23b08bad28", "sighting--2c221faa-da6a-45ab-b106-f23409c0e2b9", "sighting--ebb34df3-aa2a-41dc-b356-14d66d3ce45b", "sighting--7723bc9a-df16-4379-977f-ccf415ddadf2", "sighting--96f08fc1-7a73-47e5-8c9d-35d31ab29f1c", "sighting--b2fd3d8f-afc9-4a9a-a120-1f4d7ad50832", "sighting--35cc9a97-f24a-4b02-ade3-f224d2d0ba4f", "sighting--126e111b-7c11-42c6-b531-542a41126631", "sighting--005026ef-68f5-41b5-a3f5-24cedc9a37f9", "sighting--ae2abc5d-5834-4cd2-ab9a-1b6587ed1e5b", "sighting--a2221141-5d89-44c9-a8ad-a6b78813fa97", "sighting--3f098aaa-5ba9-4d2e-8581-6a9f33e8efad", "sighting--bcf5e5fd-36db-49a0-bb07-a419a2760843", "sighting--8b5d2565-d0c8-4de9-b215-5a369aed7df4", "sighting--f001e565-7a68-4a89-ba59-73f27733ba17", "sighting--b3addb70-b541-4783-a10a-e86ec2ae5ba2", "sighting--dc1883eb-695a-4886-9a1e-a7a383f5bac1", "sighting--43188a99-fa07-4eb4-90b3-bfeeab07e5a4", "sighting--830ecfc0-0160-4c92-93f7-cfd78409a012", "sighting--fb88053d-cb56-438f-b133-2cf6f90c0cce", "sighting--ebc40223-cfd8-406e-ac73-800800b8a380", "sighting--8f04e29b-6dd3-428a-8f82-73699c4aac4a", "sighting--83454244-79fb-4be7-bc66-c7e68031e2d0", "sighting--2a37db5c-97a3-418a-bfbd-9f68f52f0033", "sighting--67cbda11-6b70-44df-846f-667f2ec01a20", "sighting--b0fcb15b-0152-4add-86a1-729675e56ab8", "sighting--882a09da-caa5-49e1-812b-bb7cc0c2b86a", "sighting--2a2ed986-ebc2-456d-a4fd-ee8aa7fd4008", "sighting--0146ea51-d8e9-46f4-9147-497977c7fdb7", "sighting--b63e7e76-4af2-4d64-8e01-18e7eb69164b", "sighting--e226e8bb-007e-4028-8741-3336e2b114b0", "sighting--8815c820-7cfb-4102-b64e-2a2c390a22df", "sighting--f893b1f2-4568-492f-a69a-6c0a2d876871", "sighting--7895c813-da9e-425e-a2cf-d8e168a218fa", "sighting--855acfec-6027-4af7-9f66-11653875ef59", "sighting--6d25d777-7a45-4fb4-a1cc-e682eaee987c", "sighting--43c83e33-3a3a-4312-828e-4513b0085718", "sighting--be5e90f2-3538-4d69-b769-4b3c5f9107a1", "sighting--0232c1c5-0805-4f83-9ba4-5b3437557c70", "sighting--a8b6d870-5389-46c5-921e-acce05270bae", "sighting--198a1306-3c92-4884-8415-6f39c5eaf6da", "sighting--96f8bf77-bb90-4672-8332-f3b4354aed8c", "sighting--5f3f6f6e-0918-4817-9ae1-e88df62e14df", "sighting--5f59a58c-a6e8-4e40-b36b-7f974711b42e", "sighting--a98a2e01-4e58-483d-8dcc-ac1f2a1057f0", "sighting--2a2802a0-147e-468f-9e26-153c80931cb4", "sighting--d514d93a-2e20-427a-b7c0-501177106e7b", "sighting--802ca087-2a1f-447d-aa83-7e170af5efab", "sighting--44af5c8f-e8df-4686-9d1f-1d6242fee07d", "sighting--b7228b4c-c85f-4ba1-b3e5-cf37c2a67882", "sighting--70940402-5b73-4f70-88a0-c6a208070638", "sighting--545c7fd2-951b-413e-93a3-4fb675540b5b", "sighting--aa3e4c8e-44aa-4352-87f3-90834309055f", "sighting--f7d284f9-add6-476d-add2-f044ac708213", "sighting--a1519760-12de-4ac2-ad5c-2ca10bfa37bc", "sighting--9bd8263f-fb3b-4428-aa1a-4dffc42d8230", "sighting--0b1eff71-96fd-4e83-805a-e984b6713200", "sighting--acd53588-99a2-47f8-b118-592c028bde32", "sighting--919c1a63-a2fc-4549-8d1b-581037a32db6", "sighting--6180e22e-e914-4aa5-bdb7-b1c28e4250f4", "sighting--7bd7070a-de3a-4604-9f7e-0b3c92551478", "sighting--b71f3460-d870-4daf-bd75-57b10d523874", "sighting--bb9a2d7f-cdff-4dc5-915c-f50ed5d29acc", "sighting--8ff0c622-a75f-4d9a-8a52-500afee3edc1", "sighting--d70b776b-c631-4ecb-bb5b-3a1a1e1c1e0d", "sighting--7b51a4e0-2e70-4db7-8cb1-f6cd86e4319b", "sighting--32689d95-3d4d-4dcf-9e2e-5f7a008ba76b", "sighting--d74512ec-dfcf-46d9-9224-8f1fe6328272", "sighting--3d1ba0d5-b610-4dd0-b0ad-1c7373f255a2", "sighting--64fb2d61-f479-4c30-ba09-62a5e8b10acd", "sighting--ab686c01-69d9-4396-9e34-f145304a89ba", "sighting--0062f4d9-17c7-41de-8806-1be0ad8e8c0c", "sighting--cb351f90-8ce0-43fb-a491-af2707a03c83", "sighting--d28933ec-c12b-4b2e-89c8-04e815cd0402", "sighting--b8aa71a2-302d-49b4-a818-15ad202c7620", "sighting--15ac88f5-d139-463f-937c-a4a4394aa44c", "sighting--5bca6dd6-d667-4b45-8eff-c00dd40b1b38", "sighting--d1416374-9557-4f68-b446-66caea8dac84", "sighting--8ccca3e6-ba0d-40fb-9147-8cfadbf4e414", "sighting--5b2fbf26-a32e-413d-9c1e-ff91b683c2b8", "sighting--5d0179b3-c38f-43be-9b8f-3b4050980905", "sighting--c854f813-bfa5-4a8e-ac7f-962d0d4a8590", "sighting--7d5d53a7-c4a1-40fa-86ac-141d06bc0838", "sighting--bbad30c8-ca68-4905-9b8a-a036debbf13f", "sighting--9e67d281-538c-45dc-9b1a-f935e9828365", "sighting--3b81c05e-f340-4b73-9713-8e532c414cb9", "sighting--e349916f-73c7-46c8-8b0c-b529647b3a38", "sighting--c6221432-4dff-4a43-b921-7b5099d6f73f", "sighting--bcafc76f-6980-4595-8d87-93254cd48f0c", "sighting--d244f777-9a61-4705-9765-40351ff1dddc", "sighting--fbb32741-171f-42be-b741-d299f26d5fc6", "sighting--61f7f92e-4a7e-45cd-b6d6-2ad71f7cb128", "sighting--66c034f6-b974-420b-bef3-1c5e852e054c", "sighting--5e3ad5d0-480e-4900-b052-8ffe339190f6", "sighting--8d0fefad-9fb2-4095-85db-1d6ad0ad2eb1", "sighting--0ed73633-1904-4aae-bab5-34868fb21da6", "sighting--5940866f-522b-47f6-b639-59ba1a3f306d", "sighting--525c7f81-6afa-449c-ad60-4362fc3bb807", "sighting--0d770b16-af68-4979-beb7-45e19d6c711d", "sighting--031237fa-6648-4c7e-9198-eb45ac645f19", "sighting--38bb4962-d723-48d8-b037-795f504cc95f", "sighting--78e5ff36-de93-43b0-9554-b92dac8bef38", "sighting--33aa972a-f496-4194-bde1-0d545c1059b8", "sighting--181519ce-b2b0-45f3-bc9f-c6eb38878710", "sighting--ed707e18-1b1f-4b85-a637-d0f45ba7896c", "sighting--2bda5ba1-82c7-4ab3-bc8e-f50a9dfd6743", "sighting--603c0928-345c-42bc-b47f-44a979bd02ca", "sighting--d2b292ca-a68b-4a5b-b1d3-a0e55d4a1fdf", "sighting--2dd5d89d-d733-43aa-8730-a7114cf03fd8", "sighting--2ffc125f-38d6-4e51-8be8-d12ac3349f30", "sighting--fd427757-6fc7-4707-a4f5-61dc5b9fc1f9", "sighting--6e281a02-bca9-47a7-9846-baeb49b1b827", "sighting--5d1073a3-ded7-4ff7-bd13-ddc53d1d0fb5", "sighting--4337510f-1282-430a-88dd-ff6347644edf", "sighting--a2d1de1d-70bc-4af6-b298-f7468bfa4c9c", "sighting--6b453b26-517f-4d3f-b39f-915ca32cae21", "sighting--17ecbb87-ed4b-4733-a6be-30aed761da0a", "sighting--28d0135d-957a-46cf-865d-c3168186be42", "sighting--863d1902-492a-45d4-a434-203383d4b984", "sighting--9f41dbe7-ea0c-486a-8211-34e70380a541", "sighting--dcef9949-f913-498d-abc7-d829f04d1373", "sighting--50566a65-f50a-4186-b4ef-3acf3b4b1d57", "sighting--886e5398-b438-427a-8990-6d22f059de9f", "sighting--dfa363f8-2839-495c-9c26-de99ae4f7a27", "sighting--73fa408f-a5ee-485a-b214-00ba6fca1fe8", "sighting--79c144cb-a562-40e1-a0bb-23048d79e038", "sighting--4f82624d-e364-4df7-9ae6-ec517f19fdf6", "sighting--3e74b695-3ee5-4289-8632-a92891599c0c", "sighting--a367b789-f471-487a-8061-46db3dfae8d5", "sighting--941b6742-17eb-4078-b168-840aeb5b269e", "sighting--94baa9c7-e977-4730-bdb9-38ddbf086657", "sighting--e95b2049-f935-44da-9232-f9607671d438", "sighting--d876e167-0f14-4f96-aa31-32c02d2f7aea", "sighting--5b130d04-42a2-4247-9783-d48a4177c287", "sighting--b9122bf7-dd87-4091-9424-a4839b371dcf", "sighting--919b3168-0418-455c-b65e-063cff077e5a", "sighting--f78b88a2-3635-40e1-8339-1f334fa2444d", "sighting--c37b3c64-f272-4fef-9504-543ffb3ecf44", "sighting--cf715eae-c56b-40ba-bb9e-1bfd38273332", "sighting--93910280-0e77-46e3-b87b-dfc4266f311a", "sighting--a27be966-da3d-4006-9789-dfa54d534a09", "sighting--ca392e61-c275-4c07-b3e9-dd5c27bc1f81", "sighting--9e0bc648-fec3-40b7-828a-363e84c8a3a5", "sighting--74875111-0d6b-4170-beeb-0a48ffa1b58b", "sighting--c3968fae-a5ef-46b1-88e3-47e3ca9bf8c0", "sighting--e6d61e78-6784-4a73-904b-507acf84c562", "sighting--386ac36c-5e70-4ea3-9b78-37d9d1892617", "sighting--f3b835eb-5d2f-4bce-9082-2b08f2ee98a5", "sighting--51620e5b-391f-4af3-b998-c3d01de408c9", "sighting--97b5e669-fad3-4e4f-93c9-6a3bc6752eb8", "sighting--ae4bc955-3767-48ea-b3cd-1f0802a3c576", "sighting--ba5d9104-3f9d-4226-868a-4b994588c6dc", "sighting--3009f7b1-86d2-4e0f-b99a-3224bb4e17c3", "sighting--16c5d6e4-1bb5-465b-bd36-36cbe93c09e6", "sighting--a39b9e71-716b-4130-8908-1fd3a74e490e", "sighting--79766a2a-523d-4451-8e45-0c5feb545585", "sighting--19bdfc62-cdc9-4541-9135-87333722ccbf", "sighting--d084d686-b4bd-493c-93ba-da9e4170dfee", "sighting--68a16d12-a5a3-4c84-accf-942974508d73", "sighting--095e805b-a830-4a8e-a0df-9305913939ca", "sighting--07cc40f6-40f9-4777-b1b7-e24c5e591dc8", "sighting--5e9b6c52-d0f5-459e-a185-2ddc29409536", "sighting--2602dfd9-e817-4455-bb71-d1f6eec9b589", "sighting--a7eed2d2-fe7f-4011-a264-a997cd31f7b7", "sighting--66e04ae3-e5ce-4e5c-9749-8dc88100949a", "sighting--365586b1-5cf8-416b-a293-4e5480d6425e", "sighting--a2d86b11-e89e-45ce-abba-7fad872e2850", "sighting--beedf20f-f67e-4cbc-bc92-57c6fe881acd", "sighting--b0590f98-0a71-41a2-9a59-74cc83bd2ebc", "sighting--d997e064-ea0f-4feb-a422-0107300111b9", "sighting--52092a77-9118-4c6f-8f06-68264e309d14", "sighting--684ae671-aa04-4574-86c1-220c0cd77f09", "sighting--843ba2e9-4ee7-4a45-80b4-239309616464", "sighting--3d03aad5-b9ba-4cbb-b50a-f43009707b34", "sighting--3f083e6f-4ff0-4b36-bad2-108345dc8d6e", "sighting--cd5f243c-913f-44f9-99d1-4031f6c2d363", "sighting--09537339-e85b-44c2-a93a-447671034d37", "sighting--4cf074a8-ce16-470f-bea0-9f0dc2ba28ef", "sighting--b245453f-b79a-45cc-b452-83ecf6b7e801", "sighting--0cf83e78-58a4-406d-9466-e46ff76efa9f", "sighting--a084cc0d-8ee1-4b2b-938d-5dd64b61d11a", "sighting--18455550-9d72-4ca0-8bf6-93ebb465823b", "sighting--5ce142b2-529b-4e67-916c-7295587755f1", "sighting--ae1ba34b-ad89-45af-97af-0d474b8aa88d", "sighting--6337d047-502d-466d-8029-ce77e61ace75", "sighting--00e8a8da-68f8-4294-acba-85b98bf7f68d", "sighting--799ec074-c80d-4419-b932-ff9247a17c82", "sighting--3b346b3f-d1b0-4e0e-afa8-6cce6efbdc13", "sighting--b63669d9-2d9a-4a83-9170-97bd56b841c4", "sighting--13656c21-c9c1-4978-b3ce-57008bae52b8", "sighting--8ab46c23-1d8e-4655-8a9b-e2cbfe54e79e", "sighting--bf38cd20-aa21-49d7-a6f3-56b5baaf20db", "sighting--afae1f7a-a37c-4dd2-93f4-6845cfcea674", "sighting--2326c6f6-2fda-41f3-b371-265982732248", "sighting--0a836acb-db0c-485b-a776-ebf5faed77e9", "sighting--cf04f1fe-190b-4c96-800a-035714cfbca1", "sighting--73816cc7-20c7-4cdd-a8ec-03ede22c038a", "sighting--77245e99-7db5-46b7-b25e-a85d5c647526", "sighting--6fd977cc-6815-4c04-8da6-7efd7c542f4a", "sighting--49c2402d-23b7-4a76-8eb1-c7d86cb2dcb9", "sighting--30972df9-87e9-45ee-bc52-4b0f5bd4c139", "sighting--2399341d-afed-489f-ab90-23cf8d9c93f3", "sighting--3811e6bd-d3a8-46f1-beeb-0498b92c7ad9", "sighting--b2bc7bc1-b0e5-4562-99e2-91eb8aac3fc7", "sighting--63d028e8-8a6e-4d07-98c1-2c26b4f33129", "sighting--79e82d7f-816c-4b00-9506-474ba178660e", "sighting--b089d4b8-c596-457d-b531-18a52b3f641e", "sighting--113c60c3-1a46-47ce-b2d6-9a30cb02f445", "sighting--efa398ae-a93f-4943-859a-61e00e5762a7", "sighting--53f170dd-8d63-499a-9c55-9d8747669126", "sighting--c70ed635-4ac7-4439-97e5-c912d34e8593", "sighting--f9fc24b2-bf9b-4955-993c-a8e1a0e7e14e", "sighting--9239a168-599c-45c3-b09c-3b6c67f5ecb0", "sighting--72807b61-0869-491b-9641-d15f0bea7663", "sighting--fa332b83-4f02-4789-8820-cdd180d1885a", "sighting--84713a2e-30a5-4a67-bd21-875819d945f0", "sighting--cb6a6f8c-7a6c-48e3-b783-1f9c2d307ebd", "sighting--258ea21d-f7a9-48cc-93cc-4297e0ea724d", "sighting--66dab6b5-3310-475d-ace9-d66740afc25a", "sighting--1f6d42fd-75d9-4541-8faa-a45706e467fa", "sighting--b9052472-c32c-4c42-b5ad-ef35e537240e", "sighting--14f514e4-6ea2-4e83-a1f3-c5abc00e15e8", "sighting--bc81d150-4447-4638-bf48-dac895ce56f5", "sighting--a5269501-2be3-47b2-9002-6cffee25d545", "sighting--a9192280-1e30-4ef0-ac52-37eb32129380", "sighting--1d5ff233-dee6-4625-86ec-e71f512a2a15", "sighting--a53b574d-a79d-45ac-8fdc-11c28bd8cd9b", "sighting--af73cd37-f886-44ac-b8c0-d5869686953d", "sighting--46671650-7059-450b-9193-1cd3071531c4", "sighting--5d06fa01-5243-4863-a9d5-5bd6927131ff", "sighting--ae8679e2-59f5-458c-acd9-eee7dbc012ee", "sighting--69b302d0-44df-41e1-848f-ac4b9de33a2e", "sighting--906d1ac0-18b5-4712-8388-8c9caf6624f5", "sighting--621b2cf3-7754-4a1c-ae29-6ba03a763e87", "sighting--83496c0e-82e2-4821-a88a-65f1ba025006", "sighting--903a0d89-037f-4d26-ad2c-49b354b4b789", "sighting--b9f84d84-ca55-4918-8f71-91bfac39d708", "sighting--6e0d8277-c39b-4a92-ba74-1a0eb185e26b", "sighting--6740193c-a3ef-4bc8-a447-d79ab9521cfc", "sighting--9a8fb666-0531-4867-a9d9-024e1aae5f06", "sighting--4ba06532-ff2f-4996-83cc-d04529bdd2d4", "sighting--d5e935ec-c341-4f97-bd31-d267573de48a", "sighting--ac3ec370-94ba-40c8-a0a1-4ddd3f3bba48", "sighting--e4f028b2-1447-460c-aa5c-b7c56ec11a11", "sighting--629c47df-0e5b-4d87-8abf-aa39bd7fa922", "sighting--95f7df53-434c-4919-bb75-97d33d4167c1", "sighting--d883c577-e129-4537-9a82-7324f0da4c5a", "sighting--68e43488-de3e-40b7-a24f-c6e4432f8ff9", "sighting--e9c09b91-76de-4c87-88b1-6cbe624cfa56", "sighting--a1549baa-7cb5-42af-a54b-853fff85f8da", "sighting--b9ea14dd-48d4-4055-ba93-667bf8574dfe", "sighting--a79d50ae-5b20-4bb5-8f39-2fe5d36186c5", "sighting--b35e3911-cdda-4fd6-8cd3-57c6634f6e4e", "sighting--b975e80c-f733-4785-ba56-20ff0f0df8f4", "sighting--806f131c-0098-4383-b078-b19fc3e2d07a", "sighting--866c45af-d275-4aa1-ba14-9ca8dd017f19", "sighting--872a9377-9bc6-410c-86a9-9eac177abed9", "sighting--5e2754b5-696c-45db-908e-d2e28b44b6d8", "sighting--60694ac6-378c-457f-bb05-6f7b710d6a58", "sighting--313b8b2e-8c9b-404e-a01b-d97bb8f87505", "sighting--7be7ee76-e4c1-45ed-8f37-1174f9703ca0", "sighting--a939b1d5-3286-4851-b3f5-4df018393744", "sighting--1b17db48-fff9-4384-b983-7d2c8b9f43f7", "sighting--1b4e9293-538f-475c-bd1b-aced6f3b96fe", "sighting--91084160-2653-4245-a496-58b13cf60d2b", "sighting--e3afe1bc-41e2-408f-83fa-03da6c0c39b4", "sighting--e2734a66-c0d1-4b1e-a1d7-78d2a62c5236", "sighting--04f1e0ac-d736-42b2-adcf-3de905c26560", "sighting--3628a5b8-8cd8-4bfb-b5ec-5a65b3a3b778", "sighting--5d9de8f4-550a-4177-9721-fb71b8bad926", "sighting--95799ff3-fbc9-45c4-8c8d-db649a2799a5", "sighting--4454e8a5-2f0e-4f5b-a766-7a7406d3b762", "sighting--74c0a5c1-d386-4567-9d5f-c927c4579b43", "sighting--5ec84dd1-6ff8-42bc-9fa4-1369e9dc7b70", "sighting--6850bdfc-b2da-4d99-8317-b5897059f6d7", "sighting--c847878e-666e-4483-b87e-e19d6a60427e", "sighting--e8fee696-2789-427f-9181-f4430e81d00a", "sighting--78347191-a97f-4b22-8815-504a8f9032ba", "sighting--e9b9128e-8eca-4fee-b37d-3f665ed5404f", "sighting--c94d893f-d08e-4232-bda6-e0c2fff1913f", "sighting--617a2b16-5457-4c9d-b4b1-c9dc89d54307", "sighting--0fe89edd-64d1-43af-8187-28572d03dbe6", "sighting--c931e056-9f97-4f0a-95e7-2eabb2674621", "sighting--c7de7845-8192-4484-982a-febe76a892da", "sighting--edf68a22-c872-46ac-9b51-76d354a6bcc1", "sighting--ea967a92-64ad-440f-9950-55fa1de118f7", "sighting--7405b127-8896-4b69-8b6d-f43f41bab3d1", "sighting--a7623603-5b7b-4aef-bf63-dc0a053b6630", "sighting--84d179a9-5992-4120-b0bd-d3ef4d0b8d01", "sighting--9d3944e2-f084-4328-9348-135876a5a71e", "sighting--9b738879-5859-4835-b66e-f1e2af9f88a0", "sighting--0b18bf5d-6a03-40e9-bed3-da7f30005d7e", "sighting--516bb5ae-b302-44be-bdb9-58762c3a9dd0", "sighting--82ce726e-556a-4c38-9833-e581af510dc4", "sighting--1fd681e4-4b39-4291-afdb-28587e943749", "sighting--71450fd2-1af2-4882-aa47-6f96b193cf0c", "sighting--93520f19-6e04-41cd-885e-5bdc12b39bb0", "sighting--0e3a8de2-63c3-4cbe-8bc5-fa847c1aecfc", "sighting--437f60ea-2a46-4a9b-8063-0d42aab8131e", "sighting--1f49c95b-5e21-4817-a20c-9e30c2379df7", "sighting--91766e1b-de4e-4b68-a54a-0b0045b8e887", "sighting--48a5b648-700e-432f-9a6a-057f5d76f07a", "sighting--6a78112e-82e2-48e7-b08a-2173650d0036", "sighting--b8679665-6929-4040-8733-068d0fda131e", "sighting--aadb328b-a538-4b0f-bc30-8f1dc42d8dcb", "sighting--5ffe3b1b-623a-4ff7-89e6-1d001653348b", "sighting--772b5521-d361-4dd8-b92b-5f377364786c", "sighting--a00fa9f3-6161-4587-b3c2-5a7f963a6050", "sighting--1661fd05-c0c5-4368-b8ed-a932144dd2c9", "sighting--269ecca6-40fc-4e44-84e2-339ea2955d64", "sighting--45bf9012-c16b-435d-89b3-acfdab7f6b38", "sighting--3b4d5006-c577-4a8a-ba4b-a07476386144", "sighting--fb1fb092-9777-4f7f-89b3-38f4db040219", "sighting--618623f3-8542-4101-93bc-644ebf9aa4f5", "sighting--724523de-defc-46b8-9689-7dbe8188e7e6", "sighting--9cccf63e-f70b-471a-9756-040ac84a010a", "sighting--863866d7-c882-456a-980d-94de5c81d926", "sighting--59bc33ff-b55c-418b-83a9-5a8e7ebdc035", "sighting--7bec186f-7715-4071-891a-ae790a57c6cb", "sighting--66d607ad-9737-4631-a570-1842c8bfe3be", "sighting--af37611a-a1c8-48b7-b48d-e85c0b81530e", "sighting--2597a481-ba86-452d-8c7a-f9105ed414e8", "sighting--a6384104-b42a-40e2-941b-b268f883fafb", "sighting--2fccedd0-7b7f-4c36-a2ee-36b6f746a240", "sighting--6136af45-c801-4e88-a86a-f907fb2a44c5", "sighting--d08cd654-c97e-4b70-b232-d2c7836e1aea", "sighting--ca830128-f27d-4133-b298-4237a02048ca", "sighting--27e1f504-c431-446b-bfc7-8bfe957c9c68", "sighting--881360fd-ecaf-45a7-b2eb-478393aad7e9", "sighting--75f74053-d724-4238-b3b4-9fa4a9be7ee6", "sighting--7d449ab4-8fbb-46f0-a2cb-0780e9d3780a", "sighting--279f5a24-7abb-41a9-8490-844308400c44", "sighting--4f7b9798-0603-4de7-a148-89ff1fa3ffdb", "sighting--4852bddd-7f81-43a7-8ff9-ae2cc12183ce", "sighting--7fc6dce7-9530-4e8e-b904-8daaded58601", "sighting--c9268610-6d07-4342-9eae-a479bf1e6329", "sighting--289e89bc-4adf-4dc1-a226-167b57c796cd", "sighting--78b059eb-eb10-40bd-8c05-fc2ad41db5e7", "sighting--f198e031-47db-4ec6-a5f5-64b882de46a3", "sighting--b0ea6daa-f8fb-4ec1-affd-5820391cdc8d", "sighting--063e782c-be6a-4b2a-bb09-e47b0cb2cbc1", "sighting--5c396244-40a4-48bb-9e42-c421fbdff921", "sighting--f8bd4ed1-e55b-48ad-8fb5-8e74d645d530", "sighting--6c3a9abf-924c-407d-9551-94e2d00387c1", "sighting--a24c3484-acdd-4439-bece-2d32f151a7bb", "sighting--5c9d3523-8774-49e1-bf3b-1a0141a05ed4", "sighting--6f11ec6f-d5de-42df-a599-8b101cac9edf", "sighting--d0717084-a7d0-4f92-9f61-25a473dbda6c", "sighting--996eec88-276c-4de6-9b85-cf8345e432ff", "sighting--fdfb85c7-b356-4444-b5b6-0bbbf5a641c1", "sighting--22d10e01-8d94-4e9a-8538-489798a60bb4", "sighting--1838f9e1-1e42-4e64-bfb7-ca2c1602ef5c", "sighting--76cfc649-6f04-44f8-8105-72f5ca8ad6fe", "sighting--0c65277b-dd19-44f8-a706-2b7350c44d7b", "sighting--4e3e1a0f-a202-4e12-8e07-a01b74ee5f30", "sighting--6b026c49-c38c-474e-ab72-2e900d0e18ae", "sighting--b55ab910-7c1b-4115-929d-796cb0ba513b", "sighting--b961b6cd-f2a2-44f4-b3a4-de1fb8329256", "sighting--6e4cf138-411e-4324-963b-3f18fe35c7d8", "sighting--7d5c27b3-f9ac-4951-9df4-dd6a2ab460d3", "sighting--eebf14db-c82b-4570-85bc-3d217df3ba0e", "sighting--a48f7338-ac79-4640-8157-87d100262a54", "sighting--31cd7dec-8c18-4f90-bc8a-85563778d0f7", "sighting--67757cbc-a590-45e6-87ba-8c69529ec229", "sighting--a21b11d4-1f86-4e89-8a4b-715fbf057f3e", "sighting--0fdc1b56-6b1a-40c0-a675-f4b1aaa93c7f", "sighting--29f03bf9-e625-43b5-a23f-3736a7965f90", "sighting--f27376af-ba86-426a-8adb-05a8caea1294", "sighting--194e9cbe-94ff-4bfa-9073-090f9b4cd0e9", "sighting--db2000fe-b388-4e16-82b0-26973dfe546d", "sighting--10ad6bf9-3447-4138-9558-23cbfb636028", "sighting--a9de0f82-9db4-4174-81f3-f22ab12729b1", "sighting--69754319-4b0c-4cf1-ba3d-a72ea42c19e7", "sighting--2ad105c8-7294-453a-86fe-1e0b80024353", "sighting--fd8a92d6-febd-45c6-8eee-062bb9dd84f8", "sighting--0833cd3d-462b-4305-b1a5-88c688f5df1c", "sighting--7959cfda-389c-4ea4-8234-5b35a1e4efd1", "sighting--945ace92-32e5-4baf-8727-7fec4a4817f3", "sighting--65b34e9d-0938-46e0-8ed5-6d710fb1edd0", "sighting--f0ff23ad-4bd0-468f-9135-738791b02027", "sighting--30ee4783-e622-43ab-a487-ef8f9580005e", "sighting--32d08a87-145e-4496-a293-0d90ef9668e4", "sighting--c79bf390-73f6-49bf-8367-fb1fc47c68f8", "sighting--fbf39495-a3d8-4632-9eb4-3172ad077bc9", "sighting--a2baf605-c77a-4d43-85ad-398e9b34b135", "sighting--fd3b105f-8037-4f7a-a4bd-b59e34cc4a96", "sighting--772cdf90-7d88-4c38-a265-c25d601b2536", "sighting--4674899d-c540-43b2-ba63-8362541977d6", "sighting--5c078f97-7d3d-4b43-9cb1-f37356e4e569", "sighting--c5b84c7d-f8cc-42f8-86bc-ae97ae4273a3", "sighting--08219354-1f34-4fa7-a022-22aed6fcf5ea", "sighting--f0773f49-677b-4851-bf03-65d06f7b6029", "sighting--23b8c4af-225f-4fa4-8750-3418b674ae6b", "sighting--62b15a85-afff-4b9e-a5f5-ae8fe6dc771a", "sighting--908eda43-9988-401d-a2a0-81d395c4bc7f", "sighting--a9add2a9-68af-44c3-9b1f-4524d70fd7e8", "sighting--592e1afd-6291-4d65-a3dd-0e7fe4d8d61b", "sighting--8b156e13-2e12-456a-930d-d404aef7f6fa", "sighting--e42735e2-a821-49c9-af34-748fb67baa94", "sighting--28b9d762-00bc-4b0f-ac7c-9933aafae2cc", "sighting--e1668116-9f61-4dfc-b1a8-41fee1ecbaf6", "sighting--bbdb652c-ddf5-431c-b8b0-1dfed776aa43", "sighting--8b25270d-4102-4767-b67b-5c30728bf424", "sighting--da8e32f6-0b7a-4f1d-9812-450d42275fa4", "sighting--80a7b62d-545d-433f-ac9d-e6377b43e936", "sighting--378e8576-da7c-4821-a6ac-198f531b16c7", "sighting--69a41282-8dc9-46cf-9c07-23ca2a08a7bc", "sighting--4f316213-e784-4749-9a0e-c8af0b458198", "sighting--30b0743f-7c0d-44cf-98a4-e18cfbeae375", "sighting--eba47063-dc82-41e9-8b6b-d24c7ba168ac", "sighting--27fbbe2c-11d0-4727-880d-f707c4773c70", "sighting--e901d64f-5859-4945-a53e-b4e35e4ddec8", "sighting--92e1f389-8f79-462c-aafc-30ec6b24c7e6", "sighting--7431aa5b-702e-4fef-9658-ea0f21b2dd94", "sighting--f4bc6ccf-9633-4565-ad56-a7711dcbde6b", "sighting--92ea0dfe-e4aa-49ea-b3db-8aab9b722f72", "sighting--fede9576-6b07-4621-81f2-105e79d5ce0b", "sighting--2d4c8be6-efea-4ef1-a049-bacdae2538ae", "sighting--8460fc9b-4c4d-4a10-b1e2-74e5a08d5c09", "sighting--a6231b69-6866-4055-be7c-c68458a41b44", "sighting--cda8a41e-8f43-439d-a795-4e0782ce70e7", "sighting--5d312614-d110-4e4a-ac2a-d57fa1fba743", "sighting--c5294911-c7de-43d8-b139-bb2269f42040", "sighting--8f184ea4-7fce-4f08-9d61-5b2fe68b94b6", "sighting--0d8f8f57-54b8-4fde-849d-b6c5887745ed", "sighting--7f1fa47f-8cb0-48bd-b86b-8d1fa9b7e365", "sighting--a376094a-5cd1-4847-be16-115bbe34fcbb", "sighting--9c689a88-6f01-4361-9b7d-7699367a66ce", "sighting--73a7a963-5723-4b41-a85d-e5129409af09", "sighting--16e86385-4a8a-4e8d-b639-198a646eb1c1", "sighting--7495c8eb-9dcc-49b3-a8c2-175a0a3c5fe0", "sighting--f9008007-26c2-4b72-bc9d-ec945d6797da", "sighting--29593127-1d15-4127-8349-7dbc62c0ab99", "sighting--bfffbd80-49d6-445b-8e52-4f728e5a283c", "sighting--b82c4b62-78e3-4fb6-b9e0-ac6b6e6bcdad", "sighting--7311fb9d-e0b7-4605-9276-9b4fabe0379b", "sighting--e5aafa76-7a10-459b-902d-da50d90dc025", "sighting--c8fe1c72-1a29-4c02-9ebe-8588c4d1c47c", "sighting--222c9a9b-a23d-4043-907a-0cbcd046768f", "sighting--11d36b8b-de11-4da6-b513-8334ed8aeacc", "sighting--9aa8b35e-bd4e-43d2-a8c6-52a5e2cab716", "sighting--199b82fe-9a2a-4791-9455-a6ea5cae0089", "sighting--f16bfb14-3d5f-4ca6-bb7b-d7d774400dc5", "sighting--f613fb0e-9fbf-4041-83ba-bbfb573bb616", "sighting--8cdf38b6-df52-41e4-a00a-e3d30151097d", "sighting--3bf31259-b337-4486-a9d8-f9d69aabfebe", "sighting--9066df39-93e4-4a41-a111-dd56172179ee", "sighting--04173cfc-a342-4e88-a87f-35cd860ae4f6", "sighting--bac59689-8da0-41d4-9ea1-01f72c03619f", "sighting--ea2a59f6-0058-4e7f-b001-74ff32f03dd3", "sighting--03583c8d-d638-4a92-bd67-8dd9737dda3a", "sighting--fac73bf7-634e-4aef-a42d-02d0fc114871", "sighting--b2409412-f4d7-4d24-9a1d-03795086377a", "sighting--725d112c-df24-4778-a875-8039a2081d80", "sighting--3eef791f-10f3-4689-9211-bd67d18cd99d", "sighting--a9469f13-f7db-4482-9551-422d7e8a54b4", "sighting--cc35cf60-12a0-47b8-9465-39233487cf9a", "sighting--1da020cf-6d2b-4eda-9a3e-8c512565decb", "sighting--89bd4c99-d26e-4553-89ff-6588b3bbb397", "sighting--38ea2eeb-8a7e-4859-92e6-b5480b14ea6d", "sighting--93314999-6e4a-454e-b189-85e271e7f372", "sighting--8efd2b77-8522-4021-9f9e-55b229a7ed81", "sighting--b28fb512-f973-4fee-83dc-e1b13369cb0e", "sighting--e423463f-04c8-449e-b584-81c01a6ed323", "sighting--530cf7ce-e16b-4e48-9075-1244476ef7dc", "sighting--45d59253-9e0c-47de-9af7-b0bcb929fc75", "sighting--149b8801-404f-4b0d-b252-7708de6e0c1c", "sighting--f9d6bec7-414e-49d2-88b9-3cdeca79d736", "sighting--f067c132-a25a-422d-8448-168cd2c0b7f9", "sighting--02ae533b-06ed-4329-9998-62246c009d67", "sighting--07a91f7f-81de-4f94-b4ef-a809eb7aa389", "sighting--a3cb7e74-cc97-4676-9fbf-6dcee29f8a69", "sighting--f61ffb77-0a7e-4153-b282-e4a89b632460", "sighting--31c7a1df-93cf-4a6d-a6f0-edce391ab6bb", "sighting--a68aaf78-abfe-40fa-bf57-6060185fb42c", "sighting--863a0c0e-310e-4c10-987a-c2c055a4838e", "sighting--4f9db228-9c83-403a-b19c-d80f525bfaae", "sighting--cc1b142c-93b7-40ca-a279-5055ee2cd2a3", "sighting--be96f860-ea6f-496f-91b1-3a2d4c27d599", "sighting--9621ed95-6c8c-429b-b46c-0f315acad396", "sighting--64558d36-4f39-4eb6-aa82-fd1430dfba33", "sighting--2f6ee430-53aa-4138-b235-d98b662b1b21", "sighting--57b1c080-8cbf-4e87-bc97-ed05130749de", "sighting--3cdb9222-899f-42eb-9ecf-3a88c3f5bdf2", "sighting--cf99085a-840a-4f43-9d69-81c2e1a3e9d5", "sighting--5f28ba11-8f90-4e9b-aafe-5d65b8291d39", "sighting--60dca16f-6e20-48a7-b525-b28aa6b7100b", "sighting--76c37929-b7db-45d2-ba54-6c265c0485c6", "sighting--fd09bedb-90ca-4800-8de7-68e4269c6df4", "sighting--8ab8b0f1-c982-467e-80d4-9f131f4fdd0f", "sighting--3f43ae64-b510-48cd-928c-d91517a05649", "sighting--d9c7249a-453a-4141-9c38-3d4739adea45", "sighting--b7219e22-8501-4a16-8b07-0c657dcd0ea5", "sighting--93da27be-2619-4dae-a2ee-e0a4817bbd95", "sighting--1319914a-8b01-44fd-9a68-2d07b395b7ab", "sighting--52381daf-4ef4-4507-98f2-fd5cbbf57729", "sighting--475622b3-412e-416d-a395-cf49f54bef0f", "sighting--00a79945-1378-400c-9309-7a64a2c2d376", "sighting--c0d09617-257f-4dc2-b008-b1544e5f512c", "sighting--fd0faf9c-3686-4417-9818-d4b6923346ce", "sighting--762d4d7f-f613-4b8d-b931-22ab4e87626a", "sighting--7965ecca-488c-45eb-97f4-420169281eaf", "sighting--6a95de5a-baae-4115-be6d-c4ddd4a7aff5", "sighting--f9c616cc-09b0-4f5e-aeda-8753e24e2b01", "sighting--aad9e27f-fc4a-401e-9b41-892974e68013", "sighting--b2134ab7-1abd-4457-96d3-23baff75390d", "sighting--e7065e50-1394-4052-ae05-b8a6fac8b4c5", "sighting--7ae5b102-884a-40d7-bb6f-a9acf6ce7d84", "sighting--f40ab4aa-8b6a-411c-9c4a-07c9c21a5a5a", "sighting--1270ae60-73f6-4b0f-b48a-362cef90b63a", "sighting--5cbc9026-7afb-40e9-acc1-4601255934d9", "sighting--dc5e7640-1ffc-4a9e-9762-ee27fa94de4f", "sighting--2dbb83c1-6c90-4b92-b7a5-c7973e70dfc4", "sighting--c80b3ee6-aa16-453b-90d7-456879f20948", "sighting--1a25c243-9ed2-40b3-b585-2ad0918bf864", "sighting--bd1c7a2f-39a2-4b8d-a7c8-3ad08d40fc60", "sighting--6536c682-8c2c-42d8-a012-19b1f1355c22", "sighting--442152bd-aed0-4527-89e5-43fdd111dd29", "sighting--1cbffee7-44d3-4102-9b75-3651134755e3", "sighting--1cd69189-dda3-40f1-ac75-c593ec0e1a2d", "sighting--68fa3cb1-bb44-4af1-a54f-d52a4f870665", "sighting--fda21ab4-ef72-4566-8425-3bca75443c01", "sighting--5ba8e19a-8c1b-4c66-92a2-e121c8cd3bed", "sighting--f174d58f-be80-4c96-88cf-dd8d4129be89", "sighting--f69adcc4-9f51-4b11-9666-d11d04315303", "sighting--5ab7e85d-10a1-45dc-acc6-a7c4b34d6b89", "sighting--2fd5220c-80fa-4044-bfdf-def34b28a202", "sighting--1cc25e93-9f8a-45c6-811d-3f89e3b535fa", "sighting--6190eeac-cde4-48ae-a3a8-4125f844afca", "sighting--2d4ced04-62d7-466a-92f4-e7894b2856d2", "sighting--86cb5249-5af3-4de0-8b9b-675443fa3601", "sighting--3a00474c-9c03-460c-89c7-4bd977c8d8de", "sighting--f704a671-38de-4708-8b3f-54ee173eac3f", "sighting--e7114f95-2702-40db-85f9-7dd92195c2c9", "sighting--5fe63dee-eb2f-4199-b221-7be207ca301b", "sighting--66216829-1a4d-45d5-8f3c-2b3307f570e5", "sighting--41c271c3-7d5d-47f9-a74f-34f29b991c24", "sighting--d2d2db9e-7414-4514-a577-08874b49301c", "sighting--11a40163-66d5-4554-a185-2de22aa5b1c9", "sighting--d843ba7a-318f-439b-a692-e638e1fe0f6d", "sighting--24fff43d-c694-47fc-b807-55f5a1bab1a6", "sighting--cd82403b-7dea-425d-ada7-eb47fc62a256", "sighting--91668d5d-9d47-4e03-aeb9-f6a793f2a8dc", "sighting--44382d5c-43b1-45fd-917d-d6815d636641", "sighting--1ee1201f-6a0d-4043-afb6-e309d7870502", "sighting--fdaf5743-3297-46e8-a081-51d6cb7083eb", "sighting--c2d5cf08-f3d9-409a-b3ad-2cca145f7727", "sighting--dc0c5c01-2512-455e-afcd-da7dd9c7c04c", "sighting--21e38cab-f7d2-4bec-8657-c09f6af02813", "sighting--1ffc9f54-eb71-4693-971c-b48a52acc04c", "sighting--7d16bcc1-fb7f-44bf-8dbd-2f71713aa01a", "sighting--8db08b57-53d1-43e9-b946-7123ab055fe4", "sighting--e08608fa-cf93-41af-9d39-26eab0e5b5c7", "sighting--e96a7e5c-914c-4fbf-8f78-e031e96880c3", "sighting--e1c5e17d-f4b8-4bfc-8603-07052057623c", "sighting--c80b5c11-35c9-44db-911f-aa64b890fa29", "sighting--ce0ad359-9b1a-4235-8f88-2ca32c2caad1", "sighting--18296cd9-32d7-413e-9815-08b676e2540e", "sighting--d69830d7-a6f8-4381-8126-ad966a16da6b", "sighting--554a145d-7e90-4959-8a4c-ad154fd6015b", "sighting--86a090f0-7e65-4e79-9e70-1b3d7788ecc7", "sighting--8b08ad7d-0d85-41a6-a61d-7f1c8e0de2dd", "sighting--4ececfc7-07f5-46d3-b569-811fefd9d931", "sighting--13f3d9bb-76fc-4ea1-95b4-eed81ca365c3", "sighting--691fd8f7-382c-4cee-8bb3-38ef1b8a60d7", "sighting--f0de4586-463e-494a-b719-4b8889001fea", "sighting--63d00e80-8223-4631-92e8-a5a32ae212ab", "sighting--8ed3e3d4-6e1c-4446-ba37-d93251460f1b", "sighting--be7cea68-f601-428f-add9-b7b8736a4c7f", "sighting--ffe694ce-3af2-4057-94cb-a582a58fa8fb", "sighting--b405941a-9ec0-4a22-821e-e2e62b9254cf", "sighting--6eb10f3d-b564-466c-bd10-a1c33c2ac0df", "sighting--cd5baeab-c083-44bd-9782-fa7cb262662d", "sighting--657e39d4-3d07-4741-b643-70c980411b69", "sighting--8738b968-a50d-4a7f-a233-cca504184fc3", "sighting--9789ece3-715a-4c82-ace4-4d89dd0d995c", "sighting--5afe2cc7-e030-4478-b00a-b25bd1f5a2f3", "sighting--9635eb94-6a51-4b9e-8d9a-1299bd6a81a1", "sighting--235b876a-d577-4b22-8517-4691152dc10e", "sighting--cccea259-9fe3-43a1-83ba-00056606b742", "sighting--51ac0abe-c23c-4386-b00f-657618d52e52", "sighting--d0399fb2-f2bb-480a-8396-1c09a05f31a7", "sighting--fe47f9dc-63b5-4787-93a3-50ac34c0e39e", "sighting--0584559f-18e1-4dc1-972c-f543b686e672", "sighting--67f7c4e1-ef95-4b82-9f93-596231e25efa", "sighting--29cdf89f-78f9-421f-b647-561eaf82da57", "sighting--da0b39ce-83b2-4201-b94c-633a5fb546f5", "sighting--878438b1-72ae-49f4-be3f-f1aba4f3c4d7", "sighting--346e4bca-3121-429b-aa41-d65dabd9bee0", "sighting--32123178-b8aa-4b2b-b749-94e4225e8e15", "sighting--0e884a89-6ce8-4f3e-a644-cfb066cb6219", "sighting--1c13e51b-f261-460a-bfb8-f6656798cbe9", "sighting--dc28dfa4-040f-4976-bdd0-0d83581d6c82", "sighting--0d9b9096-297d-493c-ba18-b1f4cadaa6b0", "sighting--a2bf35b4-4e67-420d-8b4d-ccf0f5356465", "sighting--39ded4b9-2d9a-43f6-9118-eea78f6ac357", "sighting--43914dc2-bc5d-4b55-8817-3e46c565dc33", "sighting--78c8898d-0b0d-4049-a47d-490bf760208a", "sighting--d6ec3a36-a51c-4c3f-b3b1-ceb05e16cccb", "sighting--5d591ad5-008b-4ce7-91c5-108c6664f4fb", "sighting--8775091f-57d9-4b3b-9a64-cc2e1108f500", "sighting--c2fd5420-fc67-41e3-aede-93218f960805", "sighting--eeac2eb1-8440-470f-864d-4905ce963f69", "sighting--614433eb-8d2c-4f3e-b0b4-dabc7172dcdf", "sighting--6705a820-dfba-4e5b-99fe-0eae7c21810b", "sighting--9b07d799-2fcd-4b65-b628-1c76e1eb100b", "sighting--7f78701b-95b2-4744-94b9-0c49f611498a", "sighting--cdf37caa-5cd0-4d27-84d0-033ab081d90f", "sighting--62c1b2f2-0342-4864-942f-65ebd6dfa553", "sighting--8bd39e02-973f-4c12-ac70-e42f738b98bc", "sighting--bcf95323-4567-4e64-aa2a-439eff2032b6", "sighting--0b7a21b3-b1b0-4a3e-9ffa-7ce1b66a8dfb", "sighting--b901e3b4-d874-42cb-822c-b4ceb806d62e", "sighting--43a2bd38-531a-4ce0-9ca4-7fd320b95139", "sighting--b6b57cf1-df96-4c25-80ba-8d7ac4610c74", "sighting--7a772692-b44f-44b3-a706-996e0a246c52", "sighting--2c6d01cb-4517-468c-813e-daf8f22a0f23", "sighting--0de5dad8-0deb-4d62-b342-f4e3e9663bad", "sighting--72be537a-9d53-428d-85e3-930bc1bbd325", "sighting--0d35b7d4-2720-4a74-ad02-fab0e28b20cc", "sighting--b3ebd9cb-5091-4148-877e-d8380fa19c6b", "sighting--22743e22-33ca-4dd2-b2e0-dcf98c181a38", "sighting--4b471cfa-2b02-45d7-b5a0-2f0b636ff2db", "sighting--3a333605-7276-42a0-9e9f-414598e49cd4", "sighting--a3f7a593-7f45-4a44-8eaa-fcd41fde08aa", "sighting--78186906-c1e4-494b-a68b-2e8c45e3a3f6", "sighting--332e162c-66da-4f54-8c43-096ea79f188f", "sighting--fd6583e4-c9ec-4b5d-ba61-59e8a1fef927", "sighting--163877fa-0086-4db2-ba17-86230a2a45f1", "sighting--6e02c4bc-4ea7-4d34-963a-d6b71fecae5b", "sighting--203414ff-6c06-4d6d-a001-9fac4976b585", "sighting--e4636228-305d-4b03-b85f-c1970a74a733", "sighting--3b62b4e8-7fa8-44e0-9d85-f23092297dd9", "sighting--5fa479fc-3c8f-4a88-9c4c-0549e55e63ef", "sighting--be5bd950-4e73-4270-af4e-b823b0bf39e7", "sighting--a3c4782a-0298-4a74-915f-880379e677c3", "sighting--a4e4d6f6-9757-4008-8b9b-229d2efdd374", "sighting--6f152764-9472-4cf2-bbc0-ba2cb6b19753", "sighting--0f1e67f2-4a80-422d-a0ad-87d91f4bec59", "sighting--aa78bcbe-a0a8-40e2-9f44-5df8713a65cb", "sighting--233cbdb1-f93b-4127-b897-208b9a9a3ba0", "sighting--f423a3d1-fa23-45de-94cb-14bb8ef0866f", "sighting--418b5a74-aa6c-4795-9069-131d8982fec5", "sighting--5a50967c-356a-4c7d-bc9c-2c6e5506e4f4", "sighting--06cef4cd-eede-4941-888c-7f2c7864339c", "sighting--941f7fea-d7f3-4a60-be1c-94d6c9efd73b", "sighting--17b3ae6b-a49b-495c-b4d7-35d850b13091", "sighting--87923b25-b18b-4f4a-a42c-a0faabd81c6a", "sighting--a452805b-c222-4088-b950-e177d92cf4d5", "sighting--f9b053b4-9432-40c4-8d93-455bb5bbc0be", "sighting--db291db2-b5f8-4627-8835-fb61f5622d03", "sighting--4d49c826-64ff-442d-9252-653949cb0190", "sighting--8396547f-ccf0-4db0-b647-4a23191c3913", "sighting--e1135763-61c5-4fbe-b01c-2d4a0a274a53", "sighting--dcce105b-36d2-4c20-b4df-998c083baabb", "sighting--a651cc12-5efe-4045-887a-c47cbb096d92", "sighting--3b8c5f06-32c5-48f0-8ac2-9ae1b97ed368", "sighting--aef8e8eb-493d-48e4-9bf6-e7d066052cc4", "sighting--15555908-0657-451f-bb10-8e9a6d5fc18e", "sighting--bee67898-0b00-4f37-9d1c-df21eb14c551", "sighting--c3bf62d8-7a2d-48eb-93e3-49873d2349df", "sighting--545b211b-50a4-4be2-8b85-51fb9d27bc9b", "sighting--90d0fc1a-3a52-4291-b47a-0fb78a069134", "sighting--a9f158f5-712d-40d3-88ba-eea70ed33fa5", "sighting--0939302a-b6df-4e6a-9177-810e8f452895", "sighting--a2ece6d0-d9b5-4628-a1f3-7736934733ab", "sighting--058b6b0b-1ef5-461f-9dba-f8712796aa3d", "sighting--689d8394-7ba2-4722-ac65-b7a7255a5dc5", "sighting--7d2025bd-8b2a-444d-8ff3-63de800868e1", "sighting--e417b9b9-fefe-4ef8-933e-b56c7148d7fd", "sighting--bc224fbe-9365-4877-a6fe-244ddcbb9b60", "sighting--2e895805-4e37-4562-aee9-97e4fb06db65", "sighting--936092d9-cd57-47f8-b6ed-535367ce4c5e", "sighting--c8135e35-dae5-4c2c-8e9e-b5b23032272e", "sighting--d30c2f88-0fc0-4a24-aaed-371fe0bf9a95", "sighting--bca630ff-8df9-4815-83aa-5d7e73a0caf5", "sighting--b97f0a24-48a4-4ecf-afee-3a97f8706814", "sighting--d9c9a029-83c6-4668-a087-1d61717eb659", "sighting--922b24f2-80bf-4296-b1cb-ad61b758987f", "sighting--133b448e-c302-4d22-8ba5-bdd381806851", "sighting--9619dc2a-4c93-4d4d-bf84-03d3e27d0c5b", "sighting--ec19c65a-4507-4f05-9118-be2a879e4112", "sighting--28cbad9a-6910-4cef-9348-2bb98b14cdb9", "sighting--05ddd656-260b-4cad-812b-cf30defbc664", "sighting--d61ab83c-e466-4df4-aa73-8d6a3eea9f62", "sighting--fe96f9e2-37da-43ed-add4-5685f07b136a", "sighting--1cc65319-fb10-4af1-be50-7fd5fdc8d059", "sighting--7d215e2d-d0c0-4e65-971e-32838f4b92e3", "sighting--ac485785-d235-4d4c-bc22-e9fc01d73bf5", "sighting--02eb7725-57c9-4a05-99b1-6e917757f74a", "sighting--6729345f-f4fe-49dc-930b-425ad79a3ca9", "sighting--ccaf4453-d613-41bd-9798-391d61b8e55c", "sighting--8ee17b21-65d1-4c78-9e15-21d31528f355", "sighting--665bc622-550c-44ff-b891-690d9a1f0acd", "sighting--a6a001e4-0edc-44e7-9e14-4e371a446f0d", "sighting--fb3b00fb-6a80-4815-844e-64c8a28fb406", "sighting--48fef887-93c9-4ef3-b720-9acd55c57899", "sighting--e192a6b4-e32b-42a7-afad-969c621b39f7", "sighting--a77e10a2-bf33-469d-a265-c412d3927c62", "sighting--ce1c30e9-e961-4847-a86e-c0728c189b5f", "sighting--ef063441-1bd8-40bd-a772-d93236e9aab7", "sighting--26677851-ce8d-475b-a3eb-6fa378cb0062", "sighting--99f246a5-d811-42bd-867e-3f98eb15a83d", "sighting--319ab58b-f7ba-46b5-8562-b05f49bf90ee", "sighting--7bebf77a-13c1-4319-b43b-b903cbdc8d1f", "sighting--aa320abc-cb57-4280-ac3c-d374ef7fb89c", "sighting--86610777-3b84-4fa3-8910-03bc1684519d", "sighting--a418e100-fca3-4eba-95c1-dd562ed29203", "sighting--94828c12-e832-42ae-8d46-94db10ba4902", "sighting--315f1b43-b53e-47b5-8f48-161526e92930", "sighting--d0270cae-5719-4965-87e5-584c5b136774", "sighting--910897a7-b914-4609-bb7e-a92540b5fa9d", "sighting--ebe2b5f7-3bb1-4ec5-9b18-9fb4a9f0f0a9", "sighting--c9b320d3-c5fb-4f0b-8d8c-37a39d286012", "sighting--878c6300-0fbc-4083-b059-80a0363854bb", "sighting--ceae66f1-7224-4518-93cb-92d5e7f3c8d2", "sighting--005b0af1-7824-492c-852f-a43f541d7bc0", "sighting--d2d82c07-6fd7-4426-ac06-0eb3d45965db", "sighting--1670514d-1540-4d67-af3d-979affaf51d5", "sighting--23b3752e-9c69-4685-ab81-c12ed461888d", "sighting--a13bfd50-c7d0-45c3-9eb3-37029c2c5418", "sighting--70f3a40d-25b9-42f7-affa-071be29b491a", "sighting--0d2ad1c4-df82-46e8-978c-2df5ff1554d8", "sighting--92149223-e510-485d-a92e-09bca9d468c2", "sighting--8234b0ab-7fb0-40f8-b556-f5477dc99575", "sighting--55079642-c0b3-44b2-bb95-c8d1be596da4", "sighting--c6adf454-befe-4315-aedc-2c5f1bb832bd", "sighting--b01cd4bf-545d-4ef5-a85f-72e59a31bf7b", "sighting--b16cf00e-946b-4b71-a0b1-7cad41a579b6", "sighting--240fddbd-087b-4615-a51c-a5da0be30d2e", "sighting--db29f7af-e76d-4cd1-b8d2-9e02f4bcc7d4", "sighting--9ec7ba55-f9a4-46f5-b104-c1fc300587c1", "sighting--2ca91204-b28b-4e4d-b439-a5dcbacb261f", "sighting--232041fe-2871-471d-9f9f-f1a225fad3f7", "sighting--93e6600c-ebc3-4f10-8a55-89192dcd08ff", "sighting--40b36e92-0195-465c-b757-c43d1a35fa0b", "sighting--42e27182-62aa-4d7d-869d-481045eb89db", "sighting--008c812b-3139-4438-8f3d-8e5eb6d2b0db", "sighting--1f85cffd-116e-4067-8184-f9d7a61cd3a7", "sighting--96bec945-6e5a-4e26-8041-646cf9e70ba0", "sighting--b9fa9feb-d7cb-4d30-bc1b-6aa3f54753a9", "sighting--a0da1a1d-8bdd-4e32-ab5b-3d75073ab427", "sighting--5566deb1-6c68-4a51-afc5-314c5531c51d", "sighting--f7bad015-1628-4993-b31e-7bcb36def309", "sighting--7c9ffdeb-1bb5-4bd5-a5cf-118fc5190107", "sighting--09a60c82-c8de-4a4b-b0b3-d0b294faa99b", "sighting--ee937cfe-1c08-49d2-b10a-6d2e05d60f62", "sighting--ae4642da-e956-4bb5-80cf-c6ce6d105bf3", "sighting--fd977d24-6934-467a-a02b-ac5655bc1276", "sighting--adb3ccb3-57c6-4a2b-9ae6-50d501f5310a", "sighting--eafdd6fe-c0d4-4238-8a78-fc74762f37ca", "sighting--fa5ae7fd-7dd3-4d98-baa6-cd1461175512", "sighting--f61e4793-c9bd-463e-9add-63ba24552d01", "sighting--6f224677-c19a-4393-8445-386e126925f6", "sighting--f4ce0788-6ba2-4f96-b3e0-6df97ba148f4", "sighting--eb9a6a62-f53a-4ade-9956-e68aa220cea5", "sighting--ec9b2b68-f1fe-4c78-a5e2-1cda621ff9f0", "sighting--c3f78735-0edc-4e82-9fb9-b62466f2be64", "sighting--52d35c12-bd94-46a1-a50c-aa3154565962", "sighting--1f1ae416-97e6-427d-b123-7bc3879d6203", "sighting--cf8c538a-405e-4a3d-aef7-4d5edc3a16a1", "sighting--858e87e1-bbfd-4796-96dd-105797aed7ae", "sighting--a214d8c8-5895-4d7f-8a3f-29d0d1e2f5ad", "sighting--6dcecd3f-4fcd-479b-8a38-24c2cf223781", "sighting--99af0fd5-d7e8-4168-8896-ec6bd1507a80", "sighting--ae8a1bc6-1edc-427f-85a9-03a912f10ec4", "sighting--dd3e7934-d398-47b8-8385-1332b3555e5b", "sighting--065eab5d-3832-4fb5-81f0-1bce2f62fdde", "sighting--800dafb4-d3eb-4995-950a-5312184deebc", "sighting--36a6d261-5971-4dda-a4ef-9f2822477882", "sighting--11852e51-ea5f-44cf-bd8f-7180d88eaa58", "sighting--0d628d5d-8c41-440c-97ec-bd6a7082d4bc", "sighting--3fdb4f99-0a55-4641-919f-3ef8db7b7518", "sighting--83d4d908-e448-425d-a433-18a1f51dce20", "sighting--04254dbb-023e-4c76-b415-7f51707479f7", "sighting--0b6698c1-2346-4ce7-8720-7dbe884a27de", "sighting--ddee1fbc-5ea6-46d7-a2bd-b50602c84672", "sighting--7773cf05-fe82-484c-b851-d4b84a552fc3", "sighting--757b2ff4-4f6a-41df-86a7-24e833654b8a", "sighting--7962fdc0-3d53-4027-b094-cfa8d29ec0eb", "sighting--3e340b44-986b-4012-aed6-65a0fbe9dac0", "sighting--4a60c357-5c78-48d2-beba-5714cec0e464", "sighting--458f9081-9d49-40f7-9576-c8ce89598abb", "sighting--219e2922-10bd-4a6a-9446-c48b204f2f98", "sighting--0b10fade-4242-4821-a978-f2ba44437ef8", "sighting--c6832a54-b44b-4e58-a214-859e259ba566", "sighting--3ae30910-d0a0-4c29-8a88-bf5f0cff6806", "sighting--d5284f1c-92c4-4ddd-90e1-53b60188e71e", "sighting--bd60924c-5449-4836-9b9f-027b9c21fd90", "sighting--0932f88d-eb36-4119-b410-63c0cb827ae3", "sighting--3b7ebab4-369f-488c-938d-a99b90e95fc6", "sighting--b296d9d7-2b33-4ae9-aa55-c0a592029548", "sighting--d60029a4-c2c5-4850-bec1-694b45879821", "sighting--f7d0d1d8-de12-44d9-bcb4-87344335526a", "sighting--113db2e3-739c-489c-b163-76ccb4ea84bf", "sighting--eeafea7e-51f8-486f-9714-2a5946326395", "sighting--7d4b5e51-5b33-4ba0-b799-ccc4f6ee4fe0", "sighting--f253de2b-090d-4558-a78e-1419dbec9c3b", "sighting--33cf0217-d8b6-449f-9f55-1df9deb3f2de", "sighting--21242bb9-4c06-46fd-94ff-8db30872ae45", "sighting--ef830c64-79ea-483a-aa5c-1d8a46a3ce9c", "sighting--7b788781-1a75-4ede-bb3b-38dbe16b7304", "sighting--31c3e740-af76-486e-b476-7b7ca999642c", "sighting--e827bbe6-a4ac-4527-aa38-1753f0628860", "sighting--4186edd5-1b5e-4cc8-98d7-b455ef560096", "sighting--1d0245bc-26be-4b0f-92cf-8dc28319b576", "sighting--8e7643cf-2f55-4f16-bd49-0b2aeeed374a", "sighting--ec2402bd-864f-4867-a730-f7a90251ac3c", "sighting--cb37b435-6649-4311-af49-f3a2cabaece4", "sighting--363b11a9-2d87-4295-bd4a-ae90bb95b79f", "sighting--0ca94f93-b521-48d0-a9e3-3f63ae8881dc", "sighting--6c6741cd-cbb4-47d4-89d6-e7291058cd80", "sighting--096a87e6-89ce-4175-9799-498618b954c1", "sighting--23a8c976-23a8-4554-aeb4-74b70365ae74", "sighting--97497ee5-9141-4fbb-ba50-ab7ca04537d8", "sighting--1ee9d374-841e-4690-9968-0405ef4f5416", "sighting--142da04c-7904-435e-9359-4e0c0b0fb25b", "sighting--2b8d0f3b-418d-41e5-ba0e-515671ce0233", "sighting--f4cfd98d-1662-4c47-8e00-9299bae9ad47", "sighting--edbb84cd-e6fb-439b-bb13-e98c0be6e784", "sighting--d7cb7a00-f5aa-4918-a84a-b7745ccf044d", "sighting--78d19091-fec0-4478-a519-8fb21edcaf38", "sighting--fe706629-d0f3-4cac-b401-0a54683cc0a6", "sighting--86449d73-fce6-43c7-94e3-eceb18cf9596", "sighting--348bbcb1-564e-4420-b05f-202dbfcc1c7e", "sighting--2e29edfb-c39b-435a-93c4-469eb3a3be18", "sighting--3a1d9848-8f68-4570-b991-92d5dbf98700", "sighting--c8f5b608-c081-45c6-86c5-5536516c1ed8", "sighting--e0b5fb79-4b01-4a06-95e5-69fb94eda766", "sighting--52a60fa1-64ab-417d-b1ee-d11166dd24b0", "sighting--4156197f-756d-45db-941b-88e9c91684b2", "sighting--3199c4f0-ff3d-462e-9060-d525e693801e", "sighting--f3688237-8bf0-4ec8-a650-b592c08d8111", "sighting--7552afba-63f9-494a-90ad-6a75e9985f04", "sighting--7524f6ca-0387-4292-8062-c615a8115a37", "sighting--9441f1ce-363a-409a-b711-9fd660dcfb11", "sighting--c80916d3-a16b-41b7-b1b1-1bb78061a4f7", "sighting--0f2206c9-42ad-4bda-839d-e2f9d63b16eb", "sighting--ca6c75fa-77e9-4108-a683-df61db032dd1", "sighting--39dbb238-6e85-4543-a14e-5253423ac727", "sighting--fff9d313-5e9e-48be-b917-91ef768384f7", "sighting--dff78281-1027-45eb-a369-07daf9d4158f", "sighting--adb69f03-d8ad-4f4e-9180-b3a2b4163e35", "sighting--1e9160f4-8fa8-4ca7-8310-a08bb53feb86", "sighting--25acf5ea-af97-494d-911e-86b75e1de6a7", "sighting--e8bf41ab-535e-4668-bbb1-35fdadf773b1", "sighting--83274f44-c92b-4c37-b540-755982612f00", "sighting--45f6d42d-610c-4b16-b852-4d518b70485a", "sighting--e845691d-21c2-4940-8857-015d5caf36eb", "sighting--c076fa0a-f6da-42ce-913d-b52d27af4510", "sighting--708506f6-66df-40dc-aff7-f7defeeaa46c", "sighting--e773b083-2b41-4b60-b6f7-ab026bff951c", "sighting--e2b65d83-57f0-4267-a773-193470a22ddc", "sighting--48e32dc5-30a9-4b49-97e2-8978ba252233", "sighting--c2d548ff-b04d-4b0a-8085-ab4448bcb100", "sighting--55ae6c66-1efb-4582-a029-03ac739d3889", "sighting--4d804e63-fbd6-4359-92c2-44fe07418e53", "sighting--852812ff-5c68-43f6-bdba-9a84c1bf9b0c", "sighting--2aff793b-88d8-426f-8a95-4f34534e5a26", "sighting--ca4970e2-c66a-49c9-9c6e-85795afdef07", "sighting--4269df80-4ddb-407a-8ced-6bbd71da78ab", "sighting--c5c17d2b-7d93-469c-b56f-b90b190cccc6", "sighting--55c1b8db-f934-4212-a437-d22c84272ce5", "sighting--031df2f6-4834-40b0-a39b-2b898fa88579", "sighting--d5aa3eec-8141-4bd3-9e3f-74397aa41fca", "sighting--9f4dd26f-289a-4801-bb47-bef7d2761a79", "sighting--b617a82c-f985-4e96-af9f-1ae8c0dd2a72", "sighting--1a670035-cc1e-4e65-a41c-572d36bfedfc", "sighting--28ea8fa5-f9ea-42a1-a97a-b760ea86e53d", "sighting--d97df67a-3473-4aee-856e-76ba524827f9", "sighting--c2ef473a-6064-4d4b-bcfb-275013a3388f", "sighting--a88dc907-f61e-4a97-a8f8-8e5b20764f25", "sighting--5a0819ab-b849-4e37-a584-50921319f55f", "sighting--2a1f8f77-be0d-44d9-a182-ec75db649696", "sighting--f4f3c36f-da9e-49ba-ae48-9a12c9d69ec2", "sighting--71d7a718-1f67-45a9-9e41-39b7a30a790c", "sighting--3bd976ff-2d2d-4575-8bfb-77fa12709360", "sighting--1716ce4a-6f2c-42b1-89c7-2c18cc09a4aa", "sighting--4078df45-e5ce-4316-af53-fe280dc9d6cc", "sighting--451a3953-a67e-4318-9b9c-fc78d2f596b2", "sighting--66bd3dab-7a79-4d5f-b09b-6cab3e2012ef", "sighting--0bfd0e0c-3553-45f5-ac9f-d3a2f10538b0", "sighting--b11e7cea-b2cb-49c4-bff2-3e969cac2999", "sighting--beee0687-a38f-4726-bb99-3b1e9715bc46", "sighting--b419278b-339c-49e5-b4de-10a276e539d9", "sighting--ec4a6fa2-2fe0-43fc-9b3c-2169029a6582", "sighting--7040a05e-606f-48d4-b93e-0f93d45c5305", "sighting--af9aeac7-6382-4f20-9eea-57a6b572143a", "sighting--5fe5ed2b-8289-4051-a874-67aa24248725", "sighting--903db127-d307-48cd-b436-b6ca8936e4b7", "sighting--600f0743-1f60-4386-a8be-cc5fc6d273c5", "sighting--99d0f084-111d-4bd9-a436-884af3d508eb", "sighting--3d79ffdf-3cbe-430d-92d8-21cf599468db", "sighting--0e8195f0-2c0e-47d1-81af-be687d236bbd", "sighting--16c0412e-a096-4e30-a6a9-6a2b55d5a875", "sighting--48c37377-4c57-4a35-9d24-7d18a1848c72", "sighting--e9b59204-bd39-44cf-b846-23003e6e39f8", "sighting--56444b9b-ff77-4e84-8113-2c099bc58acf", "sighting--35bdf7b9-c928-414b-8e81-9f349d9a1d11", "sighting--8a81b2fc-3309-469d-8e23-db50d10117e9", "sighting--c6f18e06-13b1-4720-a48d-ec637f722c4a", "sighting--739057de-10b1-4598-9756-5bbe32bca8a1", "sighting--9471dd5d-f5d9-4474-99c8-a184035d00bc", "sighting--52e39502-a42e-4c2f-bbf4-18c9233d1d18", "sighting--5cee870a-36ed-4efb-920a-714959f8e469", "sighting--4cc7f624-82f4-4c89-9fca-2d4942b9c652", "sighting--3b4b8626-7836-4fb8-9f34-0fb6a1abc5ef", "sighting--e356b774-8e87-464d-b6dd-b7728a166e50", "sighting--b200f2b4-8f62-4482-9dc8-d7dbb4880ea6", "sighting--16b6a4e9-a19f-4e41-bddf-5187110fa40b", "sighting--2b889fc8-be7b-4bdc-8072-4571c27887a5", "sighting--bb10a5ce-ffcc-49fe-93e7-e684e94d2fd6", "sighting--877be5d8-4f90-41e7-9112-21816596d9ca", "sighting--804e4609-d1d5-4b0a-897a-aca4f4a2cc5f", "sighting--4b4be84b-2f77-4683-b065-b77d340ec04f", "sighting--d589c688-c005-4108-91e2-db8abd67636a", "sighting--bc56f00a-c5ed-44d5-ad17-2da23551c373", "sighting--c330d9a5-0275-46d2-90cb-d991bb963035", "sighting--a0d07e66-366a-4fcd-bf2a-be0481eb9031", "sighting--784ed525-b0ac-4d4b-8a3c-cf5da5fca7f8", "sighting--7c97d546-b52f-4922-8cfa-36ad244dd033", "sighting--43307ec1-3c70-4378-a8e9-faa3d43247af", "sighting--23df1338-d0d7-4355-b7a8-3930cd15f5f6", "sighting--821c9ff0-7c1a-443c-a7d7-c561c44b3c34", "sighting--5d968810-bb94-4e1f-8826-7149da5184bf", "sighting--16af8dbf-f350-4b4d-b1e9-789c29ab22e5", "sighting--8f94c5e6-526d-40f9-b647-f57076664ba7", "sighting--08cd56da-aa9b-4d9a-8379-c419adc5c060", "sighting--9996e7bf-0fdf-45ae-969f-cef050febb6a", "sighting--50f2d12d-df63-450f-8725-9a062fd037f1", "sighting--61c987e3-569d-40af-a04d-b57d4da5ff74", "sighting--34ce86f6-c386-42a9-a514-1a4a4e4e6451", "sighting--5c70e39b-811f-4987-8cf8-b2fa7712dbc5", "sighting--213b7323-772f-45ba-85f6-8d5cbb5de48d", "sighting--640df06b-3752-4c22-aab9-2c25bc5d106c", "sighting--93d97919-3efb-45cf-ad88-dd5942f1e092", "sighting--103ea149-2afc-4592-baba-cac450276137", "sighting--88c18679-fc39-4cf4-b255-c99908f5a38f", "sighting--57f2ff4f-32bb-42fa-b9a7-2be2485ccdbd", "sighting--84f02c8e-e585-4ca0-beec-0e1000e42df3", "sighting--1a369032-f28c-410c-b861-660b07466287", "sighting--b2dc5863-32ae-49ff-9a77-8d4db1ceac24", "sighting--d03dbfe2-0fcb-4f42-84eb-8d27b10b8df5", "sighting--db747257-930e-445c-8069-721884e62423", "sighting--d97d78f5-8d87-4b16-bab2-4445b1656e81", "sighting--a6dd74d9-4101-4ccf-a4d9-9a3e878af167", "sighting--15a3dd9b-d80b-40a4-a1a9-999249575615", "sighting--b920bbce-5e8c-4a53-bd36-8c117675578f", "sighting--d290f6fd-f82f-41fa-91fa-503eeab20dd9", "sighting--3a6b1e56-05a8-47ee-a761-a5bbc471672d", "sighting--8a0a9d48-c33b-445f-acf2-27c5a6d879e5", "sighting--9acae050-f519-4729-9b25-ca182f4a62be", "sighting--2c9a19ad-fec6-4ab5-971a-3cfbfd58d9e9", "sighting--a49f0276-2226-473d-ba28-d418f180be8a", "sighting--44258e00-bae8-4d2e-97ab-e6e8d9c933c4", "sighting--6b826f1d-305b-410b-986d-3cea3192eb06", "sighting--478bc6e8-7df2-4cc7-bbce-9d27b8208493", "sighting--1c4ff49e-df59-450b-881d-14e9ab69722c", "sighting--b6ea165c-f187-48fc-889c-9a2463074a2e", "sighting--2ac57dcb-e7b4-4b75-bd97-e9a0f0112e1a", "sighting--bdeadd2e-ee3f-45c8-9312-1e04ff876f91", "sighting--327f0137-4b8c-4344-a3bd-a67956e2782b", "sighting--e5e1c252-2dd1-48fe-b133-0f8df18121f0", "sighting--f70f8fd6-0bad-499f-9ae0-bfb79c543f21", "sighting--e5c38b64-bd39-4605-bf1c-39c5298a31ed", "sighting--122596c6-f946-42c3-82ff-9802b6d67638", "sighting--186f7e98-d695-4e13-9ab6-42263d00f6d6", "sighting--fc9d944f-9109-4a1f-a9ab-af8518e302a6", "sighting--47202675-ba44-413a-8e91-9fb3a96ea064", "sighting--9176281d-bb9e-485d-954b-e21fe2fe04d5", "sighting--4dcc5c00-276c-4d3d-9e9a-de47d1f1325e", "sighting--647f4a1f-8dc2-4eb4-826e-b036458b28fa", "sighting--99dc7ca9-3e97-4b50-8603-d33b8a8822b6", "sighting--984105b5-0cf2-4c5c-b793-42356dbec890", "sighting--de9aa2f7-65dc-4fab-8f41-a4fbce058382", "sighting--0a5c56b8-0cf6-4ff7-ac1b-76e96ab41a84", "sighting--a10a9b77-f9e0-4199-b161-7c7211017841", "sighting--51bb1428-1d16-467d-95a2-93ba484612a5", "sighting--be155644-6778-402a-96eb-2fd7891e9ea8", "sighting--3dbf0f8a-2743-490c-901c-38e601eb62a6", "sighting--b8163376-a789-47a8-a0d2-572ede816c28", "sighting--08052aa9-efa2-4d7f-be97-546e75c6a820", "sighting--00cacd29-0c43-41e1-a6db-7cb793792928", "sighting--730fe796-0eef-4502-a3ac-da936f256458", "sighting--4c18d0cf-119c-401b-a6ce-0daf54e0e14b", "sighting--f58a7e1b-8c3f-47dc-94fa-92a59cd92a7c", "sighting--cc0efc2b-e2c9-47f8-a03c-51e036c96521", "sighting--01aa196f-0f42-4954-bec2-1e8f2d34ea02", "sighting--21e81c72-2550-47dd-a500-c9c40053380c", "sighting--4d25aad0-b776-46a2-baad-281d167ab88f", "sighting--e242caa4-8336-4de4-a690-50f92441f862", "sighting--587af1c9-57e3-4459-b0ca-6f198ceee2a2", "sighting--0dc9c11c-3d37-4008-bfa8-f99f02993a0f", "sighting--5fc77621-bfc5-43be-b3d6-fde02684d6af", "sighting--dbbbc357-35a2-47cb-9ea7-f9dcbe2de504", "sighting--b6ffbe5b-9cf6-4792-b5bb-780569997060", "sighting--2c2a6bc0-c76b-4759-b727-369bb3b17736", "sighting--a1d3dc28-9919-477d-b920-f5e7491fd64e", "sighting--d6629a18-ad78-4b53-af10-f73043eefb19", "sighting--91c530c2-051f-47d6-bc87-ec994bef6bbf", "sighting--f439e84e-f2f2-403c-83b3-b5d478b00af5", "sighting--f3ca6a9a-ceb9-4307-bbc2-14f538eb57e0", "sighting--194e1aec-67d6-4cab-a538-693ec45e60db", "sighting--71c94f80-4bfc-4f66-bfa3-5327fab9eacf", "sighting--d509ac34-1608-4bc6-948d-b0ebb4f33955", "sighting--029c129f-78b1-44a8-bb13-35159dc8fc75", "sighting--714df80c-caa9-46d0-9232-cc6eebaaba15", "sighting--8ae6466c-73c6-47df-b2e7-fb44b95f25b5", "sighting--1b88ceb7-67a7-4aa9-947f-64a666cd836a", "sighting--d9bca23e-b29c-4787-bb3f-09057a604c42", "sighting--2843a543-1a1f-4efc-8ca9-838bbaa30c9d", "sighting--f063e692-fae8-41d9-a28b-97dbf2863441", "sighting--e6169ac4-3561-4ef9-9dc0-2656e7688cb2", "sighting--11bc7f4d-09c0-49a4-901a-4f3e05a10c33", "sighting--699da3b9-a6af-48cb-af91-89095dad83bf", "sighting--0ce0e447-1578-4d27-86e1-09a33402a39a", "sighting--2b9c9635-4f2e-48a5-8785-26998ff60bf1", "sighting--2ee27435-2209-4c2c-b30f-693f5f05c67f", "sighting--eb59c134-e7c7-4010-b171-d6dd5c39be27", "sighting--dcf8202a-c615-4ea9-b8fa-b1098a80dfc3", "sighting--0693a29b-a75d-4fc3-8ac5-424df89d60cd", "sighting--b161e392-13a7-4279-bf65-43f3b7073a95", "sighting--014c4643-b946-4eea-85df-9275ab7935de", "sighting--7b242790-2246-45b0-b895-d3a6ab20efc4", "sighting--26844a4b-33ca-42b2-8803-a8b1fc54576a", "sighting--7843dbe7-24e7-4a56-a96a-56363dd4ed6b", "sighting--f0b26dee-bfbc-42e2-babf-cdd6f3c91756", "sighting--5dfe8dea-bb56-4fa3-925e-cabf44858dee", "sighting--775ffb64-e186-4b15-b4fa-be16a41ddb06", "sighting--14cb4503-9547-42f0-9317-ccbcfdf86e29", "sighting--f5119047-e848-4c42-9395-7aee16a72de1", "sighting--c7264d92-9d8d-47bf-aeee-5d43eae086f0", "sighting--2dea8675-6462-4496-b758-441da2a75726", "sighting--f265031a-e55f-47f6-b6fe-0cd9923388d3", "sighting--32a977db-8f0e-4aac-9ea8-f351866dba09", "sighting--2ae25928-835b-4f9c-b9a6-e0f0d491d3d1", "sighting--0465271f-ee0a-4301-9532-dcaf35893ab9", "sighting--2934fd6b-eb64-4cb3-b9f2-4992206796a2", "sighting--8f9cd9e2-1870-4151-9319-609c2b4c1244", "sighting--aab5c807-d64b-4a79-8033-41f0405ec690", "sighting--91092eab-ca6f-4496-b217-f8fa7894bbdc", "sighting--9cbeefe7-a542-412c-91ed-6484ef7652c2", "sighting--56d0346f-2736-403a-93da-ce3edf082585", "sighting--5a10dcf5-9e12-4402-a62a-00add5c27e36", "sighting--66e610c9-fc64-473a-992e-e2b3bf68bfaa", "sighting--574cdc04-6baf-42fe-bbb7-f21b2861d7b6", "sighting--37b88b7e-75d5-45c8-9218-10f82a79933b", "sighting--6989dfe3-90ec-4e9c-9f98-58b00d1366c5", "sighting--a5c1fc17-648b-4d4f-ab5c-e49e2a30828f", "sighting--54e73578-0440-400e-80f2-0709d34beede", "sighting--78eac44d-8e05-4832-a1da-3653be5dada5", "sighting--34c53365-15a7-4836-a271-7040140a25e4", "sighting--44a0718c-7d6d-4ed5-9054-32368a4ed07d", "sighting--ee8f1d4a-e682-4a40-8e45-d45c7ef96c92", "sighting--77e63b2a-565a-4e95-b3f6-e0d9e0c3f47a", "sighting--fb20f8df-41c1-45c9-a969-e1dd6ea0759e", "sighting--5f1aeff7-3a91-4139-890a-a5d78b938537", "sighting--4f3c8983-6b1d-4d72-92f3-2df047c7e9f6", "sighting--a6d76a87-5170-4671-8707-9337d3825dab", "sighting--fe87dc81-6dd6-4018-8a7a-0672e473665b", "sighting--eae606e9-27b0-467e-8c11-5c00bf985cf7", "sighting--facaba8f-4e92-4e4f-aedd-63ce2590cb33", "sighting--fab5863c-a824-4e3c-b780-6417313a2503", "sighting--5decb4c9-60f3-4859-9052-d22262b54c47", "sighting--3c404dae-d6cf-4c6b-9f93-f68dc2df1348", "sighting--fc65d427-4274-471d-b2cb-564841f84a2d", "sighting--58662683-a472-4a00-bb6c-684b0cfb0cdf", "sighting--2b779f47-51ad-4188-b5b1-de211e100ed3", "sighting--d536d361-4d1c-4231-9d5d-905ac4dc8dbb", "sighting--3e405b70-dff2-4bf2-9919-3518f8657d8e", "sighting--9e568732-f25e-459b-ac4d-de7aecffe607", "sighting--192853ca-b49b-48b5-94d9-95b0d8ff7788", "sighting--cb7b02dc-e38c-484e-b96d-11d6f676ba1a", "sighting--2c1b7113-fbc8-4742-9ded-f0130ce161a1", "sighting--9f1dc5a7-7184-4b85-8760-dadfc9479f55", "sighting--1a893727-cdc0-4de0-932d-c396d195120a", "sighting--cd18697d-6b43-4215-90f0-3bfd021797b5", "sighting--9d34a4c2-c203-4683-97a4-55e55163715f", "sighting--c01dee91-b1c3-43fc-b78e-a434f6323e55", "sighting--299b0301-e714-4e07-8fcc-35c19d905180", "sighting--743baa3b-6abc-45e9-8773-f92c5ff49b28", "sighting--e6c6bfa9-96c9-40c9-aced-7c06356dca7f", "sighting--828f2eb0-0051-42a2-80e6-af00d84735fc", "sighting--811f123a-81e5-46c9-a7ef-75f1c975e564", "sighting--c6bc9fe2-9c7b-4d1d-b8b8-ea05655ac27c", "sighting--4b92132c-2167-456d-b76b-2c2b5c81d729", "sighting--024432b6-4bcb-4f4c-a5bb-1998c28c4bc3", "sighting--5a7f350b-fe05-4d3b-9d4e-81e3c1559a67", "sighting--f1ae5e48-cac7-44a4-b445-412f7a870ab3", "sighting--c9c6a54c-66e1-4502-a2ef-a3a0f257fe7f", "sighting--2d902983-a4f5-4db6-a38a-9a4ab9ccc946", "sighting--424c1633-b477-4c74-8993-56bf324f2c1c", "sighting--407624ee-727a-42bb-bc2a-45e1aaa0bec5", "sighting--9d412900-a12a-431d-a583-8f084e472f3f", "sighting--6babac41-6387-4481-8e84-60d533e168da", "sighting--3537bacc-749f-4802-9c1d-c557c573dc02", "sighting--9f42dd1d-4123-4a02-bc52-9a873522259d", "sighting--54277236-2851-467d-aa84-09964cccebfc", "sighting--71d00b6d-18b7-4a3e-92e3-f1b01a65ec0e", "sighting--c36e36fe-e551-4d51-a871-449ec0d8d9f1", "sighting--3c6bacda-aac7-475a-a93f-dde696ef1149", "sighting--f01009ed-0789-43d5-ab52-3543ea6bd0a0", "sighting--2f9a2dc1-a5e8-45db-9e11-170858743c4c", "sighting--bf6552a5-01b5-4ee7-a8ae-39d9b42f5831", "sighting--9207450d-f044-4d22-87e6-a16a36e38e15", "sighting--7dd1a5f0-22d2-4ae8-a435-5147c51f68f0", "sighting--8c69c9c4-9d41-4492-85e9-140390bb11bd", "sighting--a83059b7-6c80-45d8-a586-2c4e7bad1545", "sighting--fcf55e5c-ccc5-417b-a9a8-f6bdeaa6ce99", "sighting--6421e1d3-76bb-4a10-a99f-529caeadaf30", "sighting--b1b6cea0-0eb8-4b1b-af2b-5b852508cfdc", "sighting--581d3953-f20f-42e2-aeac-738ed7b3e07e", "sighting--a4c0b32b-ad61-41c1-b557-7a9995982b4e", "sighting--fe090170-3bbc-4deb-8052-c4bb01e08052", "sighting--6e6d9ab5-e22b-4e1a-b759-68e72042d36b", "sighting--04410eef-5357-4199-9b26-97d8c32b0205", "sighting--d3258290-4b4e-4e87-8c4e-849bf065c398", "sighting--96393759-5a7e-4275-95c9-05a31cf788ca", "sighting--08819be0-5b90-4223-9055-464a08c2cb84", "sighting--b0cdaca9-8271-4229-8308-ea5afa8da95e", "sighting--fffb1790-c4bd-4268-a052-d76da6745a7e", "sighting--a5ef7b24-efde-4790-823e-f6336b414d16", "sighting--8a63f160-239c-4cfd-8bdf-6628ee71ecfb", "sighting--d7803904-cb7c-486e-b1df-8cdaa9c1c9e3", "sighting--8bcb20ab-a812-4d8b-855c-4dc5c0e4753b", "sighting--69b526a4-8434-428f-bb29-2883e49b754b", "sighting--3fe49006-f2ea-4f30-970a-4df9a2a28691", "sighting--39bfdfd0-755f-40df-bf56-d91b067aa286", "sighting--47679db9-4805-4b6e-9a6d-a8b7e8f771f7", "sighting--ae0d1ede-90e5-40f8-a480-7894e51f6cc0", "sighting--7b7fbd5b-e626-467b-a8e6-6fcd10047caa", "sighting--3d60e7ef-bbde-428f-87d4-45f0cfd97e41", "sighting--a80aa2ea-8ba2-49f2-bb59-ce486fc8c1b2", "sighting--16f61d8f-e50f-4a20-8ea1-7187a86e459c", "sighting--82dbf647-61b9-41e0-9cf4-9e4763d96968", "sighting--2451ed79-e387-4123-8f33-ee3b8d86cd11", "sighting--ab5b040f-6676-4405-8cdc-dcb0768545bf", "sighting--99b4fcce-688a-4275-bd4f-17e76b9cd8be", "sighting--bfa7fd23-3506-47dd-99e9-bcaa99e03110", "sighting--74fe857d-084b-410b-8691-7b4d44239807", "sighting--cd32f3ea-8a16-4d33-b344-fdd2ecad3a1f", "sighting--16cda340-3e9b-424e-90d8-a1bb572f8c73", "sighting--6b4f8817-669d-490b-a290-42fbc487b3e0", "sighting--392d1700-c986-43bf-9f34-65a30ecc4ea3", "sighting--508d15ba-8524-4e67-8312-8bf5d27f7e13", "sighting--26900f5c-4203-4bc4-8412-c4b007c133ff", "sighting--9e3ca7c2-ccad-459b-b264-589336767c81", "sighting--1b266acc-c94c-4b3a-82c8-fbd0ef154716", "sighting--b2619279-25a0-4e49-b370-2a7a41dcf067", "sighting--6392a355-6d95-45bd-a7d7-834dc68cb3ef", "sighting--ab1bc17b-e31d-496b-80c1-3d9f2f8f89c5", "sighting--baf79c3d-9354-4b5d-b2f8-7b0a84d27b7f", "sighting--ec93f817-c6a3-47a6-9167-f6297af065b0", "sighting--146cbbb8-0423-4b50-beeb-e37e78a4a2aa", "sighting--17428718-9c10-4a4d-97b8-474f504dfcba", "sighting--5920be5d-e7c1-4355-af7b-643ebc7176d7", "sighting--0dd34f6c-ad1f-4772-8037-457d216de9f0", "sighting--9c9513f0-93f2-46c2-803d-0e605047b132", "sighting--08681ba3-c8df-4312-b23c-96784b85431a", "sighting--928be4f9-da8a-457e-9f30-c780d478d6c9", "sighting--402808da-d3cc-4aa6-80b7-9b1de42d97a2", "sighting--bf57ad7f-0bdc-417a-b132-24b6392093a2", "sighting--7ea83ecd-127d-4828-b52b-0e8ab04216c0", "sighting--6dbbc601-482a-4c73-bf64-c1bd3f82118c", "sighting--b0425a41-5512-4664-a24e-49cb0d821aa5", "sighting--6bb582d3-b8a7-4078-80c8-f127744b10d7", "sighting--244e9412-9e89-42fd-af0a-817235cb5e69", "sighting--fd4c7fa7-072e-42ff-b361-c814a28472dc", "sighting--939243a0-ef2e-4ee4-82be-5805b63c15d3", "sighting--a5dc4d87-f4c3-475d-b5eb-d97b3fa63ea0", "sighting--8688bbc7-f9bb-4f43-b1c8-455571bf1527", "sighting--5fd9b018-86f9-41bc-a0a5-a4e2af10dfb6", "sighting--19c4bfa2-da81-4c0b-99e2-b14453cdc3c9", "sighting--46f65054-7780-465b-b487-95f4ec133792", "sighting--018c668e-c0e5-44f0-b2a4-7560cd499c99", "sighting--3ee1ce66-771e-40ed-8e36-1829abb39cfc", "sighting--7b05defa-b9ac-4a1d-9573-5a1074634fff", "sighting--f5616d8b-be3b-4dae-803e-8c7eb7eb9454", "sighting--1dad7040-87b4-4fcd-b5ce-6c560a07f1af", "sighting--27ac8cd0-c661-4a3f-ae91-2df2e40f3257", "sighting--e4ab1f83-a3f8-47ba-afca-3a158b00887d", "sighting--1d790b48-b993-4e35-86fc-7688b940ed45", "sighting--f27a7ea7-7507-4d6a-aea9-d3c6fbea0e42", "sighting--92ffea2c-1cd4-43a4-9eb2-73f85de17f62", "sighting--dbef36cd-ecb3-452c-bfec-7696e65004f5", "sighting--557216c4-2a85-44f6-b428-7639afd21530", "sighting--2cd4b230-9ad9-4631-914d-e407b9e99f1d", "sighting--c4b1ef0f-1ee9-4f07-80d3-381d08287576", "sighting--8b801993-033f-46b0-ade1-43cb48583081", "sighting--2d303543-98a9-4862-bb49-dafe81af490f", "sighting--c274bc1e-56e2-4d6d-8781-e4c740180f01", "sighting--fc016b37-2a3a-4c9f-baa4-63ac0d63a200", "sighting--b6bfcbaa-4165-49c4-b8a5-a7f9766c7b46", "sighting--9f9ea11c-6f3f-474f-9dc6-0f221682c469", "sighting--ac6ee400-9ba1-425b-8e79-0071ed6c8f31", "sighting--7ffb4314-e52a-4a39-9163-00200afea939", "sighting--d883ca05-a59c-413a-b943-4a063e2a1f27", "sighting--304f96d5-8642-4ff3-bfd2-42442d67d50d", "sighting--ed4cab67-c7c9-499c-aad4-ed4e0eaa739b", "sighting--1348a960-782b-4ffd-ab0d-74370af60180", "sighting--c33a16ce-b65a-42b2-84b1-d116463df6c2", "sighting--6bd6aad3-6e45-47cc-ada7-c5a7fd7ea63e", "sighting--3e383411-3fcb-4bb3-b51c-25ce83e43bd2", "sighting--65121388-dd80-4eb5-9132-571451cde8e7", "sighting--6583fa37-39f2-4b28-a059-2d84f2907601", "sighting--845ca2ad-8118-438c-bfac-cdc57ff6a918", "sighting--3ae6d88d-415e-4256-a4dc-6d7c06d34b7a", "sighting--817e7d67-8578-400e-ac9d-b902f24a8f73", "sighting--126de4e9-8ac8-4a1d-aac1-2aab387d9ac3", "sighting--a1aa493b-b615-4123-bb1c-1c96e028ab18", "sighting--93337fa8-58ae-458c-af25-ef64c070df7c", "sighting--f99792ae-1298-44ef-b925-6231f49e4711", "sighting--59a345ae-c0b6-49c1-b103-870797d457a9", "sighting--81a3cc08-f798-4326-9b71-0bc08909fb64", "sighting--996df537-0b5a-4d6d-bd95-c68cda83a33f", "sighting--ddb0cff4-54d4-4439-9d05-9beb475f3d21", "sighting--89b2ecfa-9751-43a3-8d31-b5f9b5eb92e3", "sighting--318bbee8-7410-45e0-bbd9-adecf43890f9", "sighting--4cc9ff5d-40fe-4bb5-b0ff-aab6b7b19596", "sighting--1c0825ce-900f-419f-b146-dbbb49a9af45", "sighting--e33d6371-a59e-4dbc-a95b-9effaa06db6a", "sighting--8c856eb8-3075-4796-9872-f32431b8c73b", "sighting--5aa215c4-faad-4c81-acf4-b4e2f0f04733", "sighting--f78bb2fd-ada8-401a-9008-32c8024c08b4", "sighting--ab877cf7-f4bc-4410-8a55-913f4dfa6fae", "sighting--610fd105-2c39-4cc8-8067-a5ee981cf727", "sighting--65839b0f-c8a8-4601-8c6e-f17890c3e27b", "sighting--5f37f8c3-ddaa-497d-9eff-3fa14467f158", "sighting--c90ca56b-f237-4b35-b79a-26ee66b481eb", "sighting--fdb842fc-a978-46f7-aa11-f15cdbefa2a4", "sighting--b371014c-fb1c-4262-a95e-5a9abe4a0955", "sighting--868c2b48-c50d-41ed-901f-0c7997f585b7", "sighting--ec746593-3592-41b6-a9e2-18bb6992d51d", "sighting--4b22e14d-991a-4b01-92d0-65424714d8de", "sighting--8432c240-1ce8-42e5-b032-dc7a0226dd98", "sighting--9daf501c-f629-4312-bed6-238f4312c225", "sighting--bd5b6d54-50ce-4b18-98f4-b44b8f256412", "sighting--95447dcc-d6f1-4052-9b24-a3430cdc9b2d", "sighting--306667e5-05bc-4e75-bfe3-16f906e27a2f", "sighting--285d310b-84ea-47b4-904e-c53c0c4a0d40", "sighting--9a71c481-a13a-4edd-9f0a-cbde90980db4", "sighting--9844782e-1b23-4d08-a34d-ce2ba64ffd14", "sighting--3ea66a1d-5b44-449a-82a5-a05df3c6082a", "sighting--a5813797-ac4e-4d89-a613-c418aa0dbe81", "sighting--e2c6b2ae-6e15-4175-aae7-e8db9289b5c7", "sighting--759bc0a3-05e8-4adc-af27-1e8232d9289e", "sighting--24b07773-28c3-4f8f-8d81-455ac9cfe174", "sighting--5f8eab7a-b267-48f9-99dd-1dfdb3d984ec", "sighting--b18aed55-9ad8-42c9-a63d-ff051d87330b", "sighting--9eb1476f-f3db-4e0e-ba6a-d3ed27b0ea4e", "sighting--62b8022d-a68b-4a02-8d04-27250dc37c00", "sighting--059f2cf0-799b-42e0-b7d3-732bd91c1428", "sighting--d71f066f-389f-4ea5-8f5d-daf5d068c78a", "sighting--73da3bdc-1d0a-4a4b-9b0b-b743f484bdbc", "sighting--a4e03c63-3a79-49e0-af3b-c1e722c8bec5", "sighting--f85beef3-c242-4b8f-b79e-8e77147ed92b", "sighting--28e4eb9e-d326-4582-9ee2-c86f22480fdf", "sighting--8f2adbfe-6500-4a96-bbee-7a00c2499097", "sighting--34133c04-0064-4af0-bc9a-e4177a3cb362", "sighting--f67d0388-26b5-4a64-b2ce-3cdd8e7213a8", "sighting--aea49c3c-de9d-4f33-aa10-75ca7dd0a92f", "sighting--d67b13f5-8508-4f9b-a026-10fe810bca8e", "sighting--2d4c3a69-1cd2-4340-a87d-1e60eaa9fc07", "sighting--ee67fd64-2467-4ae9-934a-21286049f6db", "sighting--3ac897c4-4242-4901-bf2e-001d9e37f689", "sighting--327293ad-2844-4446-9f08-357a33e3010f", "sighting--b957f760-9c7f-4d2d-a0ae-c83f0f36b37e", "sighting--b52e824c-d1e4-4c37-a8b4-2f30a7dce78c", "sighting--a3636599-560d-4042-b848-4f18488c18d9", "sighting--f34a4e2e-a097-4dcf-af35-63d2e67b95ac", "sighting--985871e5-7733-495f-8b5f-a0df5fdbf184", "sighting--afb1bc4f-0505-4b00-9daf-612a5143eaa0", "sighting--4233948c-35c7-4025-9afc-65152cb1a3e0", "sighting--f7337826-ef79-43bf-9eef-0356bafea416", "sighting--edc58142-dc73-4876-ba4f-5e4e7c9638c5", "sighting--00acfbb4-ecfa-4923-b17e-2f2b16652ff9", "sighting--0d43db3c-f3ff-4069-80c2-d1dac91c6122", "sighting--313b22d9-ac40-4fde-98d8-15213033f3d5", "sighting--1af25c9d-0d08-4de5-9b12-5da39e3c5d87", "sighting--bca1db70-797e-4f85-bf53-bf760b891b75", "sighting--f4f99bcc-037e-426f-9c0b-8169d652055b", "sighting--db19b352-5e73-47a4-a2b1-e1b5a09d58c5", "sighting--1948e4be-d1e0-4ec0-bd5c-3792faff4028", "sighting--b14c18b8-7ea9-406e-b251-26be84ca4e5a", "sighting--b3c403c2-f501-4746-8910-0a144ed3d0ba", "sighting--1d23ec44-9cf5-4503-aad7-32ce54b0f36b", "sighting--996a221b-7e94-4940-ac18-983d19809cd6", "sighting--9fc97b67-3c74-47d7-93fb-daa8db7a3e1e", "sighting--98a199fa-1960-494d-aa07-889da16c50f1", "sighting--a789af3b-87cd-4d37-863b-350b214cce11", "sighting--676de376-ceba-44d8-809b-12ba1a22fe0d", "sighting--55ce729b-1465-4d5c-bc4b-9fc8a65b4528", "sighting--dd8872a5-f426-4e49-bcdf-87f71d3b45a0", "sighting--4091e0f7-aaee-4713-9ad1-93cfb43b7f3f", "sighting--7e5d4061-bb17-49ef-b941-4e7e8ed0a2b8", "sighting--75a7ab60-f2ab-498b-a3c8-94438c1ce6a0", "sighting--70f4cc76-8ff0-455e-83f4-f8843e2fb66e", "sighting--d378fd69-46c7-486f-a50c-5dc31d671ea5", "sighting--ca111f47-d662-466a-a4b9-a725ae42876a", "sighting--053b9c95-6efb-44d5-a7f4-26c5ffbad6fc", "sighting--b97e4317-338c-48aa-bd6b-75e4918f895f", "sighting--767bfcc3-68fd-419b-be74-ed3450dd0b6c", "sighting--9871f2d5-f0b0-4934-9866-7ad5d057554d", "sighting--7776f75c-82a6-484b-ac40-7f36f6b09931", "sighting--0c64dedb-d599-4d2b-af78-f574ccd4803d", "sighting--41f922b6-bd16-465e-9a73-6820c914f093", "sighting--44549525-6edc-45fa-add2-39c2c0c97e0d", "sighting--0a65622a-1818-4341-a3b3-1d91fa3ac247", "sighting--fd30f093-eb75-4797-8f1d-8d8effb2f937", "sighting--8ae8958e-8dfe-48a9-b9b1-5186f0346f76", "sighting--d8df5a28-16ac-44d2-8194-bc5ff7e15438", "sighting--695ff3cb-7a51-4f54-a586-fbb7595a64b3", "sighting--5fa78461-43f4-408a-b403-1ccd776c1b76", "sighting--dad2d4e5-4949-40cb-a6fb-215363a2a81d", "sighting--e56ab499-ab0c-40fd-96be-c7f538511213", "sighting--c5037264-9c68-4353-8da7-c3b20c42f08b", "sighting--79a96fa6-eb09-4071-b38e-9add4907ccc5", "sighting--aba8a47c-3316-48de-9539-cd4ebad20c3f", "sighting--4acb95f5-e7e2-4061-b5c9-59e94c315308", "sighting--246b63b7-7909-4f48-aa8b-3c6bdf177aba", "sighting--eb676d15-4cf9-4d02-994e-e3da16b39d3e", "sighting--cc1a7177-9453-4ada-b7ce-be8e03e70244", "sighting--5b0fe0d3-6569-4111-8755-87b1deb7618a", "sighting--b3bd15bb-d1d6-4fb3-a139-780ac03e4881", "sighting--0afeaf10-e2b9-4e53-9cbe-f1271ba6595b", "sighting--02d858f4-53a6-4890-9b6e-b95f0ba48f9d", "sighting--07598df6-cf7d-4b61-8be5-b8ad23c4088b", "sighting--09884a03-a2c5-4a3e-a959-1b62229e9102", "sighting--467c5a91-ce8b-47c0-85b3-7febdec217eb", "sighting--da0fc730-1b31-419b-9e9c-b6cb17221fe6", "sighting--54a33c10-4600-4e5d-8240-fff496df3bd7", "sighting--c5a22b52-d708-40a8-8220-91446376ec41", "sighting--5659cf19-4d8d-49d4-a8b8-dba3a282cc64", "sighting--8dfb33e1-c129-4d76-a2c3-228ab7674b98", "sighting--034f7afd-ecee-4885-a796-2a4bf614f854", "sighting--e59927a4-74a1-47ee-87e7-36eb4c7f6218", "sighting--cf6fcadd-1f7d-4434-93bd-b032f14d2d38", "sighting--9dca023a-cf2d-41d7-a171-11f215c0a5a7", "sighting--85dc9294-14c3-4ca4-a45e-2f810d38470e", "sighting--bb8799fe-9817-4c49-9367-b4a674ad25f2", "sighting--83d9af30-593d-4e0d-82f5-7f334adb6f4e", "sighting--4dbdab83-d11c-4c4a-ab4f-a551f7b17ed9", "sighting--8a89282f-2339-4685-a5f4-2b49ac80838a", "sighting--1694b3e1-b3de-4643-a396-bf6faf5229b7", "sighting--81ce8c43-0f89-469f-a2e2-8b0536530abd", "sighting--0eb433e1-bbbe-4a69-b91d-8df70eef61cb", "sighting--f9de7eda-dac4-49f6-93df-b0a6b3f24e2a", "sighting--1f1c1dd3-8b36-4bef-8257-c94b8643c2b4", "sighting--afc4494e-17c6-4cd4-95fc-a31b82a0b813", "sighting--643e6826-c7fc-402a-96c9-4db46b00f7d6", "sighting--57ce9e40-9d35-4251-a0d8-4131e9967b24", "sighting--c689b202-22c4-42a3-b8b3-79b920cc0bd4", "sighting--61b618a3-d521-4968-8f22-30bdc9f2ec1a", "sighting--85c66f19-4d8d-4d67-b70a-992165bc8d90", "sighting--b11745cb-fad7-418a-9436-c2035308f02e", "sighting--1721bcec-2ec9-4b15-b753-a900d5c19d8e", "sighting--67b0fc7d-60b6-46e5-8dbd-214f7cc94133", "sighting--5522cad0-dcf2-404a-9df2-34e07ef61401", "sighting--2c5837d7-6866-45cf-8848-551bdb25be84", "sighting--6de18ebf-8005-4c08-9b17-3682eb45a9f5", "sighting--b1e3aef1-1e37-4f50-a635-d13ab4ea655d", "sighting--4e932f63-e0e0-4ea0-9ed8-09bdf737d473", "sighting--ca9be3e8-16b0-4f23-a46f-4009e56d4287", "sighting--44c59a7f-ecd1-4182-b66e-96f4e9ab708c", "sighting--7563a1e7-3ef0-478a-b929-f09a35e59ba9", "sighting--cdcdfbff-1646-40b8-bd4a-8978dc877d51", "sighting--eb18b1c2-bfab-44e4-b5cc-b66772893475", "sighting--bff15ab5-a6fb-443e-986e-95c564ecc819", "sighting--1f001d31-0d4c-49da-a143-192925aace0d", "sighting--df3a6902-e772-4979-b3c0-b7885e8d3814", "sighting--bddd9a3b-8df2-4c31-b32e-a246588e7b5d", "sighting--7544c74a-910a-4d2e-b104-5b87fd30b7b1", "sighting--15d0afab-9079-42cc-90b1-71f8d3610171", "sighting--447391cb-2a67-4783-8390-177fd8fc19dd", "sighting--a7a70eb7-69d5-4889-ba92-a44f60dd8f6e", "sighting--cd5c661a-16ef-4d37-96eb-e15ed2f99e36", "sighting--fa68332e-3548-4d03-ae4c-2eef5162d1f4", "sighting--0899d7cf-3a57-40f6-af10-0e84d66000a4", "sighting--c2278b73-9149-4b1b-b23a-5968153ded0f", "sighting--739b8c49-a83b-4d82-824e-593139f129ff", "sighting--8066754a-6846-4835-b236-6fdde88fb534", "sighting--4c2bb2fb-3acc-4b7f-bdf8-2c1c94fb4c91", "sighting--cc9acd6a-23ea-4416-ad80-75fc6ed4b0e1", "sighting--b77984f5-5e7a-40c6-b06d-344036695eae", "sighting--1c17cfb5-21c8-4be9-aca0-91993678114e", "sighting--f6bead57-5a7f-41bd-9662-fb29186a0be3", "sighting--021bb8a3-8d7c-403c-8e72-fb5794c7a549", "sighting--56ba2813-5d9b-4b3a-b60e-8700ae7a301b", "sighting--4949edc3-490f-4be4-8380-22e3f66a8ed8", "sighting--a790a344-50a3-4481-9eaa-ea2aaa217a70", "sighting--37979302-8306-4431-8d58-cd4cf6150313", "sighting--55980f08-c28a-4728-8ba9-5a529115ae32", "sighting--4240454a-c642-4221-8a2d-fed3af1818ba", "sighting--fd2e5b12-996e-4ab2-b3d9-3ab5f73ae5ae", "sighting--58c26fb6-2e6e-422a-a43a-243e43f95a33", "sighting--59c56637-8b06-46cc-b47e-123c04eafea1", "sighting--596e38d0-3111-4f48-bd93-b6e5c6ae1c24", "sighting--1ef5faef-9e5c-4619-90c1-5147264b8658", "sighting--71253e9d-42da-48e1-bbd5-5fbaec562234", "sighting--a1049cf6-f5c8-49a4-bf20-40991ae945a9", "sighting--1ed4a74f-0501-4174-8511-1c835738c3b3", "sighting--12e87bbd-7bd5-4770-8cd6-8a0661623849", "sighting--3664bca3-7a4c-476f-8335-0623bdd00a30", "sighting--765846ce-4654-4ae0-9f9e-fa663b4240b6", "sighting--47abe92e-cd83-4c35-a753-c31318079f18", "sighting--8be692b3-4266-449f-8810-884298cc04c4", "sighting--ef3548b1-6d2f-423b-9fac-bf022b5da57c", "sighting--f16c5eeb-aa92-4d43-926b-050131e30c31", "sighting--9c97fc38-8837-4e4a-abba-6b94630acc0d", "sighting--bbad91f7-2544-48d9-9257-69c7426fb0f5", "sighting--dbec885b-0e7d-4c19-970e-0a70621bfcba", "sighting--41586f9b-70fb-43be-b187-462ffe6eed78", "sighting--0291a196-144d-4ff7-b557-9523b825e746", "sighting--75b454dd-a2f8-470d-8660-c327e95dc191", "sighting--ccf5a38b-63a6-4eb8-8cdc-015875126f6d", "sighting--dcfcc0eb-e5f0-4172-ae7a-6966c1f49e7a", "sighting--f565a40e-139c-459b-9330-3473719841c6", "sighting--f853eb3e-b8d5-4aad-9bd0-6f920333558a", "sighting--54e284a2-9ca7-47e5-bb9e-088ac1ea42c5", "sighting--cfb7f9a0-57bb-4dcc-b9a6-5886b66ef2a4", "sighting--1c028038-6b56-4672-a429-050177961c2a", "sighting--6fca0c19-2028-453e-b52a-80bb7b1c58fc", "sighting--89b08643-c1f3-4a48-9853-21d58105afca", "sighting--79e209c0-3fe3-4909-9c4a-fbea433d0b33", "sighting--f6d943dc-68f0-4c34-9fdb-de2e4cd65646", "sighting--c93b026e-ad9b-4d4a-8869-5dbc3db2ca56", "sighting--0aa49118-47a4-496c-bd0a-6587603e5bbb", "sighting--0a78cfba-d7d1-440d-bb44-648d07163197", "sighting--462f43c8-31c1-43ca-ab40-81b702b383a6", "sighting--120b0cc9-9716-4784-8a78-dd9a6aa35e1f", "sighting--0c71c077-9b8d-4fc9-95a6-c554146868cf", "sighting--4ed4f37a-0143-462e-a52f-b981e69071da", "sighting--a9377bf9-955e-44ba-8ca3-dd8f70e7da22", "sighting--fa5b9d19-3d04-46d4-bee5-a8eaad464f0a", "sighting--446ceada-239d-4f9b-9876-1078ca474819", "sighting--3b9a4514-67ad-40d7-898c-fcd7aae66980", "sighting--0904ff95-b241-44f7-b626-b3e678b3fe25", "sighting--56502023-655d-4125-b974-d21ef8c9ff3c", "sighting--7b92c01f-bebd-4223-86a6-4bce992463d4", "sighting--b2495581-4b5e-4e91-b5a6-dbfddc7903cf", "sighting--612cd072-9779-47d8-a0f6-2b53ebaacde4", "sighting--956efa98-533a-4957-a6f9-5ee24a50da43", "sighting--01dfc286-03f7-44fb-9cfe-3ae6e23cddf2", "sighting--88e250b8-8d68-41e6-b574-7893877ec294", "sighting--255dae38-fbfa-459f-9fb9-25954b41a2c3", "sighting--63be3398-7683-4bea-89b8-6f85239b9a2d", "sighting--78677f75-92cd-4847-805f-0755b9bb9965", "sighting--0e5d0bf7-5b16-4c6e-9251-0d7b34b626a0", "sighting--d5452703-148b-4ff7-b0a5-5d41a9a89a6d", "sighting--bc844263-b9c8-44e5-ba44-03da8276ae17", "sighting--72d04573-a8aa-46b9-a826-90aea5f291e4", "sighting--8837984e-f305-4268-a42a-f8f03a052ab3", "sighting--82a581c0-02c9-421b-b57f-c7fbab9a318d", "sighting--e44da5fe-fa7f-403f-a4d9-395be1839265", "sighting--ef03cbe0-3832-4793-8aab-ce09f348e3ce", "sighting--58f3be06-0529-4f87-93df-a3a04cef0862", "sighting--b871a85d-76e5-4b4e-8efc-e1b2bb4b46d8", "sighting--bf55286b-435a-467c-ae75-59f026e7b581", "sighting--7f2d64f2-ba10-42b7-86bd-879271206f02", "sighting--30f6a940-66a3-484b-bb6c-8dd74abc3d37", "sighting--d4db795e-197c-43f6-8556-28aa8dc08ae5", "sighting--8e893b21-5caa-479c-865b-3b91996cd229", "sighting--34557a86-8f4f-4cb2-94bf-024259b16bf7", "sighting--bf1e444d-0a35-4caf-88c3-fcc7e243b16b", "sighting--56be49d0-83f6-4216-9587-954f22c4af20", "sighting--f815e531-caa3-4f3d-98ae-93914c2c58d8", "sighting--74e5e971-398c-48a3-b3a3-0f2c9216add8", "sighting--87cb4df8-171d-4b53-ba92-50b67387612d", "sighting--c9b8bfdb-4169-4b50-8290-2f637cdbcc3b", "sighting--20b40d0d-3a02-4c83-bf58-3d196e39fc60", "sighting--a048a3cf-23f7-45a2-ac5c-407da9049ea0", "sighting--3564c5c0-37bf-437a-88ff-ba2781754914", "sighting--c90fdf30-bac2-49de-8eca-4f2861c1f370", "sighting--fd662d61-aab0-4626-bee9-f7f115a7040a", "sighting--d7b6ccba-af4f-4a19-972f-b7c5fcf5b70d", "sighting--537bb483-9c7c-41ef-b37e-c41db0f04347", "sighting--4f426cb3-c41f-4bf5-b610-0a3d4852fc1a", "sighting--d3e4002e-9a1e-4884-8ee2-8b30ef06f015", "sighting--4d559a1b-92ad-4294-94ce-ea3d7beea2e7", "sighting--62aa02df-9657-46b9-9b35-0b710b1bcea5", "sighting--9bb109a1-34e0-42f1-989e-bcb978be8e92", "sighting--a3d7245d-db0d-4ae2-b81f-b7a76252bf6a", "sighting--8591566e-fc97-4f52-9640-14994bb48d5c", "sighting--241fcec9-3484-4808-8788-cb08d4dc04cc", "sighting--076c59d7-541b-4777-a175-6ceb3b7166f6", "sighting--ea8db34c-ea66-4aa4-8bb2-5d1200050881", "sighting--ea9f7354-9a87-4095-9271-64b40971d3d1", "sighting--30f0a0c3-bef7-4489-b8c6-c519a41e4ca6", "sighting--719e135f-ffb5-49b7-90c3-f6a7ebb21e22", "sighting--6566c5ce-c129-44a4-a296-fa252dbbd5fc", "sighting--e73c7f8e-3fa6-4a14-a109-04072f265258", "sighting--e7d8092a-d0f1-44a1-882e-0345c4d3d143", "sighting--8ca3ede6-89c1-4c77-ba64-04da13ef85bc", "sighting--a57f5469-fed8-4998-bf95-4643e67ef14a", "sighting--2c98b523-8c09-4406-be6d-885cc0389824", "sighting--8c21f442-6d16-4427-8aab-c787d372f8c2", "sighting--e0d0b001-603b-4338-87f0-3a7b97138138", "sighting--6d3608fc-7dd5-40f0-bd8e-33b7088f4137", "sighting--1d21b0fd-a706-4252-abea-ca9de9fa61cd", "sighting--d7e355aa-c6d2-48be-b74d-c6fbd8af4951", "sighting--e7516f59-2b16-4bcf-9039-0c2d9ef3383b", "sighting--4d7e819f-7002-453f-a34a-dfa9365ac4ca", "sighting--53360460-0442-4af2-9c21-9cfdc1a858d7", "sighting--69eee09e-0e44-4813-8c22-37d90335add9", "sighting--fb67b35a-8ab7-4a94-be9d-2662ec44762e", "sighting--5ed69ff0-6256-45d0-80c6-7973c89d67b9", "sighting--6ec1b936-684b-4a78-99cd-2eac6733ad30", "sighting--974cf450-2996-4a78-8c6d-dc13d814ede7", "sighting--41acbe3f-283e-4ce4-ad34-eb6cf3f15f65", "sighting--5967a101-3680-4093-a7d7-f09e7db18494", "sighting--d40b46b7-86fb-4d45-867a-11d86d310219", "sighting--0a7031cb-8541-4e60-abfb-a52b5b29d262", "sighting--50f0fede-4889-4a8d-a4cf-7eecb3dd2aab", "sighting--a20ca0fd-b9cb-43c2-a60b-200129f51922", "sighting--d2792ef5-37d5-424e-a197-868b1d6cb445", "sighting--9f1f94f8-3282-481c-ab18-9fe77d291afd", "sighting--ddbb0e33-a407-407f-9ebd-e4b2b98f9bb8", "sighting--e0786657-1f88-4a77-91c3-4fb4ce4e3a34", "sighting--5d0053ae-2d2e-407a-b245-9fe3cd2ccaf0", "sighting--84d31898-715b-4a5b-98f4-7049eec30c36", "sighting--41ae468c-ca41-41c6-8c0c-722febb29cc3", "sighting--74e38478-eba8-4955-9f69-81055d0bcbca", "sighting--4fe1a329-41bc-4237-a768-ff1ef421f337", "sighting--1c5a9155-3bc1-4939-8f3d-54f8464bd643", "sighting--e1855ebc-cbda-4577-9a6d-66f0ad6fdbdb", "sighting--e90664bc-205f-4526-adbf-6dccb2333580", "sighting--b3b81e5c-f40b-4eba-8929-f7d0aa2c2d54", "sighting--fed9f294-7a4b-42f7-be94-5ffeb2df947e", "sighting--4947ded5-335a-4435-a53c-7820c85d6fcc", "sighting--9c579398-c613-41dc-8d85-f91315e300ac", "sighting--59453c82-82d8-4f53-870f-750b3dec16c7", "sighting--06b500a8-766c-46ac-b0ea-a9b6a9ac0bb9", "sighting--b6c15cd1-2677-4bb7-ad59-857e8d33e606", "sighting--548cbd26-10a9-4a14-b1a8-9f32169339a9", "sighting--f4e72687-cbf2-4858-bafd-b46b4d64a234", "sighting--274fcf62-3f6d-4365-bb3e-0651de39e826", "sighting--4c5d4d1b-aa37-4cab-b9bb-73efe20d5bdc", "sighting--f99fd840-0f98-428b-a12f-63af28eef099", "sighting--fa5f7035-e134-4408-babb-488df412b088", "sighting--a3605fbe-d192-44f7-b898-0a34f06c752d", "sighting--60e6e37b-661b-453c-9ba1-22262c5974a5", "sighting--9f9a6755-cd2b-437e-8496-f294ec99c6ca", "sighting--88301486-7b5e-4bee-a515-dab0323d0f49", "sighting--e9062cd2-0c1d-4a60-87f1-860985332c50", "sighting--17a3e355-9b25-4cba-bc19-af99e7ce931d", "sighting--a5d23f09-9351-4c29-9831-133ba5426893", "sighting--6ab62bf6-0f10-4dd1-b467-d39d4f90b75d", "sighting--702e6ff2-b87a-4830-ada6-cca25e78f45a", "sighting--905e021f-4960-48df-9d00-2824254457e5", "sighting--15f00582-780b-4c92-8873-714824fb9cd2", "sighting--5a0866d0-7084-4f22-ae3d-d62989492475", "sighting--7ea4217b-2f4a-462e-824c-6c837a662318", "sighting--aaf5bf7f-3489-4d45-9469-df2b8903d64a", "sighting--c02f6aa9-8868-45e8-8d5d-0c1be6de0aee", "sighting--1da57cf6-8de0-45a1-b62e-68942bc6ec19", "sighting--90ef3668-63df-4d90-9777-ce9c61f2ffc5", "sighting--4b4d4799-472b-4a66-9997-0fa60e59ff60", "sighting--5683f5f9-2605-4a12-8033-c16068176b62", "sighting--0ff04eb4-c946-462a-aa89-46d220dbda72", "sighting--9b07003f-a704-4829-a170-d30f2f6814eb", "sighting--b6a36880-f50c-4257-bd78-035255f76cc3", "sighting--46c85a9b-5632-4baf-8eb3-47defb1501ac", "sighting--4c871f4f-3cf4-4777-8dfc-5e2635fff8ae", "sighting--3dfd13c7-a725-48d8-9134-eb267ba74e41", "sighting--49c0d1af-5a17-4266-81ec-429dce1e9b78", "sighting--779891e0-7f26-492f-b81a-550ef785693e", "sighting--d50f9e97-e052-4e78-a19a-16f6d536a0ae", "sighting--d24ed53a-51fc-4c80-8750-37b41185e8ec", "sighting--70a3f9a1-1120-4613-b5d3-e43d2c0ea84d", "sighting--b8118f47-4b75-4b1e-aed5-0dc094eb49b6", "sighting--c7c8f9a1-cdf8-4a2c-a1b2-3c688ced6fdd", "sighting--8241588d-5f43-447b-aa2f-c598db147bc8", "sighting--57f4a3e8-089c-4cbb-82db-7aa95bad74a1", "sighting--e1b8bf5a-cca2-4c1a-a4a5-098dc7f4e519", "sighting--fc058073-29e2-4d05-b8bb-4893e094dba4", "sighting--b5e9e280-0a8a-4aef-b2e8-0f352c8b19a5", "sighting--e8779065-8acc-40cd-85dc-8c41685cbe39", "sighting--e94e6c87-72b9-4704-a4eb-fd8777925e30", "sighting--f5023246-c813-459a-8b6a-a12e425bb238", "sighting--93bbd70c-863f-4c0a-bdbb-78115687a823", "sighting--396e9f1c-6fb5-427f-8710-662ab1a989a3", "sighting--6afeeca1-eee8-48b5-bd64-a0056f7716b0", "sighting--5a112607-85e0-4fbd-a10c-87a243e10eb3", "sighting--655c64b4-3a0b-4ce0-8d54-544e56f8b8de", "sighting--15a0ff03-6269-4a60-b3a2-b627d834b0ea", "sighting--f3365b10-756f-4251-9b79-270899297a19", "sighting--644ff7d3-1cf8-4a13-96e7-620b9705e519", "sighting--31d2e0fa-5e89-4d9e-814a-689ff4e80542", "sighting--409ba742-40aa-4e25-8b5b-9e9317bc146f", "sighting--279c7b14-f87b-4eb6-90cd-95e70e11d5cf", "sighting--5ae42455-49b8-482c-ac58-2d80b12ae1a5", "sighting--5f15cf6a-3533-4315-a879-dc82f261c4b2", "sighting--4a428f64-446a-45b7-b419-cb2e3cd6c99b", "sighting--5b781cf3-a659-467b-bfc0-3d8557157258", "sighting--f32454ba-a87f-4788-bb93-0c94a8c012c9", "sighting--08490bc1-2b8b-4b10-a253-af9131d96766", "sighting--41e26af5-2a2d-47eb-8f07-107340ad8549", "sighting--2df34f5a-d95f-4324-95e1-6b340ff596dc", "sighting--8eaa2a41-b0ad-4860-9111-b24199401c34", "sighting--5f4f2331-2afe-4b8c-a591-e99d60d83e63", "sighting--49e9edbc-1dfc-4378-9fa4-d2799232efbd", "sighting--cc493493-cd81-4475-bf5f-ba209c2acc5e", "sighting--7023d334-4d89-499c-bbcb-a2add32890b2", "sighting--82dd2f2e-93d9-49a3-b9d1-23e6802bc87d", "sighting--c95ea64a-e512-482e-b95f-861159f7b3ca", "sighting--721a035f-02ca-4fd9-9bf0-b914f579bd09", "sighting--6d08a2c7-b2db-4142-8230-84cfabed2bda", "sighting--8b9b9419-4fc2-4aa6-97e6-38ae7beae4be", "sighting--2ae85000-9f4e-41e6-b91b-50fa5ef56c19", "sighting--60f8c1d1-1b8e-4780-bbc1-92faaceb2b60", "sighting--dd153f6b-f26d-4cd6-94dc-6fe6da1bd919", "sighting--d35d126b-63d4-4de9-a116-60e334a7ef9c", "sighting--7dbe01e5-3e2d-466b-bc10-e09b23ca4b55", "sighting--67915102-b8db-43e8-9afc-c7e33385eca4", "sighting--826db6fd-ad6d-49aa-9c26-ecd275df2c69", "sighting--8b133a2e-5e85-400a-9a5b-26a6d5c29c9e", "sighting--6f7a40c9-b82b-4f2b-a7b4-2fb60b594fdf", "sighting--a219297f-7bac-4f2d-8305-7efc4111e865", "sighting--d5a6a4af-a4ce-4493-959c-5e390456e5d7", "sighting--50af109f-ca5e-4dc8-ad3e-609e865b4109", "sighting--bb16dc58-6c51-4a56-b41c-700b5d67771a", "sighting--3aef9f35-757e-40c5-b7ee-eede94f3e4d9", "sighting--26bc5f13-182f-4636-be63-51ee7e3e73d0", "sighting--edaaedc6-fc80-4fa7-bf07-3ba226756f7e", "sighting--aaee977b-95f1-4b9e-ab8f-fccb550b1df7", "sighting--9831c132-eacd-44f5-88fc-77ad0f4f175a", "sighting--a2f1bf4a-4387-4471-8831-fa1109fadfd4", "sighting--e8e05bed-b27d-49e2-9a4e-c11212b0f259", "sighting--814a882d-8e26-45e5-a4b2-8bf7395e2e1b", "sighting--9c592c6b-ccb4-43a7-ad18-76ae619edf34", "sighting--82c4df85-021c-40b1-9b93-0c6da752ed9e", "sighting--bac9227b-464a-4da6-a2e7-ec4028081753", "sighting--66154da9-23e2-4b22-bf89-9ed1b86a4b60", "sighting--dc19266f-5d5a-40c6-b9f1-adcf2564c50a", "sighting--f9ee78db-50e4-4aa5-88bf-4905c007a185", "sighting--97e58a67-c747-4e8e-a94c-5e7a50b6a7bd", "sighting--905896df-707d-4c2c-a142-9e673e415092", "sighting--7e9c7af2-b724-4a5f-b421-70725bfc3517", "sighting--c63f5826-1ef9-4939-98f7-2d1376d927a6", "sighting--c5ca4411-fc21-4626-82a0-a2f47b761d0f", "sighting--6c692a36-c1ed-4925-8a07-d45bfa0ea452", "sighting--3314e32b-2c84-492c-8377-a60e7b729148", "sighting--846321cf-b3ab-4dee-9e04-237112eb077a", "sighting--897947cf-318d-4c65-98a5-f4c00842ac10", "sighting--0a99035d-70ef-450a-a3cf-e004c9b8300d", "sighting--e2ea08fb-1591-4b7f-910b-f9f9618ba752", "sighting--5e2fb6d3-8cfe-48ca-9dd1-aede54420ee6", "sighting--27a5dac3-58da-4164-9be1-134a8a85dd5a", "sighting--fa9f0b78-310d-4ff8-bf23-dcc433b40078", "sighting--d2fbfabd-1e55-4eef-a0e3-c020342ed023", "sighting--8027364b-d7d0-4d53-8bda-2eeba32b3d9c", "sighting--b071b84a-b3d9-4a9b-b259-3a10e78da81d", "sighting--8e6eff1a-c2da-4ca3-b2eb-47e1298bcbc4", "sighting--26dcc30b-ee26-4ebb-927c-d2bf45ed5ea7", "sighting--139d3c87-6fe9-48d1-9aad-b455114884d1", "sighting--cfe28a57-13c6-4180-9b98-3f14058cd2f8", "sighting--06693d38-fa19-46eb-8593-f34ee5f3a6ff", "sighting--74fa13bb-cb18-4058-84c3-b33b1b5a55d4", "sighting--70c98373-a64c-4487-8298-8871796d91a7", "sighting--ab450fad-88f6-4146-a346-f1b78a96f8ca", "sighting--9579812a-e1ed-4fc5-a196-be5176c60f28", "sighting--16a19e10-bc04-400b-ba00-eaab3743f0fd", "sighting--be8ab661-419f-4785-91f2-c1897211b439", "sighting--21437ca4-7dba-43cd-9db9-cbc531966690", "sighting--f9007923-c95d-4bea-b754-ad923d544eef", "sighting--39afeaa8-cf9d-44e5-83f5-12bae697c2ab", "sighting--15a5284f-7d07-45e2-977b-ac280745e1a2", "sighting--41ef3447-d09d-4707-9ce5-fb12570856a6", "sighting--8aaa219e-4ef9-4dc4-9102-90ad28061518", "sighting--2ec71024-4ea0-43b2-ab01-2e941f291184", "sighting--94b41624-c6ac-4c9f-8696-cb47a8e8cac6", "sighting--e40bddd6-1245-4987-9487-c2b77245ea4b", "sighting--bc00b369-eb68-4be8-9dce-ff6dbd304ff1", "sighting--eea7f3b7-21ee-47db-a30a-6b22b6cde2b1", "sighting--bc335365-d01a-46c9-aeb4-1d1dbe339393", "sighting--41c75392-7168-4a2b-a230-a1b60a4af971", "sighting--0d4e9a61-892e-4492-a640-45f3636b7e68", "sighting--bb23055e-0579-4764-8266-a6ea61107cb2", "sighting--6e2b911c-3d44-4073-9ff8-d77a47873a34", "sighting--7db8542c-50f1-4b94-a1c4-280eaf05331e", "sighting--82642ca3-30f2-4762-9d88-4ef80ec24476", "sighting--85cf47e9-7320-418c-a5f5-a72b6e7a489c", "sighting--dbd02678-d46e-4209-9883-bf0eeb0280ed", "sighting--fd2e0d0d-6989-45ba-aae7-298c510fd1ab", "sighting--d9f626b9-1515-44b5-a2a8-a2a4dc034d3e", "sighting--d2da9d11-1b35-4a8c-a6b3-c25cd1b09014", "sighting--7743314a-e3b9-4912-a9cf-02b3685c6ebd", "sighting--912d1066-f023-4fcb-9369-58fc2b28b56d", "sighting--2fa9f4c0-36ee-4b30-aba7-321f01fde13f", "sighting--32d13731-bde7-4e8c-9951-a67f091f44f5", "sighting--e2d59c38-ba48-4602-adf7-e6cabbcc1d88", "sighting--878ceeff-da3b-44d9-a135-035ae9c5c7ff", "sighting--4635aa8c-3f5b-453f-9385-53acb63d19e3", "sighting--b7aaadb2-f6df-4e6c-a912-60dfdcf75e9b", "sighting--9130819d-9f74-4a70-b393-b03056722295", "sighting--6827150f-ed0b-4c98-8aa6-113851c52190", "sighting--8fe281d5-c604-4474-b506-9e0d8a849262", "sighting--f223d8d8-e68e-4e6b-88e1-7ef044bb3604", "sighting--69a545a7-7e76-4525-91e3-533091369ac9", "sighting--c13f9e78-d227-463f-af69-29a2c836c4e0", "sighting--f37e2cbb-bcb6-4686-be54-a4e39b977aec", "sighting--86fcc1c8-5d07-468b-8c8f-12cbaf2b5ecc", "sighting--540d5c65-2dc0-4b96-8d32-6626eee4276b", "sighting--c8a0b8e3-104b-4fcb-99ca-213577e26826", "sighting--2d17fbb1-713f-4837-b93b-aa329d3e5d6e", "sighting--4ebea17b-3ba5-4127-858f-0256e1b9e88c", "sighting--3d135a54-f4cb-493f-8ba4-b4f834c3cc11", "sighting--97a7bdf0-3cdb-4970-a986-cad4dcf963d9", "sighting--bef085b1-bb2a-4882-83f1-d6287b77f974", "sighting--275206c8-338e-44bd-a40e-ac67b27c8376", "sighting--8a93d11f-8f6a-4440-9ce7-0f69387b1b47", "sighting--8bce8263-ce45-4790-b44b-d6121185a143", "sighting--d5963297-8eb5-47d2-b2b2-098dd17b665e", "sighting--f4295e35-a1e7-49e6-9334-b83c50997eb7", "sighting--b454df2b-4991-46e8-ba6e-8da3fbb5ec65", "sighting--7b1a3d63-84b1-4fb7-945d-d8e148d74907", "sighting--4fe32bc9-c897-4630-aacc-add6bf14361a", "sighting--055d4b4c-deb6-449a-9497-cde9fc0fed2c", "sighting--15ed9024-15c6-45e6-abd2-05960d57c844", "sighting--91fab0c5-75b7-4d0b-9ec0-6cd56c7a900a", "sighting--8ad4ab03-dd82-4d92-8fd6-bab03ad94b10", "sighting--f90d183f-314a-4d01-85ad-24c51a55e3f8", "sighting--5c4a594b-0d69-40be-b589-bd93927c37f5", "sighting--b42c7acb-66e8-40f0-963a-0ffbd38bdc6f", "sighting--2625aaa0-4c1d-4dee-ae42-612eaf1f7018", "sighting--c3b603f5-25f2-4f7a-904f-9ac803b942cc", "sighting--d603875a-c6b9-49e8-abe5-751f691a760f", "sighting--aaa5f742-2884-42c0-b6ae-c4d8aedb60d5", "sighting--36595d4f-8079-4a9e-ac01-8b395d6ad97a", "sighting--da11c1ef-b401-460c-9db7-18607598b40d", "sighting--e1dd9acb-ea10-4ca0-a264-0cc862f11ae3", "sighting--d8063b45-d48b-4934-be9b-a5f545ae8900", "sighting--4ff9771d-b40b-4072-8eee-99534ad46145", "sighting--ba9bf811-ebdc-4f3e-92f5-f9f18dacc9b1", "sighting--b731f539-4457-47ee-a2a7-a6c1e91dbf47", "sighting--63b7f500-404a-40e2-b517-92856c2017d3", "sighting--ed6656e5-ce45-4d2c-95a8-5793a50f33cb", "sighting--923c3f38-7e25-4dac-951b-f11e616a0a30", "sighting--5c0819bf-51db-4e88-af87-b37e35d0f84a", "sighting--a896b5c5-a5b2-47c8-909c-86a3a79b371c", "sighting--7a278b45-2a04-4c8c-b222-ce9f4cac9f67", "sighting--251ef3b1-c8f4-4fbd-86aa-0e6f55b171e9", "sighting--df17d73b-f563-46f5-8a5e-8f97d4201f11", "sighting--67328185-1ae5-4182-81fe-5245e8ba8239", "sighting--a42a9d3f-9ac1-4361-b3d1-246277433267", "sighting--98e4ea86-c474-488c-bfc9-e0a9c8a45fe5", "sighting--b4947448-08e7-4e5a-9b38-9595b3029c18", "sighting--513b9822-cc93-4abd-a358-91e783221af6", "sighting--3f18ab2a-e028-4f37-af0a-9b389fca0c0d", "sighting--77168d0a-3137-4407-ada8-d7c777e7f3d8", "sighting--4f9e0760-320d-4695-ac18-528585b65b79", "sighting--c662b696-f84c-44a9-8c79-653d4e79ff51", "sighting--33ac7de2-3a98-4b39-a28b-bb61e7c31f7e", "sighting--a7f5f138-3bf9-43c7-ab3a-178ef6894f8d", "sighting--460134ad-511d-4487-9d23-f75291771f08", "sighting--b939f958-ba1b-43b2-b2d9-6aaf28857a56", "sighting--e7ac907e-efb7-408d-a1dd-a5e445362859", "sighting--e4a3c558-ad52-429b-ada4-59531521dcde", "sighting--c75142d6-9257-4510-b994-4255be7a0935", "sighting--624163c5-9cfa-46f3-8928-714f9f8b5e6b", "sighting--41573de5-dae9-4330-ba36-5b3bed4defa0", "sighting--c49be980-8524-40ed-9d1e-b7462e6e6bd0", "sighting--b0d56892-b21f-4c93-a0ff-74c1f82c2f9b", "sighting--64fff6a7-846b-443d-bc87-c61b4b66abe1", "sighting--3c38425a-17fb-4eda-92a7-33fb79eaee91", "sighting--8d206f88-e208-4210-b21d-8bc92ad1d128", "sighting--5bb2ef93-cd8a-4a20-99b4-be1899502dd9", "sighting--a3a2a162-20b9-4f13-95e7-b65d88676e99", "sighting--eca76f4c-d72d-4b6f-92ac-1ed7e0dbf7d8", "sighting--118aa99e-1a14-4b47-99de-b6595310f6d7", "sighting--2c7f4c00-ddea-49ed-8361-a5169d930dca", "sighting--705c343f-38be-4dd1-9b64-fcfcfa0fe3d9", "sighting--af79cba9-1de2-4919-8140-cac080da8b98", "sighting--824fb70c-90bd-4e98-a519-749c1df8b5d1", "sighting--4ee0bf2d-b746-43ae-893e-67221cc0b4b7", "sighting--4caea7dc-43ac-4f0f-88c8-57ee8c6539e8", "sighting--604c6ee6-8644-4e53-aaa4-37c2eb12602a", "sighting--dedcfed8-920d-4754-8ac5-adce09ae4912", "sighting--0c6a3221-5aeb-4d38-846b-d7617108b5ac", "sighting--683ff413-49e1-42eb-9380-3516b49ee4ba", "sighting--53388c1d-76a5-4375-9976-c5e412a89651", "sighting--da41f690-a269-41ab-8162-c847fd44ade6", "sighting--ce401e94-7e46-4706-a041-2a946080c995", "sighting--b5d2acf4-16d9-442a-8b71-fb49576f1af8", "sighting--5a016070-8f54-4c4a-9074-75cf8e403ae7", "sighting--e544c006-02f8-4d27-afd2-29188b52cb51", "sighting--04f14de8-fca2-4a16-8e2c-1352084cbc45", "sighting--e00065c7-3895-436a-a50f-7a1fb7747c6b", "sighting--70967240-40a0-4c27-a5fb-6fbc7e72f5e6", "sighting--5e2d8c4c-a8b6-4dbe-825e-971350d89494", "sighting--e2a44706-34a9-4813-90ff-2b23603c8e31", "sighting--72b459e1-95d0-4f80-9554-7fe8ea887995", "sighting--87e4c609-8505-41bf-9633-4e22150084b7", "sighting--8a120fb1-ee27-4d9c-9a9d-0daaec235562", "sighting--e875bea4-7885-4e29-9b07-e5580f9f5821", "sighting--049e19e6-6835-4e39-b029-2be02ff9280a", "sighting--1754e4dd-da9b-4cf0-9fee-634c20f94dc6", "sighting--53a24728-9d06-45e9-8b42-6eea90ba1396", "sighting--2ca3f873-5150-4bee-9224-564b01460d28", "sighting--79605885-c20e-4026-beae-3cc065022978", "sighting--e095111f-758f-49b1-9aae-be5e3d8f6b68", "sighting--617f3d02-d532-4b52-b24e-a912d06e3672", "sighting--95cb8004-4bfb-4887-9492-18a1ea6d6be9", "sighting--ed806256-30df-45fc-b967-4f84336025d8", "sighting--a864cacf-b94b-4f4f-8327-ba0c12c0cbe6", "sighting--20dc6773-6e70-46a7-8664-d520874297b3", "sighting--626514d6-33c6-4d80-8e81-264f0138e686", "sighting--275eaf70-4fd6-4c94-9165-e060b0ad4a39", "sighting--1687b3af-8fe3-4d89-82b9-b969f6d10957", "sighting--a9db1b51-8c2c-495e-ba9a-ed82851c3bd5", "sighting--7874ed90-33b7-484e-9dba-95eae3681630", "sighting--abc70234-b62e-4f3e-a58a-6b5a7d681e80", "sighting--14c4e519-6cc0-4147-b515-9f4b78983af6", "sighting--cb71c8b8-81ea-4137-8834-d97b818767ca", "sighting--1889c2c8-cc05-482e-8cd2-13c6d9d10239", "sighting--3c05cf03-b62d-4a2d-bccc-2ab248d6360f", "sighting--bb3ae08c-0b12-4baa-9342-2d6bda7e2c45", "sighting--4b062573-7fbb-4614-a83f-68ba47b6722b", "sighting--08c86a83-4ba3-4cae-8092-a6eb81e931ff", "sighting--58398be7-dd04-4660-8336-2fd457656592", "sighting--35d83fc3-ce83-4179-89ec-444d7440d7c1", "sighting--5c5abe60-62e6-4e94-b7f7-b33fe355a023", "sighting--b31a813b-230a-4f62-af23-b25572527b79", "sighting--0775ee06-3880-4dd0-8ad7-699ac08cbfd1", "sighting--5127376a-2c01-4e1a-b9a5-594260ac3873", "sighting--0d7ef0df-d2e8-4908-a26c-d520b563e7f1", "sighting--193c5191-0541-41c7-bbad-574521552e6b", "sighting--643f5475-f418-43c8-a677-2e5adb69e1ec", "sighting--e89660aa-56e8-400f-936b-5a28b1d819a8", "sighting--106933b0-4f5c-49c1-9351-a798f5d7584a", "sighting--1131b0ea-61a1-44fd-875c-2355fb92ff3b", "sighting--9fa3b5f0-5032-4453-8e61-2ef03199cf12", "sighting--f107511c-478a-42c0-a6bf-3fd64fd85faf", "sighting--471b5eb1-bab4-4605-84c1-79285483e180", "sighting--44938d64-62a0-42b9-a3a0-b8b219341035", "sighting--14d5d1f3-c649-4853-a992-7e4bde0590a1", "sighting--43f492d8-3ca2-4871-9d49-af6a3a61474e", "sighting--c5672a62-b526-46c9-b522-0420bfec39ee", "sighting--1df963c8-e04e-4eae-8ee8-6aeb00b11e0b", "sighting--a6a827a0-f882-49cb-9972-bf94ef96d3db", "sighting--58a348e4-cdcf-4120-9790-4b899789284c", "sighting--465b76b9-1a56-4c3e-b368-3fc8a16eda9d", "sighting--13076f58-af52-4e4a-bda6-7ddcb8f09d43", "sighting--5ecf74bf-2e5d-4889-88e4-97732dfade6e", "sighting--e0d86944-36f9-488f-b277-8fc4c9bb7426", "sighting--2907d4ec-c206-426d-b303-b045ee64e447", "sighting--3bf60e0b-640e-4a3e-a507-07bc404df7e2", "sighting--30a21502-0860-453b-b087-389154433699", "sighting--2ee5c05a-249b-4703-91f3-0badaa2cb4bf", "sighting--a427e5c9-94fc-4246-a5bb-0f8c04b882b8", "sighting--7f53943e-74dd-4bcc-9c94-eb6c83674bc5", "sighting--b8cbc51c-ab8c-465e-a511-d630000d3dd5", "sighting--4c0a1a82-3bb8-4c27-aee7-bc5350feb548", "sighting--b9200f25-f252-43ea-964a-d8062c5bf182", "sighting--fc59f1a1-b4d2-4c04-982a-7bab76c8363e", "sighting--0bfae29c-491d-410f-bd3e-6e96a879dd86", "sighting--1d7f89ae-ee37-4ec2-92cd-0c7dcfc20bc1", "sighting--5ead4985-5301-4b8d-ba69-75e75828fc2d", "sighting--f0fcfbd1-6975-4de6-88b0-ea4a2e3b2838", "sighting--46ac97df-91f2-48cb-b0f3-8b0baefed067", "sighting--b157ec6e-84b2-4d8e-b7bf-ef164a52a29b", "sighting--7fcf3b51-2109-4e18-bf92-3d55438d0c35", "sighting--774002e9-6f14-4e86-b631-e34c7d4c7b64", "sighting--2624c4c8-6503-4b66-98c3-c23618d9a908", "sighting--0d0a6c47-e1ab-4c72-b9a4-697c0943309b", "sighting--3b63d606-980d-4bdb-a721-cb016cdf6b8a", "sighting--7b132fce-22d4-4cd6-9694-1ebce95a4c0c", "sighting--68e95af9-5236-437a-84e5-f60b5c48566a", "sighting--0943317c-3b22-45c4-91cf-2ae626b291a2", "sighting--578997a8-5d82-45ec-af2a-025cd475e217", "sighting--d14d3d8a-1502-48eb-9437-1436340b44b9", "sighting--6d1beb82-3a1b-4055-a0bc-6d2c31b8f4dd", "sighting--73da1b6e-0178-4c9f-852c-2621e1db83ab", "sighting--5e87c53d-4dc7-4e38-923e-2f49cb5e3447", "sighting--6433a509-a7dd-4b99-8699-a9ea83f2076f", "sighting--857a79d7-e5c4-4de7-935c-c44c01538e90", "sighting--df9680a2-4d59-4a7d-8a43-8b756526ec74", "sighting--fccd0e0f-c1ea-4a78-9f78-6cce5f79dbdc", "sighting--d5efdd5c-8834-49b3-8816-babe9c372ebd", "sighting--825b9f21-8fee-49dc-bc92-c3b3acdcfcb3", "sighting--952dad49-ad54-4ac7-a561-a6550318b5eb", "sighting--b1df72fb-7ec3-49f7-826e-fc1ed62a8f35", "sighting--86fa92c4-7ec0-48b4-a0e1-6b2652483d14", "sighting--0dc3c6c7-9adc-4d83-a921-7b65d53d215b", "sighting--89189f6d-2304-4587-aef8-0219ef4cef5f", "sighting--b4fb8b35-cb30-4c81-aaf7-2cb5bad0935a", "sighting--cdfd749a-ebc3-4b60-bc0a-54ea2cf1da3b", "sighting--368e18d1-5e23-4037-8c06-e32052f81edf", "sighting--8e854469-adfe-4ffe-9101-378bc31b3267", "sighting--9a3a3cd4-cc40-4a72-a75e-5c69c83e5fda", "sighting--570d8234-9844-436b-a726-ba968694cd44", "sighting--0d7e138e-3b9c-4f09-90cf-66f2b1400095", "sighting--458570af-9e58-4fb7-a05a-47071e8f697c", "sighting--53d486e1-849d-446a-8a31-e1b131283f3c", "sighting--1f7ff331-9686-4a94-be9e-226aad1481ae", "sighting--2374a08a-5c59-44bb-a091-f30df8b32eda", "sighting--b9f39e21-7086-41fd-938d-c133563203fd", "sighting--95f37afc-469b-4b16-95fb-7b70a87703cf", "sighting--8620b051-c78b-40e4-9469-02c66125b863", "sighting--fe859aae-6768-44ef-bff6-148e6b8360a9", "sighting--f3f62c0f-2019-4561-9804-e1854f7150a9", "sighting--2f8801ad-ebe6-4294-92c4-8bb8576207a7", "sighting--df9e356c-1be0-4ef6-a8fc-55c8d78fec7e", "sighting--44443270-b311-4c53-b092-c165d711b6c9", "sighting--e6e7bbe6-8a6b-4f3e-a7df-0938e82b99b8", "sighting--0d643a77-914a-499f-a7e1-c2d488760ee9", "sighting--fb14571b-27c5-485b-a598-8dd7613c1dbd", "sighting--85cc148d-89f2-462c-b3e1-9c883131af7a", "sighting--5302654a-d295-4758-85f7-419979dccf83", "sighting--601c163f-64fa-46ac-9e9e-1f48928c75d7", "sighting--d280a0b2-4a50-432a-bc2c-228214e9f42b", "sighting--e3a55a95-2759-44ae-88aa-34db8e982dcf", "sighting--8e503cb7-dcc1-414c-a4a5-945a9e281487", "sighting--1cfd6414-0eb9-42a3-a77f-7565890410e9", "sighting--8c0e85fe-615b-44e7-8b76-ab4bbc95ab0e", "sighting--2d6c2281-52b4-4406-b282-84b62851c1a5", "sighting--371a171d-d8fc-447e-a704-58b8fab853ef", "sighting--65dccf72-5287-46f5-931d-7447301faf96", "sighting--8e355437-0f2e-4aa5-9831-ad33b91f35a6", "sighting--a4c45405-4a6f-4e0a-ae61-4913a47c609f", "sighting--8c108bd5-6d2e-483a-af57-aa8c8e54ef9b", "sighting--130da9c4-e7d0-4583-b5e7-e77047ab99ff", "sighting--1d2485da-d151-460b-947b-0233dd2d2f56", "sighting--50da9933-1289-4723-ab90-537acc1bc1be", "sighting--c9da75a1-da5d-45f2-bd0f-2e920ed0ff68", "sighting--bcbb9e88-6215-4725-9483-fd1c807a2a01", "sighting--38591073-f980-4e1c-98d8-1c0363f4fb4c", "sighting--d1b55230-4586-44c3-8099-72aac569335f", "sighting--1377e31f-0d30-41a7-9884-cd8b376ae464", "sighting--4544d7f6-23ca-4873-964c-d34fed7ac23a", "sighting--f8405197-14ba-4513-ada8-b2c8da46ab64", "sighting--9fe89baa-e0b1-4be4-aedc-b518528a60b4", "sighting--51053eed-61d5-4199-96d4-a709822cc034", "sighting--21e75fa6-4768-4644-824d-05d60d716a50", "sighting--31b1b6f5-2af7-4042-978e-816fbdaaba53", "sighting--e4e5314c-f4d4-44bb-8e84-dc4db18ad0e0", "sighting--29c39693-e101-409e-89c8-cc0d3ff54fe5", "sighting--71645fa0-d06a-4114-b750-ccdbb29c6118", "sighting--c47fc98b-2f36-4e2a-a7b4-a6480b2a0f20", "sighting--2b741c3c-741a-4af6-b871-dc927c460925", "sighting--b4f7323f-af73-4fd1-ae13-c9e77dfc0c4b", "sighting--c6c7a38a-7b8a-4bb4-88c4-564d56d78ecf", "sighting--75315065-5989-4bf5-89e4-d009f0a79b2c", "sighting--3ff528e3-14c9-48f4-b721-cf38c62b7d3d", "sighting--854a7a7e-4290-4a81-acaa-b382cda535d8", "sighting--c6639fd9-05ce-4662-8f07-273939004af8", "sighting--51e5834f-83c1-48ad-b7f5-bc4a6b2f74a9", "sighting--4d1d7720-4dab-4fe8-8c6a-5e0b70ebe6c4", "sighting--6a432056-efc0-4c78-8c97-e560bad4569b", "sighting--9cccf281-19e5-48ac-8b1a-bf1c715abdd1", "sighting--c8958902-1df7-470c-98b9-678335bc9b8f", "sighting--32b2f672-2b26-4fcd-b8f4-5285bc82e8df", "sighting--1d4e265a-7f9d-42b2-9596-83e10f4a3228", "sighting--dadb7c88-9bdd-4155-9ce2-7894607aef25", "sighting--7efd40bb-5b84-463d-b22a-8034b1beb5ef", "sighting--26dac5ed-5cf1-4fb3-9dc0-61b7db47c0ff", "sighting--4f1c71c1-514b-4408-85b3-eda8838e07e6", "sighting--6d3a99b8-c083-443d-a228-c05c497ca185", "sighting--cac07a67-d8c6-4958-92a8-ffa8605ae494", "sighting--772784a3-cb11-4cfd-bba4-8f9e9b241d3e", "sighting--dfd33c90-0ee8-4afc-bc2e-7196a9df99ed", "sighting--15e97eb7-b780-4ef0-8485-e3131a708394", "sighting--b0070d0f-2ba1-4b55-975a-4c2c5b727595", "sighting--eb5a002a-181d-42ad-bb0f-5d192f041842", "sighting--40ca8a27-833f-4b3a-b455-ee483862c167", "sighting--96a0dc35-b2eb-485b-9997-66a40f331217", "sighting--d62e9b16-c776-42af-84ee-b592b8f4fd59", "sighting--e2bf5101-c463-4d28-928c-8e4322f6005f", "sighting--310ba756-f811-4e3c-856b-00c00aa61a68", "sighting--b106ed1f-9bea-4edb-973a-8cf5a2efb537", "sighting--2be177c0-5650-48f2-9a5e-12d4c3875a67", "sighting--24610bdc-58d5-499b-a95d-33e3895a9df4", "sighting--f2ecbf33-e704-4c88-82df-e8bfba084ec0", "sighting--114d98d3-746e-4513-bf94-54b68d6604df", "sighting--cbaecd5d-29b1-4a99-be19-1da65ad72f4a", "sighting--c016144c-dbac-4372-95ac-3b35cc1244d8", "sighting--8f4734e2-8b1b-4ced-bf90-b6cb3a0a5247", "sighting--74547d4f-95bd-4ad1-a0b3-150e99fae4ef", "sighting--bcc7438e-bc26-4cd9-a09c-019018699a4f", "sighting--74714a7e-972d-4144-832c-5b27c885035d", "sighting--3f1118a1-e727-4baa-85d9-daac9f3bdda8", "sighting--39d9db05-c674-49d5-8cc3-88ebefcb4a24", "sighting--520cbb89-ddae-487a-b162-a027d14f9a02", "sighting--7628f802-369c-4e12-aefb-33e6502ba84b", "sighting--5f9f440c-79ea-436b-bf88-a171878aede5", "sighting--747f877c-d4fc-437e-bbab-3b186cd9a0f9", "sighting--f4c90789-ce8d-411d-b45d-14ca7d071c0c", "sighting--6606d4d0-8b68-4614-861e-225d7c207802", "sighting--bbad67ad-c5b0-43ee-9d5b-83e560948965", "sighting--c5d465f4-10f5-48fa-a640-19db3e88e8f7", "sighting--0451953c-17f6-4d07-b6d7-707cd8a771b5", "sighting--3250b61e-fa48-496c-8518-874a91dab945", "sighting--cb4fdf6b-327e-427c-aed7-8bf644d4b1ef", "sighting--581c38ef-3a9a-48b7-8b1e-d8aaeab7a585", "sighting--d4cd5873-b725-48ac-8223-a9a2bdcbe5ea", "sighting--91428a76-c49e-4edb-a22e-f8c27498314d", "sighting--f6651b43-5702-4ca7-9ece-452c6355656b", "sighting--333a48c1-f13d-49b9-9ef2-38f803c38de2", "sighting--e0f1e64f-1f89-4cd4-969c-1b5ff7c823b6", "sighting--226c9a1f-b1f4-40bf-a707-a51019fe13d0", "sighting--6dd71d65-5eb8-42d5-a33f-fbae100fda73", "sighting--8f00505f-2931-4291-9541-1d2f60753e10", "sighting--2d92499c-1fce-4ccb-860d-3fc0b88ce720", "sighting--d5c67145-8403-487e-b396-b5464c1bf683", "sighting--f191270a-38a6-48d4-8afa-6fecae815eb0", "sighting--9e1346b1-c916-4ea4-bb8a-7bf04d0113fc", "sighting--0c9b5ee1-f3d1-4562-b90d-4758fa00cc8e", "sighting--70847583-3394-4eba-8312-818576b89ff8", "sighting--7e79e168-65ff-4785-86d3-5bdd3e6c750c", "sighting--93f6efe1-cb58-4424-a221-2d3ca83db7f2", "sighting--40044130-215b-4907-8dd4-7e2ba10dc9e8", "sighting--b44578dd-4e87-49be-a04c-a6924d64b83f", "sighting--050689b1-2c99-4aa5-ba0d-646347cd7529", "sighting--626568d5-8a1b-46b5-b581-d5901f5ec626", "sighting--ed2ae7d8-bcf2-4c1f-8739-e869526509f6", "sighting--1f683daf-489d-4011-9de8-c545811f25a8", "sighting--ca4cadf5-4f23-42f5-a939-d764709b29fa", "sighting--4f4817a1-4bdd-4b4d-88b7-ea5ab59b0427", "sighting--a3f52bf3-8b39-4cbf-a1b4-f7e664a29a5d", "sighting--c0f4cda8-8735-42ca-aecc-9341d55caf73", "sighting--b4c0d063-ddcd-4ce4-be70-83745d6f18e1", "sighting--a0673819-09eb-4d12-b249-b6df063bca0c", "sighting--0a95e18b-7ac7-4b97-ba8d-00f596ee4463", "sighting--1dc42524-39f4-4b14-8966-0ca10c39a9f5", "sighting--054cdf01-53f7-4b74-bcc3-7f6fd2f01483", "sighting--5af5b63c-65bd-4518-b396-0482b4dac295", "sighting--297fd767-5fe9-493e-b4eb-14fc6c786f73", "sighting--855dd0b6-18e9-4238-ab1f-fdef1919dbfb", "sighting--b65445d2-9418-43b3-adfe-3e526f7123b8", "sighting--5aa03a47-5689-4423-81af-120bc0fba250", "sighting--7afa8be1-2a2a-47b3-87e4-1ffca433a440", "sighting--5f8e9440-47d3-4184-904c-ad6857de4bf3", "sighting--12b285e5-e014-454e-a696-3eb02cd3937d", "sighting--642163f0-8577-40f2-9b3e-05c1d2d9c5ef", "sighting--d9a582f6-a5a7-434e-a5a8-b3bca0ad51ed", "sighting--bcfda3d2-9a4d-4164-a71b-7b62c3de07d3", "sighting--cf77398d-1965-4d12-98a4-c08ee855ac16", "sighting--117767d6-db55-4d36-8e5c-cc095be833cc", "sighting--0fcb6de2-1bac-4d00-979c-734344fe1cfa", "sighting--279a5620-bba1-4dad-8ada-a0a81712f36e", "sighting--373eea2b-9415-485a-bd65-13aebbdaaedf", "sighting--96890c10-6568-42bc-ba13-5a92ed452de3", "sighting--64c1014b-b116-4442-a273-24883cd5ef1c", "sighting--03b921e9-24e9-49e6-a30a-6182b223f223", "sighting--8a34a409-2847-47fb-92ff-edc8cefd2ff8", "sighting--caab8acd-fd3b-4b18-945f-2d347b08f5d2", "sighting--ee4cb7d9-5c93-49b2-9880-9a93de92208a", "sighting--9344c1cc-13be-470b-9710-78bb60eb392a", "sighting--7bfc7a4b-d6b9-42f0-a3c6-c34a18a52f4a", "sighting--1bd923f3-e15b-47ef-9a86-91a70d6cca37", "sighting--7d3d1a6f-a069-4354-b9e5-e6d54b41f635", "sighting--c99b4ef6-b0e9-49be-ab44-1b952b597269", "sighting--711a91e3-9841-46d9-a4ea-10301ae9ab74", "sighting--42846999-0911-4c71-a042-283364ec1d55", "sighting--a385228a-2d70-49f2-8756-f094c37214c7", "sighting--924bfd6f-5004-45b0-a91b-55b55382af06", "sighting--be6dbf6d-16bc-46e7-a368-a14d47ecd123", "sighting--6689c6f8-204c-4041-8a10-3a18eae83a92", "sighting--9176cd5c-03fc-4897-a75e-af0d106334c7", "sighting--767513fd-2446-40c3-b66b-fd09c709cdba", "sighting--dd6ccf2c-8a41-4bbb-89ed-1635fe91269a", "sighting--cb32a41b-de66-465c-88f5-491f84cdc259", "sighting--917e472c-482c-47f8-99e2-5462df51a43d", "sighting--5a6f85d5-53f6-4cf4-89f9-904af5b53c91", "sighting--731625b1-fb35-4981-bd44-e25c24fc796e", "sighting--5995d9c0-7631-4b71-adce-c0fa5df9f44f", "sighting--be2b18a2-8bb0-4654-a517-75376ef9e68a", "sighting--7e2322d5-a2ba-4145-92ef-ac179b4b33d5", "sighting--63ae3ce7-0f4f-458a-9345-5a8d5ecb4cbc", "sighting--d1be1c23-6cee-4bac-a605-a8f351bffb03", "sighting--bf91d589-3956-4cbc-99d9-32dbf9baa4de", "sighting--cf995f36-5096-4865-8316-8e766b31e3ed", "sighting--e980408c-b851-4645-8e45-6e66b17f3cb8", "sighting--fbd3ca71-e2f4-4a84-aef0-b2dce744205d", "sighting--2fe8a01f-5448-41a9-919c-a66291e902d9", "sighting--90d77bc6-6b40-4a2f-9528-64b7d1ea992e", "sighting--4bf36815-5fa4-4424-b1cf-0ed0bb4d0b3c", "sighting--0b10f3c3-b2bd-495d-8837-997c1a9b6df1", "sighting--d8f8d340-46b4-45c6-b091-87fcb6d2827e", "sighting--83b7be27-67a0-44fa-8b89-298894a7f04b", "sighting--523631f4-b35e-48e3-8fbd-63add0a86a47", "sighting--4a2f09b0-c21a-4ccb-ba02-196269e42ba7", "sighting--c15e5341-c446-4687-a7e0-f262672b15c0", "sighting--e5c935d7-a1aa-4517-ad9a-fe336c9c49aa", "sighting--e1a58c5a-46b1-411e-a25b-936f8f70d663", "sighting--4a5cb77d-cbe4-402d-a106-bcf98d23ede9", "sighting--4ddfc695-321b-4ade-8ff0-91eb7b73a6cc", "sighting--aae90879-615f-4220-a8ea-2559596d4555", "sighting--2274d663-2433-4faa-a57f-cbf9e6eb7d01", "sighting--2fd5e54e-c8a2-465b-a715-6216b85ecc7f", "sighting--4e425612-2f83-48ab-9f6f-99ed22531a10", "sighting--4aeefb2f-05b3-4bf9-9555-994080cacc9e", "sighting--2ed08646-0d22-4965-9ec6-8c8842950a39", "sighting--6d575c12-4be0-43d1-9dc4-17d67bad29b7", "sighting--cf13780c-4152-4f34-8014-8cdccee0334b", "sighting--be7758a2-9929-46c9-bb56-f3fd2184c3a7", "sighting--b053840c-b302-4ba6-8aa7-fe46cee71810", "sighting--21a80a11-c00f-4668-8144-7589c90b8d86", "sighting--72b17c3f-2439-41f6-a6c8-bece9dca5b86", "sighting--28480585-eb1d-4251-8fb4-0e950ccfea41", "sighting--ab0c8d62-63c5-47ef-a8d5-ccbd2134031d", "sighting--7c0a83ae-eecd-4a45-83bf-def8eff0854c", "sighting--e02228c9-64c2-4f15-a15d-e0247cf733bb", "sighting--0543f2bd-e56f-4b1c-8aaf-711786c48fd5", "sighting--5d71b361-fa8b-4787-bad1-9426c6ea92b6", "sighting--90e88caa-3971-4ba2-8b48-2fbcf4cc1598", "sighting--70412eed-3a09-4306-8d02-8bf751947754", "sighting--11ce2672-fe65-4f7f-b6af-332f4813dfbc", "sighting--11da4531-fe69-4869-8aeb-e6913d3afe80", "sighting--352073a4-19de-4d38-af12-658b2e9c88db", "sighting--1c163c97-2ed3-4c5b-a6ed-963901e3d3c9", "sighting--028f7f8b-aa9b-49b1-9f5a-2d109dde4d71", "sighting--8e4f8a12-818e-4dfe-b335-a88ad17effc3", "sighting--98e70034-dd74-41f3-8311-c6a91a9fbbbb", "sighting--cc4a9bda-91f5-44e8-8942-2eb049bb194d", "sighting--33c744d2-31e3-4a8b-8b70-d8a9f0af9f1e", "sighting--6dbedf78-9aac-4090-8afc-5df340815af1", "sighting--33993c55-d507-48e2-bd8e-07b85040431f", "sighting--730a126f-3fc5-4ebf-884a-1364529613c8", "sighting--201b4da1-e951-4497-86a2-671a996f3a27", "sighting--689e8cae-b887-48bd-afe1-8aae61fbf0d6", "sighting--9f6dbe98-ac3b-45bf-b8ae-5ab90a96f1ba", "sighting--672881eb-d444-4ed8-995e-0729669f9c0c", "sighting--e19a5564-17be-4922-a2ab-e5b657cde64b", "sighting--206cee0a-5d15-44ad-8360-23284af11183", "sighting--9601fedc-3560-41a4-ad29-7149e01b1c99", "sighting--0999df9d-4776-4a60-8eef-d45226fcc8d5", "sighting--84e0fd31-4144-4531-bdcd-3be726d3624d", "sighting--cc81c80e-434c-405b-bb18-240c9bff8733", "sighting--cce28c57-9c53-48b9-b984-92768706a764", "sighting--140f1fb1-e0e3-4853-9619-bb18d246956b", "sighting--d8be79c8-b9a8-43e0-8479-3d392afc3ed3", "sighting--7ce7931e-1b69-467a-9270-9d944226b723", "sighting--500844bf-1be5-4091-bbc2-ff7d5a6d0f01", "sighting--54a6c38a-8db9-439c-a9f8-72954aadba2b", "sighting--7d3e5c7e-9595-4a16-8a01-2aa0d0b6b6d1", "sighting--bf3f8af3-38fd-470e-b1f3-896d68fe62d3", "sighting--819f66c1-86d5-43c7-8890-29f5ddc33b77", "sighting--7f651dd9-71e4-437e-ae92-8242d7244530", "sighting--f0546998-a01b-411b-8c40-97d5ec2d8c74", "sighting--b43cdfe4-d0aa-4692-8935-e9bab882335c", "sighting--c9f79689-ec30-47a6-a581-c0f6c5f69a23", "sighting--d7abcd99-7950-466a-8bd2-b7ebe033a442", "sighting--3fc4968e-f56c-47af-ace3-381313768dce", "sighting--737273bc-6bf1-4e47-918e-95cbd90eae71", "sighting--86c17c24-b417-494c-bc27-53242f37dfb6", "sighting--faf7ee33-f670-4270-a630-92647d4a7230", "sighting--d112b69e-087c-4942-bc05-9b5e8d1a50b5", "sighting--932f11e4-c53a-420f-ba91-5c72cf74505e", "sighting--1eb473b2-8136-47f0-b16f-784f337964da", "sighting--d462f444-2d75-45e3-bcc0-976867aa28c4", "sighting--a44a655c-953f-4865-bcc0-25c1a60053d5", "sighting--52509852-060b-4883-a7e5-e1e86de17446", "sighting--cbed7be0-9ab7-4ad7-9e30-5459bc04727d", "sighting--a2c2dde2-651b-4858-a832-b9f1b6bdd536", "sighting--bac3e6ff-c644-4346-aea5-01f715d21ad5", "sighting--b318ef86-c00a-4040-b907-0d18bfd28d6c", "sighting--a4ca6463-0bba-42c8-bbff-71a5941513b7", "sighting--0fc4018e-53b5-4582-940a-18f1d1a9ca09", "sighting--753f661a-f383-4c64-86ac-0f1e2d1bf100", "sighting--1a432df7-66d8-42a0-802a-ebcedfdfcd59", "sighting--f473e190-ccaf-47b6-b304-6a9805acd587", "sighting--6a151e8d-d4d3-4931-b348-2491f2450fdc", "sighting--835f50c2-bced-4616-ad88-06521cd23535", "sighting--ca0b21b2-9cee-4289-b30e-d3d5648bc843", "sighting--b6ec458b-5825-4fca-8280-1c17a768b82c", "sighting--36620e2d-3bf4-49b3-b041-890585de30a2", "sighting--1553d593-7957-4e89-9b64-0c9ddf6452e8", "sighting--eb04f382-a74c-4290-bb29-95b35db052c7", "sighting--e9cbd776-cf8f-4446-a397-6fdd0c0a95e8", "sighting--b9c3a4f6-a458-4247-a62e-9ad93cdcbb63", "sighting--150b19a3-006d-4d36-9df1-f1df108d8ea2", "sighting--14ed877b-d94c-4320-bbaf-900040454d69", "sighting--d3c3c996-74f3-4222-8e12-f60a18feec2c", "sighting--09d93efd-4293-41d2-9ed7-1ec02e17a9a0", "sighting--42ede702-27b3-4922-b783-9ffff314a685", "sighting--9e5a3161-9d80-4f37-8c17-89ecd7b9680f", "sighting--2e241795-864c-41af-ae57-996c55983b0e", "sighting--929100e7-630b-4c5a-8d05-b11998fc4828", "sighting--e5306f44-09dd-496d-9344-9ef956fb7425", "sighting--cccf6ac2-24ca-4470-a546-958d2b903a4e", "sighting--cae9c07f-63db-46a3-b0c3-cceda5c9a16a", "sighting--aaa5ba9f-c080-4a9c-ad4d-925a5234c17a", "sighting--c9c82806-83ec-46df-ae45-5a2671940702", "sighting--fc756453-41d9-4572-98ac-f4f3dd27eb27", "sighting--bcd6a802-03a2-4744-91fa-cfd1961f16b1", "sighting--3c50a906-27cd-461d-8fce-8672e31bda4c", "sighting--5c02cabb-9129-4b50-903b-1c96750cac5f", "sighting--e2f4b25e-7143-4c71-a633-35d87696a48e", "sighting--b9c9096c-b83f-4d12-8b8a-6a7749aed365", "sighting--c7609927-4eed-4bef-bf2e-c13ef18feaf5", "sighting--42444183-c14e-43d0-99f5-1db7068f5d78", "sighting--2fd5111c-22fe-4a4f-acf3-1a24e61641bf", "sighting--c27174f9-5a0f-40ca-8238-81cea73f626e", "sighting--27d0cabd-c0c9-4ebf-89ce-02873ef862c1", "sighting--b6cb6330-83e7-4349-a113-7922a1b306d6", "sighting--c7621a3f-493a-400e-be25-11118c6c01b8", "sighting--2a22b021-4e21-4dfd-8906-7701f2a75a33", "sighting--060158f0-09bc-422c-bdbc-ee2be91c25a9", "sighting--8944e9e2-5c45-4f45-a663-4612d878350f", "sighting--06c0cdf4-fbeb-4244-ba14-3226fdb61a51", "sighting--fcf03cb6-8c77-4076-af7e-9a9b57ced844", "sighting--117282be-5bf4-4058-8224-4adcf5882745", "sighting--24b8c9dd-1607-4fc4-be00-d56972f20897", "sighting--4a4a60fb-92fa-42e0-af7f-0d19f79fbe7a", "sighting--706ff686-0578-48e7-88c1-a1da5d7150d0", "sighting--6166ef0e-2f02-483b-96e7-5e7da834fa19", "sighting--02068666-e8fe-4804-be9d-e71932b21af6", "sighting--cc54c355-635e-46cf-b665-162ab31bd9c3", "sighting--07be9589-d263-4b5f-a0cd-fc411330ab4f", "sighting--7dcbd22d-d380-4655-bbdb-ab8efc1aadaa", "sighting--bd9c55c4-5176-4c64-90e7-51e8d1de6b85", "sighting--3b93ac5b-de3a-4d02-99c6-f39ca4e48c90", "sighting--a84ae1b6-db42-4357-9db1-9618009ef567", "sighting--b0bceb60-71f4-404e-a6a2-55a2b00f843d", "sighting--427330f7-baae-4d24-b61f-9b1310ad95e9", "sighting--54b34484-d9e9-43ba-99dc-a0fc9e447422", "sighting--fc1f3139-188a-4daa-83db-f29a302dd460", "sighting--7ec8de39-670d-49ee-84d1-fbb6faa34e08", "sighting--37432038-0762-48e5-becf-5b6db990704a", "sighting--7abc24e7-fc0e-44fd-9d27-de24ab774bfe", "sighting--d94cda51-63a8-458a-9025-65be01515dd1", "sighting--0a4e1a71-afd3-4689-98e0-f25a44972aca", "sighting--905b89a6-8075-443a-b419-3ada9f5a8659", "sighting--3e2e700a-7a31-4a0e-a86f-c12ce0bc3859", "sighting--9283d656-3a5b-4654-9d61-a5c6e2256b96", "sighting--9bb0e482-9df2-41cb-87f6-01ea107b3341", "sighting--7fbcc188-722a-4961-81dc-d5bafa7a5e89", "sighting--571991d9-9d30-4fbc-a5b5-da2c7314e3da", "sighting--c66447ca-65f9-4ad2-9513-9c5e43a91552", "sighting--64ef7f0c-5860-4037-a392-0f9ed5d6cae3", "sighting--b31e52c7-4b2b-450e-8d09-a664b95d92a1", "sighting--decd2fb6-5345-4fd1-966f-5ae79628841f", "sighting--00d7d7d0-cb9d-42a4-85f9-c33c7f54c178", "sighting--d08e2088-001a-44cc-b754-fa948543f901", "sighting--5861ba27-286a-4669-b1af-a5ac4d8b4ed4", "sighting--81c501ea-7229-45ed-9945-f62ed38343c8", "sighting--7807fe03-16d4-4c14-8fb6-262acabd5a76", "sighting--817ce594-279b-4798-866a-f40b4358afb9", "sighting--64a3ff93-f548-4d2d-8a23-132db1d3be43", "sighting--bbe7bfa2-2309-44be-b358-26766db83dcf", "sighting--1d36360b-2fc9-43c5-95d4-cb34d1c9024e", "sighting--c5775ed7-6b71-406e-acc1-076a38bb4c96", "sighting--a1aea7eb-8465-44ae-bb63-3042738c618d", "sighting--73b273bc-8c52-4601-81da-8dd0a4d94006", "sighting--92e379d8-3957-48d4-9723-03ab1314d482", "sighting--722a8e24-06e1-4b65-b0b8-b0f331a2882c", "sighting--c57a773f-1adf-4185-91da-f867d99f7fec", "sighting--cf036033-5a26-4c87-8478-c845e1f89bfb", "sighting--c5a93007-ed03-4032-a63d-98f2d640a80d", "sighting--5ae70b2d-cabc-4ad2-a3e3-29b8256aaaf1", "sighting--eac5acaa-f792-40c6-b064-60cf83296c27", "sighting--2e6522e5-bac9-4974-8d52-6b6554a94d2d", "sighting--44fa58ec-6062-4cb5-827b-bebdb800a601", "sighting--a7d3b3d2-3082-44a3-8eb4-aa2fb3f48f06", "sighting--21726cbd-c77a-4c01-8050-b026177598e4", "sighting--48496c5e-31d1-45cf-ab83-f9dd7d4e8f84", "sighting--26eb4915-c301-41a9-9976-26c6360288e1", "sighting--afba9af8-b13b-4835-981c-2edd32e1cf7c", "sighting--fe1cac90-f0ee-4920-939b-acaf90f6d3e7", "sighting--720c7bed-2013-484e-ae81-1384c908576c", "sighting--e438755c-505b-4c8c-85ce-bcd370139c19", "sighting--4fd502b4-8b90-4574-b1fc-230706ec9161", "sighting--12d3e46b-3ab9-496b-abfe-9b563ec3b478", "sighting--63507043-d145-40f2-b649-468375bc1837", "sighting--d23d99d1-551f-4cca-ab59-1ca2f51fdac8", "sighting--05ced6c4-f89a-4f11-beb7-b02c0ab28ad9", "sighting--bbad2e75-8463-4733-8124-de1745bbb232", "sighting--5a3a3fa5-ded8-4d23-ae69-72d63181a05f", "sighting--e73eba9f-2885-4b85-b8f3-b7c1d8701db6", "sighting--bf30d6db-9b63-4208-bf30-63a809c9121c", "sighting--e8dcdb08-cb13-448a-a65f-870c83471fee", "sighting--9576e20a-4661-4af2-83e0-fa2a3e051a25", "sighting--a1d700be-9cb8-487f-943d-a7b0952f7fd2", "sighting--114dcf39-a511-429a-9652-e3d255d4f185", "sighting--b83d3647-b46d-4589-9e62-47d435bd130b", "sighting--d8197f99-0d60-4000-a774-c8b2cdb7de36", "sighting--37700d66-b517-481e-b048-903c28786d33", "sighting--9af0b5b0-9726-4237-9a19-019369c71e28", "sighting--2d16f346-614f-413f-93f1-b342b4080d8b", "sighting--7f5bf92d-c13b-4519-9f1c-3cfc26431077", "sighting--761ffb7e-de58-4e1e-af1d-cf96c9f23554", "sighting--394e8a32-ef14-48d5-8243-374530ab3b45", "sighting--0b8507d5-16e9-42d1-88ff-622e2955764f", "sighting--ed8b0174-bdc5-4e9e-913d-71e6818e99e6", "sighting--05ccfc5c-ba00-4450-9fdc-b0b89b152d41", "sighting--fe48f728-adc8-4f83-bb33-8751f6ef76d5", "sighting--78618d59-8cf1-46d0-8c11-45b5f7cb13c5", "sighting--fcd805ed-47d9-427a-9ea1-b29bf797273b", "sighting--2d9e9eb0-82bc-477c-8189-10be8def9f73", "sighting--4b3def8c-5c7c-4df6-8022-53a87f9058c0", "sighting--f9645103-439e-4a22-8bb0-6b44ee94e8a0", "sighting--68ba6d92-818a-444f-97d4-a5cafee8e0dd", "sighting--6a60c490-afeb-4019-bb6c-7722c2aa38fa", "sighting--7e4f758d-74d3-4937-ba70-30ae3440d957", "sighting--e85812dd-2e75-4527-92de-6d1ea7c6cd46", "sighting--5745a016-f4e6-4e95-b090-943c145b95f2", "sighting--4dbf4e17-c0df-4adc-8204-65c6cb66fd21", "sighting--747b2be2-5723-4682-92f0-72e09cd79d77", "sighting--943911de-559c-4b3a-90f8-5f99dba6bbc3", "sighting--7038ee2b-e441-4476-9f26-f429b5b1830a", "sighting--da3221f7-83ce-4545-8ad6-c52b0c2cc458", "sighting--29051b83-ca85-4c0a-aacd-c0194c17882f", "sighting--1153c937-d7b9-45ba-b4c8-bd2df317dc2e", "sighting--1b98c5a4-22be-4ee1-93ef-2488a7844df3", "sighting--d433e6d3-fd2b-4ee4-b2a1-e94e1e84c8a0", "sighting--57f99b23-78fd-439b-856c-550260494750", "sighting--5b242713-c1a6-4a01-9189-e2338ef2bb08", "sighting--f549e05e-750e-4f0f-9b27-b370f125112a", "sighting--cf4804d3-b92e-46c1-bf5c-6bbd4d1e562a", "sighting--b9fb66d1-e089-4e58-9cc0-9d1bd43b527c", "sighting--6fdf2f2e-323b-4867-821f-0b56ac8afd14", "sighting--3628af33-5e87-4fcd-89f0-f90bc1067320", "sighting--7977f568-b5fb-4bf7-8044-076d8579169c", "sighting--40472997-155b-4e23-bb99-960c0e87e05f", "sighting--2bb08fb1-01ed-4d9b-8f5b-7777319d1a7e", "sighting--7498502a-bc64-4738-973d-6c05fc2d5e2e", "sighting--bec376d3-7422-426c-bba5-610596569870", "sighting--4b0770a1-40ce-4dc9-beaa-825104090a27", "sighting--5ac96ef9-2e83-46e6-9c02-7bf9fa1e20ba", "sighting--567282b1-3594-4cb3-a9bc-a00663370371", "sighting--a6e2db18-a28a-40b4-ad9c-aa1286581ffe", "sighting--1373d12c-faf5-4f57-ac2e-a18a888b9f39", "sighting--6069fcd6-7e9a-4503-a1c7-f61486eaab5e", "sighting--934761ac-d958-4d5b-8f84-1cb7e4768879", "sighting--e19fccea-56ab-4c9c-b57a-b50527b34589", "sighting--92215310-b9dd-4254-badf-2204fc30b16b", "sighting--b2977174-06b9-4f37-a94d-1583556df257", "sighting--a933a78f-7886-424c-9b68-bf9cbf6da5e1", "sighting--29da2157-4002-4134-9d00-207628dcb096", "sighting--d196550b-425c-442d-a60c-646d4c6cd44c", "sighting--6d035b1f-fca6-4b8f-af9d-7f385feebd1e", "sighting--76928627-2a8a-493c-834e-5917fd12a6b2", "sighting--e46c4ed7-fa42-4536-96c2-ed624bfacfac", "sighting--6c2d398a-3313-4d6a-a2a4-3de8df42315d", "sighting--17424b49-b664-48b2-af4e-7862a26b4dae", "sighting--38c22441-0a54-4898-9863-d701c1d461d4", "sighting--3ec7c85a-7bf9-4b66-8a05-c6563fc3dc35", "sighting--47b12184-55c4-4b96-a69d-d33ff0aef267", "sighting--88953546-3d66-461a-9d6d-93b2b77472ac", "sighting--210f4839-4284-4f6b-bcaf-f7f06a167825", "sighting--745b9f55-5e82-48bb-a7f9-643648f21838", "sighting--6f7e503c-2b9c-4686-a385-af4cc4a94455", "sighting--017dee43-bbc1-4e50-9d91-60c0a51338b5", "sighting--79b92b58-7d03-4996-a114-f1e47f10caa0", "sighting--4b15cb7c-0853-4278-8035-cad84ec6e681", "sighting--62a10c11-1703-4aad-9d94-6bf193894e0d", "sighting--a7b6436c-c164-4a2b-9648-63e6a62e9fce", "sighting--6b899ab8-295b-4f82-b218-7f8c2ee867f7", "sighting--ef21922d-c7a8-446d-8899-290986bdbc80", "sighting--cda1d0f4-f2dd-45a6-a08b-5411c604d7c0", "sighting--e193b96b-ae4c-4073-b1d7-0c062183ac59", "sighting--e95eff7d-ed0e-4db8-b2c8-60b5c26a066f", "sighting--cd1a1df4-8e80-44c4-9a7d-1b7175c0f28b", "sighting--16209497-0a8c-454e-8662-e9f7e06bd0d0", "sighting--5b4ea590-d73a-4bcf-9049-1e40b7088b11", "sighting--a26e38e3-0d67-4fa1-8005-d84aee8e4559", "sighting--77502f23-39fd-4373-a366-0e171b2034ce", "sighting--b893e427-8092-4452-874e-43360a87873e", "sighting--6c5aab9c-4aa8-4038-96e6-3d1ffe3a55f3", "sighting--37b13828-eeca-4b2f-b916-0180dd474954", "sighting--161822fe-1f88-47c6-a47a-81d0f42f9d91", "sighting--dd6d4cc9-e8ba-4f1b-b0ba-e5bedc57a341", "sighting--229e122f-7ff0-4062-a90a-551014b88b9c", "sighting--983decbf-d185-4272-8e69-f30b20891008", "sighting--60aa7a90-fc27-40c7-8516-2e32f479a31a", "sighting--30cc27f4-0132-401b-838f-a2cce3dbd826", "sighting--56dbf11a-f554-49de-9060-c3cd74f25ee0", "sighting--e054803e-8d70-40bb-9087-f4fcee4245d9", "sighting--eb82527f-c13b-4988-9dcb-2a56b1f8992d", "sighting--dbe25f99-a9f0-4f6e-b4bd-8f86810c7393", "sighting--ae7e249f-4919-4928-ba46-56827c8dbbc9", "sighting--25fb6c29-dab6-4f60-8659-c2d4b1e58145", "sighting--7e58c860-11e9-4a2b-8006-c30d47282a90", "sighting--e679ce45-4c7e-49aa-812e-b1d0d0bd63ac", "sighting--cf5caa81-33e9-4050-95a2-4f6419909da6", "sighting--1550f6a5-3fdc-4af2-96db-0da0d8c6dafa", "sighting--c7fe6e32-05ce-4c58-94bd-18addb20b9a8", "sighting--63f1ecbd-f7e6-4fd2-b069-7cedd6ad8354", "sighting--c04ce36e-0fa5-475a-ac6f-95ae1cdf58a0", "sighting--87692102-5d68-4c4d-b363-0e84324469c0", "sighting--46671d9f-5005-4b74-99f6-be2fcd44c38b", "sighting--d41197b2-6c19-44e1-90e9-f8f01a948dca", "sighting--438c3b92-0b30-408a-aef4-61023bb1f7d1", "sighting--7c18b47b-b046-4c06-a6a8-9d90a3709481", "sighting--4075f501-ebfd-4df1-a33f-41c7372ffa9a", "sighting--e178a1bc-ed5b-4833-b48f-125110c9c117", "sighting--90aa41d9-8cee-4200-aeab-76fb27c6f59c", "sighting--abe394ef-3fbd-471f-a86c-f1b85c0dee28", "sighting--ddc60bd1-3098-492b-ae86-1419a485db15", "sighting--1e5581d6-4017-446d-aee0-1262787ba597", "sighting--a1227a51-30e5-4dfd-823a-18364dfac9ac", "sighting--82e439ca-4826-4223-9894-d357f459f1eb", "sighting--72e5a0ee-3813-49d5-a9ba-19499461e3e4", "sighting--da35882c-a93f-440f-8d6f-4323f81aa80b", "sighting--75fe4f0c-71be-4c0f-b2d4-21e8de4fcbde", "sighting--b9c25084-a4fa-4611-92da-93d574a86889", "sighting--ddaed4e6-1875-4398-8340-cf680bca7308", "sighting--4c275c73-b9a4-4f77-a4f6-4bbc5004761e", "sighting--65ff4431-a2c1-4fb7-b5f0-1b30c8fd2683", "sighting--06ae8325-25df-42a5-825c-cc89c4fe0e8f", "sighting--f1bb10b3-38bc-4e35-a313-7d7be4269b70", "sighting--4e5d89cd-0a4d-4dc4-ad88-2f13540fa060", "sighting--1b85ed83-24bf-4c23-a6b9-cea61a2caf1c", "sighting--2745a4ef-117d-449d-83cc-6d38e0b99e8f", "sighting--8891e099-9184-4371-9df3-0150eea548bd", "sighting--8a226983-e9c7-4f34-8fd2-a718b416d0c7", "sighting--23b2e132-df92-4c11-8557-b68115b29876", "sighting--a0f8b62b-668a-4711-a492-c1f106f64645", "sighting--01cc9e58-0c40-468f-90ec-1626b0d5e2d5", "sighting--ef8e6b7b-a9c3-4733-ad5b-6d960e815b3a", "sighting--5ef19af0-8336-4f20-b40b-ddabf761ddea", "sighting--be0707bc-b224-4503-8ff2-109e8af81c7f", "sighting--51137a13-6e12-4eab-8a8a-f03dec998b8b", "sighting--56bda7d3-4b84-4afa-b668-acb9ae4bfaab", "sighting--5bd1ed75-0a36-46b9-9e9d-2becb7ba28d6", "sighting--d4a4a090-267b-4da3-8025-bb1cf63cbb2b", "sighting--9d21efca-3365-475b-928c-c57879768c56", "sighting--e9cf9215-465d-4d4a-acf2-0d3c97aeb68b", "sighting--f4b37b92-04ef-4279-a1bf-70a924492ee8", "sighting--00dd5ce8-527a-48dd-8ab5-3a1f39e9b773", "sighting--25482814-3afd-4172-8b8e-6596b246f1aa", "sighting--8687d1d8-b356-4cbd-a8d4-40f715b42b0c", "sighting--e6919e61-c0a9-4fbe-b8a1-7e760183860f", "sighting--f350c56a-a2f9-4c0a-895b-7c20c8ce0bdf", "sighting--9ea8f0e7-0b1e-4447-a2ee-fa38d654213f", "sighting--a0bcdbcb-15d1-466d-9dab-a3a476a90082", "sighting--4fbfcc90-fa35-4aff-bde0-173dd1d6bede", "sighting--af0fda6b-51c2-40e0-ac4e-690032f4bebc", "sighting--10a718bf-8cf2-41c1-881e-8284cf1c59c0", "sighting--b2d959e7-a716-4375-ba61-04fcbc1392c4", "sighting--1d77f820-694a-44e3-9962-a0af78068cc6", "sighting--a1393e9b-1c0c-41d8-9b13-67f787918503", "sighting--c2bf26c3-2b7e-4af2-905c-c63b6e8389de", "sighting--703de119-0412-49bf-b8d4-baae7e061db5", "sighting--fdecaf45-a2ad-4d63-8259-830633587be1", "sighting--8632f605-4394-4be9-b2ff-2192a36865b4", "sighting--f42f8582-b44a-44c8-a05c-1a5a677abaa2", "sighting--97a34fbe-2755-4230-b039-b2d8000a3b5b", "sighting--78617ed0-6af3-4c39-a56f-d10f5d43d9d1", "sighting--250551a4-a34e-4ab3-af9e-99573749a67c", "sighting--e2578786-590d-4049-9fa9-255a9d4811db", "sighting--b89c4d3a-e6a6-43bb-a426-782029434e3f", "sighting--03f9e558-1fc1-4ec9-839c-a1c2355a840f", "sighting--fe434b91-4e7b-4108-ab30-44c9b5e22f03", "sighting--569ac0bd-a65b-4086-acda-d21c46a62b56", "sighting--4b47ed35-3de0-4104-a1b6-5f9109e40989", "sighting--136c0349-4387-4597-98d8-964d2be1ebf8", "sighting--f07aca0a-f252-442d-92f5-f6ec176f03ad", "sighting--9ca435ec-67df-4f8f-a02e-c891a8375625", "sighting--616c35c3-c9f6-4c91-b4f9-caf28a0ff65a", "sighting--58be3f2e-1e74-4ed0-b80b-a9dd10ef6628", "sighting--f7e17f75-dce4-4852-a154-92240434f9cb", "sighting--0b46513a-cdc8-4ec5-a33c-ac78b64ce11d", "sighting--d280e22d-e4cd-4431-97c4-46ff3788e349", "sighting--1693d1dd-9817-4c21-9f67-78da71d10609", "sighting--33a0d952-8f49-4188-9532-9f80c1aafc01", "sighting--89fba756-17ce-4c32-abfa-87b856db5a7d", "sighting--9b2eeec1-2a97-438b-a792-110cc03d9191", "sighting--b27bfba5-c8a3-4c5d-8d3e-5b2049ab32b0", "sighting--3dccb02f-5f01-4541-98a1-6b5273a5e416", "sighting--1bc90b22-3083-4e61-8447-d4b9d57d8071", "sighting--4b9f7cf8-4bb8-4e95-9ad6-c8e123accf48", "sighting--7c8cff81-ec73-41ce-b164-86bdecb8e43f", "sighting--c2ff57fb-5b1a-4bcf-ba6e-39b21bed5b3d", "sighting--15997cfc-21aa-4b31-8b7a-ee9274aeab27", "sighting--ce266983-107e-41a5-89c3-16779859e95f", "sighting--ed351faa-e07f-4b07-ae22-89ebccd67980", "sighting--76f71264-48f9-44dd-bca5-09eafc74edf6", "sighting--053a157e-5c35-437e-8fa8-d07890b50979", "sighting--0d95871f-2e25-4e69-84f2-fbbdb5039bb0", "sighting--9dde7069-e758-4b64-a5a0-8314cef319ce", "sighting--579f16c1-46e9-44f6-9066-37834966a78a", "sighting--91c9e8e8-aedf-4388-9967-bee3a965d3e0", "sighting--c93b43fb-c9d4-413f-8bf2-0d217d973ad2", "sighting--30a7a7b8-868c-42b0-901e-b5cfd09a9d81", "sighting--4251463d-ab9b-40db-8738-0065f001e758", "sighting--698a00d3-efb9-4dff-97d4-bd8fc7a3d98a", "sighting--7fad15e9-69db-4f9a-bb52-e57567e6c2d4", "sighting--0427224d-09c3-4fa9-95c9-a8f9f1f45105", "sighting--9e503c15-34cb-4be7-9471-d5d4f5e5aafd", "sighting--1bdbbe97-ff89-4fe1-9c22-c4093b15a7a5", "sighting--cb733257-b1b9-4300-9100-d3e441ccdbb2", "sighting--d0731462-c85e-4984-8192-5c57adae86e7", "sighting--4ffea5ab-d601-45e7-9953-d4c429dcff8f", "sighting--a789017f-3ded-457a-8ce2-6f1476aae9b5", "sighting--a5f63d77-b774-434a-805e-a6a6252eabbe", "sighting--75e38351-05ff-4e8c-b581-54158d14a6d7", "sighting--7f578d63-1b5c-4197-b977-c45287f5be1a", "sighting--d897298c-122d-4a6e-a098-188715858888", "sighting--279a97db-7a6f-4f59-a873-1a47259abfbe", "sighting--3c92e6a6-ec40-45fe-bd4f-1ae11bb7754a", "sighting--7eabe560-1ff9-41e8-b667-211ff9e5a401", "sighting--9873c6b0-ca34-4f6f-b60b-3cddcd31ba4e", "sighting--a5b16946-2a6b-4510-a5b9-546a73acef7e", "sighting--c43acaf7-893d-4136-a336-a6db33ec62fe", "sighting--0d858200-7347-49a1-b94f-6562b95aa6b9", "sighting--59647919-8934-4680-9826-d982404f3311", "sighting--44570cb8-3a5e-48ad-a5c0-3ee7983b07d2", "sighting--175d1021-0a9f-476d-9780-cb23a479fa9a", "sighting--c5cd8e4b-2024-45e2-8aef-ab755b727cb0", "sighting--5592b913-61b7-4c91-91d4-7d2e801009e9", "sighting--dabca499-447b-4219-b5e0-229aeeef9a63", "sighting--2197d9f3-5ceb-4787-8f74-b456e5520024", "sighting--9db207ce-4b80-4883-b04e-5b7b5682c608", "sighting--9ee0caf6-e078-4a11-98a0-27e9208c0427", "sighting--a8b0e1de-7047-4dcd-b74a-3b7c9d4776d6", "sighting--ea2ebff1-80a5-4382-b3c9-8de54d20f386", "sighting--e1ff32f4-9532-42d2-bbc9-9c70c143da54", "sighting--b551033a-ecab-4fd9-bc24-01ca8bfda40d", "sighting--dd55d1fb-7e84-448d-b544-7b3a71c4a64c", "sighting--e714de64-56cc-458b-a2b3-223a60e51893", "sighting--f30e4e35-bbcf-490f-a4e2-9d1f6dd100b3", "sighting--e21e881b-b4eb-462f-8c61-c7eef7929ded", "sighting--f71262f3-aac8-4fa2-923d-7f26325ec17e", "sighting--aa10a38c-606a-4594-a4b6-9706a0a31844", "sighting--31f25ee3-7482-4b8e-8fe7-e4dff12cbc6a", "sighting--78c78bbe-c684-4084-8e25-eb139ac3beeb", "sighting--2caa92fb-5da1-424a-aae2-4d72a5915659", "sighting--63945380-f89e-40c9-b21a-15e9d83a3204", "sighting--83dce844-8b33-4950-adb3-75cec7398fd7", "sighting--f5bca6fd-2755-4030-a0aa-d127cd51cb67", "sighting--1547c125-b884-4c0e-819d-126cb5e0396a", "sighting--721100af-1d8b-41c2-b2f1-ad84619a804d", "sighting--74eecd9f-f02b-49b4-b5a2-f231031fe89f", "sighting--0c8dda33-0643-40bd-97d2-416af4a8632b", "sighting--55ccf702-e396-4f64-bd78-566609c731f6", "sighting--3dbde919-ebfa-46ca-b784-a60db3f111a6", "sighting--e1c2ab34-ceda-4432-80b9-da9ed8cbb27c", "sighting--9f3548a4-05de-43a1-81df-214209fbda50", "sighting--a93691b5-030c-4dbb-874d-b316fffa3c41", "sighting--5899577c-94e6-4faa-a37c-2068b8de435a", "sighting--74534456-1b4c-4c34-b040-ad3558525b3c", "sighting--d3d97843-22cb-4371-9443-d7fe6c256334", "sighting--48035907-0622-41b1-afa2-3e7c6b1f8ad6", "sighting--d8c3b27c-7495-4985-b1d2-2b15533d2246", "sighting--031933ea-23f2-486c-bb49-9939cac7fafb", "sighting--b63ce900-86b2-4b14-8c55-c9259db0da00", "sighting--ac1f7a03-6e73-476b-a875-03e3589a4e4f", "sighting--35fd98ce-1e73-4fe7-96f0-4515b6e0b13c", "sighting--8c5508b6-1ebc-4464-8f04-97e9da9583db", "sighting--f75d74de-baf1-4b94-b2ec-ca3550281559", "sighting--6c2d5810-0e06-43ff-9c4c-d99b33f9c914", "sighting--e4d77c0d-5915-45cf-bb90-d7063305ab25", "sighting--1d44cb01-0b08-423e-aab7-16f722b193d1", "sighting--ecc53510-1bf0-423f-bd28-e20a94981352", "sighting--7d9e8ed2-863b-44eb-a882-8f884bef2302", "sighting--7a235e2c-68fd-4d4c-ac18-5b66d70a2e39", "sighting--4693e589-2223-4fa9-ae8b-4c493d877e4c", "sighting--734d8c6c-0e3e-4d58-8a6e-64f2da38cc7f", "sighting--95df22b3-2206-402d-9d62-2fc9d8a7bd42", "sighting--870bb312-5f26-4107-8b03-272489bb172d", "sighting--3d651c2e-6898-447b-8e4f-fb182f45a9ca", "sighting--69879b46-3ea1-4776-99dc-10b8e6a25bad", "sighting--a5ba539e-d29e-4c1d-9842-50a6225dbe91", "sighting--6a9d0856-2a69-4186-a3bb-bca6414e1d8d", "sighting--eaa8b5ce-7a35-4123-9e49-9128d27d2319", "sighting--2c06d486-e2da-4c41-b577-8f20a2355b8e", "sighting--2cf48e2e-d2a4-45c4-82cc-f789975224d8", "sighting--f4c4a9af-cf5f-4b40-a204-846dfdd9a366", "sighting--dc12ebcd-304d-490c-be4b-17ddae11b628", "sighting--aa9c9887-11e8-40f2-9489-672353b9a7c9", "sighting--822204c9-1e27-4656-87d6-83299aad84dd", "sighting--b808d119-be2a-4a8f-9f40-baf0fdcbb94f", "sighting--feac982c-c952-4de3-bfb9-46ce0909cab2", "sighting--8b03dc7c-eea5-4340-9e94-ebe2ea6293f7", "sighting--5ac7e4ab-8171-4f0c-b9b0-7135486ad97e", "sighting--745d563e-7b12-4eb1-881e-145513f8a795", "sighting--0e55c916-a2a9-43f3-8093-20092d4876ab", "sighting--bca7c22a-805b-4ce7-bb87-8aff2a5b2aa8", "sighting--07aa6975-5d97-45be-a773-0618a3f30795", "sighting--06184c73-5183-483b-b6f8-abfa6e76a037", "sighting--a4245444-b5cb-4253-9973-1960c35b9993", "sighting--3ce8faa3-23eb-4c67-ad1c-c77f4d71e4b1", "sighting--9011c08f-fdd6-4138-9241-2c530f0ffca4", "sighting--f9472711-eb58-40c1-b6c7-4994afcdb1a5", "sighting--a34ce99f-b3e8-42cc-aea7-21e5ef076745", "sighting--e907312a-f3e0-4422-9482-c2685f8cd969", "sighting--59c29aa5-04c2-46cc-8317-16e22666c96e", "sighting--347518fc-8900-4198-bd4e-54d4967e5401", "sighting--32e326d0-dcc1-4505-bd32-c912bae5e718", "sighting--13e4c3b1-0498-4efa-ac79-bc5977a1bd34", "sighting--2c9931cc-d01f-4e54-a2d6-2e522c499c20", "sighting--201be059-eaf7-4e65-bbf2-56a5e0e792ff", "sighting--935b4e8e-cbaf-4c09-bdfb-4bd66efec0b5", "sighting--07403392-f27a-4dfc-bc49-64d7fd28d7f9", "sighting--ae6eca0b-9d19-438f-920c-a0faa2a7b979", "sighting--87d2c73d-dc2c-468d-b656-132da3b8e800", "sighting--539fb867-4cd0-4b28-8a3a-08a2f1d640ae", "sighting--a3862c83-9c06-4997-9c59-c97a47f3129b", "sighting--04cb251e-4b36-4399-b20b-3a2e88641e99", "sighting--efd3220e-cd0f-4598-86bd-37de6f6caf87", "sighting--0c635a76-cd9a-4019-a5eb-01d5e1c2b364", "sighting--6b46ca49-3236-4b30-8699-f152791ae480", "sighting--86acc564-325c-4489-b026-8ac42b259e2d", "sighting--489cee63-3c01-4273-9c03-b775b0c67348", "sighting--db0350d3-ec55-4fc6-ba33-abc1b4f1d89c", "sighting--73ccc270-a570-4fcc-bd6d-ef665b019d6a", "sighting--4a25cd78-9327-4aae-bdf1-952c92c549f4", "sighting--e5e0e06b-98ec-4988-800d-fc8e536e0d93", "sighting--9ec90d94-490a-42ba-bf38-acddfbbe3f46", "sighting--6ba17aec-6a52-4ee0-a31a-e49237f8b287", "sighting--4457c1ba-ff6e-480b-8f91-38202365ddd3", "sighting--2ca176c4-7844-42a3-bb5d-0412a9cdba86", "sighting--5d2cedf3-495b-4c76-9fb6-0739b5a02bd6", "sighting--a0c251ad-b06c-46cd-8acf-64cbd747f6d3", "sighting--c4375092-413f-4532-89ce-cbb6ea90c223", "sighting--82d32904-3573-45b3-894b-99f698621ca1", "sighting--68026159-93c2-43b6-926e-4f800db14d03", "sighting--ca58bfa8-408e-4070-9083-48b867509c75", "sighting--4a98a272-44f5-479e-a8e8-b0ec0b918cbc", "sighting--1fb0053c-6af9-4382-a902-25227ea54d10", "sighting--175976a8-e992-4768-ad8c-562a66bb8f01", "sighting--f02716c2-69fd-4457-aab5-872bdb71858b", "sighting--0a6d7a95-43c4-415b-8938-5aca19d7d65e", "sighting--62a7868b-8858-4796-926c-9560ef0beb35", "sighting--daa0e6ea-f48d-4220-ba3a-46c31e9dffa7", "sighting--5cf6f997-e336-4fe8-8110-48593b1777d0", "sighting--059e57c5-69a7-449c-9a33-756413f0e524", "sighting--2833eb4e-d165-4165-b9cf-32c26ff4fc0f", "sighting--a5fddca0-87c1-4c4a-a352-d6b7c7d31c8e", "sighting--38582505-87af-4b88-8503-05536e96b4d6", "sighting--fde683c2-f9c1-41b3-8598-d67315e2621a", "sighting--c2999964-c36f-4ba1-a189-abe4b22a93f7", "sighting--6bd242fe-d2a6-4025-ab67-c499dca05c12", "sighting--7c250f4b-0e18-428e-8c0f-adb364d1ca3a", "sighting--11d28b9e-e1df-42fd-974a-98ed5a8580fc", "sighting--d25520aa-c4b1-4cb4-a5ac-2d638bfe8a91", "sighting--a1dfcd78-7231-4972-9d8e-bd80d2da729b", "sighting--978f014f-6348-47fb-89d1-9d0dce268aa2", "sighting--9cf9b4fe-0f8a-4276-a000-4568b71bae8f", "sighting--5955b075-e31a-495a-b661-c094436925e4", "sighting--7da49481-8ad1-4642-8c74-ab7e6261eb13", "sighting--f7631b5f-161f-48ee-9aab-3a2fddabcee9", "sighting--227d5028-621a-4c61-8d78-4644009bff3b", "sighting--a389ad88-d531-43f6-8910-8a481c28d2ec", "sighting--6bb41145-78d9-4749-9366-a1785822634c", "sighting--b51ee003-136e-4952-8641-5c1b8e498c37", "sighting--eeeb8295-a371-4fe7-8b31-fee41c8a4bce", "sighting--bde32064-c88e-4a4c-b3f6-6202e294ed17", "sighting--947ab7eb-e67b-42cd-8441-db42134e3fd1", "sighting--6309159e-6042-4b97-9e21-46126832c45f", "sighting--981064c2-b259-4124-a39e-2b483b218d49", "sighting--bdb2e8c5-adb6-4793-bed9-348b45330041", "sighting--775a9441-df41-4cc1-a9d3-b677f30f8ed0", "sighting--f272f9d9-bd63-4277-b8d2-d171053787ba", "sighting--bb06594d-d16e-4e20-b674-71220b10a45d", "sighting--58b5ac1c-d0df-4535-9a0a-56b68e55e3c7", "sighting--b507022c-47b0-4a88-b723-44f2a997e36c", "sighting--b4dc0255-11e3-4035-9184-8f73e12d07f8", "sighting--c3b47d5b-a77d-45f2-af35-ddfd418d03b3", "sighting--4c8a3d99-994f-44ef-9ab8-64979411159e", "sighting--79fd6e6f-3343-41de-a1db-7d1e5f8110f0", "sighting--a95d7f16-28d0-494c-8698-fc0e5c8d1243", "sighting--c7f41105-c760-4220-8bd4-a9956daa896f", "sighting--12548ffc-2c40-47dc-a64e-1f7515938bc0", "sighting--e492a7cf-63a2-4b18-b3e4-ff4bccb3c589", "sighting--9a92ef43-05fb-451e-a1dd-23386b31ace6", "sighting--75ca523f-10db-4c77-8903-6f737316e668", "sighting--1f9a2ba1-235b-4ac6-95c7-bd95f73e7e68", "sighting--79ad14c1-3dd3-4055-ac1b-d839327246f5", "sighting--781b833f-1f1c-4b96-805f-5555763fd133", "sighting--983bc1e2-2962-4e87-8d36-e9369764cf07", "sighting--61e4741e-e654-4ee6-ae7b-26cc58835bee", "sighting--7b6a2a7a-ecb5-49b0-9990-8ce6ddd259bb", "sighting--c4d7a287-670a-44c0-80ac-bb45bf7cb9e5", "sighting--aafe8388-5406-40f1-b045-0d286b1096a8", "sighting--3d63b8a7-2451-4587-80c1-30aa24ab0933", "sighting--b080e274-835d-4aac-944c-3fa5de93265d", "sighting--774adcf1-db7c-4c66-8934-23d24d876e8a", "sighting--5c89df63-3276-46d0-84ac-6c462013582a", "sighting--3b4026e3-bf81-4283-952f-77778218e6af", "sighting--5458caf6-2472-417f-bd4f-4a50d78caea7", "sighting--abf74e6b-e908-495e-ab5c-e18888403604", "sighting--0b3272cb-6c31-4cbf-bdad-be8cfac4d20d", "sighting--575d6e15-a7e9-416d-a8c1-48e83f6dae6b", "sighting--04598200-184c-44cd-97da-21efffdde1a5", "sighting--63fc23e2-e47c-4d9f-a4a3-988f7b0ab92b", "sighting--ef739d57-7a6e-4d95-9357-f2fa99d73475", "sighting--686a41df-de0c-4598-9630-869c83741210", "sighting--e68fb0ef-edf1-45ed-9ca9-d9bbe2d305af", "sighting--8c83bed5-9b31-4393-b8ee-2d903b5e11cf", "sighting--5a8f8209-bf5c-422c-bc84-e00307aa2886", "sighting--29f1a004-29d7-4e4c-943a-0aa5a688f20a", "sighting--9eb1e4d8-38d3-430d-b6f9-d0c92128d042", "sighting--fe279c20-24db-4f63-895d-0aeeb2207e08", "sighting--7a39ae7f-304e-432e-af54-f7c227b7db77", "sighting--cc634079-f824-4fd7-880c-c943593aeff5", "sighting--2ceb4bd9-ba68-47ed-9235-06b0e875b8f5", "sighting--12f60cd0-bdc7-48a4-ab21-1ab397ccff28", "sighting--dfd12c6b-5bc6-49f7-8e84-59ab8b9f9ec0", "sighting--846602f1-0dd5-451d-9ac5-b140885e5093", "sighting--f88cbffe-9ee7-4506-92f8-723bf19a3a33", "sighting--5063b4ee-a56c-4c9f-a2ba-ad384aed7d4e", "sighting--b9cbb2d7-f0a9-4fbb-b7ce-c965b0746f37", "sighting--9421b54f-7bbd-4e0a-b472-c53ccea10e85", "sighting--ce0a4324-5898-493e-b7c2-df9cd8046742", "sighting--89225e2e-d8fc-4ddc-b27a-863bbbcefc9b", "sighting--d1dffb88-c726-4267-b42f-80e3a0a5e030", "sighting--4b841eda-7ed4-4a6a-ae01-aae3106be8d7", "sighting--3ea35585-7268-4a4c-b83a-5bc11c4c45fd", "sighting--f68892c6-d86f-43da-8f9e-2e84e388ecdc", "sighting--fb2be5b4-9693-4527-b6af-9711e9d641d9", "sighting--13ad2192-5669-48c0-9723-29678486912c", "sighting--cdfadcf9-b097-48cf-8bad-4470f3e5bdfc", "sighting--ebcac225-72ab-406c-aec0-658df9b0570a", "sighting--6c01e1b6-dac6-4ee0-9fd1-0c32d9801cd0", "sighting--2260d93a-03fd-4fc3-a5c0-941201afa9b2", "sighting--c923f408-41a6-4536-98ba-0ce486b8f20d", "sighting--45a6461e-40ea-430a-abf7-4b8f80d29e55", "sighting--367081ae-12e7-467c-8fc5-2f433abf9df4", "sighting--86f8582d-9213-431c-9f7c-c9a491fb79e3", "sighting--2ab6a7db-a99f-469c-bfdf-ba9910712136", "sighting--d56ea0fa-5924-4fa0-8084-03f561e5e19b", "sighting--b7dab8de-4561-4ea4-bd30-ce208b5f8875", "sighting--a3d977f2-25ea-4826-954f-fb8dcde518ed", "sighting--c666f4ee-c900-43b3-8f5a-58148202027c", "sighting--dcf6aeec-9302-451e-a19e-79e09e020e73", "sighting--98b0e315-6b98-4069-868c-f3ad7a38d5ce", "sighting--db6b04cc-4b68-44bb-b52d-f4151c6a2227", "sighting--9d39ba2f-0148-4546-afed-a845d584903d", "sighting--edc98259-11cf-4bf5-8230-e66537e91d80", "sighting--7b2023db-cb42-47f3-b9df-6178df971df5", "sighting--37c4ea2c-93bb-4e64-82f2-f2a0c2b8ea59", "sighting--23891cd6-35dc-42d4-9685-5956830b225f", "sighting--35ac4b08-9079-4601-8a5d-64db019a6c02", "sighting--8dc75d8e-da7e-4ab8-b79e-c1916d4ac6d1", "sighting--6dffa402-7f6e-4f17-8006-c42ebb9d3904", "sighting--085cf9b5-2645-465c-86a0-119ab0cd826d", "sighting--05f0a357-5c10-44c4-986d-b386e2d05ef0", "sighting--526931e8-1184-435f-bcf6-af75ca1c6cfd", "sighting--2a81ee7d-8b22-4dd7-b4cc-b95bffea44c8", "sighting--08834d43-c5ea-4fe1-bcba-2d6625e4b4b6", "sighting--1f677bf8-545d-4926-9606-94bcfa7f2e5f", "sighting--f1f5fbf8-8b61-425b-9026-32f1e1a11344", "sighting--7974227a-13dc-4979-97c6-6a4ed16eb9c2", "sighting--6f22137c-8282-405f-9c01-a2e4ebfda830", "sighting--0766f534-5e2f-4cb1-860c-1afe3f07ed4e", "sighting--3da1e9d6-6496-4092-9946-8309678702ca", "sighting--8795077c-a8d1-482c-b0f3-f9af28bb21bc", "sighting--a7da3556-b71a-4239-960b-92bb3e0e8f24", "sighting--940713f4-622c-4334-9ace-166bc6886516", "sighting--31efb402-b6cf-4b90-b53b-0fb906af8765", "sighting--5ee0490a-5b93-4d1a-861b-b22adc012f94", "sighting--65345f24-2a0d-4306-b9b7-daeb1c653a05", "sighting--4459fa32-1776-426f-85e3-a75cda4fd615", "sighting--38657b17-c424-40b5-a37b-80aeaea183f2", "sighting--06a47dfd-6bfc-46ea-8b7a-6f1432ea3e2e", "sighting--b9685a26-ab1d-4c83-8965-86e2b8cc6fbb", "sighting--63e36a1d-8141-4a1d-b2e0-de2ea9aa3d5b", "sighting--e5cf8fec-d0e0-4d4b-a0f4-f7e31743114c", "sighting--c7f50443-ceb0-4da3-8427-afb2b7c03889", "sighting--914d9010-dac9-465d-a837-d38231fdfb56", "sighting--e4708316-9c64-4c66-b6fa-86e95875d643", "sighting--04d417f8-52b0-43ed-9c2c-5562daac0694", "sighting--1d588e7e-cf40-4ae3-a295-29dc31cd0f45", "sighting--2405775e-6d77-460e-bb67-8b4120247c9b", "sighting--051df40f-c738-4fb9-8852-3166457ffe88", "sighting--1f2f3897-8bc2-4295-a61a-a10a362e84cd", "sighting--037ef521-4ff4-4748-b2c6-8c85dab7f35e", "sighting--36f6c9c4-8b13-4026-b652-85ec88614ae1", "sighting--3874e70e-7e5c-4e27-a629-a97f73904e12", "sighting--6c7f48b7-4f84-46e0-b232-7e7984880913", "sighting--aee53004-060d-4b7c-a28e-f415103dc00b", "sighting--a0aae18f-ee64-4ba5-a7c1-bc995fb02e46", "sighting--6eedb6a2-f264-4046-82ec-0fa3a46f143d", "sighting--b7e9d327-e597-48e3-92e5-7cd83e652ace", "sighting--7b68985f-e2df-4c62-98c8-e06d0d76c442", "sighting--fa1f6bc7-e537-4e40-ae9e-4fad16956bcd", "sighting--aeeb04c5-819c-420c-815b-159a918b469e", "sighting--1fbdd7a5-8c29-4938-bbf2-d8b176ff8014", "sighting--6741f75a-c7a3-436e-afbe-f2cfa9f0fa2e", "sighting--420e203d-ec2e-4e6c-b8f7-ea0b46317a44", "sighting--d7d61d1c-283c-40f4-a823-1068dc84060e", "sighting--2b4ac191-ee7b-42bb-8286-b7569e26b4f7", "sighting--3186cfaa-ecdf-4274-b80d-948a8ee6b197", "sighting--471c0eb7-9a15-4d13-b2a5-23dfcdc0d629", "sighting--a352dc05-8548-46af-8e6d-55a8ab87f284", "sighting--b82c5f10-b606-42d7-86ee-96cb753937f7", "sighting--7dca1cd6-7f52-4066-9ac5-1ded6b110fb0", "sighting--31181512-4fae-434b-a92c-89e829e5d72c", "sighting--8b8ea489-6e5a-4949-92e2-d067dc31e989", "sighting--938349eb-0c96-41cb-88d1-705250f57e67", "sighting--3db2f01d-9417-45a6-a4c3-5f1f092758f4", "sighting--060900ad-32f0-4e07-bb5a-224b765561d3", "sighting--aa82d388-7303-4510-b8c5-39f2d6e7cc42", "sighting--b1eeea8c-9350-438b-9a81-58159bf2fd71", "sighting--9745094f-e9e6-4161-beb3-5eb25dbfd7f7", "sighting--e9904394-552e-4ce4-82cd-ab1eab60631c", "sighting--67d53566-59e4-47c4-8d8f-4149d9b3aa42", "sighting--b6ef7c6b-b20f-47b3-9834-0343aa78df62", "sighting--c49a29b8-79c7-4a99-b56c-8a534cbe702e", "sighting--6ad03b31-43f8-4e18-a637-12f77676f237", "sighting--5d1e305a-d834-4d9f-b6e1-c68b900ddb36", "sighting--ca66beef-9896-45ab-9a9a-85054b6e3b3e", "sighting--23bb41c0-7faf-41c8-a33c-83f134f66e2b", "sighting--619d3ff2-1fa8-48e6-80fe-a6a23bc64167", "sighting--39a3bf3c-d18d-4918-8fce-80ce94df4a8b", "sighting--dd639c5d-4b4d-4229-8e62-e08707ff1d91", "sighting--cc72660d-68f1-49a2-b415-c435a514f67d", "sighting--c86b666f-4287-4990-a7b7-c82f1e0fcc09", "sighting--f9156055-b626-4d8c-a16b-73a29b39b305", "sighting--2e81a9ed-22c5-48ef-9001-e163c6fc6b33", "sighting--d89c5026-242b-4f36-87a2-6bb843686922", "sighting--9db7221b-5458-4a94-9034-a8c66a45ea27", "sighting--ab6edc16-4aa5-4ef8-9888-43de02bdccf1", "sighting--92c82b8a-929c-4a74-9400-44284406eb6a", "sighting--45a3b2ca-54c7-4f00-b3e0-5842df77262d", "sighting--8e208c88-92f1-4519-b228-e254eef26ac4", "sighting--d7c69476-ea02-4e3d-9917-35a56cd64059", "sighting--9970ad19-4e5c-4fb2-965d-99940eb00c01", "sighting--dac9812a-5f2f-40b3-903a-e1d433e0442f", "sighting--00fd748a-c5ad-4a7a-a3a4-f15331554d0d", "sighting--8a4d926d-c765-49bc-8c97-8a58c3a55fbc", "sighting--386912b9-b2c5-4e66-a54c-950fc9debec5", "sighting--3de9a27d-b0a0-4e9e-9736-94c5fab6acf7", "sighting--a76a1050-75f4-41c7-837a-932c508dc98a", "sighting--3d92b280-097c-47c3-8ba3-a7e65bd75345", "sighting--37c1a493-a602-419a-83a5-43ee2c059766", "sighting--0355153c-1048-472c-9e53-fe6f3b7c907f", "sighting--7bb1b3e2-7af0-4cd2-8d3d-0d0276850109", "sighting--fd71ef11-c2d5-4fb1-b93d-55921cd60126", "sighting--287be0a6-6dbf-4300-856c-85d63c2377c9", "sighting--05a3bd89-20ba-4587-acd8-64a1f498cafb", "sighting--91509e79-f6e9-4361-8a8d-5f33ff71fe8b", "sighting--9e307183-f969-45b7-babf-48806f55358f", "sighting--75c890c7-26f8-48f3-ae4b-39e2bf6d3213", "sighting--2717f447-3577-47cc-a355-fcab6f347d53", "sighting--f0d76f37-7e87-4a78-b082-6a4ae80bb6cd", "sighting--265cfb23-3482-4016-be15-32e7fbe32ccb", "sighting--a08635a4-c683-4f89-a096-b2bfc5d0d466", "sighting--ba8ddef5-7ec7-4a65-bfeb-46c1d90e2850", "sighting--9c1c56a1-ce28-425f-9c83-e7f695a9af08", "sighting--f6b73eae-6a55-40c9-9777-096a73458f02", "sighting--5d75060e-6d08-4033-91b6-e63f8a6e2a3f", "sighting--4f30ea6a-aa53-4969-9086-1878cf803423", "sighting--08e7f76b-ea25-4b1f-9c97-011d28db3d41", "sighting--f8972bc5-409f-4e66-af75-6f0632949bcd", "sighting--ee833fd6-cf81-495d-ba82-c315b450a7a6", "sighting--5ab6876e-16c4-49ae-a851-f22a7c6c332c", "sighting--30991c0a-dfc3-4a97-b08d-504132dffdd7", "sighting--a478a87f-dadd-46c7-8294-2b03a140c81b", "sighting--a89b9311-c834-454b-9a19-e04865a02fbe", "sighting--6cdf8a4b-4caa-4207-bb3d-7957590444f7", "sighting--321ebeed-8ba0-41a8-8f51-6702b018e7b8", "sighting--7b04ae58-a13e-487e-8d9d-e0f774d422ce", "sighting--58a76b57-4d7e-4a15-875d-97582ccfaa0b", "sighting--1fcfa935-6a65-47ab-94d9-296f727de84d", "sighting--d882d926-a75b-445a-99a7-c75c2bf154c7", "sighting--dccb6f77-500e-4e5a-bb2a-022559ac76c7", "sighting--3797b458-001a-493d-bf8a-ef6026823356", "sighting--65bce477-f306-4575-bd47-f7fe8aa3eb7f", "sighting--13f97886-3858-4400-ad07-14ea8c70b539", "sighting--71da672b-2190-4a1f-87ea-b6e1ffc5c48b", "sighting--c5aee574-10e5-40d0-aeda-dcac7e606fb4", "sighting--1b029c85-4aa0-4bdd-9fe9-513f25e05a7c", "sighting--8bd17277-3100-47d5-a545-9046e7a4b914", "sighting--c84d0b8f-0504-4c63-80ab-5949d70fd6ba", "sighting--d50c7db5-3ed7-4420-850f-615f4d66f254", "sighting--7b400f62-9347-4e61-b615-2a0b7aba7ed6", "sighting--48973eef-9c00-4ec6-8de1-c4aa0ebc67bf", "sighting--694b7d39-537b-4ac0-9ea1-51b70153708a", "sighting--b2695d63-1cd8-4222-805f-66c723ca1acd", "sighting--4d7b8cf0-eb81-4fc9-b349-4636e1ff61d0", "sighting--88df69fb-d203-4a90-ad96-dab203509395", "sighting--e8a67028-396a-4440-8a8b-c59d434ad9ca", "sighting--720e0b07-70e8-49e1-ae5d-1c046e692e42", "sighting--c0dc005c-ff60-415d-a14f-cf3adc899bed", "sighting--d2ce41f8-0271-49f3-9bc8-6f1d5d3afe2a", "sighting--9e33b28f-da27-42d6-a0a5-9e82972f3cd5", "sighting--b3bce65e-2da9-42b5-9670-659c1e841588", "sighting--95e75fbe-5bdc-4c93-acec-d0df4ce359cf", "sighting--2eb27142-87df-44e9-86ee-d25f1c12dfe4", "sighting--b2ea9824-68cb-499e-ab9b-a820351f678e", "sighting--0c1c3e8a-6c08-499d-bcd9-1b48adf6166c", "sighting--e15e994a-e2c8-4e86-86d6-f95dc72514be", "sighting--5b06100f-7b15-466d-8160-5d14c40f18bb", "sighting--20eb1dc3-7088-4629-96da-e9e4717dcdf1", "sighting--63c26ed0-0f61-403b-8d5d-9792d7400ee7", "sighting--e0a417f2-f430-4a82-ad92-2658800636e1", "sighting--c68f5dc9-d7d8-4911-895a-83f535867468", "sighting--acbaf796-e42c-47eb-bc99-fa94bd953a09", "sighting--3008a689-6d80-4f24-b5ad-bc2e83f3589b", "sighting--372d22e0-5907-4bfe-9412-78231b8280a6", "sighting--0a5ee591-78b8-4e6c-bce9-6e0a17a99f33", "sighting--aec72216-df2f-4469-b674-2014dea65a5d", "sighting--2ca01b7d-30b2-4508-b6cd-44e529130684", "sighting--252c2c30-d52a-4bf7-8315-7f160049748c", "sighting--b052903f-5958-411b-b10d-2c71a86893f3", "sighting--c25b2dc3-1dc0-42d8-901b-1bda02f84216", "sighting--7390d9d4-bad1-408f-808d-cf90586a60a4", "sighting--8f30139c-586e-42e9-9003-9e771f097f9c", "sighting--9f5faf41-e91e-4b15-ade8-3a1ff5c20fa1", "sighting--d2474e4c-1426-4f83-bceb-d45c92faf3dd", "sighting--dd3622a4-ce44-4897-813d-967cfdb9f98a", "sighting--22119540-2c0e-4d62-b556-17ec07caca7e", "sighting--2cc4f33a-7073-4b85-8740-0b77a74babef", "sighting--2846c949-1056-4acf-be67-ed4866e7c584", "sighting--5e9d3782-c5ce-4f4a-9a09-1fde9dc782ff", "sighting--82db60a5-4b49-46a4-b759-11c80d98b60b", "sighting--c7a9f64a-9cba-448c-95da-8574e00cd4c2", "sighting--40729685-fdb4-4972-bd2d-e7633522a9ff", "sighting--7cac7efa-4cb5-4176-b374-5e366254e16d", "sighting--c20e646e-d856-43c7-ad27-1f49ec63f972", "sighting--f6065811-b073-422e-9518-a6e10e845610", "sighting--852d03bf-c2ee-49fb-a7c2-e57200871821", "sighting--9995384f-8839-4c0c-9178-f25c9411201b", "sighting--74cbd312-f628-4d33-9cbb-908a0d92fab1", "sighting--3571c135-ed53-40a1-8624-ef042d537bde", "sighting--1ed6a75b-618e-4833-8ee7-d0647d671e47", "sighting--87088b49-a4c5-495b-af37-e73d8d686cb6", "sighting--a2e98083-41e0-4b16-adf2-e591e736c763", "sighting--731fb9e6-4d1f-45bb-83ff-dbbce017ed6c", "sighting--3b48bfb5-f337-4f16-9c8c-3395c5d9cf36", "sighting--12ad33b1-48f6-4373-b1e8-765d7db10801", "sighting--49ade44a-0fee-43a6-a4bd-0e4d0923a2a3", "sighting--be94f367-c314-4dba-8ffa-d5e4ac373b94", "sighting--4893763f-713e-440b-994e-eb8e99d91f0c", "sighting--7aa072e6-bfce-4aad-9527-7aaeee6ba1de", "sighting--0c3ddc75-25b3-4ccf-ac84-3c4d37bd3c68", "sighting--a776352a-6240-46a9-9d1e-e3d648a7b3e1", "sighting--57ecb308-89bd-46a6-96de-c72f9797f3b8", "sighting--21945ba4-dc91-4685-93df-1003a5d8729a", "sighting--a8c044d3-d35a-4abd-973f-f137e17dae54", "sighting--11a6a639-347a-42e5-a91f-d42ab27cac97", "sighting--56d38b6b-b3eb-415d-bf0f-55a5d8e469fc", "sighting--3360f014-9b31-48aa-80bf-edd4e5c2a04c", "sighting--3ae06f00-fd13-47fa-be77-77d0565153f6", "sighting--1701ff44-0162-4c84-99a2-1589acfe8f2d", "sighting--f40d3e4c-49af-4df1-8c90-6485d21e9254", "sighting--802a7b80-b779-4f79-ae3f-24d73e7ae0fb", "sighting--4fbd3510-0db9-4197-acd6-6ee7682d8813", "sighting--bc68c8b4-76ae-4543-877d-a01debcec4b7", "sighting--709f54eb-4017-4047-95e3-d7761919f704", "sighting--b2772f65-002a-4266-b1e9-7eadc9a4284d", "sighting--d1972ee6-e229-4694-b4ba-3a375fa6eae7", "sighting--46b616b7-cd9e-4f69-8c5a-9f369f4f8540", "sighting--356ac15c-bee0-46bb-9afc-eaf21a46e55d", "sighting--7e7eb0e6-3183-40d6-9a9a-11b9914b2792", "sighting--3501d77b-f5fb-4f57-9aad-8a321ceaab0a", "sighting--578a6f97-c1d2-4b53-ac3f-7f205348aa1a", "sighting--10383e8f-5018-4fa7-8b82-b7f7606eafd4", "sighting--abeea1b4-5e7c-469a-939a-7c7b0ce3e575", "sighting--c5ce5b0e-5a13-416e-a4b7-e4dadfc52728", "sighting--f956fb8c-aeb0-467e-95eb-20cc9c64e765", "sighting--4441fe04-9239-44c5-b6a7-4d9f1b9ceba6", "sighting--8dbbb29c-4413-480d-bd8f-daa028f4db96", "sighting--4dd4640d-e6c7-4d7a-84ec-30e17e0e33c6", "sighting--899d98d5-df51-4af5-8f17-e0c8fdfe9d5e", "sighting--ce0fba5d-5449-4204-a4f3-69c0562fee06", "sighting--dd4c894f-bbb5-4ff9-8e0f-b7ac1edc5f9e", "sighting--9801582e-e1a6-403a-80ff-81e788f74d0d", "sighting--018abb82-0fcf-4446-a8c3-e9ebd2d9511a", "sighting--a6cdd9f5-87ac-4684-8ab7-007a7f1dc5a1", "sighting--37f7f63f-1fac-4cf1-8e5c-ca9ef71421b3", "sighting--423e19e0-7b29-4c10-b816-74bbcc08908e", "sighting--9825b50e-e3d6-4028-9ea7-3adafebf5178", "sighting--290c3b88-b94c-4e72-9232-9d98481dd793", "sighting--08800387-243a-4a2d-933e-d3a174863453", "sighting--c3cad43e-aac8-4ca6-8160-34f22929a2a2", "sighting--5cb604d9-5f10-4340-866e-cdcb7d0a0846", "sighting--f928ba98-bc6b-49c4-a579-e825312310a7", "sighting--d7b45882-8ab4-447f-bd66-d1548bf26af3", "sighting--f93a8a3b-00d1-48b3-b1b2-7161340a9fda", "sighting--7679469e-250c-4a83-a2ea-cad056172f2a", "sighting--ba4c7abf-1c6b-420b-8d75-ccb2b351163c", "sighting--ea32bb94-ffc6-4922-bc50-faffe1a5a945", "sighting--acf5b493-a829-4c02-9344-ce6f817d29b5", "sighting--6e3d674d-e9f5-489c-be1a-983ee92e1556", "sighting--73e99dc6-8c9c-4df1-8f2f-3d052e2a8ee4", "sighting--020b84d5-3c47-4f9b-b443-12b17eeca6a3", "sighting--7476a5ce-b587-4c8d-9810-037ca07bc4da", "sighting--51a7d399-24a9-4318-88c9-f2e0711a66b9", "sighting--ea15cbf2-d1e9-4c3b-bd87-8966d6e041f6", "sighting--fbdd15da-a0c0-4762-a5e5-d32c02a6ec67", "sighting--755941d5-3b4f-4129-a400-ea0a20708d95", "sighting--3f1c1923-b404-4b06-84ac-609ae4061856", "sighting--9fbf0b5c-cd00-4f66-afec-042ff52ff502", "sighting--8019b991-a305-4dc9-a705-322d87e16e95", "sighting--b2d6a271-23df-4466-8802-e729b387394b", "sighting--bdcd45c1-0a39-49ac-a53f-a27e26552599", "sighting--96e28b0e-df12-4dfc-b46e-7a1093b49dda", "sighting--96cf80c3-f244-453d-a8e3-ba8800586f99", "sighting--e820ebcc-bf9e-4076-bf1a-3288140a195d", "sighting--c5f05a08-3785-4876-8471-59306c06e75c", "sighting--1e22d8fa-cb5c-4bf8-a1b1-996105aaac3b", "sighting--190a0908-4fc8-47b3-8e91-d11816b5b732", "sighting--410d5af3-5cc4-4777-b4f4-c10ec4d0e833", "sighting--d4bb8095-5de1-4299-9d49-77f5bb5e44b9", "sighting--c30b4eef-8cef-41bb-95aa-c95db0be59ac", "sighting--88b247e9-31c9-4391-b9c7-cc8c97478b99", "sighting--31fe3de0-0cb2-4817-ad46-e361fef66496", "sighting--937480a3-5aa1-4a38-924f-cc727c7f47d9", "sighting--17bed06b-8eb5-4eda-a6b3-dd78a52beb93", "sighting--47759ebd-f529-43d2-a612-86b032e121f5", "sighting--fc668c72-df37-4d02-b0e5-05a75fdb3731", "sighting--32279f4a-f937-47c1-a9e5-6effcac7bf75", "sighting--a12980f9-7b49-4d75-8c7b-bd79890ce6e1", "sighting--26fe7ea0-ccd3-465f-add6-0fd38d5edd0c", "sighting--213cc3d2-150c-4e3f-b0fb-87b02cd30ffe", "sighting--10974294-72f8-46df-8725-507faad10748", "sighting--e4a9d9d4-44a1-4841-97ec-da19869399b1", "sighting--465747cf-c9fd-487b-8bca-cdde5c476f5b", "sighting--ab56d621-2e23-426a-9bd1-85849cccb260", "sighting--1d9a390a-7394-4fd1-9c27-16c37ada8f40", "sighting--3eccdb35-077d-4c3f-949b-9c77fef10903", "sighting--f46871d6-60fd-460a-9baa-9a235b7f1749", "sighting--22fe98c1-a0bf-4791-8b95-29c42b84f538", "sighting--7986f6a5-357f-4d33-977f-72f903b401d6", "sighting--dc1a1a03-cc21-4406-bf1c-627c3345c4bf", "sighting--18629e08-a773-4daa-85c2-6f751c62b60c", "sighting--075f9efe-42a8-402d-8972-1042640e89d8", "sighting--aa1fb8d1-a0fb-4261-9384-2a520eb40b19", "sighting--1218b450-bdc8-487c-a55d-e5363860be5f", "sighting--fec90b03-186e-4781-a208-55395dd3060f", "sighting--0c9f36ac-d9f5-412d-8e12-2ea5ab0d3924", "sighting--009bced0-bf5a-4418-99eb-ca4aa52ea323", "sighting--bb4333f5-0d1a-49da-b6b8-6e7cca9bc37b", "sighting--d2dd85da-a6bc-473f-945a-38c67733aae6", "sighting--aa01ed6f-b938-4dc2-a861-3abf17a56ca4", "sighting--61123f82-e4d5-47d1-8b18-f764829a83b4", "sighting--c66deb97-8c0d-468c-9bfb-69035191335b", "sighting--8186667f-ed6c-40e7-b24c-7cd86abc4a3a", "sighting--631eb958-1b68-4ddc-8d87-93d99a792d49", "sighting--65438685-580d-4f1c-9e7d-fbbfb922acec", "sighting--0203dd36-669d-455a-99c7-2a1bb4527d81", "sighting--a24094e1-9026-4cc3-9686-0a943d0e05e6", "sighting--788123e2-c3f9-4eb5-9780-b2a6299427c2", "sighting--eb1e109b-8aca-4014-ac5a-a0652ebe2854", "sighting--f12d1bca-6686-4ca7-8476-2fa61ca16675", "sighting--503f12a2-b27e-4bb4-a554-190164c6291c", "sighting--aeffe3d3-1430-4615-b2c0-a2d45a4f49f2", "sighting--f633b5e9-930b-4458-b9f3-7c32c5d1fc86", "sighting--b32910c5-32f1-4bb4-9174-ae4f20b2e245", "sighting--60fd1a26-0aa6-40b7-ae36-dce107515046", "sighting--a36f38f5-fa48-4f73-b774-7396e71bef30", "sighting--244caafb-1d0f-4382-9d82-12eab12b69db", "sighting--94e17d0d-2cfb-4f94-a2c4-84d9df6b2213", "sighting--c93e3515-82c2-4fd2-b0ef-c97aad9b965c", "sighting--dcbcdb28-4971-409d-8092-1186831f9b80", "sighting--b4c240df-f50d-435e-affd-7e1743ae16bf", "sighting--2e56bbab-44bf-4826-93e9-cb094ff9f8a1", "sighting--d3824d7d-ea38-4e14-a28a-8f218b89d062", "sighting--8c6cfdc1-ccc1-4660-8620-4624d6c4e9cc", "sighting--46f59eed-17f3-4757-9433-7823af5afa33", "sighting--a0a6f95b-ea9a-4663-85f1-4c8c099eaf41", "sighting--49003c2c-44b7-4eda-98f1-a460ae8b9a5d", "sighting--3de8f38c-830d-41df-a522-5e51eb1fecc5", "sighting--d1a4a286-d145-4e98-8d22-85b5ca3ee4fa", "sighting--8c4d585f-8b42-4fa2-9e55-652a93a04187", "sighting--d7e5aa6c-b973-4898-9e00-cfe2eb57acb4", "sighting--6d702ad1-8993-406c-b770-d3f9c901cae4", "sighting--4871e91b-901e-463e-bae6-1ecb0a3f0b61", "sighting--6fb748a4-24a0-4e03-ba87-3b50a365686d", "sighting--dc52e934-b34d-4e36-b63e-d38c49ddcf51", "sighting--bd41f195-11d5-4b88-a500-d0318fea44c3", "sighting--27f431c4-a5bd-46da-8360-eb438001a4c8", "sighting--2988f377-c09a-4226-9670-ec440d85caa4", "sighting--a2486cc0-e79f-4b29-a166-43f801beea65", "sighting--1524dacc-b06d-447d-9e4f-67ae392b268f", "sighting--8114b67f-f218-419b-b3db-b3182fc0a547", "sighting--73b48b44-0843-4bea-bf8c-04a8bfc028ca", "sighting--513735e0-f3d9-4862-9ff4-937169a0de00", "sighting--0eb09414-52c2-44bb-8c3e-98e55c20bb82", "sighting--1fb2ca7a-1d34-40a0-8130-ea4186f3285c", "sighting--b6956e31-ff1d-495a-9f7e-8808fe8d37c8", "sighting--8eb78940-8ee2-4686-9716-fc43ca154679", "sighting--06d12b0c-a9e0-4ef1-8e4c-888892ff482c", "sighting--9c32607f-abb0-4738-978c-117f6752bd39", "sighting--15f57e64-2858-4a0f-b150-fa9f1d6798a8", "sighting--7f6f0657-c571-40ec-bff9-adc246899072", "sighting--5d362855-8aba-4556-b955-178098f5c903", "sighting--1c6da140-0e10-446b-a4e7-43aeff2da39b", "sighting--c7ba964f-cb31-4562-928b-161ef982b45d", "sighting--7979752b-d531-4490-96de-d9940f8af004", "sighting--a84d16d2-22be-452c-ae29-0613a64af2f1", "sighting--5accf916-6a8e-4124-9238-4527b9a47e8c", "sighting--8890eaa4-cf89-4059-b7dc-4cbdfe6b3b64", "sighting--15e0d812-2ef0-4c08-a3bb-f3d10d34a016", "sighting--1a1d12b9-afe0-4e24-957d-7c49577c40e4", "sighting--9582a4d1-9a4e-42cb-95b7-c216beb8348f", "sighting--932b7d94-3817-454f-96f3-38259e88ac69", "sighting--0b16d81a-a9ad-45af-a8c8-744654511ccb", "sighting--fae392f3-a91f-4a96-866f-6a62ffde3ff4", "sighting--6f290113-2011-4e37-913f-6f325ff60aaa", "sighting--f27404fb-05c6-4bc8-84f4-b28142209a0e", "sighting--0aa8bc87-a18f-445b-9846-1f2ac6e46c7e", "sighting--240638a6-6bd5-4ce2-ae9d-c96e00729fb5", "sighting--7213550d-8a64-4051-8dd6-4e77f9e9a2b7", "sighting--19775d4c-a50c-4e30-9913-038190fd3eea", "sighting--a9a9ca1b-b271-469b-bece-3150c162448d", "sighting--c421f8c9-8384-4f98-9a0d-d0ba579f8550", "sighting--ae7c5bd3-8292-4216-9f2a-bee47917993d", "sighting--e5ec5a4d-990c-4f51-90dd-e9da079179fa", "sighting--74f15a75-f7bf-42a2-b139-2da478c01701", "sighting--45dc151a-9ded-4861-9d59-155d7778ef0f", "sighting--f7c2575f-383f-4f08-85c2-e31fdbdd2e5f", "sighting--57422384-e92e-4fd2-82e8-3f5cab19874f", "sighting--6f16859b-9e70-4927-b71f-85dc21e0c1b0", "sighting--47466083-aa82-47df-95b7-3bd0286fa968", "sighting--fd4e30cc-c633-491c-8ada-815165a1f263", "sighting--66d3ecdb-960e-41ad-ab63-04edac5d82aa", "sighting--11a50268-2a11-46b9-b56d-36688b373efe", "sighting--3b50eb6e-ef91-4f98-9d28-82e93367a26e", "sighting--42ee1091-1efd-4931-80d3-300737aa0a6a", "sighting--0e82dd79-8cfe-4b2a-a8f5-f6063bdf2dae", "sighting--b31400e4-a220-41b8-a6b0-0a614168197e", "sighting--71e1c395-38a7-4701-b990-f7e64a8c1680", "sighting--0375f584-10e9-40cd-a0bf-0063b79b3e03", "sighting--37a1fa94-6019-41b1-8260-a3a36973580d", "sighting--45d2a239-e877-4f67-ab86-b7a5807eaa68", "sighting--506715f0-38d2-4003-9dd9-803af14fab12", "sighting--6b77f73b-402f-4d99-908d-b97bc3606f4f", "sighting--3e53229c-12ba-4d75-aeae-7983079fed68", "sighting--2199911e-16ec-495e-aa9e-09442d847f33", "sighting--3316bd7d-d04f-473b-acf1-c51b5e2ef181", "sighting--f2fb5c00-119a-44a9-9bb3-5d91dcf63170", "sighting--87d5abe5-039b-4b9d-9f52-4e387a6ab369", "sighting--e292f86a-d1b2-47c5-a9f6-ec6f86512771", "sighting--74e3abff-e478-4845-bb44-6610869a3890", "sighting--3cb5d4cd-690d-4e2c-9dfa-05291df980ae", "sighting--e8b33a58-1ccf-4724-8089-c0ad916d1a0a", "sighting--8710bcd2-c668-4e3c-a134-719666065782", "sighting--84ad6ce0-1c6e-4167-9737-b4b754f1a9c3", "sighting--a49c07bb-2ddc-475e-a55d-20db6459d1e2", "sighting--2389ff91-f387-4caa-899c-6264ec43b489", "sighting--10780a33-bda3-4ad4-9d30-82a5cc8357a7", "sighting--7f00cd5c-3aa8-4c24-9505-3e71ca7300be", "sighting--44da2932-c7f9-4a79-a53b-769e03b7ee8c", "sighting--cc8c60f6-a1be-41ca-974b-7d967e5e64ac", "sighting--55d75c0f-b7a8-40a3-ba74-abcf3b247ac0", "sighting--a6d2d469-102c-4545-a1ac-779985ca1cc8", "sighting--dc6184d7-c64c-4524-b419-255c791cb51c", "sighting--79b6ce76-f20a-48f5-833e-5081ad043666", "sighting--42231923-437c-441e-9109-f2baffda1a35", "sighting--a791d466-fdc9-4670-9ae1-ff2f043be192", "sighting--087d0af1-75e6-49fd-b755-3651bca2e615", "sighting--59d23480-cede-40f3-928f-460a8ba1c76e", "sighting--2a97284e-cb8f-4cbf-a2b3-8347eb0a9f7f", "sighting--ce87c3ae-c72a-44f6-b823-cea716d8c50a", "sighting--0462c986-0da2-4ec7-9217-9acc36a3ecd5", "sighting--0424cd66-5c36-4126-803c-d8f102994883", "sighting--c956432a-99c9-4316-8a8e-e1af7c07a3b0", "sighting--2add794e-ec83-4cab-bf07-aeb98d0066b5", "sighting--9a7a1b3d-996b-4451-86c6-d7e705fed9a1", "sighting--086f2b78-387f-4177-8e6e-e68a9faa9065", "sighting--4363b3b8-3669-45bf-b804-da08412a0d37", "sighting--ed113883-9c2b-4b9f-b348-389b807ab336", "sighting--f6f5ff04-d4e2-4494-b142-9a81a7aa2e0a", "sighting--62cd8dba-0c20-4e4a-beb2-67acaad02a57", "sighting--a013fa90-ac60-4bae-ad44-50b7c418f740", "sighting--fcf87639-4d08-4697-9b30-18e93b3d309a", "sighting--c5eaef57-c169-4b31-8770-8e99562d68dc", "sighting--e2d77d5a-7f25-4b85-b82c-5be61476cd1d", "sighting--4b880736-268d-4115-9754-145c0cbc29ce", "sighting--d488efe6-cd64-43eb-82e9-9823931d4868", "sighting--d77188b8-7df5-40c9-9bfc-e1841789d581", "sighting--735da29a-0e8b-494e-a0a4-ce9d1d780997", "sighting--9bf15947-4268-45c7-b77f-4de19eeb1987", "sighting--d0e96483-9494-4065-b3e5-a732903fa354", "sighting--4bf364d8-b318-46e4-b891-eab414e8e04d", "sighting--dd3bf1d8-8e13-439e-b7aa-ce3c30484ea3", "sighting--fc486fa6-97a3-4d61-addf-efc875baa63d", "sighting--b5e4538f-7718-4ac8-ab48-579107bd7a01", "sighting--c5dcb66a-86fd-4997-bb0c-66106da63ad3", "sighting--dde7cbcd-0da3-43bf-a57f-f0c2a9eaac62", "sighting--06703845-0602-49f6-bd1b-6267a52b65f2", "sighting--972d1d38-04fe-42a5-8538-ed799ac11533", "sighting--1bf0196e-bc20-4c1a-9229-b9249f09fb7c", "sighting--e3970b65-710f-4548-95df-0b7fb3bfda65", "sighting--8ae1737c-ea76-4a8f-b758-e911a0b82d10", "sighting--93f84451-0611-4f29-93bc-27c3979a1df8", "sighting--395e9a07-5424-42d6-8ba3-6e63a20fe46f", "sighting--521c07dd-a03e-4cc9-b604-95371d142af5", "sighting--dc43936a-1181-4454-9279-9dd614b550c1", "sighting--306b15cd-94fc-4ad3-b8a7-02bed45a90b2", "sighting--ddfc2c88-a2e0-4b9b-bfbb-0117d923c13b", "sighting--fbd65104-435a-4085-bce1-0ad3a03af2c7", "sighting--2a6fbbab-e93d-4422-8a8a-36509ef1786c", "sighting--b73cf2bf-f666-4773-9771-fc6b533957fc", "sighting--82f4a1fd-933f-4a9c-a347-eb82fb1e5fcf", "sighting--50f40184-39c3-44a8-b9b8-0e0627e0cd4f", "sighting--9baf009b-0967-45dc-b069-eed56ffbf944", "sighting--7d774b6a-dd80-4aad-a5d8-6ec68b046af7", "sighting--beb61b27-85cd-440f-871e-f121e1104fb5", "sighting--4f11764a-0ca1-47cc-b506-04b22852e5d1", "sighting--5f105862-6942-4fb4-8a30-bdd207f21259", "sighting--907b07f8-33c7-4e82-a5bc-4b05dd605f65", "sighting--c46a4fa3-0b49-430e-b39d-29384c604512", "sighting--dac3c268-95fb-4293-94da-2a2c8a5bee59", "sighting--c8bb7a49-899d-4304-9b65-6029e2b979b0", "sighting--751cfddc-9234-415c-a0f4-4db3dce90fb9", "sighting--1eec962a-500a-45a7-ae8b-71068b7d3963", "sighting--10d72c5d-5254-46ea-8160-eaf3269fad22", "sighting--4a60c60c-37db-4510-a5e6-673e99fd78cf", "sighting--bc0b91a4-8b11-4834-8347-10bc8ecdff4b", "sighting--1b03e00a-d7fc-4e64-b8e6-8f65c7386c59", "sighting--c8cd9984-8854-4b1c-a370-e3e6575d32e2", "sighting--b46d4fda-83b5-439f-8513-1f7fa6ec2cc3", "sighting--5d0acc8b-e3f9-4105-8f1d-270152156c5f", "sighting--0d77e6d7-0d18-4afc-a592-98050c6ee212", "sighting--7672da2a-b010-40c7-bbcd-565fe6b7d74f", "sighting--88c2890e-1aca-421f-ab21-db6f9820599c", "sighting--805c5e59-32a6-4dcc-96ff-6254b9ec8e6d", "sighting--3e26f452-52bd-43c7-8a03-d2f017b636d2", "sighting--02d079f3-95c7-4b7e-a182-19f6a76ec495", "sighting--e0162c88-22cb-4d6d-a2c7-952cd9dc0701", "sighting--4e30d6c5-23cd-453c-8e99-032d1a15750c", "sighting--27d115ba-bdc1-4a54-b52f-40796cf5ce27", "sighting--b2151b6e-dd4b-443b-9028-257800158f66", "sighting--d183a44c-6557-4ae5-a55a-f57a361d9e17", "sighting--45c2a0ce-84d7-4735-af59-f6c8ab3b043d", "sighting--6659343f-52b6-4234-ae88-a6f5888d690f", "sighting--ea7a4e55-24b9-47d9-9859-9b3eacd67827", "sighting--f1ee59be-fd22-446f-8430-82290fe89892", "sighting--abe6612a-ddf2-439b-a3d9-de405e32aaa5", "sighting--e60b7045-84ec-4e6c-a5e8-87ee80e18357", "sighting--17353edf-b0b1-49d9-9d1d-a6a96c624c44", "sighting--a5a58a46-a9bd-459c-bdb8-483004390c7e", "sighting--ce15e6a8-758f-441c-ba6f-6670b6c7864c", "sighting--2af474ab-6905-4e8e-90c1-a9f963a3c38f", "sighting--856785db-9021-4077-a10b-c285a4ebc592", "sighting--bf27af76-d2ba-4ad5-ac9f-0308bf52e341", "sighting--e4aca04e-4ecf-4e13-8ddd-2a2d7369cc45", "sighting--2b4ca134-3bb6-413a-9517-bef5a11317a7", "sighting--ce78465b-d971-48a0-a292-53b70ba2fc4f", "sighting--7e4e3680-4560-4805-b307-50d03f5b7f0b", "sighting--8e7f306e-cf40-4985-8f63-0d87cdc51a79", "sighting--efa37894-326e-4436-8284-f2de14b29f72", "sighting--c545fdcf-9314-4d3a-b4ca-03c78321731f", "sighting--cfc9cbf0-5316-4ef2-b6ba-c7385d40544c", "sighting--893c2209-d0e9-41b0-91ae-126d6c7558c2", "sighting--4f51de8d-9627-435b-834b-37a45a135cf6", "sighting--08dfe772-b4ab-4c83-9853-73e15774c603", "sighting--62fc89a4-24cd-4bf6-baec-8b2a32a9edfb", "sighting--7c60eafb-c074-4a09-8cc5-d6274d6d4fbe", "sighting--9342cc65-b22a-48f1-aa2d-36ff6f562d95", "sighting--d427531e-2469-40d6-8182-b7141a54bcae", "sighting--2fdb5ed8-ef88-43d7-bdda-8bc9ba4448af", "sighting--6d247b61-027f-4c3b-a904-d7caef673082", "sighting--f2f8b72c-05c7-4673-ba21-78b027bd33ea", "sighting--ffc90ee6-3518-4f94-8142-43d4acb82c0c", "sighting--e5aa3262-652f-445e-b55d-4202c2c27a14", "sighting--212c8aa6-c083-40a7-836f-d825e68198a7", "sighting--08f89bff-d4de-4520-b577-55c49558d521", "sighting--b91410c5-4f26-45ac-8180-8eed02c0d51f", "sighting--f98da83b-80a2-4fe7-875e-dcbfb6dbf2fe", "sighting--3b73ce09-8114-4be7-b8f0-4d7977fa40fa", "sighting--297df095-11f8-4883-a8d1-252ed18cd2c3", "sighting--0b8b55c2-37a1-45a2-a788-309e4573a4e0", "sighting--e404abb6-b193-4231-9cbe-dc01d29c3fc9", "sighting--b5aedb4f-a91c-4060-8c3b-c27cd0e9dd85", "sighting--177cc604-7bc8-47e3-bb93-43db062757d4", "sighting--1d5f4de3-c02b-4818-95fb-e6c41fafe3bb", "sighting--e54a70f1-5529-48d7-8c29-b78bc64a936b", "sighting--20a6e8c9-075a-4800-8782-90ec7ce019ef", "sighting--abd9bdb9-576f-4598-8379-e3a3eddc8127", "sighting--70339800-fddb-4757-a83e-c32d5b0a40ad", "sighting--a44b4ebf-03dd-4e42-b5ac-ea30c6a75c4c", "sighting--da2df6d7-8e16-4441-ab84-e31b644694f0", "sighting--2963a5da-0b12-4f92-9ab4-502a6f0c064a", "sighting--c0f4c545-8f3a-4141-8222-f6369ebd7196", "sighting--5d7c6924-2610-42f4-a80f-3e164e4e4f7d", "sighting--eb8cb825-0931-4f06-8cdb-3a87e813f554", "sighting--94edc276-09f2-424f-9982-6ea040508424", "sighting--8f862300-77d8-41f1-a5e8-6e603fcf2b26", "sighting--f09625f8-1e75-4425-9afe-b433a91874ba", "sighting--011dfe12-7230-474e-81ee-2c1a90004180", "sighting--b0f24ac5-7a2e-4762-ad04-dd549598aa40", "sighting--59433015-4f21-4dce-b6c6-3cff1ac37c03", "sighting--3044f7ce-0720-44bb-bcd6-660219febb08", "sighting--6c6bc37b-789a-4e34-bd97-a999990071e4", "sighting--65d4793c-e557-4462-bfd8-849642b82c6e", "sighting--f9eed44c-7db0-4582-8b7e-622f090b2958", "sighting--226b604d-e70d-4e35-8bf9-4873ad998bf7", "sighting--d6336e5e-b2fd-4f16-a84b-e6a36a2b5c93", "sighting--b3288f2e-a03c-425f-845e-85fae11fd1a5", "sighting--2362d1f7-501b-4e54-85ee-b692d8ea37bf", "sighting--54f937f7-fcc7-4f62-9ebc-7a947c8a4b1a", "sighting--3f9b8de1-1a14-41c5-b42c-bdbbc12307c2", "sighting--011d93db-321d-403e-be13-53a341b20a97", "sighting--af082dac-3491-463c-acf1-ba7f051b4844", "sighting--3d3669ac-65a3-4acd-97f5-a864b88b8b78", "sighting--f5f61135-3bf1-4cf3-940a-efa37c647915", "sighting--b3b13825-0905-45fe-92f9-13f0776ca407", "sighting--e1ac0a71-e87c-4b3a-8c46-57573b92de92", "sighting--bb535169-c6d5-4c6a-bfe3-e64ea181147d", "sighting--16f59d98-6dbe-49d4-9600-5c50df325842", "sighting--447a6390-99a9-4f84-b889-2af627e2146b", "sighting--3bce5b8e-7e21-40e7-89b9-73fa80d1261c", "sighting--7079615d-8abc-4bd5-8faa-ce7fc9ebfc06", "sighting--d6c405e6-db47-4f85-b132-092d5ce3bfc3", "sighting--1709fd78-30fd-4d41-8ebb-8cfe325e9a7e", "sighting--849d0499-8fb2-4bdb-9391-347e9c5d1fec", "sighting--45baf852-67ab-4f71-96b4-e8f34e0a45a7", "sighting--cf11990b-0958-4198-9836-408d5f469fc9", "sighting--319b4fb8-0dd9-42ed-aa8f-76f6a1404ac8", "sighting--5f3826c4-c5ab-49d3-a719-1cc6b481062b", "sighting--8bc4eba7-1731-4f87-9aaa-3aaf3b5c3d0b", "sighting--0308893a-ca3b-46ab-8464-85d4bfa6ace3", "sighting--f67b274f-05fd-4a65-a152-b4adf31387d3", "sighting--858bf8ca-dbe5-4171-bc4f-5310233d302e", "sighting--59853f53-d1f0-42c7-8407-8445dee610ee", "sighting--ce3ab81e-3158-4576-b4c9-d1fdc377d630", "sighting--c898e55b-ddd1-4a8e-9b00-4a112e613a42", "sighting--b955c999-63f7-4641-af24-1bc6fa7e2ae8", "sighting--84dc003a-8189-4d64-b531-e2a3933544c2", "sighting--33de2031-0dc0-4c9a-b518-93bb9ea3325b", "sighting--2436dcbc-f0e8-45c2-bb13-08e6811ac249", "sighting--afc2412e-fcbf-4ba5-a9ad-c7a68496ec67", "sighting--6dffb8d0-c653-4d8a-977a-0bad6efa185f", "sighting--cde1b0dc-f7a9-4deb-8e63-7e2790ffe5d2", "sighting--a1298d6a-713d-4451-b7d4-e25d6437ea70", "sighting--30185543-6e7a-40aa-83b4-bb6f3d02d7f2", "sighting--db6a3e05-3f9f-4d84-937e-0174320e96bb", "sighting--c16eb312-3712-4dee-83f7-f30278569c55", "sighting--5ad1ca6b-8fb3-4646-aee2-c355d7bef789", "sighting--69b4f53a-f26a-41d0-b52b-c495f114251c", "sighting--4d9cdc1b-e30e-4f01-aae0-a1f04b1cdc46", "sighting--87de37fe-3378-402f-adf7-4766158e518b", "sighting--f3bacb24-60e6-4b55-8a9d-ca2f2a2b5dc6", "sighting--d19ddd0d-30d7-4c5f-a024-2a88a4aa9b28", "sighting--07760e03-3340-4236-91f0-9da71e2b13d4", "sighting--74394880-3b94-4e50-b9b9-2faedb58b136", "sighting--a54acbf4-568f-429f-b5a7-55d6fe4f916d", "sighting--24f83228-8ff9-4f7e-b7d7-bfca9613c2ee", "sighting--a135f77f-cec9-4f21-b8b7-149f2e9676dc", "sighting--e2db4f40-6751-4a5a-8f33-55a527496bad", "sighting--175cb548-9d1d-4a24-89b5-4f612930a7e1", "sighting--5830cdfb-de01-4d01-8455-260c55ae4b69", "sighting--13ba0292-7dfe-47fe-a276-93230599ddb8", "sighting--861aa7bd-3e17-4880-b772-025670023e85", "sighting--326ab054-2e90-45a9-90f4-78f7699b412d", "sighting--9a6e21e9-0da9-4d49-bd9e-51bbfb89a7e5", "sighting--41da7a4c-215c-42fb-9c13-be5c94edcb2e", "sighting--683c2392-470a-464e-9e72-b261ea4b2931", "sighting--7987272b-33f0-4a32-b1d6-3858e31d7d28", "sighting--32410958-45b0-402b-906b-883d9a1c10aa", "sighting--04004fb1-afdb-46bf-94d7-625fd5fcc8c6", "sighting--ee779f15-cd5e-428e-9485-7d9a5680cbb0", "sighting--2a1f85e8-7ed5-4dc7-b2c3-65518533e7a3", "sighting--1f61deb1-9a85-4b5a-aa40-6ffff2f4a679", "sighting--b1aac811-6ed6-4001-a871-728ec26c1fe5", "sighting--7bcb6669-9c04-49c6-9ba6-a48b7795f59f", "sighting--7804b6f8-9c9d-432b-8eca-574f573296e5", "sighting--89a89ff8-6b81-4b98-9a1a-8f6336108aee", "sighting--1b68f6e6-ca8e-4fda-8826-856f2c4ea6a3", "sighting--46a1fb2a-1ad9-49a5-a1f5-99b202bc8e03", "sighting--d9263a10-f6dc-4c97-8ca1-e881c57f905b", "sighting--2c0106e0-a668-4195-b2c4-0fca4c7cb9d8", "sighting--72c64f27-36e1-4bef-b0c6-2378618cbc1b", "sighting--1637f8c0-3704-4a7c-acf4-6b0f0ad35fce", "sighting--df3b1c23-a434-4b6c-b5e0-83518c307ed1", "sighting--e8579481-b414-4610-9968-639c4fc7a5f0", "sighting--1c846d9b-737b-4e8e-b07d-d7d365293661", "sighting--3ae85399-94f6-408d-ab95-c33717657e6a", "sighting--79989694-2a6c-4692-b818-f1553bc02077", "sighting--e1da068d-518c-4abe-a907-67940bc82e08", "sighting--0b7dba17-1ddb-44e8-a288-e0554bd7ee7d", "sighting--3880ee39-38df-403b-9cc0-645f9735aa32", "sighting--9514dc90-6877-47e0-934f-3eed1c659c67", "sighting--f7cfec7b-e30d-4307-b55f-c30266804333", "sighting--a1938129-3719-4906-aff4-362842c845d9", "sighting--f64a497f-d83b-4953-be6c-844f9fbc4a3f", "sighting--1547cef2-492e-4909-a8a6-69ac1c78542f", "sighting--3869c416-c034-4db8-9a82-08cf50c733cf", "sighting--85ff17fb-4441-4533-9e11-7f3ec2267915", "sighting--173be876-3671-4f43-8276-c6adc9d92480", "sighting--5ca1eef4-fe9c-412f-8614-7f76f3a7f891", "sighting--073b3086-4e2b-4bf5-a29e-8fdc00970967", "sighting--08565f14-4521-4503-9232-7bde065fe435", "sighting--a437b572-13c2-4018-b487-fb10bb2c63b5", "sighting--1ae7ab25-6d4c-4766-be1d-ce4f8b768484", "sighting--7e326673-53f4-48b8-a924-c291ef6dddee", "sighting--9ca7f443-7eae-4251-8a5b-e635c7dc7fe0", "sighting--188d5f5d-3d4f-47cf-a2df-b9539c3d6348", "sighting--de36b78f-fd1e-4ba5-8b6d-c111b204f713", "sighting--109d2a7b-f56d-4224-b487-819bf511050f", "sighting--076a31a6-dd5f-4774-b2bb-452e0361383b", "sighting--059bcc80-2c7c-4682-afd4-fe20078a3449", "sighting--95126b8b-820c-44a8-a397-a2051ba64968", "sighting--29342d07-d116-4fb8-933c-3f0034bd6666", "sighting--0e5e9620-7d73-457a-b78a-71e8f7faa24e", "sighting--faeb4527-1ebb-4463-ac35-b7a9655287ed", "sighting--27540c92-33ce-4cef-875c-963dafcfc594", "sighting--1b8448b7-98c3-49f0-acc4-df89b0be7332", "sighting--4f63b84e-32a4-4e8c-832d-a59bcaee5200", "sighting--e0400087-1616-4818-8984-efe2987d9470", "sighting--8e0d7691-b9c0-4c9b-982d-8fbdc1ed1376", "sighting--116c3838-ce35-4c47-9288-800d9520a5e3", "sighting--5d587e2d-7999-4b87-83d4-bfafb0477e05", "sighting--c2ea99d4-b01d-4223-8246-1ea18a5fd993", "sighting--c1e1e4fa-a6a7-4a18-9404-ff7329b697b6", "sighting--d381c050-cb04-4d13-b151-907679f5382d", "sighting--73978420-e695-4d48-9bc7-393f794993fa", "sighting--5cd69d89-1af6-4d17-8d5e-225ed249ab91", "sighting--01e0c0d3-1422-4fc3-a332-de4a7a3aed23", "sighting--8d0e6aa7-20bc-4f1c-adcc-553721e5701d", "sighting--3f2b8311-4309-48e5-bd78-1d84bd2a5c9c", "sighting--9792f5bc-e111-4525-9fe9-7b5b822fcb94", "sighting--74fa7d29-c836-403e-9c47-9446db3d49e0", "sighting--76b17587-2163-483a-8cd0-d7b998b0cd05", "sighting--06eaf93c-2377-4cd6-ba28-bf4c251c5435", "sighting--a7ada27c-119f-4d49-aaeb-4b9ba308be2b", "sighting--5e9fc7c7-af77-467d-b363-c95fa383cba8", "sighting--5c6cb755-a593-4045-a5c4-39f9a67fdc9f", "sighting--3ac7ca30-d55e-42bb-b440-d2435c90d049", "sighting--b0bb95cb-1188-44f4-a0c8-bcbe1b77b8ea", "sighting--16161f8c-a019-4bb1-8eae-d1223043dec5", "sighting--f65944e0-6216-4e62-9c8b-a467d8bbae7c", "sighting--ed2c7e98-9ea3-4903-bee1-b9ef11e2cc8d", "sighting--6ed6570d-0c76-4117-884d-e326e212b5c5", "sighting--05365fc4-66ff-45f4-b286-b7b632791f5d", "sighting--e1d8d917-5089-47e3-91e6-ca0bab4ad209", "sighting--b4286dd1-f5ed-4cfe-9063-c3208e0a4040", "sighting--79de8324-2215-4317-a56f-6bd3ccb898bb", "sighting--4f8d54e5-eb34-4792-9054-db2d95b10b63", "sighting--7a3fefe9-6348-47a5-9e56-21b86767c637", "sighting--41d6ae85-778e-4a02-bfe9-0af4571b3ae6", "sighting--94b9034f-af7e-491b-b1b8-3e579107bde4", "sighting--bf77600c-a441-4b56-84d3-a0cda39de029", "sighting--0092fd64-afd5-4353-ab4f-228985e7acf9", "sighting--54a1ed0b-18e1-47fc-80e9-d1794369b328", "sighting--faac85cc-fb64-45cc-a0c6-320b06b480f8", "sighting--9e99398a-788a-446d-b862-fc3098a34a95", "sighting--ddae6cc0-5ec6-47e1-925f-b71c5da6d878", "sighting--706bd758-45c6-4e3b-9eb3-c0777c3996ad", "sighting--46db4d95-92d7-4596-b689-f1c30795315f", "sighting--63293c41-24a7-43b2-a1f9-27a078e13ee4", "sighting--b84aeea8-d42a-4766-9dd3-cb7d03299d04", "sighting--12143fc4-2c1e-4ee9-bee9-3590948da2cc", "sighting--c4fcddb7-4be6-476f-a8d5-1beadcadd259", "sighting--02eebbb5-603b-4f64-a5f8-16e795606157", "sighting--8eced7fd-ae26-424a-b04d-d04753bc0ab8", "sighting--dad688ae-aba6-4e21-b09b-42f8509d56b2", "sighting--5162a419-a8c2-4902-974f-48c1c87a9493", "sighting--9c905ad2-3a4b-4d58-be9e-9014781dfe1c", "sighting--98a4d11f-3276-41d2-a3d0-bdbf6df05944", "sighting--648bf2a9-d853-42f8-8384-99ffc38c485c", "sighting--7320d183-7037-442f-8ef0-36906d807306", "sighting--e479aa8e-73d8-4422-b19c-59c7e5267964", "sighting--9d88ce1b-ed6a-47a9-888a-6caf9c54656e", "sighting--3cb5bb7f-794a-427a-8fa2-53695c7cddfb", "sighting--b5bb1a65-31fa-49ab-865f-f291a62a5d8d", "sighting--8f83eb3b-b8f5-44e8-bf5b-125c9603d69b", "sighting--0187e0c4-64ac-41b7-91a7-42265c3ef669", "sighting--fff37908-bc06-4704-a62b-bc46f4106463", "sighting--9603514e-f0b0-4a1c-b1ac-9a4c33d00b4f", "sighting--63058fa8-87cf-4415-9ba7-4403ca2c52fc", "sighting--a909a06e-918e-4218-bcb6-eb526ba493b0", "sighting--034bbf07-dc5f-4853-8c55-d59a0d18b64b", "sighting--fb2f1840-4f2b-4873-b54f-da7fce9c7ecf", "sighting--1ee9072e-91b2-417d-87bb-63090c2ae2c5", "sighting--49b3093a-f65d-496a-aa26-c1425900f915", "sighting--1cc969e8-88cf-49f8-a5ec-919353c1f122", "sighting--a60a4298-fee4-4a44-ba3d-d35703877b1a", "sighting--b473e313-87ad-49ef-996d-4d94df5bfef0", "sighting--f7309910-4ad0-4ac2-bfca-cbf07e3f81b0", "sighting--242b4e9a-7bf5-4abe-b23e-688a13495a39", "sighting--d9190b7d-0296-40cd-8d22-ccb6a971de94", "sighting--32f5daa2-3d9d-41b0-8bee-05115ce65b02", "sighting--7adadc25-aefd-44a5-befb-53a9ffaf067b", "sighting--731338e2-519b-44e9-ac62-2dc151692e3a", "sighting--f0611f37-b9ad-4bed-af2f-14416fb6f0f3", "sighting--a8bb2d04-f678-459f-9763-2fc9a27f98db", "sighting--e20e5601-790c-415a-a322-da10f572a67b", "sighting--10578fb7-0978-444d-bfbe-5837157aa595", "sighting--7d192075-113c-4383-b594-ce4b2535ec9e", "sighting--d655a92e-c6e2-4483-bb00-01ddd6cdee15", "sighting--68feab3d-51fb-4041-a215-5df94d2b757e", "sighting--377fdaed-49a8-442a-873d-bd8b01c96b14", "sighting--c052076b-df99-4653-aac7-869d18b4b422", "sighting--ea62d094-f5a1-41d8-be8d-3547ccaeebc8", "sighting--e980c947-d7f4-46b4-a24f-05b6b75c1b34", "sighting--3d57cf92-eb72-4990-a94f-a875fd9bea55", "sighting--58d208e5-ac45-432b-80f0-a124a5af026b", "sighting--75e26822-8327-45c6-b445-b79f0e1afeff", "sighting--77e07a31-ac2b-4e8c-b998-6d46994ce97e", "sighting--c7fc9c96-3f16-4ae5-ab6e-3333948745ff", "sighting--ecf6ea28-e4f3-4bf3-8ec0-a8f15d28ff4d", "sighting--1bef37c6-48a5-4540-80b2-96e6525f6cda", "sighting--a3558749-41bb-4561-88b3-efb61304820d", "sighting--c482545c-e3c3-4b47-bd56-c87ef4f86120", "sighting--b0530c5f-8809-4708-b5e1-2420eff13404", "sighting--2e41d705-60ae-41de-8676-d4fd93dff214", "sighting--f985baf3-79b2-438c-a4ea-5d91d10bb0e5", "sighting--2046433c-15fa-4d40-9347-4266fa5a136a", "sighting--9e311b46-c339-4e57-ba4c-ae34f4c1e854", "sighting--fcfed078-c49f-4a64-88ef-0769f99adcbf", "sighting--2433c383-4c61-4dc8-9d4f-2146765bf2f2", "sighting--51a8ea9a-d145-40c3-a825-6223ff205c05", "sighting--2ccef15f-55d1-43f0-a920-3547260c21dc", "sighting--2a65c750-df37-41e7-9458-69624ac5da12", "sighting--6a5cb9d0-fac9-4a63-b80e-88a03da06185", "sighting--3d77aeb4-5275-4d0a-a1ec-ef4b1398b058", "sighting--843151ea-ef8e-4ec3-b308-dbb231cf1143", "sighting--0e3c748a-83bf-48f7-a085-88319f20abe2", "sighting--70f85f25-7668-4ecc-aeeb-65832f481a85", "sighting--8a10a77b-13b8-43d2-948b-be8e2b2177c4", "sighting--a3327d4b-965f-4008-8757-a78f25cb68d1", "sighting--75456989-2ad5-4492-8512-2af3e019a94e", "sighting--08c6c660-baef-43a9-85cf-3e0952c39b8e", "sighting--e28e5be6-7a1d-4d53-9dd2-292dae46a7fa", "sighting--bb22ce70-8e5a-4898-b2bf-4286f3c4473f", "sighting--8621a93c-09ed-464b-aba0-b1f4ce1f017a", "sighting--ba394850-1bca-439f-94db-70abdc61fcfc", "sighting--e9bb20e3-3180-4125-a93b-11f685635a21", "sighting--c7a9cdaf-ce94-48db-8e24-9e58e87af525", "sighting--48756dea-1756-40e0-96e0-6a1d27433b73", "sighting--a8ddede0-cc25-4484-b5db-c7d036b4aeaa", "sighting--dae2dbe2-1ed3-4922-99ad-67a01a73f225", "sighting--ce4a84c1-060d-457f-aa90-c51fb77b9987", "sighting--b6e83df6-81e6-425d-a720-f28be2cb602e", "sighting--1ac88d1b-80d2-422a-8e88-093fc89ec728", "sighting--ab49dfa7-2cb3-466a-88c0-59ed8af2f44b", "sighting--cb47d4d2-877f-45e1-ab89-59cfc8356975", "sighting--1ae0962b-9a66-4328-a9a2-57c08c7a0a1f", "sighting--3232b0ac-f612-43e7-be9e-fe59347fed02", "sighting--eb8abe77-7ef4-4038-a3b1-99d8e71cd95e", "sighting--b7ecf3cc-f5ea-4771-894e-2e02184ebe34", "sighting--fc5c5fff-22a1-49cd-9f8f-6741e9036258", "sighting--fa782ac6-e458-4a1c-8ff9-c9847da00d46", "sighting--27e9bad7-2bea-4972-85e6-3c6009ca5f77", "sighting--464b219a-e158-461c-acbb-c92631423beb", "sighting--668796e3-4dca-4dbd-9277-dd5b2f93d2d1", "sighting--1ca2a9a7-bc73-4b19-82fc-745297b70a21", "sighting--56ab9229-3f6e-478f-aa64-8301e5e1380a", "sighting--82733acd-533c-4e33-b8ff-8f692285908e", "sighting--7e991007-d43d-45a2-9233-c4d39d0c37ee", "sighting--e1b26cd9-bd8e-408c-bbfb-69235d6c3595", "sighting--4af209b2-8292-434a-bbd0-ad790e5b0839", "sighting--263b993b-a1c5-4635-9b31-4ab639f3b2b7", "sighting--1ea7b994-a2ad-44ed-aa45-fbcb0575676f", "sighting--7abc35e7-803d-4570-8b7a-50390eb317fb", "sighting--b0e6eba8-f186-4233-ace2-035ad3343b45", "sighting--2fb71cc7-a24d-438c-9064-f20a291e8711", "sighting--a96d7d07-d49b-49d7-9f8c-eb224876d5e3", "sighting--da051a5b-a9ea-4812-8713-402c75219562", "sighting--42470b75-ec05-4c9b-9b02-562d89f74896", "sighting--6ecdd264-8c21-4ac5-96de-c80fbbbbc2ce", "sighting--f9b99c81-7604-4c47-8276-747e0df668c9", "sighting--bd8f8712-808e-46fb-a63a-c55bd3159575", "sighting--0b3e2fb4-e711-44f4-bf72-204d2eb5aa66", "sighting--f10524f4-fad2-4de4-a1cd-5b092946f8ee", "sighting--a1ebba60-5ac5-4764-aafa-b91842c684a6", "sighting--5d76a7d8-f54f-44d2-bf4a-900a32e3ba33", "sighting--0cb48778-c1ed-4458-a33a-e81b66500398", "sighting--75842e07-e911-4eab-8390-f88b096bea3d", "sighting--7880b811-5749-4394-84d2-c33161d91b4e", "sighting--569af882-0b9a-4cbe-b22d-6b157ce6a17b", "sighting--60e13fde-0dcc-4218-a882-6c35aa00f829", "sighting--7c0a0ec0-4bd8-49cb-a851-c7b4f98bab91", "sighting--17ad8cac-f5bf-468d-8b12-676d47dd415e", "sighting--4e289c13-3015-410f-b05f-6221821fae96", "sighting--aeed851a-e0ea-4957-b27a-54e190f3f386", "sighting--756652f8-041c-429d-bfa7-45bb4d52232b", "sighting--b3824db2-fe5e-41ec-980c-d2ce074c30e9", "sighting--13e6156d-c97b-4923-8d2f-1132e58908d6", "sighting--5f143a48-e935-4c8e-b105-9b6519867bd7", "sighting--f2b0e5f8-3e43-49be-8097-7b482509c5bb", "sighting--45c234ec-50d8-4707-aa38-708dae8bd991", "sighting--f36f2a08-13ea-4c1b-b654-8851c47778bf", "sighting--f780404a-519c-4dd6-9e72-542f75eb3934", "sighting--78a9ebc3-fd71-49e2-a292-bc23e276de10", "sighting--4287fce2-45dd-4ef4-bf45-6b5259c5db6d", "sighting--deaab16b-d794-472f-9863-4ea48e27b200", "sighting--e7770dbc-3b23-45fc-a6e3-bd366513c440", "sighting--00d57ff2-0544-40e0-ae4e-7ec59eef5b4e", "sighting--6978d318-da2e-407c-8f96-1508bf223266", "sighting--69a9e9d0-fe5c-43dd-99ba-bc303888de9c", "sighting--d96ded8f-d1c9-4cea-9d50-e75a37ff2a1d", "sighting--de9d9d81-6ba8-4a83-9f5a-51f9d43178e4", "sighting--45b354e3-2956-473b-8444-7bcaa87d3057", "sighting--76719d43-c816-4b14-8a76-36223144b4a2", "sighting--d53e8665-5563-4aae-b189-360f38484e1b", "sighting--ea182b4a-4506-4538-b956-c38ca0c0a708", "sighting--662ad778-bf8f-4e0c-b016-dae4ab044893", "sighting--8691df9a-b519-4fa2-b7f7-ff13e1a4c0ea", "sighting--bc006612-7ddd-457f-8543-47d0d2420dbc", "sighting--8b069137-4503-4c15-b379-4f8a2460c811", "sighting--2722316c-e6e5-4d6d-b53f-d0d00990c561", "sighting--5a54a098-deaf-4e6c-9aca-453057314a6c", "sighting--39ccce3f-3ab8-4920-b34f-ff0ce22131a8", "sighting--579db4e4-561d-49b7-a490-92e4e55b0f6e", "sighting--72f29831-22be-4064-96a8-c85135ce3d30", "sighting--a7491e25-2a15-4bc8-b2ee-a7629c723239", "sighting--5c20a079-446c-4fe3-a138-00444cb0e442", "sighting--a1a61fd0-d136-4872-ab16-83fd8e27dc15", "sighting--9161eb45-d66a-48df-8250-517f7a5a2688", "sighting--f161bf4d-7c57-4e84-a531-a6f51470ed7b", "sighting--d759d937-9bab-4edb-a478-e6bd0209de41", "sighting--e9510f62-0a0a-47dc-a9da-343946c2c453", "sighting--701613c7-fb55-4bdc-b9bd-b6f1aa2ff22b", "sighting--04efbcce-dbda-4f92-bf46-c00fee564604", "sighting--cff0f9e3-c45d-4172-bccf-e3d563879383", "sighting--5c8ccac9-148a-48e6-aa6a-09e8b2ca638e", "sighting--a6a4b9d2-3ee3-43b2-9dc4-be2af82340b8", "sighting--492c2088-826e-4205-a6f8-d6df5a50af9a", "sighting--3bc2d989-0a2a-4520-82cb-188640136036", "sighting--38b50c96-3ed4-4d9d-807b-e7cc6aa3e683", "sighting--436ad016-3f3f-4f7d-9aaa-f88add34563c", "sighting--d23707b9-8990-423b-b9c3-52bf200660ea", "sighting--069e340c-76cc-4457-9746-027a77966103", "sighting--650a01df-d0dc-42d8-b212-48f8f36f3d40", "sighting--befed235-9798-460b-96ef-0bf413c9bce0", "sighting--b93a07c1-5581-4a62-a83d-45e81912e601", "sighting--f8396072-de87-4468-bd72-011e1f3255a6", "sighting--4bd126af-651c-4ac5-a281-7796722c9bc2", "sighting--a38fec69-2c28-474b-89c0-f92bffe171c3", "sighting--47c4f31b-4f43-416d-a16c-40a6eee5b3b6", "sighting--8ea7f67e-120f-414b-bbf6-c436900d1a37", "sighting--d5e0a59f-3cb8-4530-8e72-f621b478b7c9", "sighting--f1e9a64b-277e-496f-a51c-5a9918b42421", "sighting--1cb490ad-6318-4568-af16-0f9745cf2ba4", "sighting--f3791abc-31f9-4094-9a5b-960d81db5c46", "sighting--af663a17-81bd-4d6f-ae2d-c317b3484e65", "sighting--dc49dffe-8a2b-43b3-98bb-50f49c0c5a74", "sighting--5960b18c-c054-4061-ade5-21116b3fec06", "sighting--88b8c70d-ccc8-49eb-be8c-e3ae00f379db", "sighting--9fa78335-e235-4e47-84af-c7a1a31ae247", "sighting--3214cfce-714e-4b13-a48f-27d970b108a7", "sighting--5bb1b05f-aeda-4b76-921c-85a72f38d1f9", "sighting--b76e533f-66d2-4d5a-bf6f-1a2cfca2529d", "sighting--dd96fde9-9df2-40a4-a898-a1eca9014013", "sighting--c5380892-3e71-4e2f-888e-0c62ef177df8", "sighting--3719b34c-3136-4e75-a69b-4169932f3ce9", "sighting--6d1997be-4049-4d82-aeb9-30faa5becdad", "sighting--c393a815-ac64-4156-b10f-cd739ae6c5e2", "sighting--f328ecb4-6605-441b-9691-99c3a96780e2", "sighting--139d9646-efa7-4098-bf50-cf7ddad3abf1", "sighting--a1b898d3-b3b4-488f-a682-fcfdf44f9d3d", "sighting--b98fd5b0-185c-4224-bb4d-9dcc245c0de7", "sighting--ba3c9266-32a1-4030-bc42-89da49af8c73", "sighting--cb253b32-704e-4ae7-8ace-6118a62caefc", "sighting--3ef96b91-e0fd-4c88-990a-68a764da3085", "sighting--20a64745-f3ff-411f-9ee8-324f875eb726", "sighting--aa49ed08-d6ba-46eb-aad5-b984e4bcd002", "sighting--8d9d32ca-d095-43ab-ac56-1f1cbc5181b8", "sighting--c0ee6d08-bcf8-44a3-931b-0ab48816ed07", "sighting--09cb4467-2698-426e-9fdb-571bece8e28d", "sighting--56d0087e-e49b-4f19-9655-90e0e9c74876", "sighting--fe603573-b6fb-4213-a52e-fb22fedb88d1", "sighting--5547dc15-4de0-4f56-ae00-45ce524c6362", "sighting--4a4f6fe0-8163-435f-b3f5-7b28cf93e2a0", "sighting--7eb54358-6a3f-4219-8652-c5f523046173", "sighting--3bb28ad8-4297-4c50-bd2f-6b85068c5ade", "sighting--12c98805-d444-4941-9ea5-f76118d6cb5b", "sighting--3400e762-dfa8-487c-aa65-d9540cf66f14", "sighting--3c3cdb99-ff0e-4cd1-bcf0-f8426de71995", "sighting--a1639487-27c8-4b49-9164-edc5b492587f", "sighting--fdf0daed-d627-4fcd-83ac-b8d048906d18", "sighting--bc275a4d-f085-48e0-8810-90b5de72514f", "sighting--ea155223-057f-4797-8f3c-b39d92a90bad", "sighting--796e72fe-fef1-440d-895b-139614a44ede", "sighting--20613a6f-9da4-4591-a0c2-bbed70eb2352", "sighting--0d7b9a5c-944f-461b-a6f5-2cc08edc4f00", "sighting--1acdc3e5-8326-4a1c-851e-023ee4697c1c", "sighting--8da3975f-adbb-45e4-b9fb-8e518cfee280", "sighting--78290cd8-613b-4b96-a388-0ffff8556dd8", "sighting--aa332e2c-384a-4cde-9390-cdad364d2137", "sighting--3b9b63b2-1977-4e27-90e0-3fab0541f90f", "sighting--828678f2-1e65-418c-bc8f-503089c9f4e4", "sighting--6eb0be94-e517-4152-a1d6-e7a4605a7c4b", "sighting--1bc1efb8-d111-48e1-8f85-38b1a1a0e460", "sighting--8aebb001-75d4-49a0-9b79-b2f4a18d02a1", "sighting--fc84bbf7-f52a-4a4c-96f2-4e2a2b230ff5", "sighting--af93da01-43a5-4951-9d5f-449dc64857ba", "sighting--a9cb97cd-bbdf-48a6-ba13-2717da376686", "sighting--0c93ed58-1b3b-446a-8fa8-7ed3da09167d", "sighting--beec97df-23e3-48e1-b826-1641dd5916ba", "sighting--4a5bdaa0-380d-414b-b979-b50100a4aae7", "sighting--23ea9e8a-f948-48e0-8a02-c8c5306143e2", "sighting--8e883abf-37b7-400f-af2a-f9acdd52a492", "sighting--1a97d42a-8f3b-43bb-9845-fbb4b520ce91", "sighting--5596b5f1-0719-4fd1-9c22-eb4b923278f1", "sighting--5eb1c0f4-0fea-4753-87cb-52e595dbc0d7", "sighting--b4583817-45bd-40be-a91e-0f823d806fab", "sighting--e4283cb9-b013-4211-8684-66ec2b171aa4", "sighting--34ae9ae0-06ce-4315-84f1-f8f153f9cc06", "sighting--46c7a257-d98d-48ce-8c33-9664b8860fae", "sighting--dbade7f2-8818-4de8-bf4b-ccf8a27a7ec9", "sighting--bf8d108b-35b2-4422-9c9b-bd8fab2e6e7c", "sighting--e2fe3912-85d9-4f31-844e-9e746ea48b98", "sighting--f048f768-a21a-4647-b5fc-b6b81861e5f8", "sighting--c3860625-27e9-4f14-b566-fe5d0e0178e9", "sighting--b95c9c7c-3e58-4315-bdd8-9090ca6a5111", "sighting--8c2e1e35-a2fa-403b-9544-b92a8282bd5d", "sighting--f170d0b9-f623-4089-a31d-ab2b3dba9e63", "sighting--eb79cca7-a141-4587-a27c-6567cb509abd", "sighting--6299db84-d3ff-4a74-87b5-baf65df73ecd", "sighting--d058a7d5-bb0e-47e2-922c-cb3dc8abccac", "sighting--c0876bd5-9f88-4206-b8c3-95d8f1af2c05", "sighting--3c2bcedb-4252-448e-a516-6ec799fcc722", "sighting--4ad02da5-7d17-4609-8fa8-2be71bb80e1c", "sighting--fe8dba65-687b-439b-a4e7-51ce3fc09a88", "sighting--cd874f5c-de4b-4297-8912-33d1242cacaa", "sighting--2cfeb750-ff4a-4274-b67a-9bf84f719cff", "sighting--8b9e9bbf-4822-457c-ade0-ed327d08f59c", "sighting--bb063e34-88eb-41dc-add8-556838fc1895", "sighting--ce221e57-5c26-4f10-8e4d-057c8879b090", "sighting--5e978a47-484d-447c-907f-94fff27f8d17", "sighting--59e1243b-3de0-4d33-9912-31de6cd4292b", "sighting--316aa20c-bd09-480e-91ab-5907e0b31109", "sighting--2973f542-80e4-4909-9869-37f8dd74f0f5", "sighting--7096c48f-027c-489a-b45b-60b5c3782382", "sighting--4bcc2faa-4865-4fbc-b7b1-f4fc7136eda6", "sighting--f5f46a9d-fca8-4371-857d-e1af74e7ef8b", "sighting--e8a8c2ec-7eb9-452d-b9ff-762ac01e82fe", "sighting--7b6385d4-cee2-4ece-a396-e63f15e2883c", "sighting--9f7f70e0-d8bf-4f69-aded-f019682bcd8f", "sighting--19094d58-6b03-4c5c-a72f-8c29d045da95", "sighting--1677d4a3-ad6e-4556-932c-be4de5149eb8", "sighting--087b65b4-b9da-48b0-b358-46a84ca9b8d7", "sighting--a0e7505a-fb4f-4067-a72c-01ea7428550e", "sighting--9093283d-c0d4-48cc-b9a1-abfc772fd49b", "sighting--3f9eda38-7539-41a3-aab3-8850bbf6ade9", "sighting--52399a45-6313-4fe0-9cc4-6ba5773f281b", "sighting--31eb43ae-6581-4f9f-b798-1a3aba0d319d", "sighting--d9244216-e70a-43ed-a06f-097d1a65546d", "sighting--90949993-d73d-4c44-833e-575a7fb83fc5", "sighting--1e838540-31b1-4d42-9975-b3d76ed43a92", "sighting--5ca2a025-1004-4079-941f-13b0d8a81c09", "sighting--f1ac4be0-0dd2-404d-a09b-0e0abfa1560c", "sighting--6ae9cb56-1ffc-4d7b-913a-2fc2de54fc9c", "sighting--eba6796f-8f0b-44e1-b07c-671c48a27609", "sighting--739702ef-f0d8-46c7-b9bd-aebb27e0e948", "sighting--19816728-0ca6-4cfe-999c-9b343d5786aa", "sighting--c10ce7a5-ee10-48a9-a6f7-6a7a981790fa", "sighting--446ca623-6bed-4991-a86a-73c6862e1fde", "sighting--99f46936-50c5-40c7-89ea-e1d7a882fdc6", "sighting--7afed00d-9f4c-4ae7-861a-efa343bd5f70", "sighting--f980f5c7-2c91-4107-9371-d1c1b3255f3f", "sighting--374b3a6a-9f81-42ca-812c-953f1bcadbfa", "sighting--4c9f53e0-35d4-44ec-8cb2-5fe4cfa74796", "sighting--ef1a9fc4-6516-4591-85d8-73c697f4680e", "sighting--61d5922d-157d-4dc5-b278-9abb007a38f2", "sighting--b305a48d-75e7-4b31-8f82-4b54c3775475", "sighting--abdd0ab3-d455-40ab-9a41-6aa6fa744b7f", "sighting--2302be8d-3a21-41d2-9051-d79e65861649", "sighting--59797d4f-4748-42e5-8727-c908562e7fd8", "sighting--603d0cb7-e96c-4e88-9e7f-9fc756f62a65", "sighting--28a1d930-1f60-43a4-8e21-fda018ed765a", "sighting--f1ed2303-8dc0-41ba-91cd-a611cf6ee3c9", "sighting--3572b7c4-9a7b-4e35-aeab-6ea1839c2e9c", "sighting--a833dea3-f0b0-466e-b2bb-2cf89bf4d09e", "sighting--47747704-41da-4272-85fa-86bb029b6a3a", "sighting--ddaaf53c-36b9-4163-ad49-fdfe3aae255d", "sighting--5144e119-910e-4d74-afd3-6c185c7ea885", "sighting--67ef9194-67d2-4d6a-b993-7ba487555fb9", "sighting--c530bb5a-4db6-4676-83ff-590ad6e687a7", "sighting--be78a698-437a-4875-b6ea-f40fae1c530c", "sighting--8a44acb7-f01c-4945-8454-53ebf9aeaab8", "sighting--15be73e4-5f0d-4f40-8aa2-0ecdfa6106e4", "sighting--6e308879-788d-4292-8f6d-8af32e871a3f", "sighting--678191ef-ebd9-4b62-88c1-bf18ff3ce219", "sighting--78c01606-8535-43c3-8456-cec477128c4a", "sighting--10729b8b-6e23-4197-8a7e-72be5a887162", "sighting--102a8a67-0d57-4a16-9fd7-a666ed7e0061", "sighting--5a0ac76e-975e-4a5f-9ae2-a896e0d83bce", "sighting--0bdf4c8d-536b-4c3a-97c9-2b66b45f92fd", "sighting--6e82e2a9-718f-42d2-b275-74b77f3b6d3a", "sighting--320e8d43-bfa0-4c06-a747-01ddb6af028b", "sighting--e597cc2d-d53e-4fc0-b1a7-11f2f8c81587", "sighting--c33798bb-0e7f-4528-86b0-8d9cededd507", "sighting--80c83080-a720-45ae-b059-3f01c1749502", "sighting--fc6849d5-4100-4441-8ca1-880e12879cd1", "sighting--a19e1f5c-de49-4678-88de-757bdfc52585", "sighting--d0335d9f-9d8d-4bb1-922f-6d15c71a7389", "sighting--ff8a4643-885f-4b7c-a1bf-924bb51b55de", "sighting--dd631891-347f-41b7-91be-65ebcecb7e4e", "sighting--31a48a77-ba3d-4e9d-b711-1a63b5133a07", "sighting--c2e0be95-7f80-41ba-ba5f-4fa5c57f7471", "sighting--22f233bd-fdca-4281-ae07-ad33c8c0db35", "sighting--0b6038e2-e1c4-4174-bda7-7c5d351542bd", "sighting--8f068085-1955-4565-a250-09e2840f376a", "sighting--29aa2ef0-fb72-4062-b363-4c81e0cafbb6", "sighting--036fdb46-e3fd-4c30-9de0-6e25e7fe14ad", "sighting--739c2d7d-189b-4965-b302-d4047bff6c3d", "sighting--fc7f9ccd-ad76-4d8b-a0a4-e74700cf9bf2", "sighting--d54c3910-12a8-4e29-ad71-cf301ea37eb0", "sighting--647da6ab-ac64-4cf1-b1e2-9d743c6daf5b", "sighting--e678850c-2b94-481e-bd1b-b1f92036109e", "sighting--b7e7771a-35d4-44d7-937c-ca1b09595962", "sighting--aab6bd15-0ca6-4bac-a6ec-d461e2c270d4", "sighting--786ec95d-039e-4e70-9bb2-79d2de1dbe09", "sighting--1871638d-a0bd-4750-9c0f-ba9b3b9e8972", "sighting--cc1161bb-37a7-42f0-931b-834a186149dc", "sighting--dcf12eed-8468-4c08-8353-cc27253ff3e2", "sighting--f97b3f5f-b583-49f6-9092-c1dfaea9ce81", "sighting--e78e4a10-7fff-43a7-b54e-2486635b7ba0", "sighting--49802ba8-b85d-445f-8411-fe1b74d3c04b", "sighting--2ca8b2cb-99ba-48d1-a4db-bb450c121b87", "sighting--1bffe6d9-213f-4f2e-9e86-dfc5fef7dece", "sighting--34ae6e47-fed6-4553-b5da-310ef8a4cb99", "sighting--a7b04121-5dd5-4b28-b287-58b590b65a50", "sighting--3fc4d5f9-4f0c-42ae-91f1-237a371dd01e", "sighting--213160e5-d93b-4940-afa0-d1473db8db1f", "sighting--e20ced7e-3837-4d97-b29b-dfea1e95395b", "sighting--af6663a2-c9e0-4657-a8c8-ebdfae9c9ab4", "sighting--7fbd3e21-9e2a-435e-a9b8-b1c0575a3595", "sighting--e577ecc7-da44-41f2-969d-302476ab53f4", "sighting--1a72814b-5a07-41fb-ad0e-534b23a9663a", "sighting--11ffc589-4ec7-4984-881a-b3446d6559b4", "sighting--5aa88ecb-b2c2-4044-8880-4f4ab668bbf7", "sighting--a9769959-6092-47e7-869d-4e8882ad61d9", "sighting--81b03f1d-7fd1-40df-aedf-f8f6ca07a42a", "sighting--634cf397-2718-4222-a1a3-33e05a13ebba", "sighting--fa77ed24-2f1d-4391-bec1-28b892a7b7a8", "sighting--1e43296d-353c-4ecd-9aca-b0c4c2411161", "sighting--7d5d4dd7-48aa-4297-943e-30e3e3419bc9", "sighting--afd0f123-8a50-4003-a96e-8128d9443fdf", "sighting--f11cdee2-84a6-4c0a-bd82-9e83eaef045a", "sighting--9772ef66-7d78-4454-987c-3afb821b2620", "sighting--26518541-7b8f-4540-b6a7-e1a9a7c4e98f", "sighting--32f66b3d-6483-4cfe-a103-fa4978628486", "sighting--0fdc959c-0c69-4b16-98ea-9d5bcca7bf27", "sighting--a7342f79-ea31-4aa4-92d8-18991e8630b5", "sighting--094e421d-f993-4287-a12c-320a01058c6e", "sighting--6cc1bf96-6746-49dc-a5e5-1d99a2f2df28", "sighting--34ca6e0d-7199-4527-bbee-9a22d6053341", "sighting--1d02fdca-a27c-47f7-a307-38392b1dfa1a", "sighting--a5e6b4a9-6916-4ffd-aec0-e651ca3325a7", "sighting--3cf900e1-c539-4f49-9197-f485f1dfdf11", "sighting--1c8aa700-8f0f-43fa-aa89-24b037c10c62", "sighting--14fbdef7-bccc-420c-9c89-d96c7a885561", "sighting--adb02bb4-8b30-4ceb-a17e-178e580bffc7", "sighting--972de530-29e3-46fd-be18-7c7bc1759d40", "sighting--c48cfd4f-bd34-4bee-a77e-59593df3f5ad", "sighting--baa7881c-6dfd-4e02-98e6-4539628f100d", "sighting--2c6e1590-2132-47e8-a82a-c2cadfb02855", "sighting--9f0120fe-007a-4ac3-a107-ab5423e42f80", "sighting--66a8780a-af80-4897-bc33-a7677948eaa5", "sighting--b9bf190c-8dbd-4cd6-972d-e59449927d9e", "sighting--02240978-8932-435c-b682-f4db72ecaf38", "sighting--775411d7-5806-4732-8afd-4bca3c4e8da4", "sighting--b51000e6-9ce4-49cb-88fa-decbca30747f", "sighting--c0ec146f-3b97-4405-b57e-632b9e42941b", "sighting--8fc66e27-9f37-42fc-8589-5c4ec7c5fa99", "sighting--4e725e4a-e479-4170-a7ac-8e3d08d43727", "sighting--a8e444e7-91af-4eef-a97e-1f373ed1ec0f", "sighting--a7ce7f9e-f63e-4f56-88b6-4f01c56b7a5a", "sighting--e85cb6bd-9bc2-4b48-be02-63d41b62f503", "sighting--370750ea-b73c-4f35-8b8b-070b4077ae59", "sighting--6e618866-aaa5-4750-a9f8-4c35adbeb08e", "sighting--84218ffe-8d1f-4fbf-9dd4-c4736e25d0e6", "sighting--45a2a023-dbe4-4ba3-a566-586ffdf8eed7", "sighting--52e8aa20-e43d-4ab8-bc90-5a564916c997", "sighting--2f15b9ec-5463-4ae0-8f87-8a5957a2edc0", "sighting--a51f4afe-1c39-4731-a115-bc3f02114f5b", "sighting--283fb472-8679-4823-8687-ee895dc93c11", "sighting--a8830aae-ea3f-4ad0-ac9a-b63be8913517", "sighting--cb222e31-69ae-4cb7-bacd-856a24f31c8d", "sighting--5e304feb-b0ec-4ca1-8fbb-41501150e102", "sighting--dc92e614-4079-4f8d-9b27-8cadca1fa64e", "sighting--4a31b0cf-ddad-4415-b8b9-ebcef436381c", "sighting--bfcac325-5214-4cf1-ae43-ce811c50026a", "sighting--21a821ad-ba97-4fb2-b497-82cabf274c6c", "sighting--f14cf72a-4ad0-46b8-ae6e-9b1f7032dfc1", "sighting--7a43e0c9-ab9c-49b2-bd74-5bf03f960d0b", "sighting--d82b57ef-2ace-4e78-95e3-67f155182099", "sighting--c6cd9d6f-704d-4a4a-8027-c01214755a92", "sighting--11a9e6df-61a4-410a-a242-0f412639a3a6", "sighting--4d5e15f8-7f34-4dcd-b81c-ce653408c546", "sighting--7c2aaccb-26d2-461c-801a-b16df273f3ea", "sighting--99131426-e09c-4365-8801-4b616ffcb759", "sighting--7126ec75-18f7-4c5f-9802-f6f6e6150638", "sighting--370ac892-63c8-41f5-92d1-66f101c662f0", "sighting--5a7683ac-234a-455e-bf2d-50d5fc3a8e0d", "sighting--a03c4dea-271e-4b6f-803f-737c1a313426", "sighting--3a2fe179-32ab-4c52-9e41-4b347e9d4f87", "sighting--6ef4a52a-f476-4694-8f4b-03c87ea87ae3", "sighting--6fec8778-b506-4469-8ef6-506d73d271e7", "sighting--757977e2-5856-44a2-84ed-0bfe7f99f164", "sighting--972411cd-9f30-4897-8b8a-412f2fbc655b", "sighting--d25d0009-966f-4344-8147-9f6491c31fbd", "sighting--52c8f402-7676-4e3e-bf16-c5c56e2fa48d", "sighting--7a2cf78f-4aff-4d21-a5ed-3ff48b85c2ff", "sighting--0396ce30-ef53-4ca5-9500-abb9c6a3897b", "sighting--a0600deb-9b3c-4e6b-a7c1-5cabc298fd88", "sighting--96a86ba1-21df-43e2-9125-e7b4bf069ff2", "sighting--98536d5d-e4f5-40b9-8760-c9f0852ea292", "sighting--604b2774-4b99-4a17-8f7f-966c70ccd197", "sighting--7d4a412f-3614-4b9f-9212-f27b718e649f", "sighting--1030ff82-1dcb-4477-9e9c-f9f4d0ba2cf7", "sighting--5dafc576-320b-4412-9a51-a743d3380fe0", "sighting--cdd47151-fece-4744-ac61-0bb5b532e88c", "sighting--be219f92-9343-4ef0-9829-fd33e7bf41cd", "sighting--7b5682f4-c10a-4e51-a8bd-edac111afd1d", "sighting--efc2bff5-1379-41c1-8bd8-6f651ba4406b", "sighting--e9bc55af-d0ed-4146-8e26-7b44024e5dbe", "sighting--efe7a072-ca5d-4a76-9663-683efc0f866d", "sighting--6b5ed6e3-f0c1-48de-9672-185112987688", "sighting--53502245-8048-455c-a903-8aa3d012d707", "sighting--7cc7ca79-0aa5-4f5e-b3f1-002201f53391", "sighting--c7a4a5c0-c59e-4833-8f6e-f396c86f1997", "sighting--ae178add-6ee5-4b5b-b038-d7ba721ee17c", "sighting--e44ad50f-385f-4a60-a566-4d476170be64", "sighting--bc81ed0b-b789-4789-87a0-e27ae51799dc", "sighting--6cbce0fc-4664-4c65-822c-07c25db21688", "sighting--c65eafb2-34d2-4648-838f-fe73620d452c", "sighting--a9e40ade-3de8-46fe-9e18-56547fedd520", "sighting--dd8cd0a0-1ce7-4f2b-9766-f09e70916d02", "sighting--8dcd0719-31ff-48bf-82a5-dab7dad0c93a", "sighting--37f2919e-e505-4b60-8a3f-e5691a73f1ab", "sighting--61eefcc6-9bca-4e68-8731-baa014182161", "sighting--21d59105-cb71-4573-9058-9e42e749ece5", "sighting--9e042cc7-b66f-415c-a073-0a896144850c", "sighting--17f0c846-64b7-448f-baf9-dadb203300ca", "sighting--7882cba4-4a49-4e5c-b9de-9781f076f3e9", "sighting--a8acfb14-48c9-4641-ac47-5cb3897446ae", "sighting--e0737738-cf5d-461f-904b-d57641a2b6a7", "sighting--64cd93e9-ef9c-4aad-9ec7-0475e02b5738", "sighting--e69cb956-7776-46bd-a1ec-398447fba665", "sighting--a4c32ad8-3440-4395-b55d-517116138d70", "sighting--f27f5b2d-3f28-451d-a7d1-88bb4c94bbf0", "sighting--6580684d-62eb-4e22-b977-2658126a6051", "sighting--24b483e2-99cd-43e5-b0da-b5cb6c32570c", "sighting--2ef09c96-bedd-4064-b51e-05754edabc9f", "sighting--b0e9cfcd-6db2-46ad-b512-9d6d4fa8002a", "sighting--5c1381f7-afe8-4716-9c3b-a78cb0d8b70b", "sighting--cfaaa1ce-e0df-4c94-b1a3-5ac9e5b175b7", "sighting--e07af086-8ee8-4365-b7e6-888ff7ef691b", "sighting--9a1c80e2-ceda-423b-8d6f-5facbcccb566", "sighting--3159f347-4750-476f-86ab-26cacb100781", "sighting--1750bd51-bdf9-42a8-953e-809e67066df5", "sighting--fa039120-8a1d-45f3-940e-a7052798ab81", "sighting--2e89880d-c579-4b01-b0f7-0117b4e23d58", "sighting--11ec776a-67d2-4d14-9c85-357a8d1b42b2", "sighting--b9fdca8f-2a5b-459d-a18c-1314499ecd6d", "sighting--588ae67f-aea9-43a2-a7f2-d15d3653fc2f", "sighting--db5035b1-4499-445d-8d8e-929f497b8491", "sighting--4ff4a419-cdf5-4bbe-ad00-f8c8a1797966", "sighting--94a3a318-6d8f-4b80-adc5-b4d11fca95c3", "sighting--1217e2b9-0c50-4aad-af86-f8e04160e359", "sighting--cfa5aaff-f738-48ba-9163-164c03c95aff", "sighting--58a800b9-ccec-4a2c-9b10-f2dee0857d66", "sighting--83a07e2d-b1c4-489c-9222-3d8b1bd64d69", "sighting--ccd870c8-0122-461d-ba08-3a3d4c630631", "sighting--8a6e6c77-98a6-44e5-9d31-9a01214ed1e9", "sighting--35661e45-4e4e-48fd-8572-c5f2b53a1752", "sighting--db6dd588-a72c-4bc0-b9bc-450c9265f819", "sighting--8e0a6e7e-b48e-49bd-8308-4e8b1a07798a", "sighting--db35b23f-55b5-4c70-a760-f04b7497072c", "sighting--cee5f222-7971-40d1-9d3d-1c9a36dabd94", "sighting--a05a2e5b-7877-4ee7-be78-9f63274590ad", "sighting--3a0aea8e-e666-44b1-898d-f78436cbe0d2", "sighting--d0a23bd6-0285-4b43-8ec3-6853eda72ff6", "sighting--f3d67cbc-f892-473f-bedb-ef63ec5ec7d4", "sighting--9eb41765-d087-4759-b22c-82cde3610058", "sighting--2a8eb031-72a8-4d26-85a6-9187cac7ef23", "sighting--007d17e3-0df0-4b6c-9156-58a9861ffb6c", "sighting--2bcddbe0-6d15-4f98-9213-94ba472e4853", "sighting--9b765610-7c95-4d64-8080-bc93f1855596", "sighting--1dac6ac0-7858-4a8e-934c-bd152cfb21d7", "sighting--ca5e00ce-05d8-47fa-aaa0-c9e281c84073", "sighting--6d936450-8578-4966-b5ed-103eee253976", "sighting--4774f70d-5553-4e1c-85ad-679a184b19b1", "sighting--7515b0c2-b4db-434e-b04f-d50bd50b16fc", "sighting--625e0f3b-c93a-4ab5-987e-835a8a0f80ff", "sighting--740aa3d7-acb1-41a8-90f2-89b33ce14c6f", "sighting--ea1b32a0-d74d-462e-8ea6-03ae9c5f148a", "sighting--f1ba0ac0-5012-4b75-9dc6-7e8e3d4fe959", "sighting--c05ca2b9-201e-441c-ada2-313163f3c6ae", "sighting--c847455b-e994-4c72-9226-6feb51b90a31", "sighting--0c6570a2-70e6-4041-b71c-4eb51aa8ab6d", "sighting--60c30f6f-7be4-479a-aafc-7f31f1bd313d", "sighting--30f81cdb-383e-4665-9ab1-50ba15b59805", "sighting--e0f5a6b7-d632-4bca-a075-3d953b131bb2", "sighting--56c40679-fa5d-431d-ae51-7c337c6e4f28", "sighting--52ec1f8c-abe7-409a-bfc6-c8d897e29e30", "sighting--01b3597d-10a1-4b55-86fc-425e5ef6f7ec", "sighting--1e26cebc-02db-43ed-953e-a9cfa77fe95c", "sighting--1c7693f1-0f8c-453e-bb17-6b5ed58f4029", "sighting--4af7d324-04da-4f14-bdb1-04e1dcb92179", "sighting--f3253744-cbf6-46aa-87fe-e84c48a9ada3", "sighting--fda188e9-e3ec-4863-b571-6c7f8bef045d", "sighting--bc85037b-90c1-4b8c-80c2-ee9fb504f6a8", "sighting--563fe349-1f6e-41b2-bd39-dcb842ccea61", "sighting--517c38c9-5483-4ac5-b566-c63334c3ed59", "sighting--324c2fc6-43eb-4973-9de3-3fcff832d163", "sighting--ed1d3956-7440-41dc-94d0-be1e1860d8a6", "sighting--cbd55289-71d6-47fb-8cea-b398c4193be5", "sighting--06d7c88a-9785-4acd-9b09-fd79ec0e66f9", "sighting--d809c780-68d1-49e3-87de-208723203b72", "sighting--3c5e1e45-4350-474a-9aca-b44dd1dc38b8", "sighting--61bfe874-755d-482e-b98e-8afcf306105d", "sighting--e4ee67ab-4d6a-40cd-bbe1-f37bc9ecd834", "sighting--19cdd503-c89c-445a-98de-9de1c9009936", "sighting--f0687155-ef7f-436d-a600-10eecea32f2a", "sighting--c0971ec5-6268-4280-a4b7-2e19126dd79c", "sighting--32e09255-63b3-4550-9f8f-49510cad6859", "sighting--e327f7f5-d04e-4243-9b7d-7e781247d27a", "sighting--0431dac2-38bc-4cfc-a988-9a911fb281e9", "sighting--ce00f1a4-7d07-4e26-984c-24ab80e7dd59", "sighting--f897080c-5ea2-4367-b336-c90b234a2264", "sighting--f465a76a-8940-4c24-87b8-61e9bbad649e", "sighting--ddd47bac-a77e-4f59-81f0-673800ee5c8a", "sighting--b365e67c-6f84-46e6-836f-bc96250d1ffc", "sighting--1b1abfbd-48d6-4b72-850c-98d172bee85a", "sighting--c0b14595-a6e7-4e95-95ed-76d2639ff9d7", "sighting--eb8645eb-5429-4b3a-9942-b3b999616790", "sighting--87a07a0a-d39a-4f1d-b459-d33cd4ea09cb", "sighting--85a6a4ad-03f4-419b-9760-0b0f7e095184", "sighting--b2acc0a5-683f-4196-8435-0d94acc026ef", "sighting--da7e3117-767a-448f-ad96-d760400154e1", "sighting--90df25fa-df9e-44ca-bb19-77ebc5e54dff", "sighting--84d3f7d0-3a2e-4682-bb53-14670d21f31f", "sighting--adf2af1d-7f7a-4071-abf9-c616a4793153", "sighting--7a4c869f-db8c-466c-9595-c3e5d53c0eff", "sighting--31aa63fc-a534-402f-a30c-8cfe0d18eed4", "sighting--247b24ee-0506-4436-ab52-58f7822b3fe5", "sighting--b7acefff-e90a-43b5-b2b5-2e23544e8dcb", "sighting--67767eec-0caf-40a1-ab59-59cd938b5ca1", "sighting--8e828842-b899-40da-851b-1d4115b8c1ee", "sighting--77255b95-8d83-430b-b2dd-821658031566", "sighting--92c2176c-958a-4842-a242-11cb443a71e8", "sighting--06352e81-22a8-4d1a-b2df-bd45bbb600a8", "sighting--e54f4be7-93fa-43a8-b0a1-12cc96abdf91", "sighting--857b3919-9449-4590-b110-54cd15272e61", "sighting--8b284146-43db-476d-9e3f-462d5801778e", "sighting--fb688496-562e-4c0d-b851-329cff2ce3e9", "sighting--e292765e-2226-45e9-97b9-81ba2dfa8f3a", "sighting--2f36cd13-9172-4e85-bc74-0070d7a9b3dc", "sighting--c94556b4-a4fe-408a-9c4d-fa37444abbcf", "sighting--739399eb-534a-4f68-902d-de8b6f5575fa", "sighting--e7ca2a1c-7655-4445-a629-bcab507b2d28", "sighting--d2183f28-26c5-448c-aeea-d3c1b7cfbdab", "sighting--6300fce2-9b48-4e61-9048-bb2523c121c3", "sighting--22c369ac-38ee-4e1e-b1f9-354fe09bc433", "sighting--11353952-2841-4ccc-a97c-bbff952968bb", "sighting--8fe33070-ee35-48bf-bdec-c43699f44f27", "sighting--3aecc982-2802-41c5-b44d-d35cdc3364ff", "sighting--f38238c3-e628-442c-8815-0fc345cdd3db", "sighting--7fec2ec5-b1bf-4892-b68e-0e7b9e385154", "sighting--f9ca198f-fe82-4ac5-b807-e658997630b5", "sighting--4b235810-0343-42cd-b278-c184ad458b95", "sighting--7c153ee3-f038-430a-ac50-f542a4a76411", "sighting--9c0f45be-3122-45c6-b3cd-e28598090d64", "sighting--2ae6bb83-c2c3-4782-bac7-c38dc1a52cdb", "sighting--435517a5-8a42-436d-a5c4-9db17d4dbaad", "sighting--0deb4085-bddc-40b6-b47a-5408dcfd4259", "sighting--76c82d88-d3c8-4724-b6a3-ba866a36b83a", "sighting--f97c4397-12c9-46a7-b5be-b751460743e2", "sighting--fd43de3f-3829-4ce0-a67e-487f1d58e696", "sighting--332949ad-af1a-45d5-a972-cf11c70834f8", "sighting--d30bce16-19f4-428c-88c9-d75ec293c210", "sighting--9b7ca7b3-e912-4785-bcbe-a3d89f747281", "sighting--4cdccfa6-3901-4c2c-a40e-221c2e71b8fa", "sighting--b1879786-530e-45f7-8539-2be2bcc5ae07", "sighting--f9421cc4-ef24-45a0-ac38-d0a4fde43569", "sighting--a44b2d23-4c3c-4274-8752-2821d9ba338a", "sighting--3aa48c1b-12db-4cd0-8bc1-92604c8aca19", "sighting--feb16554-fc4d-4039-8c1a-25e6118dce70", "sighting--ac55603c-a6ed-4aba-adec-0986ab29b54e", "sighting--5dbf40ef-1882-460a-bdfb-f042355fe3ea", "sighting--2de7d01f-69fe-409a-b118-714f019760b0", "sighting--c03814e4-fdcf-48db-a320-14b10a1c1eaa", "sighting--e08c4b68-5972-470e-9fe7-f9e5945b2b7c", "sighting--962961ac-fa96-432f-b269-5b0db7626c75", "sighting--a7192d68-4aa8-44c9-9142-bd64945859b6", "sighting--cdefa414-7879-4174-9297-9377b353014b", "sighting--9013093b-6f92-4024-9c47-718af3907f09", "sighting--a1cfb829-04be-4028-b2c0-f93e0a55b434", "sighting--50e51fd0-8a66-469d-8ec0-b9af3eef52db", "sighting--dedda94c-d166-42c7-ada5-3834e024d773", "sighting--b65a329f-7f8b-451f-845c-bcb2de7505d0", "sighting--47b1ddc9-c214-4eec-8b56-2d3c24a72d49", "sighting--12c72eb0-0952-474f-87b6-9b6c48f82451", "sighting--006b2da4-5eba-4816-99ea-e36611cf24f4", "sighting--526bbeff-9d11-4945-b101-24b74af9b0d7", "sighting--c48bd351-26c1-49dc-b515-7414f5981706", "sighting--4e2706c6-9944-4e19-93b8-853dcafaab5e", "sighting--828ddfda-2fa9-4202-83dc-5e9bae53d7d2", "sighting--406f3f11-61f1-49bb-9bb2-702e1311940b", "sighting--5f691d69-fd12-455f-abc8-c186ff9a1388", "sighting--cc3a7668-574e-4add-95c1-8657e3d0610c", "sighting--23b600cc-e53b-4947-b2d8-61099f2f3cd5", "sighting--693ce0f6-ba0a-4eb2-987b-16759483c33a", "sighting--718007a9-5a4c-4756-923d-26b489324415", "sighting--dda5727c-44a7-41b7-9a11-27b27ff81231", "sighting--d7b44523-3049-44e1-b8b0-fc16af07b6f7", "sighting--ab87de6f-b9b1-4c84-90eb-73f3d694a4d8", "sighting--0a87371d-b23c-436f-b82e-e0fa65ccbf61", "sighting--ff5573d2-f9b2-42da-9443-c1d383402f89", "sighting--743db8e3-cf42-44b9-ad7b-df8de61593cc", "sighting--a2a33c5d-ac55-4f1d-b42d-d22914631681", "sighting--37aa8830-f029-4e19-874b-88e71dcc7c1b", "sighting--e22ba68c-a83f-43c6-a204-6a5e4801e1cc", "sighting--4368f2be-1885-4f33-8b39-33d7d08b8b62", "sighting--872919ec-f1c0-47f7-82b9-06f056ffecdc", "sighting--756e89cc-f408-40f6-90c5-060fa88057e2", "sighting--f289dae5-3c25-4826-8837-a5d38606d8b3", "sighting--8bdd05e8-01b2-4cad-ae99-41cf6d047285", "sighting--4deaa107-ae0d-41a9-9f80-08f7203292d0", "sighting--f854899b-9f3c-4caf-807e-748d909cbbee", "sighting--7ac99341-7590-43c5-a12a-ca0bf06a3796", "sighting--815c7cf5-63bf-4d96-b340-1e55af0d51ff", "sighting--5f223427-7cc5-45d6-bbf3-d7c0f1a20cb6", "sighting--95811fff-074d-411d-b64d-fafdc82da085", "sighting--311d274c-a852-42c7-8979-50d42cbb032b", "sighting--8748929b-a56c-4d32-8222-72778298f3a4", "sighting--349b6120-d140-4889-87b1-de03421eb6cd", "sighting--bc2ce4a0-d5b4-4854-8e70-bde856f5956e", "sighting--36c04020-e955-4648-b873-50433d0bff36", "sighting--dfc8ea6a-7512-47cf-adaa-8c4875cd56ab", "sighting--71023cc7-0c54-4c04-b101-6aea549f1ad8", "sighting--4f924e3d-0e45-4387-b9ee-6d8fb79a8945", "sighting--bcb22370-059e-4b12-99b7-8115957cda2d", "sighting--a78f3724-f521-408a-be9d-1d7caf3e3820", "sighting--70e35919-740d-4459-bdc4-39f79c0cdd64", "sighting--591431da-caff-4272-b74f-90d83a58b0ce", "sighting--60276a25-8e61-4629-988a-5de35c87170f", "sighting--08f5913e-6faf-4ec7-b960-4a01c94b11c0", "sighting--48c67424-12c1-426b-b51f-1eb32b94751c", "sighting--4b88552a-1fd3-4d97-a848-7edbbbd1a876", "sighting--a43b6278-c1b3-4aba-9ed0-54fdac4e4804", "sighting--2682387b-0d6a-4aab-8568-2c6d31688c02", "sighting--6513521c-c80f-433a-92ec-3c3fc5694a87", "sighting--b879adb0-f4dc-4d85-a2ef-584af89189cb", "sighting--4450dca6-0759-401d-bac8-632d62300ce1", "sighting--de41073e-7a67-459b-8e24-50bf0ee4b0ea", "sighting--a05af423-75f3-4500-82e5-52bdf7d81073", "sighting--268717d5-b542-4d90-92c7-700f1984f199", "sighting--5b244da3-256e-42ab-8102-672e7d120cb6", "sighting--4d619ebc-7099-481a-ba6b-1358141e02a1", "sighting--08b84da4-b322-4aca-9e68-f2cd05a3c088", "sighting--0dcd6460-f3d9-43e6-a34a-817bfdd96af0", "sighting--90cfaff5-3014-4504-81a4-8e559675f645", "sighting--383b7161-d226-4f99-8b5c-c9b5670f64a7", "sighting--924496b6-aab4-4100-83f9-b441314a7a8e", "sighting--44183c56-5b58-4499-a7b6-34b2e9b60cd4", "sighting--397213c0-6087-43e5-b51c-ab410f1f1a86", "sighting--6121e57c-83e1-45e2-8015-6d594108e921", "sighting--ac401a97-85c0-440b-8a06-c82d10e8b354", "sighting--8c921616-8488-4d4e-9737-faa78152759b", "sighting--d7ef3578-e287-4243-b255-e329615c78bb", "sighting--d0a6e6fe-9bcc-4084-8644-803e6757d3a6", "sighting--5caddd92-5ff0-4c3a-8c82-7c57d95c4a8d", "sighting--a30b7e01-d465-49a0-bb72-ce72ac1b9a75", "sighting--71cd8ec9-d8e3-46ae-af40-299a92afa900", "sighting--6342cfd9-2b1b-459b-b572-12676ac1fd69", "sighting--75569d86-95c6-47cd-bc88-6bc4234f0f1b", "sighting--2ffcc840-b365-4b8b-98d0-8b9617e7235b", "sighting--8541b54f-0dd6-448b-bbbf-ce3610c5b1b1", "sighting--3bfdf20c-809f-4a0f-8042-dbc912071b2b", "sighting--5783e6de-8adf-4d74-a459-34c0d1d0a0f4", "sighting--0bbc5679-4eba-4e62-ae11-e86bdfdd5eb2", "sighting--7d189f2f-d73e-4e93-aee8-c776fca627d7", "sighting--6ea2e531-200f-4762-ac0a-157186c57e3a", "sighting--f05a618c-2166-4b13-86b5-9f49464e1972", "sighting--a51f4433-6412-4ef5-a6fb-4bd9bbbddc65", "sighting--31aca1eb-ae8f-44e5-8f8a-fdfc810acb5f", "sighting--795088f3-742c-46bd-b0b0-b0cf2bc36cdb", "sighting--e2db5fcb-391d-4935-87f7-8b920e604d39", "sighting--a700cce5-2905-49e1-93e8-cdbfe95d945c", "sighting--8d543a23-f80a-414a-bd46-6a9a94b21438", "sighting--b7ba205e-675d-4ff3-9afe-365b7fbc1641", "sighting--2c0615af-a43f-452f-b97b-f6c9d2c86081", "sighting--dce5d8f3-7ea7-406c-9139-323087ee57d9", "sighting--2caa5e81-ded1-4bf0-9aff-2e51adab23ce", "sighting--a06cfd21-f2cb-4311-9d37-689672a4c05f", "sighting--f2af461a-d081-42b8-8099-2f611ee31e77", "sighting--f0ec4ce4-19c4-4341-99aa-b63f5a0876b8", "sighting--14a88a97-1054-44bc-8139-9f6381e353dd", "sighting--9b7b0a4a-9278-4838-9559-42c5c1a04099", "sighting--2b88489a-ad44-4961-85af-edd7aa9410c5", "sighting--5cfa26cc-a193-4e27-b4b8-d6e949e173f5", "sighting--2de01886-ccad-407a-b07f-7502acf828fe", "sighting--39b6d123-a456-414d-ac73-86a7f103cb4b", "sighting--4023e536-d76f-4de6-9333-22165c43ed9e", "sighting--20609b20-ec19-4901-aca4-2ac26a5b78ba", "sighting--8af37c91-07b3-4996-888c-a9f89aa42766", "sighting--4eb93f45-6346-48dc-8912-278db54aa7b5", "sighting--97d0566e-0143-4900-a06d-c46bcd1d4cf9", "sighting--d6339c84-2571-4387-93bd-d9766dbd6e6e", "sighting--280d4cbf-8a1b-4d08-99d0-635a883c5233", "sighting--e4373922-b867-4600-9afe-853422bd223d", "sighting--7a54f54f-83b0-4292-8dce-f4f79582d281", "sighting--10aa2b64-7e31-45fe-b266-2b034420be90", "sighting--6a4e8b91-e003-4927-8fb6-20e80525a79c", "sighting--ca946e18-8c29-4ad9-87a6-2967da17344e", "sighting--a8df5fec-b305-4882-b54b-3cca817ec796", "sighting--ce9b03f0-0615-473b-bf72-6771f6f07fc3", "sighting--febe290c-8d18-4dda-93a0-4ae476a3bc15", "sighting--3a1ed08d-27a5-4d1f-a9c3-7532d6de1abc", "sighting--37615610-19cb-49f7-8239-5abb035112f4", "sighting--cfa407d2-d3cf-4306-9be2-8bcf57d89d51", "sighting--860ec6b0-72f6-41e1-9456-03621357f7db", "sighting--bf0696ee-ca40-465c-a011-8ce1556cd9ff", "sighting--441d65d3-b0a5-4abd-bc29-00037ea1bfae", "sighting--de1bc10a-6a01-4938-92e4-9ada899ba6f4", "sighting--f36cbbda-908e-48e4-998b-ab0e62432dd2", "sighting--6a9113cf-cef0-4288-b1e0-89b045830ee1", "sighting--b122645f-edc9-408a-a47c-f4a93c7fdfd6", "sighting--74803303-645a-4d0d-9796-3118d7fbc437", "sighting--390be8ee-8f81-4795-9c2d-5674fe1ebb86", "sighting--008bd9b0-e6c1-42e5-8b9c-f08ae7e66927", "sighting--04ec96b4-fc2a-4acd-9f28-d2fea6056f6f", "sighting--7542b315-dc8f-42ed-8298-78136543d1d7", "sighting--2d3dfe05-e61b-44aa-b1b7-b0c06b7ce461", "sighting--95ea3204-14fd-4894-9ee0-17321643957e", "sighting--53c7bfd6-a39c-446e-a6be-5a33552d9dcf", "sighting--fbe07c12-64f7-41c8-8f6a-bc0a2ca71746", "sighting--08c10c32-c4e4-49db-a03b-cceac97371f5", "sighting--ae2b798a-54ee-409b-8685-02616d16fae2", "sighting--d00bf041-53a6-4e6c-a451-21812ebdfdb3", "sighting--78c4969d-61ba-4008-839c-a35524a4180f", "sighting--4992b1f9-bae8-4d99-a67f-5fc2e1030af6", "sighting--54073081-88cb-47e3-8a1f-a79ae6601767", "sighting--a5656bca-f716-40d3-862f-454c1d24759b", "sighting--ec32baf7-da7d-404c-ad51-27affe376c0b", "sighting--7d20a3f5-056e-4591-a703-d9984d6c653f", "sighting--dfeee463-e1c3-46dc-a9b6-f4456cab4540", "sighting--b927dde0-94f3-469d-99a9-a108639d4388", "sighting--4c9d11f4-1120-415a-9231-c7b3551ba6a2", "sighting--f285cfa3-fa74-4c6e-827a-044f6489eece", "sighting--57ea7e42-1cc6-4cdb-b8bb-40743bf9d080", "sighting--15905dd7-4b27-44c0-9006-ee25c5ed1112", "sighting--65a61829-d095-4937-aae0-f1f0e8eda735", "sighting--dc7566ce-7c97-4484-8f95-8173b183891b", "sighting--175b8955-ef86-4577-a9ce-238cfcbda826", "sighting--e1c8c7ab-9adb-4ce0-86da-7e8c229d510c", "sighting--f48584e2-3d05-455b-9164-cb4c38599af7", "sighting--66bf727e-cc69-4de9-b184-3de2d4c66453", "sighting--4e9d169a-8636-4352-a8cd-011816f03fdf", "sighting--94a6f0fb-dd2b-4e5c-a445-83cd555c2fb3", "sighting--38f2c0e9-1bc6-48b7-9cfd-af70bababc83", "sighting--bfba5b28-17ab-46db-92fe-5b0f58a40c35", "sighting--1674c03b-5b61-4791-9224-f4a56b37cb56", "sighting--20ba5052-353c-4536-8ecf-ed59ca3d4358", "sighting--b7dc31b0-4408-4d08-9884-bca2a90cb096", "sighting--6785b772-5211-410c-8aca-c53bb74730f7", "sighting--84f84a61-86bf-4730-9e3b-3b295938dd80", "sighting--1f4690b8-1f9b-4439-abb6-173686db177a", "sighting--395b2c30-f6c3-4658-8781-5125ed476ead", "sighting--94c42f9d-f8bf-440e-bc81-3c7c865e9f96", "sighting--fc93ff9b-d9f7-4071-aa46-dc38010c7a32", "sighting--b14c267c-f138-4434-9b76-4efb80f5fb41", "sighting--4bbb4a9d-60d6-4ef8-9f95-e0db6aa9acd1", "sighting--96af8eda-3b4c-4f40-ba15-4f1fde5fe0ab", "sighting--ec950307-42bf-4371-82a4-3ca022e9711c", "sighting--75f1249e-c515-48c7-8cba-b67f5a1c745e", "sighting--af5d9ed2-b5cb-4be1-9db7-0e9b7afa8e4d", "sighting--737382f5-ea0e-481a-b6f9-aed5b5e33777", "sighting--d168191b-8e43-44a0-9660-3ea38c53e95d", "sighting--3399f25a-1dfe-4d60-a8d4-5999f411bebe", "sighting--be685a23-3840-493a-b083-60874d3dc167", "sighting--332b84a2-046a-4861-828b-de2c77ed1010", "sighting--fd284139-0aa2-4de5-947d-f28d98c69604", "sighting--cff46d08-1d16-42e2-9a23-886b4bb931db", "sighting--cfc15b81-040b-44d5-baeb-18ad8b1bb141", "sighting--81d55044-f4b0-4c9f-b150-780ee585f903", "sighting--b446de13-f7c0-4156-b68c-f59ec484acd4", "sighting--29c1b713-c81a-47f5-882c-7409736831b7", "sighting--814f7188-71da-4d3b-b93d-efc2bb3f15a6", "sighting--ad0c5062-4e61-45af-83d7-c6806ff64c8c", "sighting--375248f6-2692-4875-9f71-5a4e5709a954", "sighting--00ed7d7d-15ad-4130-be24-bf7a3831104a", "sighting--0eee8200-cdde-49a1-85c2-1051bbbd3b1f", "sighting--4a22072d-202c-41e2-8661-b4cf5e64bb81", "sighting--c0eed50a-7eb8-4755-9d12-460e886bea0d", "sighting--c0c7dfd5-3731-41df-92f7-b3179c0528dd", "sighting--ecd2dea8-310d-42be-a609-817f892c4462", "sighting--af13cdee-02b7-49cf-8c49-204ce8936df6", "sighting--b0de778e-e9f4-4ece-a357-65bfbb954671", "sighting--3aa4f926-6980-4150-96d5-5e48f9004df0", "sighting--944086fd-4257-4f6f-8234-8202570f9550", "sighting--96aa59b3-1143-4c5a-85c4-293eb19ca887", "sighting--b3c4c69c-b107-4618-8b2c-07b7111f1404", "sighting--46b339ba-a796-4382-bb22-0bcce63c791d", "sighting--90fc9fe2-7b9a-4cd2-949f-cec990a9b804", "sighting--2834f950-713e-42af-97ce-77d8fce58537", "sighting--f7f213e3-ce7d-4e2e-8a5c-f0376d2e14d0", "sighting--e387eccb-ea00-4731-86ca-5bf51d12d6ea", "sighting--8d656308-e353-42dd-8f5a-74ec9b669ae3", "sighting--c5e52294-9d6a-4b10-90ce-ecb3ae97ba09", "sighting--762eb7e9-f372-414f-9f31-886e6c850de3", "sighting--c905a096-bea3-4cc0-b4cc-751e8698609c", "sighting--f990d46f-c6b7-4b9c-a954-194e3eb12729", "sighting--f07acf0e-751a-4d5b-ad43-19e2cc7f849c", "sighting--eb43b000-10a7-46d9-876f-6e7c4824b039", "sighting--b788dce5-f6d9-4ff3-a290-ff1371058e37", "sighting--f22f6245-1e66-4527-9d98-163798e236fb", "sighting--f5e05252-1182-43cd-97c6-57bc5c4a1aa9", "sighting--25f50ad1-6aa7-42fa-9a49-c41bd6194d03", "sighting--ab7a10c3-e32f-46a0-ba6a-24067b78c098", "sighting--ce105119-ebd1-4ebd-a479-631200f01149", "sighting--9ca160f5-ddf4-4590-81d6-77d3486e3019", "sighting--fd73591e-2cfc-4e05-983b-998690fb8384", "sighting--a8dbe28e-72da-4451-ad4f-41ffe8c54887", "sighting--75ed0551-ab2e-4966-ae90-91dae52154de", "sighting--7659ddd7-b0a2-4e45-9f6b-88442a3374f1", "sighting--71af2816-633b-4183-8c8b-1a5a169cb53f", "sighting--205e5f31-7cdd-4102-8d21-94a3ff6b52fb", "sighting--da7685d5-abb3-4790-a594-2d0a3c94293e", "sighting--c58fd233-5390-43d2-8711-36f9db585253", "sighting--c0540885-622c-465f-88a0-b3a5bc28f230", "sighting--5af97bcf-b0ab-475e-89c0-6d1164514107", "sighting--2aad3d2d-495f-4866-8a77-5adbbc57b074", "sighting--385a9759-b626-4586-bbf8-b16d00f86c10", "sighting--b4666a0b-c76a-4c92-8a08-38ea9ee7e875", "sighting--aa342e32-7db6-4740-9b70-41b55e1b106f", "sighting--6240450e-aff0-4da0-9589-93e713cc24f6", "sighting--eefc5334-f2a7-47dd-8882-fe2e543389d4", "sighting--07a89b42-8096-4d69-a303-3d307bb0a19d", "sighting--6684b28f-5a6e-4f1a-9ebf-3beba71bfd9d", "sighting--09961235-35eb-4622-97d0-ac23bbdb33f3", "sighting--8e6a672b-cee8-4c4f-94f5-58df5c05aa59", "sighting--93bd18ad-faee-452f-b4a0-82704bb3a070", "sighting--416c3892-e3d7-4588-8327-a0b489e88247", "sighting--79072055-826d-47a8-a1de-9a2b67c156cc", "sighting--6d2a87a1-1753-4a8f-8f38-6e3a871d10c9", "sighting--06bc57da-8909-40ab-bb1b-824ab4cebdce", "sighting--079b6e8e-3b2b-4618-b51e-8f0c91ca7b4d", "sighting--bb389b3e-a51d-4c49-a8e2-98164d0ed08b", "sighting--ef822029-e365-4ea8-b1c6-1cee6739e8bc", "sighting--053c5806-f2dd-4187-a11c-22023c769243", "sighting--411cf010-c6bb-4e48-a48e-77ca995a09cd", "sighting--5744fb2a-8a34-4fd7-81e4-7a1a354d2f7b", "sighting--23369fe9-3bc6-497b-b697-3582b78ce743", "sighting--839a56e1-314e-4504-a7fd-db28281ce532", "sighting--2ca395ce-79dd-4fb6-a989-684ad660fd77", "sighting--d5465d6a-2113-478d-a2eb-35f5b6e44b6e", "sighting--38579305-e577-442c-99f9-eb6a10288f7e", "sighting--57669fd1-230a-4f60-9fa2-861e055c60d4", "sighting--a912bda6-02cb-4eda-9252-fe15f36028ee", "sighting--26b363c3-7601-4313-a69c-4015a6073ed2", "sighting--7e0c869b-b0c0-4716-b72c-fb0d077821e2", "sighting--6355d7a4-6c3d-4fb9-92fa-5dbef96c6960", "sighting--f7e91adb-2f90-423b-ad50-beb8a7cf837c", "sighting--f030786f-0a3a-45a3-8e70-93522d9aa698", "sighting--8422b4cb-6c2d-4c6b-94f6-a80378411def", "sighting--60465754-6717-4587-b9cf-7eb2d7cac60f", "sighting--31df3789-5347-4afd-b14a-d8431f2b23ef", "sighting--c2680de5-b831-4d01-95ec-017cea4b04e4", "sighting--3233bce7-c705-4434-998a-6bcf39cd8487", "sighting--f9362a6f-55a7-43e8-b38e-23b3a1e8a0d7", "sighting--e08fcd5c-eab4-45c4-8619-a13a0e0d9f2b", "sighting--bd3ac828-bfa9-4901-bd87-f0a5a39f2360", "sighting--b9a6ed12-6d4c-45d8-a7a5-bfa462f92c87", "sighting--3ce46885-7f3e-452a-8526-89131380347e", "sighting--81a62422-507b-401a-a30c-76ea73d845ee", "sighting--bcc3196a-1a5d-4283-9d5a-97e0d8a8c7d7", "sighting--95afd95e-5b37-4209-84bd-bd953c9cc239", "sighting--8db4861a-d79e-4a2e-9573-67de6362f89e", "sighting--174bf37b-98e5-4eb1-b1b3-da91615d75a1", "sighting--b593d972-0f72-4f57-84c8-107973e5aeeb", "sighting--d59b3983-87e2-4264-a894-ff63b7970476", "sighting--f61abbe8-e6e3-4d2c-8877-130feb67e32b", "sighting--53309255-942c-4daf-94a2-e42930a4c6f4", "sighting--1e3bc922-0e5b-4721-9065-a0392d7e8198", "sighting--b4092e00-8cf7-4fa7-b0a7-495174b6fad7", "sighting--c45ba483-75c6-4240-8a0b-4191546ef901", "sighting--3013bd0a-3615-482e-b313-25e27a3a37a2", "sighting--542b5433-2d45-4af0-b4e5-a60a83113900", "sighting--c902ec8a-0502-40ea-a911-051bae28a873", "sighting--0be60be8-6139-4d25-a78a-79d3dbfade0c", "sighting--dd96c325-0d92-4438-8eb7-e00160de753d", "sighting--6ef0591c-84e8-4aed-8622-97ec9d56294d", "sighting--7045d457-1cc1-47d8-87d3-36ce85ad780a", "sighting--13ea43e6-dc44-4009-a895-4060e24ce329", "sighting--24c9d4ea-1c9d-4472-beb8-8b5256ca9c02", "sighting--ecf09b57-99ae-4f4c-9110-773b8e303f7a", "sighting--3b224c08-d0c9-4236-a17b-1d05ee4f080e", "sighting--b2950479-4653-44aa-bed1-3e0a20dcc9ad", "sighting--0dd4a5c9-be84-4324-b696-32cc518cce9f", "sighting--b70e3c5a-09a9-46f2-abb6-d4ab1e35c3a1", "sighting--dffecafa-4816-464d-94ff-901507c18172", "sighting--48c8ca94-3292-4d40-964b-29ec7a2327f0", "sighting--8c868b2c-4029-4046-bc42-86593da3cef5", "sighting--147ad8d6-a251-486e-8a90-efa910eea17e", "sighting--7a6827cc-0296-4d15-a9ff-1e936a0c13f6", "sighting--72f45679-36dc-4473-a5bb-c491a8cabcf5", "sighting--c009c615-5236-4e0f-ba83-76ed45d3d622", "sighting--91233f2a-276a-4267-bad0-f2c7bd73fd06", "sighting--3aa4fe8b-22dc-4209-8992-6db7825a18ca", "sighting--2558d443-8dd1-4028-a344-c44ab4d7d9cd", "sighting--e7a02752-64a6-4f17-8244-c9a2d72863c7", "sighting--2e8dde2d-489e-43d5-86af-929e03de3d0c", "sighting--2f456151-df83-4913-9632-bbdeef36268b", "sighting--389ebcd2-9aaa-4888-9e49-4cde2544d6d6", "sighting--cb20d51a-c0ab-4360-bd1c-46d0cac7c2ab", "sighting--49c7a241-0e8c-4dcf-8519-c84773993158", "sighting--5e79eb99-7403-4d32-aa24-4fdec25d3749", "sighting--54d52bc1-ca78-42ad-9aff-1a373b4c1763", "sighting--405c9a3d-ef3c-4b71-9746-835c458051ce", "sighting--9553b655-68b3-432a-9edf-458f5c0aaf2a", "sighting--c4ddbe8b-a3fc-4b8e-a5c1-eb9ea574e0ce", "sighting--afcb3f87-5ee1-4a9b-b876-7f5c85268393", "sighting--c6cd89e9-8476-4cbf-9303-a89c3d04b53d", "sighting--73ecd850-a582-4c48-839a-dcd9a9c036ee", "sighting--4eaea212-a074-4bb8-9825-acfbcf7065aa", "sighting--4d7fffaa-48c3-4994-a83a-412158198842", "sighting--b3af8f27-b5bb-4263-b96a-63dc7b786120", "sighting--a2a451be-9917-4e25-b803-71321efbbad7", "sighting--7d0f3ae3-6184-4703-8256-a0bcbd3b73a1", "sighting--63212792-b6e9-4efd-a4ae-8ff863bba16c", "sighting--edf87063-d4fd-4ec8-99ec-14cdca04a1c8", "sighting--17feab6d-51c9-4b32-832e-3b0c8f0b90b3", "sighting--ab293d46-486d-48e7-b230-b74609b208ec", "sighting--353bb390-eb2c-499b-ab88-b0100c3f29e9", "sighting--140241e7-93cf-4f09-b0ef-4a76d3863697", "sighting--632d09a5-03f5-48e1-a471-bd114716b483", "sighting--d1a49673-3be5-4b87-a58e-f90fea5dd8a8", "sighting--6b3a2290-84e4-4ebb-b78c-5542ccdf46b3", "sighting--874492fd-48aa-408f-aa0f-7c54b28d4d3c", "sighting--23cfce25-8bbb-448d-be04-fa4ff6d97ee0", "sighting--978e2427-ffa3-4efd-ac83-a578df987a77", "sighting--d52d50f3-1755-422a-9cd7-728cb7c0fba6", "sighting--b6e1791e-08b2-492b-a5fb-b3f3f7b34348", "sighting--3d2235f0-8dd7-4796-8ea2-67a5099a0824", "sighting--c6dc2166-6cac-4cc1-88c5-ba742efe9eb4", "sighting--032015e8-9e3f-46a9-83b8-2f9b389b9d54", "sighting--35ec7fc1-3cdc-4bed-9a2f-9a2a5ea62197", "sighting--6c78f762-a010-4ec9-a91f-5a44242eb072", "sighting--0844a787-e42f-42f8-b162-606011e89af7", "sighting--5114870f-42af-4371-889b-a51ec19db6eb", "sighting--defa7b49-7c04-42aa-a7aa-ff553d9e98af", "sighting--8d011f22-20c7-45d8-ab8c-7a2d56ae81af", "sighting--8f95eab8-7931-41a3-bb4a-26cc35530770", "sighting--690ee076-a60a-4aa3-9e9a-e99c17352ee3", "sighting--eb5b7073-93fc-47db-91f1-5aedf0e938d9", "sighting--3a6f15a7-54c7-46fd-a9d0-270eb4deacaf", "sighting--f16338d6-ca74-4e2c-93a9-1ca17243c92a", "sighting--51a3eb7f-51d4-4ea3-a583-8b41034e1112", "sighting--33e51d65-e19f-48f2-b275-8c2f9012a11c", "sighting--f10e4a7c-4cd2-445a-b417-b8b975b9b4a5", "sighting--d2cce0c5-6feb-49b4-a917-58805c0f065c", "sighting--d5513097-8df5-47e2-a648-e932ab8c64ab", "sighting--8d79edb2-8fb0-4dfa-ae70-18d461fbf54d", "sighting--39ac54e0-e03e-4bfb-8faf-0958af4ec3ed", "sighting--acac2f5e-5aa1-461c-b031-72e3a7f8447a", "sighting--5e7a72d2-e9c0-42e7-889a-cb7ba004b772", "sighting--7d735660-dd83-4854-a92f-cbbd56561687", "sighting--723c72d1-fa82-42c3-a89d-a2938e319294", "sighting--96c605f4-8527-4f13-86fb-5b9d8aa63ab1", "sighting--f9995e5d-25cf-499e-a8d3-21a656cf1510", "sighting--6a62c8f3-3aca-4da5-b862-3ee7d398fe87", "sighting--5975ae6a-ca42-42b1-9836-5c29d36793c4", "sighting--fbe6f327-c489-4522-80b9-707f9ffbd137", "sighting--45e7af5f-f3ab-4862-99b9-038a473f180a", "sighting--582fcddb-db1a-454b-9d8d-08d064d82b00", "sighting--949437fe-7aa8-486f-8d91-e07dc9916d96", "sighting--f8f4073e-031b-4e3a-aabe-6c2a9891b655", "sighting--cc19011d-f8b8-494d-ace1-699e1777eef8", "sighting--74f4028e-ea52-4d80-92ee-50aec472a847", "sighting--151b19de-7731-45be-b691-35467ae14280", "sighting--64677eb1-b151-403b-8f71-fd349459231b", "sighting--c9ca8e1a-eadd-4ed4-b486-afdfb64e77f1", "sighting--d6abdeed-1daf-4eb6-95e9-7ebdb6dfbe25", "sighting--21b5b702-65af-47f0-9dac-efa4700077a5", "sighting--d9e71cc5-d140-46a9-b0e4-31d936627bb2", "sighting--b1dc422a-23e9-47ae-a5ae-8b991da02665", "sighting--79ac90e5-e0a0-4b86-b343-27f08e7ba9da", "sighting--0bc90f1d-f254-4427-b5de-c3812d31b2c0", "sighting--03f66faf-1731-471c-885a-5f941b94226d", "sighting--0df35723-2372-4c1d-bce5-374745774ae4", "sighting--31db4b7f-8e1c-4fda-bb1a-0f9a184d2457", "sighting--a2794fcd-7bb8-4d52-a0d8-3b4f4aab6267", "sighting--4d112363-1ee9-4527-ae6d-bbedba499ab5", "sighting--a43952a2-5f37-40c9-9c40-e8683d4b6639", "sighting--7eece671-e868-4063-b2af-1cca1c18a78b", "sighting--2c5590d1-35f4-42a8-ba21-ced36d3a5120", "sighting--0c41e396-38ad-4b7c-9224-f150987ecbdc", "sighting--b0688f55-1e13-4490-bf96-165990f34304", "sighting--f4c00189-4db5-4396-818b-b2237e3495ed", "sighting--b52f6462-24b3-4a55-853f-4948aeca7657", "sighting--6197832e-0097-4879-9853-554ad8e68eb9", "sighting--9cb69557-8bc2-459a-b212-cdfe81d42b27", "sighting--d2a841ce-c3db-43ec-bb34-75a8f00dabf7", "sighting--06cf82f4-7c8f-438d-9dc4-d8987fc086fd", "sighting--b2f0f1c8-d38a-41ac-aa13-f0b7671feba1", "sighting--54d1bb91-8c47-459f-91ca-5fa4a99319b2", "sighting--6946dab2-84e2-40be-b847-4437dc0606a1", "sighting--65e9b1a7-7b5c-4161-90ce-bf7f5523d344", "sighting--e85b5b67-e59e-4a0d-8673-7e83cb7f5376", "sighting--f22dee42-e8ed-481b-bea1-26a691d8207a", "sighting--b12555d9-3377-4ad1-b3d5-8ffe7dc3df05", "sighting--1f4654f5-27d9-46ac-9896-7b0fcd7e7524", "sighting--0d5e0bbd-a08e-42af-8833-7cf1595ac269", "sighting--4b4989d1-9011-4536-8dbe-0e11eefd1149", "sighting--87ef986f-8cc6-4b1c-86db-3f26a210aafe", "sighting--16117647-54ac-476c-9123-5195f1cadd8d", "sighting--065851a1-e8a0-4cb6-9a16-aedc2e567a5a", "sighting--9150ef2f-8a7e-41cb-8710-ed450c1072f0", "sighting--43d01e09-139f-45f5-93c8-9e3dc950b8cc", "sighting--cf8fbb44-05c4-4e1e-b67b-bf552ffcf715", "sighting--a470283b-f821-4991-83a0-eb566b5ab528", "sighting--a9d6733a-620f-440e-9437-414e58ab2889", "sighting--38ec77e5-3b2f-459d-830d-6ed08fd4df17", "sighting--68c42f1c-4566-4633-9e3b-abe94514bac3", "sighting--c25f3284-3242-42ef-bbd2-4f876864b71e", "sighting--90214a87-8968-4938-be6d-e0bd129c0a13", "sighting--f4f2be52-0d3f-41ab-b9bf-957ec45748f6", "sighting--bbb0960a-7c21-462d-8935-d045190a092c", "sighting--5eea4a68-9059-4fff-a2a9-fa0c740a2edf", "sighting--8bc746d1-5008-4b0c-9cd1-e449bd1fe21c", "sighting--7dde8789-e73e-408b-9703-6222e276e991", "sighting--e68681d5-659c-472d-97fc-4618269836a2", "sighting--4b84c1f7-2c6c-4aaa-a6d0-39700cd6a78b", "sighting--ea75d170-5179-4e24-82d0-fdda1134da25", "sighting--c83ae175-37f8-4e15-9ec7-34667f56d98f", "sighting--56d8e352-5c05-4885-aa48-6e70efbf959b", "sighting--3402b0ec-ff01-46b4-8cd1-0c35e7ca9fd0", "sighting--5dad3299-3137-431d-82b5-1e2ee5c1563e", "sighting--60e3427e-a215-4bf6-ad0b-41e4186f4022", "sighting--a51cb96d-7b47-4ee4-8717-43d825c16228", "sighting--5dc32504-156c-43cc-b730-14a5ee280ba0", "sighting--0bbed01f-ade5-429b-8fbd-091aee491520", "sighting--a3318656-a105-4f9c-ba35-d3b754a8efa9", "sighting--fff74b81-0122-4014-8bbe-2e6252ecd264", "sighting--60d6b831-ba60-4568-bfc7-190a5c085b9f", "sighting--fa8cd3ae-4e6f-4b49-a54a-01c88489500d", "sighting--8d886b73-7a4c-440d-9dce-f4d64b865cc7", "sighting--6b168a33-9821-44e0-8861-697964210d1b", "sighting--6f2369fd-ca63-44ec-bc7a-8adbeb2d6d73", "sighting--917ade46-818e-40a8-b76f-accc278971a3", "sighting--734eadb8-84ed-4a02-8def-09c853e9b888", "sighting--b392961c-240e-4c8e-9b01-86b8d73084d0", "sighting--6d761003-4c3b-4778-b503-3a7a0ca38cb1", "sighting--fcf80f33-def5-4b39-baa3-8747b07cc390", "sighting--65c0104a-e3f6-4081-9079-3611f35d7f63", "sighting--0b956d97-9326-4088-ba76-6feaa5a13324", "sighting--4d922a9c-6781-4ed3-800d-381e3ed04991", "sighting--5c2fe6d8-89c0-4641-aa01-56903ed4b362", "sighting--627a42e7-a749-4a7d-8ca8-ed25f190e3df", "sighting--e114a478-c373-4336-8dcd-a96020690bb7", "sighting--471593f1-8545-438f-aa22-52cf68beda79", "sighting--51cdacf8-d5f6-4766-b120-fc6506a99f15", "sighting--c4f382d3-e6d5-4f5e-9fa7-235ab0f70277", "sighting--93fa485a-724f-4588-ac1f-c26e23b0d236", "sighting--c64a94b3-3381-410b-a5a0-0bf6f1e9d174", "sighting--eb6f838a-fabb-4414-87b6-152c2e7c1479", "sighting--df6f96cb-7be9-473d-921d-f856f5b22e65", "sighting--7310bbef-8f18-48ca-ae40-81545ef6a9f2", "sighting--e8a46689-b0aa-40a2-87e1-c04d768f5330", "sighting--5a8c95b2-ed1f-42d5-8ff5-bdd3765a4f3b", "sighting--87b32c0c-7863-4fd7-9059-0a1cb41e7c2f", "sighting--e40a9ea6-c315-4cc8-b587-15d8d5ace826", "sighting--b733df33-5fe0-4928-8684-0182295b8be6", "sighting--4f7b7daa-718b-4708-b86e-bcb71bb56ff7", "sighting--4df98567-aca8-4a56-a60a-f815e8a9d210", "sighting--7b7530bd-7653-4d83-b8f8-7c2b65edff19", "sighting--f2ed25ba-5611-44e3-9fd5-434067090b06", "sighting--adbc4e4a-b999-48e5-91bf-d326e2780bad", "sighting--7e353545-68fb-4680-b7be-902f3e714c07", "sighting--c44ca04d-0e66-4774-aa7e-2351786c1721", "sighting--d0025473-abd0-42d1-afe9-87025adeae2a", "sighting--32a030aa-ffdc-4e4d-9aa2-7ce0a2076715", "sighting--93a59d36-1f6c-416c-9a61-e0f92fafb0ae", "sighting--b9c4c78a-2926-4bfa-aa6d-a943d4e8b3f0", "sighting--61c6fe5e-4198-4bbd-9f4e-8d64fc6a1f70", "sighting--4e1650e4-9254-411f-9f5f-20433f5cd17c", "sighting--0beb8f3b-c0ab-4e6e-85ac-3bbdf27e12ee", "sighting--1133b094-e1ac-4617-bda1-ddbc84fe5c92", "sighting--5ede77e0-42a6-4ee5-ab68-8d3800f8a194", "sighting--57a1ea19-0af1-45f1-a309-ecdf93868c36", "sighting--30d34204-6d2d-4db7-a281-58fb75140504", "sighting--59b44484-a8e6-41eb-ad67-ffc6c478f3b4", "sighting--37a9d9bc-1909-436e-8f11-22e0d2d387d3", "sighting--89a28d81-ca13-43b8-91bf-5cc61d137a11", "sighting--5072159d-058a-42fa-8167-e22a238f4cc0", "sighting--272f070b-0709-47c1-8454-c7b98d145143", "sighting--39204c0a-bae1-49d2-bb6c-e94e3c2fe7e3", "sighting--3e28d6e4-4780-40a4-9c3e-a6b06bdfe5a9", "sighting--51e234ee-7543-4247-bdf4-56d051a8fa72", "sighting--c4803cb8-784f-415f-8ca9-08c0bca2c0fe", "sighting--247d9bfc-8966-4740-98aa-461513cc4f24", "sighting--008152b2-0c24-4010-bc0b-97a2519bc12b", "sighting--27756eaa-dee1-44fe-a815-152b619fd9c8", "sighting--97a6768e-e429-47ed-a723-f566f715d39b", "sighting--e8a748eb-8c46-44c6-aa70-77a190f56003", "sighting--68ee5d3c-8816-4e5b-8584-286a326bf352", "sighting--bc924adb-87c1-4cbc-8bef-505801fc325c", "sighting--08ad8540-bee3-4f92-a58a-1921353c1201", "sighting--29b708fb-5d6b-42fc-b9b9-88ba9b649563", "sighting--9efa51c5-4c58-41f9-8578-c319c3e22650", "sighting--9c99a016-46b0-4b17-8488-d1f5ae9eb374", "sighting--f305a55e-564b-430a-b6b8-8f9bf8695973", "sighting--a91c931a-553e-48be-986f-f3d52657ea1b", "sighting--4eb5b948-d25b-4d5f-b3d4-9e60ab5520b7", "sighting--8e97475f-eb1b-44ce-bb70-36d352f9c8ff", "sighting--1d955c62-7c9c-4a52-82c4-796eaf134d33", "sighting--96627d76-9d0b-4fdc-ada0-419ab2a6c7ff", "sighting--ad4e7aa4-93aa-416c-ae97-0565585f1265", "sighting--a7263875-07a0-4280-ab9d-743aab751b3a", "sighting--84c1bbc3-2e2a-40e5-a60f-e91f4ae57390", "sighting--2a56df36-ef05-405a-9dd8-e9d16adc8a49", "sighting--dcb4a4c5-42ee-4614-be05-fe7c6600b410", "sighting--3edfadd4-4eff-4786-8ff5-ac15f4006719", "sighting--5f6b488e-8995-4cb2-9a69-3dd69b6d6c8a", "sighting--f768cd08-48a1-45a2-869f-83d308f0c62a", "sighting--ef6734d0-f334-4822-8bc1-d394a50e3d3b", "sighting--e2517970-8298-4a08-be76-a78603f7cc4b", "sighting--aa68432a-b74d-408d-b84d-d300dd56f45a", "sighting--2595837a-f681-489b-bdaf-1debab94f39f", "sighting--07a4cb3b-b08c-4132-b691-b41cb34ebee2", "sighting--811a2a9f-2c93-4bec-944c-9d704ab3fc46", "sighting--66880f81-03d3-41cc-a63c-ce8818a8fc88", "sighting--08039961-5673-4a10-98fa-a37c2ed1e099", "sighting--51b7cc3b-2c85-4762-ae56-1e3460416748", "sighting--a93bd41e-3cac-482f-84d5-b58f9bef3243", "sighting--ec82bf06-bf71-4517-b0e3-81763164d6b3", "sighting--e835be2c-7d3e-4619-ae5e-c9bbf36a518f", "sighting--fbf2143e-02d3-4e18-b37e-d3b748dfb7d8", "sighting--45e363b0-bed5-44ee-9ed8-d1681caab5ee", "sighting--f141ddb1-3f81-455f-9c3a-d807181be29d", "sighting--921da9f9-c5b7-418a-8610-8b60e5867093", "sighting--46085664-43da-49bf-96ce-c355c70515b9", "sighting--3f5f0fd3-a626-4ab7-b9f6-aefb20ed3d72", "sighting--ca901610-dfe9-447a-adde-00df1e8646d7", "sighting--f9bb98c9-2200-40a7-886a-9990376ce897", "sighting--b323e98f-3ae8-488f-a572-b07bbb96d298", "sighting--24c17bfa-f94c-4453-a5ff-7c99262983bf", "sighting--501c5b74-6d56-413f-9cc4-7f3e5d18d274", "sighting--37e5752a-339f-4490-bd9a-decd69a36949", "sighting--07906738-3c96-42ff-886e-a2acbb56be77", "sighting--d811a857-9017-4104-828e-1c6194da081a", "sighting--d8240d78-c240-4136-bcfe-62e7f0fbeb96", "sighting--0e7ca42d-9951-45a9-9fda-b3f1adad45d3", "sighting--b004e693-90c6-4221-9472-5c01eb4434aa", "sighting--247de033-01bf-4e1b-b3c6-b6170d3b30fb", "sighting--265f60d0-f2ad-4f99-a4d6-b3593513098b", "sighting--9c3d7d19-e4f0-42c0-87ac-635ab3faefd0", "sighting--c1690a65-9571-4818-b9c8-360da46e529f", "sighting--c78dac2d-1303-494e-b09e-8e559d695d52", "sighting--f4876500-1035-4b8a-ad95-0b25454b128a", "sighting--7f92cc82-00ee-469e-8d19-097cc8e1f231", "sighting--830cbbea-2f0d-49cb-b0d2-62d3664640e1", "sighting--a44d907c-df47-4e68-ae45-4af8e2791297", "sighting--04c414f1-b346-46e1-95f4-a3e0ac49739c", "sighting--ddbf2479-5188-4084-8428-056283928493", "sighting--1b3cc68f-abec-4c1f-9c48-bdb6ff1f1cd2", "sighting--2abf39cf-15f4-4c1b-ae34-c3c599e1d14e", "sighting--fb732d9b-21d5-4239-826a-cc647668ca9d", "sighting--a2cc5634-0081-43db-9f78-3e4229c5070f", "sighting--20f27fc6-cd9b-4429-a54b-cbb884ab4fd4", "sighting--f4552996-885d-4eaa-a635-ef0e037ee0ac", "sighting--06376e5b-69b7-4d95-a202-16216a8606e9", "sighting--234761a4-18e2-4a42-a2fe-a113e08d2eef", "sighting--d7aa8502-6213-4150-a869-fee6e7354f0a", "sighting--6a9c9081-424c-43fb-83f2-d663165d3e92", "sighting--01eeda29-e608-4f10-90af-e4f98d049a6c", "sighting--ce661e2a-5c72-40fc-a9bc-be548aeef63f", "sighting--76b53dd0-3a15-44e7-a864-b568b0d8718b", "sighting--0a8d512e-5117-4225-bb08-370d19ff3fc9", "sighting--ca369d94-d98e-4a23-a0f1-56415a48977f", "sighting--35bc627d-c8b2-46ae-a311-48a4f11c1b2b", "sighting--092b22ca-da5a-4131-a0bb-85338591e62f", "sighting--25cc3743-4001-44bd-bc47-8bf27c23d285", "sighting--c8eece43-e497-4ea2-b54c-0083c7239768", "sighting--81f128da-4542-4d80-9fae-7b9607dee4fd", "sighting--bcc76438-a477-4b85-b653-6e27c861e4ad", "sighting--47ea7a95-85ba-4e68-9c60-1274a8d66c22", "sighting--9154c9a0-8664-408c-9f83-d31325c2be59", "sighting--15b1e803-5470-40ea-823b-c924dc22f26e", "sighting--e147784e-337d-4182-8afe-2e32dd663379", "sighting--9068f13e-c5a5-422c-be04-88ec02f24882", "sighting--c6e9001a-0a30-4a1c-9bd7-c18023fa7d02", "sighting--352cb3b9-bf12-4d4f-a1c0-841413e12df6", "sighting--ff7fb332-111a-435a-a221-567ae297e69c", "sighting--24e5bd12-4294-4f1f-a735-639cf920f0b7", "sighting--556e92ea-d48f-4ae9-b00d-ac03d9a5f306", "sighting--45dbe13c-5d7b-47aa-863d-018f43e3e448", "sighting--ee6870b1-152c-4423-b07a-67964c9a1845", "sighting--7db9a078-3e39-4f77-8e3c-d46d01ee230e", "sighting--27e96fa7-6852-4c9c-891c-8dbba2aabbdf", "sighting--dccf1ebe-38fc-4b5c-92e5-41891e6d48f4", "sighting--e7e87157-e341-4385-aef2-5ca877550b89", "sighting--387da5fb-e8be-4086-afaa-d904a68c22f3", "sighting--5694ef43-f786-42a3-a66b-994fcfd41e01", "sighting--b6d38a1a-ca58-4ea4-8743-0368c5d878a8", "sighting--943db04e-7e31-4375-98e1-59f3ff4211c3", "sighting--78975edb-9873-42f1-9f44-c2b76d9fa867", "sighting--feaad4c5-e5ab-4b01-bb5d-8e72b2b3f5e0", "sighting--8f4c71b9-ad46-497b-acd7-f06578f47b80", "sighting--45d9abdc-81c4-44c4-9f85-6d319e25a252", "sighting--e6eb1037-6a1d-49ed-82ad-fd212782b967", "sighting--df6ed00e-af71-44c9-aacb-bda65ce0981f", "sighting--cade4dce-59be-4609-be5c-0e24616e5449", "sighting--f86b0be4-ddbf-4b9a-b579-1eeb21ec717e", "sighting--72bdff8e-a6de-4b95-82c1-956383000347", "sighting--ac255af9-bd67-4117-b98b-45dd6f069a46", "sighting--f0bd3559-a917-494e-806f-5521191bf12f", "sighting--0743122a-3cb8-4474-95ed-9d496c56e9a2", "sighting--b008da73-7033-4629-8f69-d9bb2ac4615e", "sighting--042f3ac0-c897-4c72-91fd-a6b8b0fbbeca", "sighting--1107bf14-8b9e-419f-8511-c8f3cff77c16", "sighting--7adb80e8-9b4f-485b-85ae-e976e3a34300", "sighting--338fac4e-82a6-4c29-8e51-ee52445a3288", "sighting--94c369b1-e88a-4efa-938e-bdb08a0f7075", "sighting--6ef18768-702e-4944-a4de-bff55318de31", "sighting--c2ed98ce-f131-4dcc-9c09-76506a2fc952", "sighting--7da28ae3-7765-42a9-908f-ab79e5132599", "sighting--3545d790-0268-4850-b227-ba9cf41c8fc6", "sighting--e303dd5f-43a2-4b93-8891-5aed408ee91e", "sighting--43dbe089-7d9f-47b5-99ec-3fcd3cb0f9ec", "sighting--d2a347f3-8b89-4db9-8968-f21e3e0a327c", "sighting--b0d1006d-9662-409b-a964-966f239b6c71", "sighting--5c595d53-86e2-4b46-897f-7b967580d911", "sighting--cac7b951-a472-4a37-81e8-f8dde990ab81", "sighting--e5e7d662-d77a-4f8e-8a82-1027a5827a84", "sighting--c5fd1a42-7818-4664-9ae1-712ca5e7cc69", "sighting--8be746c2-b228-4ba2-8041-52f5985876d7", "sighting--e8c1e4af-3ecd-4f11-a5fe-e70708dc9aff", "sighting--4129a95a-646f-44ef-b2b4-6ff32bbd9cc5", "sighting--e5f82401-810d-41fa-9098-49c7fba43da8", "sighting--52eac2ce-a955-4a2e-a3e0-7888bdeacdfe", "sighting--f5e0e77e-3eed-4fc2-9f31-23014af1dd06", "sighting--e6016fac-d042-4252-8e60-0f73a8ab8016", "sighting--32835da5-f388-4798-a441-d584262d0bea", "sighting--167c25d9-fe95-4838-9317-7fe73907422a", "sighting--c41a5ac8-2b16-468b-8a70-19cf423bc715", "sighting--c4331cfd-9e77-4a3a-bc3e-de9d3cba40b4", "sighting--d714ef71-aa2b-475a-9ab1-ccd89a789ff4", "sighting--da91f098-4d49-4c22-9ec4-744f58ae181c", "sighting--517d6459-9bed-491e-b8fc-fb6dcc85da18", "sighting--c809b297-6511-4d1e-9d5a-3b7f744f301f", "sighting--eb4dce05-c141-4aa8-8608-b862bbe6af84", "sighting--769a56f6-b886-4586-a84a-42f3adf57beb", "sighting--221cbd9a-4936-4895-84f6-1d69e163a888", "sighting--573fbb65-adc8-47d0-b700-7a02efc4f111", "sighting--e71a2a64-da64-4b05-9e8f-e903a67993b8", "sighting--664ea8d2-2f9b-4c08-b86b-4f10fe2b1663", "sighting--9c6ef6ea-0b03-4e75-b4a9-57d0fd062322", "sighting--c1ce67ed-8ef9-40e0-b891-4fa5427f171e", "sighting--81f5fe7b-1fc4-47ff-8d24-3450ec5df1f7", "sighting--5a55b8d7-02f7-4ff6-bc41-de98032f450a", "sighting--0c7983a0-5963-4ef2-b03a-90e3679b2b21", "sighting--7b2fe6b7-0d25-4891-b23b-c63b7cdba43b", "sighting--f3bdbaf5-bf0a-4b66-b529-e14517931c4c", "sighting--d9db04ef-a7bb-4529-a357-0c443f8559db", "sighting--d824ab18-17aa-4b8e-9922-595e2213be22", "sighting--92086cc6-6b5e-48de-858d-8fc374e02f2b", "sighting--c8fb0c97-4cb5-4638-9531-44aebb33c3ea", "sighting--b7772cd7-01e7-44d9-8e3b-d8b1f3d0efab", "sighting--7342cb43-fd05-49b7-a7bb-c36f72aff201", "sighting--5bdc9b15-09ea-45a2-a4b9-93ac5fe7776b", "sighting--33b61a40-0c0c-4055-bef6-4c9037dc5493", "sighting--5db57f6d-83df-451c-b1a7-3a300b14cef9", "sighting--9ba16470-0014-4958-9cb1-40eece57edfd", "sighting--35258e9a-651e-476d-951d-922552533e51", "sighting--a110e3c1-5cf5-4fcd-a442-a36488edbff0", "sighting--9481c4db-8a1d-4191-8b2b-f43e4201400a", "sighting--ee493ecf-7567-4eb9-9e18-500572624103", "sighting--b95f5e8b-420f-4058-a095-515c3e7903f9", "sighting--6dde5e03-80c7-4173-85d7-efe71d3eb473", "sighting--991e6902-ca46-4f27-9207-dba4f98961be", "sighting--8603edd0-6402-4885-8606-e86a51a3741d", "sighting--e9ffc3ae-cc82-482d-b7ba-ee73c7f10bce", "sighting--ae698cb6-dc02-40fe-add7-6f4cda62609d", "sighting--913f928d-2daa-4032-9193-476ce185e5f5", "sighting--1fbd70ed-fb06-4167-9823-dc7a20b896d3", "sighting--1d1d5faa-60b5-42c5-be55-2eadd8687151", "sighting--d1c99cf9-1848-4314-b18a-41f7295fea75", "sighting--f221c20d-74a7-4ad5-af51-78a7b2aa93a0", "sighting--b3857f32-1a19-4628-97da-ad74653725e5", "sighting--1b72216e-3e1a-442b-92d0-dca55b14316b", "sighting--f93e80c3-6cbb-4fd2-b98d-5c150419967b", "sighting--5cbf8904-7da3-4727-b801-4d10d95cd406", "sighting--ec5d5476-2abc-4d19-895a-e36392ce735b", "sighting--2375153f-7c73-476b-8d50-414e5714bb52", "sighting--fae15fff-3401-4f83-8d7e-a84f5a042bca", "sighting--750b05bb-dc70-4b59-87aa-230897bca800", "sighting--7011b53f-bdf9-4a72-ae7a-593b2eee408f", "sighting--a59f7c9f-a6f2-4574-941c-fed6845769ae", "sighting--2391ad6d-036f-441e-945a-67d9fdd2792b", "sighting--f8dbb470-d3c5-4561-aff3-e7ade61c1f00", "sighting--6f697283-472d-42d4-98e1-a0d07158e222", "sighting--b0981b46-f7d1-439f-bb32-4bb414938c46", "sighting--67e7b480-dec3-41f1-b3e2-c35bce016e15", "sighting--c9b88794-f772-4822-a9ba-51769d4ea7a2", "sighting--30fca913-28f8-4570-8723-e3e489e566d9", "sighting--ed162bf5-a9f4-409c-b262-45f481e09e24", "sighting--1c6fd4f6-e34a-4311-a2e3-569f9bf88536", "sighting--cb25d814-0d6b-4083-9d62-22d1ac35d12a", "sighting--fcc547ec-0387-45c9-bd56-be3d7bcd32bd", "sighting--eb8c1963-301e-474f-8a96-0d8715f09b2a", "sighting--9cec341f-a5a2-4c97-84aa-99d30eaabafe", "sighting--3f623939-ec17-4e6a-a4af-56db5820dd32", "sighting--6df602e3-251b-4cd8-a541-48165a4955a4", "sighting--e209fa8c-adac-4d91-9b1b-cf398f16cd41", "sighting--da825f38-36da-455c-b096-38270515b42e", "sighting--ef5d2532-8d27-4cf4-b688-d07d0c0cfe47", "sighting--e113f0cf-1905-43f4-84f4-b413bea0c1cd", "sighting--800c80c8-3f43-45aa-8553-c229b8ba9d0b", "sighting--20d7ba7c-101f-484a-97f2-e53bdd1ede0f", "sighting--cd396414-3dab-4692-9ac7-9c2492f365d1", "sighting--7a9e0f86-61f7-4bb3-882f-ceb60db5fdd8", "sighting--bc2765a4-27e0-450c-be55-f835a831d366", "sighting--c7090fcf-3c11-478f-a42f-f8959553e08f", "sighting--7cf86419-b6d7-4d70-bdb7-aa7cb6b1e3d9", "sighting--935faeda-7aa1-41a1-99ff-c8e57c6ae1ca", "sighting--2efa7dbd-0951-41df-8cc7-e452cd79a75b", "sighting--dd1ba49c-ac18-4536-a2ec-4ccfbe29a6dc", "sighting--3c86f779-20c4-4c36-ac4e-f566e50da4c8", "sighting--17fc5847-9b4e-4159-9976-f41008a185fe", "sighting--9e5b8701-1e91-411e-b850-7cb313ec4564", "sighting--bf7576f6-d059-4f4c-8767-e7142b573b5b", "sighting--1afce8de-8e48-49e5-b865-950f3f6b3ecc", "sighting--feaa8834-f135-4117-84e4-67ea8f471bc4", "sighting--3c93347f-712c-4e64-9cd4-f077df426946", "sighting--87016104-d32e-433e-b0c2-11511c30234b", "sighting--5b40029f-3bed-4351-aee8-10c21ba2aff9", "sighting--3fb3e776-9607-4eff-8c33-82faad4b6b01", "sighting--ff9bc69a-8cd0-437e-b04a-24fef9a5656c", "sighting--b680d1b8-d961-4d7b-9731-de9cfc331e90", "sighting--ef84869a-c6a8-440a-aca6-6d602173d845", "sighting--8dbb90c9-021a-459c-9e4b-ba0e0ff7662f", "sighting--f40d74c5-6cdc-40c8-97de-b762cdf5ccbf", "sighting--934a2585-d1d6-4889-adf9-a1e362116a7a", "sighting--6163d1cb-59d3-4e1d-b30a-47bc4a465cfa", "sighting--81ef46d3-8e0b-4bfb-87cf-2f59b8403108", "sighting--7dbdbd24-ddbd-4a52-b78b-3e55b75a8426", "sighting--10068367-5f03-4456-9fe7-18a713955b86", "sighting--e6cc6bd4-a6e0-4436-8b17-dc6177d35067", "sighting--5804a533-fd5a-4e26-b8a0-83f47c569dd7", "sighting--d7abf2be-ac00-4b01-8bd3-e5494fbb65c0", "sighting--5de199e5-87fc-4724-887e-342078a58f42", "sighting--fefb7aa0-2f66-42b5-9033-b56e7341ca89", "sighting--72e5a133-06aa-4216-9a22-e367de41cbb9", "sighting--cfe3108e-81d2-483f-a86a-eeeb135d1e04", "sighting--304564c2-595c-4404-83ec-227f914550af", "sighting--79553cfd-e566-440f-a3be-72d9616b5b66", "sighting--62f66c4f-ed2f-4ca1-b1bb-828994aea4b2", "sighting--6ac28309-d0c2-413a-9ed7-046e34f45ada", "sighting--25c33b0e-cb1d-4250-9fa9-41200c7f421d", "sighting--adacc624-a579-4c1e-9c47-eab12a963ad1", "sighting--c8e32a9f-554e-4af5-9be2-7f25d4b72395", "sighting--085db125-3fab-4ab6-839a-47169b32fff7", "sighting--73ceb216-9987-4ed8-bcbe-dbbfe88a7400", "sighting--5e57a27a-4bb9-40f0-94c7-b3841c53d5fc", "sighting--c56fdb55-7bf7-4e2e-b64c-d93a124cb867", "sighting--4d6de44a-3bac-4a49-adbe-924336092058", "sighting--f96466c1-6db8-4d46-8805-5ed16e92c8cc", "sighting--626d2731-b0fa-4d85-bb8d-4c5c6f11114e", "sighting--0f1ae9f8-65e7-4d8f-8673-f90840930361", "sighting--f82ea0d8-a34d-4c86-97f9-970a199daa44", "sighting--16153cee-4824-41a8-8af5-1036bb7100bd", "sighting--cc78b877-6bf6-4970-ad65-86d0e4481f7b", "sighting--a943d5ca-3c4c-4110-91fe-c8e3dc22411b", "sighting--4c6c285d-5d64-4e9f-8378-9db9996889c7", "sighting--e3707419-1178-4451-a30e-ad5ee8139327", "sighting--cc5e285f-1f5a-48cc-92a6-421fc473bc1f", "sighting--b65e9c3a-89cb-4e65-abbd-fbe7f643469a", "sighting--ead5e1a1-766e-4045-a819-47d6c04b143f", "sighting--09d8b5b0-7a58-4644-bc41-77570bf9d71d", "sighting--e261dd0b-e0ba-4205-91e7-eb09435f8f68", "sighting--8bbffe8c-f2dd-42c0-ab6a-4dd4ce2e48c0", "sighting--42969493-61f2-4ba6-a902-b83122fa285f", "sighting--68114146-4815-4e06-81cd-ec088390bfc1", "sighting--c9c4740a-ff51-4069-ab52-92549f540ac2", "sighting--dea1cb2f-08eb-44d3-9a1f-f02ba3a06b31", "sighting--9ac8b404-8646-4343-b7d2-f5e801bd8979", "sighting--6e5d5fa1-85f2-40e6-814a-4d36fe0cc38b", "sighting--f305ef3a-4915-4fcb-80e5-fe92f10dde19", "sighting--b9b4c95b-1262-428b-b7d4-f54defda5331", "sighting--0a167d37-956d-49ad-99ac-cf10de2c327c", "sighting--d530d529-e454-4e08-8810-3f1256d64c0c", "sighting--3e1f8f03-417e-4fe2-8dba-0e3601feab05", "sighting--fbb69dec-5c1d-4a64-82ae-2595a770c6ad", "sighting--c7332dcd-a23f-41dd-b98e-04e420901ac7", "sighting--e337d5d0-4821-475e-87ce-69b2b26a0fac", "sighting--5d6eeaae-0609-4a31-82bf-7d657dfee0e6", "sighting--0e97cf09-bc3a-4116-999e-9ded186c6025", "sighting--0bb4efa3-d9d8-4c8d-960c-9f8368c92cc4", "sighting--2d253aaa-e13e-4fe6-875d-1dbbe5e7e153", "sighting--dd19e229-0280-4bb9-8b56-8501c6e52eb7", "sighting--5ff4a7c2-6c97-4a9a-803c-591e0bad2efd", "sighting--e34cbeb6-af08-464e-a377-147b21470122", "sighting--b7d14da4-5d69-4061-9fcd-5393b1c7bc19", "sighting--511465e4-f6ae-417e-a467-2fcc5010ff93", "sighting--71fda2c4-9c1e-4873-83a6-b6febb17f8e4", "sighting--4d3696cd-8c08-40f3-94c2-874ad84491bf", "sighting--5dfebcb7-b841-4428-8535-ae9d33a0ddfd", "sighting--f81436cc-bb31-4dfc-ae8b-7d7165093617", "sighting--ed2ea845-ae2f-4c95-b3b3-6486e7355181", "sighting--07429cea-b030-4367-b635-aa32e0e3035d", "sighting--28269b42-4671-46e8-9435-9a9eed2f1174", "sighting--0fcbeec9-a231-4b4f-8644-bde0b066541f", "sighting--2b99c78c-7cc5-4333-bde8-d45b68fae426", "sighting--0cdf93a3-f6c9-4fd3-ae14-9168d917571a", "sighting--1e808929-ed79-489a-9472-7133fa310426", "sighting--24db2ee4-3190-430d-94b0-0d2f57090178", "sighting--4cc17dfd-f001-441e-a8c9-2c42f8ecadb3", "sighting--51cc56aa-0846-43b3-ae97-c5be08209ba2", "sighting--723318bd-5c4f-424a-8281-cc6bf7eb19fb", "sighting--81c6b6dc-d476-4969-853b-8be6cc424797", "sighting--8bbea614-27a2-4205-bc4e-da671f9b659a", "sighting--2931fb49-2a79-4d0b-93b4-ab89635a898b", "sighting--ceccc315-0eaf-4f20-a992-8af654200d59", "sighting--ecde1c0e-6f5a-419a-a118-e658c55161a6", "sighting--fbfeeabe-8d4a-4c51-9d13-1ebbdca009c9", "sighting--7e380bec-d998-4720-9d72-387d8fc5645f", "sighting--0e5e5978-be22-4cb2-96e6-79a621746830", "sighting--14dde8e5-ebd2-4dc9-8d1e-c8817f3f4505", "sighting--5ca3bbb7-5368-4a4f-8f29-2571d067a13b", "sighting--014ee5cf-260c-44e4-bb60-b06de58d5cec", "sighting--c16bfaf2-6a35-42a0-b0fd-c51e030fe006", "sighting--d48928ec-3d5b-446d-b08f-3f43280e0f9a", "sighting--919eab80-f86f-4b4b-bfba-053c773ad87e", "sighting--b7bb238f-3d57-4dae-8f2e-8dc5eb8c18de", "sighting--af9b7fe0-9325-4982-85da-3d00e5d5080e", "sighting--25af3e00-e77e-4917-b21d-3897a7699530", "sighting--8a4193f4-694e-4857-99bd-00f7633a56e1", "sighting--5e146dba-5545-4559-a06e-8a2c77c09b55", "sighting--01bc8228-ccc5-4090-8efa-326eb273ba2e", "sighting--649f077b-6ccc-4eef-a88e-0c5e2b689c1a", "sighting--441b3532-cf1d-4a85-8f2f-2fc321b03503", "sighting--d76f8d93-cac6-4577-8292-6db0566f791c", "sighting--3d5b72d6-7e81-49cb-b176-aafb25d09962", "sighting--0bee476c-1685-4dbe-8a69-a1e5af4c6e7a", "sighting--e21a04f5-4173-473b-8f13-7cd5eba86565", "sighting--8df90b76-ec62-420c-8923-80f141cff305", "sighting--37b72103-21d3-4c0b-b06c-2cc8c67bdc3a", "sighting--7231b0d8-fc6a-4f61-af29-578a1408b55c", "sighting--ff0cdea1-6a41-413a-a776-07772a94bb57", "sighting--344f9b47-c066-44f3-bec5-1e6c2c549a90", "sighting--b141632f-5599-4df2-8be3-920a3432dbcb", "sighting--02905b01-39f9-4efb-8882-2f7d95ae74b3", "sighting--9f40b551-1308-44ae-9f06-3c92ce0d7569", "sighting--0e5d628a-17ce-4d08-8749-2e9581f9650e", "sighting--4775a6c3-e164-47e4-8372-cf61c9a28785", "sighting--c5a0b1bc-3567-4207-b589-5e64c3d4e27e", "sighting--f15896a9-7809-411b-a6e8-eed627725b7c", "sighting--83bee2d6-8503-4740-abd9-d356d2a93016", "sighting--63903e0c-f136-4ab5-80a6-bf7a4c3f5443", "sighting--3ff7f4e6-91cf-4a72-a8f4-843d4e69d7a4", "sighting--c7df50dd-616f-4094-b398-20acc119be93", "sighting--df2245f3-56c0-4a76-b4aa-6aef85b7fe81", "sighting--5b38b5b3-878b-4e0f-a0e1-53bca00c3b4f", "sighting--1a8a9d3f-533f-4525-a959-bcd484c92934", "sighting--6280498a-4796-470b-91e6-4794730e7876", "sighting--073e83c4-d391-4f01-a3ec-ae8bac50a8cd", "sighting--86ea027f-2c8f-421a-9dff-9d83d1f207de", "sighting--aeb6f84a-a4c2-4993-8cfa-f46fe23bdb14", "sighting--3443f22e-b067-4770-9947-dad12e40e8d5", "sighting--b75de35a-b424-4850-b869-2090b026cc15", "sighting--51eca2cc-de6d-4f94-8fa3-c39348a2d161", "sighting--cce3432a-4352-40d8-92d8-e468f1822660", "sighting--9da17ede-aabd-4f3d-a94f-94ae1126a570", "sighting--dfc680ef-2b6f-461b-878f-167bc917df5d", "sighting--2a417185-d196-4ff9-8d30-c8aa7ed9e43b", "sighting--201538ba-f50d-49b4-bb9b-9ce47f95ab08", "sighting--183de843-7c05-4c17-812b-e1b3f45879fa", "sighting--4ac4177d-e4f7-4abc-9d2c-386ff9986004", "sighting--e319e042-3802-4ab7-8e93-0b271e6bd8cf", "sighting--f40a8554-3d65-4abc-990b-b6edf4f46f33", "sighting--ec97295e-959a-4fde-8d5b-2830b5806092", "sighting--ad6b2b07-8c90-4d5f-9a38-c26c4942ad6e", "sighting--b99a5a1d-7367-4b5f-adc2-12e0d399facf", "sighting--8eb8e06b-36c2-41df-ad22-c3a43151888c", "sighting--8102c854-4d2d-4774-a333-7e00160b59a9", "sighting--928a396f-82c2-4c85-be08-45bbce94a927", "sighting--c06884bc-98ab-4f51-af1e-657115519c0e", "sighting--59e12aff-9406-456d-94d9-2ec331d8bc38", "sighting--becb19f4-d259-44fe-893d-edc31d656849", "sighting--71fbfe44-7ba8-4624-805b-d8dcc3e439e5", "sighting--eb8dadac-eb88-4d46-9a1b-6b710edb64fe", "sighting--469c9ab7-6910-4a31-9971-a975d15aaead", "sighting--d5944826-30d1-41aa-82a3-a6278900b8a8", "sighting--6d0417c2-235d-4815-905b-cb09601b6526", "sighting--60815ed2-0ef6-4986-bbd0-706b79e7d735", "sighting--c37e8034-d127-4ff7-ae6b-a5540a8d940e", "sighting--e4ad4ea5-f806-4c62-be26-179456f64615", "sighting--ceafd927-babd-48d7-be82-61e25f3520f7", "sighting--15092766-8265-41a8-b98f-508cab3084a8", "sighting--2cb2eb79-f446-4072-8b55-44c0138e3366", "sighting--1c9a9574-3286-4919-bba3-72f8f1808118", "sighting--5c6d0e61-1543-416b-a072-c436b2453006", "sighting--6161cc03-385d-4df4-a151-2ac5f7f0bc01", "sighting--6afd0f4a-a313-4c76-a97d-e6a9fbe964db", "sighting--fe2d4631-08e7-47d7-9ddd-4155de134c5d", "sighting--24fe44a7-83f8-4dc0-a0d6-7e7febcef3c5", "sighting--9b9d7183-13f2-4f70-b781-f57be7bd207b", "sighting--3fd02a0a-5a25-4aba-84ba-ab671d030b30", "sighting--a1a88366-7b37-4a8b-b05b-791c11974a63", "sighting--00830388-bd21-4a75-bc5b-eb3281866c7f", "sighting--cebdc196-d146-4dd0-aab4-aa782303f8b5", "sighting--ea5fd352-7b97-40f1-b90e-a58c2c6ef3df", "sighting--179ecde9-ee6a-42a0-b197-24dff4dfb4d4", "sighting--230d6382-59bb-493f-8d26-0354d6c4d544", "sighting--ea31bbb9-5600-4355-9b48-cc87ad178152", "sighting--c55cc8d2-1d7d-4e64-87f6-97afbb9c3d6e", "sighting--77b875aa-80ac-456d-818d-ccbb761dfa03", "sighting--6a686c29-c0be-4c97-8ce3-bbd30b69f138", "sighting--5a5cc9e8-83aa-44c0-86d8-679c326d4277", "sighting--2f674062-1e40-4075-a0f3-1ef5692d70ea", "sighting--417898ad-c800-4fa3-a6ac-5a47648856dc", "sighting--75593b35-0756-4465-af89-ab9c87105af9", "sighting--82903619-b74f-4008-b210-e6001157fb35", "sighting--c3cf4caa-52f9-4c11-8d2b-af3f57919257", "sighting--c2e8d24f-f1a2-456e-92bf-97f4a426333d", "sighting--5ecb53c0-bfc3-44bc-a7c3-a470bccc9d86", "sighting--3ce3b782-6c29-433a-9984-b14b6e62ff79", "sighting--5e51d980-244a-4d6c-88cf-ae28fa050883", "sighting--aece07cd-9a95-4f9a-a3e9-a56ef41735ed", "sighting--5e8e9966-0240-41f6-8738-80e7837268d7", "sighting--49903e03-3061-4d8e-8698-be92fc1beb41", "sighting--8767d334-b846-4f2b-8e94-c7e565434395", "sighting--386c4e2b-ebfc-446c-8f23-a445677092b9", "sighting--fe55e81c-b958-443e-98bf-888a7568aaf2", "sighting--fe2e2dd8-0bb3-434d-933e-8ef8d74e0b6d", "sighting--73fdb2aa-1788-4fb5-be25-4526d7d71424", "sighting--1a64927d-2ed2-4dfc-bf1d-57da5af14ecb", "sighting--2c3de543-ac64-4463-851e-80f0d31df95b", "sighting--d6cf03d8-f3db-41c5-ad01-bbb0d7e171d5", "sighting--67c6b459-15c6-4efd-bde4-3919ab1f9d6b", "sighting--4a466530-0d35-4fc9-8135-47ff14e0ad3d", "sighting--0a54fdd8-f215-4a08-8492-41960cec6503", "sighting--072e853b-2b38-4a88-ad19-bbc2e94d8ab6", "sighting--493514e6-352d-4b5c-b35e-3f3e770f013e", "sighting--d04617d6-a925-4c0d-a1a0-746c1f0f2796", "sighting--83231c77-4257-46e2-81b5-392862cf369e", "sighting--a4b05420-fe53-4c0d-b5f5-fb442dfbf62b", "sighting--c62f1747-40b9-4873-b86e-05e17e264210", "sighting--777860bd-0e0b-4960-9f2d-6564faa7a800", "sighting--0caed31c-9927-4391-b29e-3dbb23ba59f8", "sighting--598a4ce2-4cdc-41a2-be49-24a9f0beb68f", "sighting--5738c810-09e4-4de0-b3b7-74bd02740a78", "sighting--39203019-addd-45e0-9aa3-8654eb1bea09", "sighting--d0ea2e8e-0212-45d7-aabc-6dc0e12b40db", "sighting--45a52f1d-66ed-4a02-9b36-16009af3da77", "sighting--8a5fb970-b962-49c3-ac7d-a3ee9093a969", "sighting--27edc102-ff4e-4230-b4a6-52550e329d00", "sighting--8b44e7a3-3005-43e0-b32f-362ce4821913", "sighting--6b5ecf80-53fc-489a-ae85-8fd3bae13d39", "sighting--d2a71416-eb1b-4b72-8631-fdbd24a31280", "sighting--f3b74d5f-e724-43a8-b561-ceaa3034f05b", "sighting--216abd8f-55e6-4cbd-889c-c71f960d62ac", "sighting--0f1596d4-e4fc-4b22-8a66-9def127a4479", "sighting--3a33909e-f8a3-4e73-a721-48136e1b7808", "sighting--4e039892-fdd9-493f-99aa-d10f72035d47", "sighting--29da04bc-9dbe-4957-88cc-1ea222598607", "sighting--4a38cb5a-92fe-4380-b9c5-61bc8858ffbc", "sighting--04db7bf2-8452-43d9-9a8c-eae2d6f21928", "sighting--cab2d638-a970-406d-b0c0-4c78359af262", "sighting--b25f460f-538b-48ef-a1f3-792800501d71", "sighting--4c683b0f-3eb3-433f-8154-d7940df8b6a3", "sighting--9c33d0df-a89a-4a40-b860-72f5539d858b", "sighting--130ff5f7-2c62-4ccd-8e79-bbdc7fd45877", "sighting--ace16e47-3c56-456f-b0d6-fb8f6ead2758", "sighting--2a780b66-7292-491a-89e9-f17425105402", "sighting--84932afd-37eb-465e-a34c-869d09d25976", "sighting--76e40623-d3a3-44cd-9f7c-f1cf13e0a8b8", "sighting--c72f5266-9702-40d7-ad54-0abc66e3cb8f", "sighting--e9325ef0-f9a4-432d-a51b-11eb8496aee6", "sighting--10a0f15d-f541-4104-9b63-f91d5eec44c6", "sighting--636abbfd-5b5c-4fe1-8045-1c9083904e15", "sighting--d67f26bc-c868-4ff0-b177-c3ff670fff40", "sighting--54ba3471-8540-4275-8c4c-1bd5de3f9c13", "sighting--6380435c-02ae-4f0c-a651-39122182600c", "sighting--7bab7f32-f252-4f73-9983-4ca93c97d266", "sighting--cdf3e5b6-3c5c-4ae7-9c91-18f803c63b39", "sighting--dc71d97c-8bf0-43b4-baff-fb2b03a424c7", "sighting--aa530711-bf0a-46ec-91a1-1068d48e9f26", "sighting--7b6b709e-bd01-42f9-ae20-428aac58afe0", "sighting--2e553e90-e06d-4db8-b683-16f662f894a9", "sighting--d678c7b3-73a1-432b-be28-b90993d64fda", "sighting--bb41cd4b-e254-4fad-adfe-8c78a4fef77c", "sighting--e72128e7-26e1-405c-9ff8-881829508fc7", "sighting--e7daa45d-ad8f-43a4-ba7d-62060bd8c867", "sighting--b0eafbcf-8ac1-4737-bbdc-9d13c38c6106", "sighting--724db0a6-412b-4f4f-9c7d-c30bb2fd66d4", "sighting--5d33fef3-2fc1-4e21-9e25-3732f56ce40a", "sighting--6444446b-1d3e-4912-9868-604956bade96", "sighting--dd9dc258-bc2b-4829-b26f-33640304713a", "sighting--a771a481-4142-43a6-a2df-aaeaa58cea0e", "sighting--4d40578b-0c9d-400a-b9a3-5ffae9f7b7c2", "sighting--75940c7a-aa01-40eb-97da-6cf45f12260a", "sighting--3693babc-891a-47b5-91da-95c4328d190f", "sighting--0a3335da-1445-4509-b63f-65b6f8cf2c2c", "sighting--fe43c486-f3c5-4bcf-9325-4c9dafa126da", "sighting--b5423699-9c2a-4531-993a-a58412c6036d", "sighting--02821cff-71f8-452c-8a7e-7de4a450e833", "sighting--07cb0ea1-bbf7-4709-997b-99c41a7a2f4f", "sighting--b57e8471-d965-4880-bae5-e881aa93bcb8", "sighting--54fe044c-1b4b-4233-a679-da9bd52dbf63", "sighting--56eb987a-b25f-4bbd-b731-a8bdeadbe67d", "sighting--adf449b0-6361-4fb0-ac83-aa5341db62e2", "sighting--41d90291-0181-4eb1-b2ee-8d02e105da25", "sighting--96bd93d8-1f66-4079-b38a-2564a7efbf69", "sighting--dfa884dd-8acd-4849-ace5-af79467a93ff", "sighting--b210b282-1259-4507-97d0-732b16f9f0b4", "sighting--f5d8bdad-3ce8-4893-a0e4-d75a2579ec1f", "sighting--4aa6571d-c185-4b24-b40d-b2fe29aebc38", "sighting--01697ec5-e0a1-4e3a-958c-335e325221cd", "sighting--e8bbceae-827d-40cf-b6ba-8f067e514499", "sighting--e78f47f0-6a43-4923-8c6d-ceedd13965ec", "sighting--4965f888-618e-4a66-a0cb-025c177f4340", "sighting--b05c1fc9-4d0f-440a-8ae3-4fc9c5386b05", "sighting--0dce3469-08ad-4a97-85ec-7b13e3c252b8", "sighting--b767baa1-db27-4d9e-8d56-8d4fa9ae7633", "sighting--e5bab814-8e9d-40a0-89b9-f72e8aa92066", "sighting--74b62cd0-47e9-4570-bb41-93d6c86afa6d", "sighting--97dc35c0-fe05-4456-8f87-6c6e084af8dd", "sighting--f6c0515f-74fc-4b0e-9eca-6017aa6de0bf", "sighting--b0ede23e-ac67-4dfe-975b-0bbcb37cc872", "sighting--24dc8d44-bce3-4804-b5b9-907424f5592c", "sighting--9da59cb3-0a78-4635-a06d-6d8229241e2d", "sighting--7665db67-0f5b-43b3-adc5-dcdfeb36527d", "sighting--91e0877d-2263-473c-8ddf-1b2de7e235f2", "sighting--0930e0af-d51a-4532-a8b3-474e20b00de8", "sighting--95391714-3c51-49d7-b2aa-c700c4bfaaeb", "sighting--2dab59eb-218f-4176-90c8-027d680b4a62", "sighting--01ef46df-6ae7-4ff6-9b1e-239e844fd95b", "sighting--f7ca9cc0-433a-45ef-b141-7d9448a44266", "sighting--f254d372-ed08-4200-ac12-2300629ebc33", "sighting--4c519c78-2657-4ac6-9b4d-68658499af31", "sighting--53821813-5383-494f-9aac-bef1ebf828a8", "sighting--1e9f754e-271a-472e-b78d-39781a212107", "sighting--51d01f8c-9023-4714-ad01-d634f3816145", "sighting--9f6d7244-d324-4a49-b915-abe842adcdb1", "sighting--c0853842-72d0-440a-b80b-d12b0feeb6bd", "sighting--d7464493-d344-4a31-b111-2596df0d8f72", "sighting--66541b8e-610b-4887-8b2a-f957b455754f", "sighting--d921f971-cd1d-485b-b447-1d51b48b71ef", "sighting--0524d0a6-4616-4636-ad49-7f064f9d339b", "sighting--095ff26f-060f-4be6-84d5-944dd495586f", "sighting--e186cfa9-7f14-45f7-a694-e3007b926769", "sighting--ac403582-1eb7-426c-a9bd-ee1530cbcd7e", "sighting--7b7ec9d4-acd0-4e16-a083-9420570862f2", "sighting--cd4bf8ce-0a17-44f4-80f0-ca8d5b26ab6d", "sighting--249aeef1-a068-47fc-b55f-5b212172b1e8", "sighting--6519d882-bb7c-47c8-818a-c5c8d31d530c", "sighting--0fff932b-0efe-44f7-ba0b-ce9b359ca7cb", "sighting--46a3408d-93cd-41ca-b20c-940136a41f72", "sighting--900b0d01-d6e7-4099-a760-83609468bc33", "sighting--adf5ac62-ece3-4db4-b6c1-23f85dd1dc7c", "sighting--dd76a3ae-b811-4092-8741-28bf19b5d0ba", "sighting--10103b42-6f10-4316-a0b3-5eb9ee832b0e", "sighting--a43b870b-da92-474a-8195-a336d23677fc", "sighting--622c8410-c936-45f2-a588-986496068cb0", "sighting--496bcfa6-49dc-46ae-9072-54080deb3ab0", "sighting--7ccd449f-c49c-4531-8cf1-4cf28b544713", "sighting--8ad2ea0d-16b8-4900-ade2-634f3f329eff", "sighting--cc9fece7-a32d-4c45-a16f-a4fb9b652c1d", "sighting--a6077cb9-8af5-4762-9dc6-4db12af8b88c", "sighting--ce97d301-3532-4145-abf5-e785e8098632", "sighting--06d9fb47-b6a2-4c37-ae75-6425ba0d69b5", "sighting--01df0163-fdf7-4add-99cd-363a19a4496e", "sighting--eec51036-e7b5-4094-b175-edeedac23d42", "sighting--4a3adb9a-efd3-4c93-8119-4f3b924ab779", "sighting--c2dad425-6b17-46c1-8b6b-11c1696a9276", "sighting--827825be-30a7-47ec-a3d4-cb6ccce5e14d", "sighting--e14979e1-8545-4fe4-af7a-ace736fd1180", "sighting--642a0c93-45f3-4daf-b287-31d1bb099809", "sighting--23d7c35f-5929-4c10-8dd5-7f2d965db535", "sighting--ed6e6c42-bd7b-4070-86ad-112b862c2ab4", "sighting--0b34a71f-e4ca-4d9c-8088-0da3d280a35f", "sighting--e95ffcaf-ff07-4b2a-a6eb-1ae4272ddf35", "sighting--4f2ca164-1805-4edf-9f01-ca32088d852f", "sighting--2486ac7e-89b0-420d-8ca8-421d5cd60e45", "sighting--d714e86e-738a-4c06-af9d-e677c4cf834c", "sighting--bd1bfd8c-d670-40af-a359-09c09d034d4e", "sighting--d479d0c5-f2e4-401d-8e28-ebe099c44206", "sighting--2e9f7cdc-a2e8-48eb-ba9b-186b70614a22", "sighting--0e924a92-ca14-461a-8fe5-837af1f393c6", "sighting--8efbb4f1-974b-4338-997a-c05fa2e20fe7", "sighting--56a9bc72-0fa6-41be-a9ce-71c157f37a07", "sighting--1d933411-a25b-4a1e-a942-043636f3ff7c", "sighting--309880a7-d6e1-47af-b85b-3a8b441a85ae", "sighting--8b7e5b9b-28a6-4594-b029-154423b81c0a", "sighting--decd49c6-dda6-4a67-8775-c51b2b5811ad", "sighting--91af7ecf-bd2b-40b3-a3bd-8e760193ddaf", "sighting--a95a1ba0-6ecd-4d09-b59d-823f10015a91", "sighting--a7a7aa26-996c-4364-bcff-bfb2f3045148", "sighting--79a35f9a-4832-4694-884d-d32189b295ca", "sighting--f7b27c6a-4486-4604-af65-8ae52f9b93ca", "sighting--bf3d7ccd-43d1-4cc3-a6a4-a167e6d4beb8", "sighting--779ee302-2338-43df-9718-38c1f6eb45f5", "sighting--32bf6269-b358-4e52-9f98-fcac7f7c664f", "sighting--1bf4969c-8f4d-414b-9f28-d680f669f7c5", "sighting--24918371-10f8-49c2-95bc-0703d5a5b534", "sighting--723aff32-547a-4533-91a5-cfd6fc9ad83b", "sighting--3533a20d-d223-425e-866b-a39fb69d9f4a", "sighting--0a28a1f2-93f2-48d6-9a51-41bd89328271", "sighting--2494f132-973a-4650-9b18-21f16d9db074", "sighting--7ae7bab1-3f5a-4219-a465-f4172a49f04f", "sighting--8e1b262e-f52a-4d7e-aae1-85f63c27ecea", "sighting--dcfd0780-8977-4690-bb89-d209351ea4b4", "sighting--8487b7ef-6ae2-49e5-9348-1b0d46a870e3", "sighting--043e5cb7-1c14-44f6-a7f5-959f750838c2", "sighting--d2b2f980-3858-4ef1-b3f0-bf908a9f3180", "sighting--104a78ea-4b65-40b1-8313-af22a6506b9d", "sighting--ad157efe-7dfa-43b7-9887-44121c4c6465", "sighting--a0872898-1f3c-449e-a049-0c9ee29860e6", "sighting--4a486994-95d0-4125-a396-bad4ed6e5785", "sighting--848bf087-2a97-4fcd-b76c-4d51862dd406", "sighting--d8eb0b43-1f6d-4ea9-b9d8-7536bfa1c9a2", "sighting--6b7458a4-3c80-41d0-8bab-098658abe575", "sighting--62fbce4b-1fe7-4ace-bd7b-7594cf429b20", "sighting--be851e54-32c3-4226-af24-6bcbf331529a", "sighting--dfd74d0f-966c-408d-b5c2-c813f524901a", "sighting--bf387784-6d4f-45b2-b2b8-90fb6a30de08", "sighting--cfc563f5-9529-4216-8c7b-086a66b8c0f3", "sighting--1ab13746-eb8d-462b-a0b6-332bfa118d1e", "sighting--31ad93eb-3eed-4e2e-97bf-8851ae17b7bf", "sighting--6b6a0cb8-6423-4a08-96ed-38fd3f018e44", "sighting--5fbd8cb3-3b09-4db2-91fc-5d5894d74457", "sighting--7d55714f-4833-40d7-9bb3-262899393173", "sighting--c501eb98-0b49-4f75-bc08-d348afafe16e", "sighting--f76990d8-dcb8-4482-b55f-9f38afb3228e", "sighting--7dc03429-8ae4-495b-876f-c2f51786aeb5", "sighting--97b932b3-f7e7-4668-b2cc-7b4f5bbe44bf", "sighting--4682efe6-473d-45e9-bac7-51c1653de462", "sighting--cc03d116-7b54-4752-86fe-8badc0e57863", "sighting--385c1703-7945-48a4-8d61-fc8c0da1c61f", "sighting--bdf6f4f5-493e-4d21-b74f-d055b70a8956", "sighting--5040ecc2-5408-4bf3-81bf-ced777c6e410", "sighting--7343ae74-5d5f-4ae2-ab4b-d78a78dc5421", "sighting--9d092a23-c7f1-43f0-9eb3-05af7f3e727a", "sighting--b252e07b-5ce6-493d-8ff7-d3dbcd05f4ca", "sighting--75e6920b-5b89-4202-914a-30e25a8d4de5", "sighting--29b6c5f7-e222-4128-ae96-29ecf2ddd1b1", "sighting--7981d1c2-60c4-4455-8c8a-b6d72e71beac", "sighting--3da1726f-98e5-4c58-88ba-c4afffc649be", "sighting--20744b96-3249-4e63-91d8-0327a6711c31", "sighting--23310b1d-6432-4879-9451-58b6b0829e3b", "sighting--f1a38710-ee79-4555-be9a-f7a7a73c77f1", "sighting--15f6b6ce-ae38-4ee9-9411-653f9bb583a3", "sighting--80cfecba-7521-41bc-969d-d1c255820561", "sighting--0b047d2a-a3f3-40d3-a8b1-3af30f347342", "sighting--fa7b398a-7d29-42f9-9e49-7da07efdc88b", "sighting--7532c5d6-d304-42eb-ba77-f9a83ca513f9", "sighting--37e57b57-57ca-4ab7-9141-9996fc745aa4", "sighting--0efcef2e-a772-4461-9ac8-eb9795897ace", "sighting--547ed8b3-c99d-4ec4-9367-f25a5b27bd57", "sighting--5a98e72e-b996-4e7a-be7b-70d0229853ce", "sighting--7e2ce81c-3dfa-487e-853d-fa0dfefc4c4c", "sighting--450b02e4-29d3-40c1-83e5-cff34a38a045", "sighting--82a11980-0492-43e4-95b2-b072a77ce2e4", "sighting--fb6230f5-3144-4233-9d0f-d0f7371fc433", "sighting--18849e3a-91e2-4a09-80a7-2ade4438e6a3", "sighting--f095fccf-1b47-4834-aed4-82636af77ed7", "sighting--0e36bcff-de87-4314-bdcb-d4ab1858b2f4", "sighting--41f45d7c-1efb-4c20-b588-6b7e9ca9687a", "sighting--fb863efa-22a9-4c78-b54c-6c819cd6c4fa", "sighting--63d6e7c0-b0d5-462d-9e1f-7c1b59a1c740", "sighting--cdade654-0932-4996-b1e2-52c951e64f0a", "sighting--f3ebe854-b3c3-4b61-898f-f93f8aa248ec", "sighting--854abd59-69e4-481a-8afd-560ecad43957", "sighting--b653b6df-3f55-4aa5-99fb-9f9c6909e377", "sighting--6eefa162-a5f9-4dca-ad66-a537f9218124", "sighting--9aac02f2-904b-49ce-bb12-43c8b9ca6524", "sighting--03d07b85-58a4-44f0-a157-9998b8c50f23", "sighting--5732f8d5-6676-49aa-ada9-7e2e91801861", "sighting--7fd7ff1c-e62d-41e0-a347-4ee31c62102e", "sighting--8d568260-453c-45f2-b263-c68b4d3231eb", "sighting--1283741f-1c0b-48ee-8bfd-3aadf624bd76", "sighting--1574f0b8-68c6-41d1-a042-12ed2ca237be", "sighting--7e6847d0-ec9e-413f-a12f-3a5204677278", "sighting--d510aba3-6318-4183-813b-f64fa11ad8e7", "sighting--c0c47bd1-43e5-46d4-a485-806621becaaa", "sighting--1b245244-ea03-47d6-903e-b1e82f839a82", "sighting--a96a8090-ed86-4a25-90a3-9aa87aafd7ff", "sighting--29693c5f-44dc-4ff0-8c11-aa8beeb7095d", "sighting--790b5dde-0ecf-4c14-b1e0-83664318ee4d", "sighting--7378878f-1ebd-452a-a25c-0e9e201121e7", "sighting--ad1be2f1-32fd-4dd4-bb39-e208ecc2a69c", "sighting--86fb2511-53f9-4f1a-931a-e75e2e9ba67e", "sighting--6fec6d34-8cd7-4f63-b1b0-a2040a973ed3", "sighting--e67461cb-cad7-4288-a066-a880b9be7618", "sighting--a156c387-16a7-49ad-9f61-efccf501743c", "sighting--91989bac-94bd-438a-ace7-ac9160e6598a", "sighting--66e2eaaf-ae25-4813-9ba7-c42588995f2b", "sighting--8898bada-42ff-40dc-acd6-9d6fcd689ea0", "sighting--d3401399-f3d9-4057-9b1a-b8e77758d508", "sighting--7c12faec-785b-4cda-a74d-7340a3528ed7", "sighting--2d28f9e2-b39a-49a9-b50d-4d522b7e3efc", "sighting--ef5a67b7-9ede-45ee-af54-b8dc36e1d839", "sighting--3ca41984-3ecb-4d5f-9214-125d5e641af3", "sighting--42d5fec8-e77a-413d-9bc1-8daa2b277ae7", "sighting--3bf2d0b3-e873-4f23-802a-9691d86382b0", "sighting--34d678ec-8670-4e75-9f0f-f704eedcee82", "sighting--cc3f13cb-4be5-41c0-862c-c6e841d0ee17", "sighting--64e4484a-9851-4188-b8f0-6dbaa63db583", "sighting--0e3d998b-a1f3-460d-b547-142054699501", "sighting--e9a6491c-c38d-4cae-bc89-fcc3ddac768c", "sighting--37c90a2d-3fde-43f4-920e-7c9384976dd5", "sighting--bee73ce8-8c88-40ea-8eec-51c0b19c051f", "sighting--0ebeef52-429d-4cd8-9248-302d0083937d", "sighting--f3cc1183-cd1c-4647-9391-54a9980adec1", "sighting--e9b2d4d3-d3d4-48df-b646-ac0d4311b1cc", "sighting--3bc6b930-7ea0-4d9c-9718-b3c500709c61", "sighting--c21329ad-6e83-4aba-b742-62ef49984768", "sighting--a927eff5-aed5-458d-8f81-1fe55d196452", "sighting--2661e4a9-01b3-4f1b-9550-00debb1dc8cc", "sighting--0f5dedf6-e60c-4953-82db-f98a774458d2", "sighting--998de818-ffcf-4890-91a2-fa415060463d", "sighting--3de3283b-7087-474c-8cd9-0e2aae38a046", "sighting--f27f64b0-518c-4612-99d7-b672b14cd89e", "sighting--c0a3f9b2-3815-4520-bc0a-fd5420d26687", "sighting--b9c9a900-8c75-43f7-9e89-e9a6b02ea5af", "sighting--6f672229-705b-46a1-9cd0-709f1585e7e0", "sighting--8be082ea-7175-4bd8-98d0-885c9cf4dd56", "sighting--82eb356a-86ba-4de5-a1dc-82937091b453", "sighting--f00099f6-e885-47c8-86a0-9e39289fd6e2", "sighting--5d661711-f917-4a8b-96b4-46fc48374666", "sighting--17cb6926-68e5-413a-8c06-8ebd59e6ad71", "sighting--ba6ea6e0-03b7-40e2-a959-8926ce29d7d5", "sighting--01ba6adc-1c7f-43e7-bde9-f515f498b77e", "sighting--e39985d0-2c90-4310-bd90-21744dd2cbed", "sighting--cf0f5481-fcd2-465b-a712-9d9c7910d9b1", "sighting--baf85616-6422-4d21-944a-a944b05d3c01", "sighting--795bb696-a2d7-43ba-940b-cd936a98c294", "sighting--298f21f2-c87e-4206-9c5c-dfd0dec9f1be", "sighting--6bab88ac-7c79-4555-ad55-0bb1a196d79f", "sighting--e2f5715c-6744-438f-ae99-6a57bf785cca", "sighting--35bfce64-bb24-4ca3-baad-fcd417c8d68e", "sighting--e871f5ac-cffc-4181-8649-4c2f5af51537", "sighting--aad2ae47-c05b-4d93-9457-8dec179d7ff1", "sighting--77414eaa-d5ce-4efb-aaef-9e89e70fcbab", "sighting--7540092a-29a3-4916-b1f9-9ff8f04f1140", "sighting--2c8013b3-aa94-4503-97b2-fb13d803fa5b", "sighting--3044a22f-dac3-4519-aec1-a8b4f1adae53", "sighting--b4b556bc-c754-4a54-82ed-c9d626127c97", "sighting--94e20ddd-1eec-4fbc-a7c3-c7110c480605", "sighting--c627b1d3-da12-440f-acdf-2d2ac2a78d8c", "sighting--48a52927-8b80-4cca-9b51-c7b452d9e411", "sighting--67a258ef-805a-42fb-8898-13957c732603", "sighting--c4c51b5f-74d3-404b-96d9-da21b1c582e8", "sighting--931dd32f-6db1-42eb-958a-ddac24ff6a71", "sighting--ab06f0d1-a819-4875-8496-411812778490", "sighting--c37c8dd2-4ab8-4a6c-846a-3198e2200282", "sighting--ab228073-d29c-4ed1-89f6-b00d9ebc04ba", "sighting--76b273e2-22be-4ebb-8f96-4d4a273df4f6", "sighting--c0aca64c-099c-4132-a14c-c389443089b4", "sighting--53b4f44d-9a4b-4352-83ec-f67440066e14", "sighting--e628768b-30d8-4f53-b2b9-6e26b216f2ec", "sighting--4a1fadf9-f860-47c5-bb17-c7a0c3a189a6", "sighting--8aeb697e-9118-444d-894d-376b043ad0f0", "sighting--46725573-7bbf-4966-9cc5-4cdda44a9750", "sighting--919db88e-2a40-4fd8-9e52-c88dd18209d7", "sighting--b8033056-18a4-464c-bc17-75eb64e0effc", "sighting--48f132be-474b-4bd3-a9dd-33e2e9424244", "sighting--e69f8a4e-0ba0-462c-b0e5-c17dcc7c9924", "sighting--2112e240-183a-4074-b566-71c8c1548ae6", "sighting--abe4b325-415a-455e-abdf-f69461d5aaa6", "sighting--2d6a0ae0-791a-467b-9b88-7e6294db7891", "sighting--7881505b-9230-4590-a148-1f1c91e682cd", "sighting--62a5e9e3-befc-47c8-a41c-e9a6e8de6153", "sighting--a50e1fba-246f-46ab-a4b9-10e6db8dde06", "sighting--eac8077e-72c3-4571-925a-901b2e2d1d57", "sighting--c96dea8b-7fc7-44dd-bb0d-ab1082ff24af", "sighting--9439d934-660c-4f1c-ba19-11fb059927e0", "sighting--36366497-9efd-465b-9f98-3c61aec2028c", "sighting--d2c85520-addc-4e05-99be-e4514f315dc3", "sighting--18e4e1d9-e509-42b9-ad35-fc0edecabfb5", "sighting--5e211891-cbb5-4eb7-8b97-596015f5e9ee", "sighting--622c7615-c76b-4e26-a54a-fa8b13efbc80", "sighting--ffe901c1-976f-46a4-a88d-1f6d52939c6c", "sighting--7cd4ff6d-6f7a-4b11-8e9c-ab554d64a65f", "sighting--f47b1a17-45b1-4c5e-9770-94821ef2890e", "sighting--85376a7e-7364-4524-9c2a-af506b89cb6d", "sighting--13bc8593-0688-4f27-a76c-23b9733abc08", "sighting--639a670f-dd57-4cf9-8032-4490068c30ac", "sighting--847aec50-68d0-402c-9bfe-2965b2740aef", "sighting--31dc203d-aa18-4fea-95c4-09859bca248b", "sighting--2952d800-a239-4afc-90f1-d3b6061be92c", "sighting--f10534aa-23c5-4ba8-b476-31aadd12eaae", "sighting--ff9fb4ac-abe5-4690-8c11-89a91609a0d1", "sighting--93533d8a-9fd9-4fe9-a878-76f56844be89", "sighting--7ed5a1a0-e957-49a8-9c1b-91c278069c76", "sighting--da73f2ec-a243-4614-ae20-e78fa035cc96", "sighting--15dc966c-338f-487b-adf4-e362342e0518", "sighting--d02dad2f-f968-4a54-8d74-5b589c833179", "sighting--8fb5f9b4-6628-480c-b10e-6e2349278f60", "sighting--4880a987-d1f5-42a9-afa8-f71591d402ea", "sighting--c6a8bf28-cdae-4dd7-bf15-5404d4138881", "sighting--a4fe5bb3-96bd-466f-a07c-7c6243a9ba3c", "sighting--ffbb9232-466a-4728-890f-f7e565a885ab", "sighting--cfcee90e-b913-414c-9ff0-40cd0015f4d3", "sighting--c91fbcb4-1808-449a-92a4-7d42cbf86f18", "sighting--938b3efa-5175-4da1-ba43-a1a5f9426206", "sighting--971abe19-e5b2-4afa-b140-c5da917a8ad8", "sighting--dc3f4b3c-8259-4197-9e89-0e5e40abad9f", "sighting--d1a20af1-ffd0-42db-9f2f-3581e171271d", "sighting--42591aa4-8763-4cca-8095-631a30d0de60", "sighting--2878862e-37ce-470d-8446-af8f4e655988", "sighting--90bcfe27-e941-4c57-98aa-6ba93d7025db", "sighting--1af326c7-703c-41e0-bb2f-ba6fa4f0eea3", "sighting--a877bce0-546f-4516-8792-d046b4a9e6c6", "sighting--89e54742-5eaa-48b6-b21e-a51c767a3912", "sighting--694730fb-52ce-4018-b25b-a6a760105dfb", "sighting--42ef6e8e-876f-4fde-9d9c-7af4ac9f8334", "sighting--69bf7520-ae90-48f9-aaf7-43ec617ef5c7", "sighting--00c26566-88ab-4f5e-a7c2-3414f57e63a3", "sighting--cd3c1d13-0d42-4413-b135-dc0c26280caf", "sighting--54427cf9-b5b5-4a28-8c8f-311dd1d1e88c", "sighting--24e9acca-6173-468d-bfaf-c34a755dfd30", "sighting--37ef7b9b-b0ec-49f7-95b8-9251a892d94e", "sighting--fdfb4652-912b-4219-869b-cd32c96511f6", "sighting--32e688f2-1c13-47e5-b52d-b7ca9bc66763", "sighting--970abf95-0fca-4807-aa77-38c7c8bb198e", "sighting--7a41d170-1177-4b89-95cc-8e56ec6c87f3", "sighting--15652027-066f-4cf3-be79-65a4b2a56827", "sighting--b2334469-ef52-42b2-81d6-982d470db29c", "sighting--f6b3587a-eb23-4349-b581-85436e80aa8b", "sighting--4f352168-b8c6-43e2-9480-e4ffa4001c79", "sighting--50c7ca6f-a371-4f49-9781-2ddae5d0cf6b", "sighting--ebdff0e5-65c9-4138-bf71-d8137036d246", "sighting--d6e7cf54-8064-4a3e-89c2-3472f2953e0d", "sighting--f8552108-e346-4d01-b27b-cb938569a11d", "sighting--b6648301-b7e5-4f1e-8713-1e7b641fbacc", "sighting--7c195f1c-ba35-44cb-93b0-bbaa8e93f1f4", "sighting--bcce2871-c25a-4e76-a2b3-5446f33e422e", "sighting--c874dc3a-8033-4b0a-98de-03dd2cdb8380", "sighting--6ce6413e-53c7-4704-8773-cfa7d7b05e89", "sighting--31178d37-227a-4a96-bf73-afa0753b7bfb", "sighting--94aa6a89-f6f3-401b-8998-7180af8354b8", "sighting--5d24cdc1-2a04-4a5b-803b-067b9b1d9943", "sighting--b4a4b786-5530-4f9e-aea0-93ad8d710797", "sighting--1506cf35-2d55-456d-b461-e4df616c8e0c", "sighting--0906eacc-7ef5-44f3-a367-20b6b11a1a0d", "sighting--deb62395-296a-4047-9003-5b8d07909690", "sighting--f07e6cee-8d8d-4b08-863d-6da53c104047", "sighting--0d948e00-4c26-47d8-8933-3155b42b9e86", "sighting--15472691-e052-4ed6-9001-2d01a0802f22", "sighting--8987f3a2-37cd-48b4-8e5c-c98d930b58be", "sighting--7713bd3f-d222-4e88-b7c2-977618e0a4aa", "sighting--602a0ae4-0f61-48d8-915d-0a57fb185533", "sighting--d87e42ec-c850-4851-b60e-6922773d9a99", "sighting--9f9b22e1-8da0-4716-bf38-893ae4693f31", "sighting--3d0ee0e9-b04c-46e9-9579-337a15c3166b", "sighting--64e62f1e-ee06-4b8a-9b2d-3f3f0b5c1174", "sighting--e05712b6-49fc-45a9-8301-57b5066e167e", "sighting--95789b68-8bfd-423c-a86a-755610916c2f", "sighting--401d75bd-0d09-4311-a021-fa23d59644e1", "sighting--ec914f4f-cadb-49af-aea5-f9cefedf8ef6", "sighting--b90150f9-e67b-43e3-8a8c-40688103cd4a", "sighting--8bba5b63-f889-45b2-be4d-0f97422fd091", "sighting--ce9bc814-40b7-4fc5-bd7a-1433d83e5b42", "sighting--0932df92-a207-4a72-8b55-10d719640408", "sighting--c1fe8490-3c4e-4222-b098-94da6b6689fb", "sighting--c398be61-c64c-4811-91a1-3befd3d1676a", "sighting--52fbf77e-f071-4301-a2ab-ce511044d896", "sighting--5dcdb51c-5a44-4229-80b1-39c78d329fe5", "sighting--154fb893-79fc-47d1-968d-7cfe62eec297", "sighting--64b0782c-017a-4443-9a77-99c4b1fb9f3d", "sighting--c120394f-0cdc-4890-8a34-23e1002b3867", "sighting--1b7fe1da-457e-40ca-822e-4c9511adf11f", "sighting--3e34319c-bc98-4dd3-98ad-be61435379f5", "sighting--d1a8cf4b-2a83-495d-8855-81dbb794ad4d", "sighting--19e236f7-f808-42c5-ae8e-212180981df5", "sighting--12027e9f-ef92-43ee-81fb-b34df3c82651", "sighting--74c3da08-f951-4bff-8d6a-beb25fa80596", "sighting--8ea3dec1-d788-4db9-aedb-f957aabf8554", "sighting--3e06fce9-9ef5-478e-8e03-58cc93f9dbaa", "sighting--17ce61c0-f95d-4187-81b7-909152524f8d", "sighting--84ab9158-36b3-4283-aed2-67159c153299", "sighting--42ba116a-d259-4235-a4f4-ba16ca1e2c83", "sighting--2ebe1095-8d74-4aab-ac9c-3cf931311ad5", "sighting--be210b1b-e5a4-48ea-940e-1798978fede0", "sighting--b6ee9b11-c7c7-4ef4-8b25-fb8b1472bf5c", "sighting--c0baf7cf-1df1-42d7-8e87-51c307cb5d8a", "sighting--75e0480b-3f68-4ae0-bf79-8de90b69414d", "sighting--d6f00ad3-3569-4018-8571-0be6dbee095e", "sighting--b6d3fbd5-6cf6-4e5c-b819-4e1fa4acb754", "sighting--ecdbfd9a-6e35-4b41-b1c8-ce94c415f8b9", "sighting--fb0e8f98-2a5e-4ffc-8f5e-f63042740755", "sighting--baf796ff-5591-4a6c-80a0-0bc2e52ad775", "sighting--3c852086-b7f3-430d-9791-82d0ad3af720", "sighting--f91e9e38-33c6-4495-80dc-740a01aad040", "sighting--4a7362e6-459c-46ed-91f0-b10a62fdb001", "sighting--511896e7-e613-4cea-973c-b0e9677de604", "sighting--add0362b-a48f-4ac1-865e-e194081d47f3", "sighting--888b6a69-deb2-4802-9b5b-a993f02d2015", "sighting--e60a32c6-1742-4590-81ba-f88f7a819726", "sighting--e3372c8b-fce8-4ab4-a844-3ce73c373883", "sighting--bbd77f0e-8cde-43aa-8a7e-26d139812572", "sighting--aedca4f8-3e4f-49f6-8500-22a8dde0af3d", "sighting--99d1ffc0-86b7-4ab9-a448-d44afe8de9d4", "sighting--d8e54be0-efef-48a6-931f-7066ab076425", "sighting--722689cc-bde5-4c82-b1aa-591a6da5c5ef", "sighting--19d1b877-3ad7-4116-a420-0ac0b964b32e", "sighting--3e4f1b26-92b5-4f4a-b064-5ee00e432afc", "sighting--d217171b-1ca0-4768-bece-6327287a31e5", "sighting--239633c3-bcbb-4d27-94d8-08de7fb8fd7b", "sighting--ad2902f2-6a0f-4ee1-a686-e5a3ff74daf6", "sighting--efd57f04-3786-4388-8c60-f20718a9fd8d", "sighting--1c2bcc28-9c3b-405d-bc0d-24f87815655f", "sighting--bffc7561-1b03-464c-9a9f-229b73042093", "sighting--fa977db3-0937-441d-b964-fdc99b4094c7", "sighting--3fdae45c-e628-4040-9ca5-0407f0c7371f", "sighting--9af19834-3620-4c58-a10d-2f6dd732be81", "sighting--31bff109-53fe-475c-9a3b-1196ba09c457", "sighting--75449e5b-5896-4326-aec9-0895b8861c17", "sighting--308e0d23-2924-414f-8157-e06fc76aabf6", "sighting--da25a58d-aaf5-4db3-adbd-08097a29a528", "sighting--7e9245d6-652b-477b-a166-0788c68b6164", "sighting--08e22acd-e277-4436-84db-74a319e15efa", "sighting--fb48245a-802f-409b-8ceb-82251724b554", "sighting--60e8639f-a29e-43bc-a7c5-2df4f9749476", "sighting--2b79e9cb-76ec-4759-a5b1-3b98106c3d92", "sighting--661880ad-849a-4d72-8172-c958cb280724", "sighting--34a88873-d81e-4e89-877f-f87eb8c3fff7", "sighting--9a312202-ef15-4630-8bb4-e9b5258b0fc5", "sighting--0519a862-46dd-4e58-a3c1-aa06f4c6114f", "sighting--c5310137-e849-4f69-b878-6955d5420e42", "sighting--5ed8bb33-b0ba-459e-a224-a741322beff2", "sighting--bce73daf-24c2-4134-becc-5832ec104636", "sighting--981117e3-eff3-4a09-b067-7b9c9cf2716b", "sighting--18087611-79f7-4d31-97b5-d17daa5123a0", "sighting--d179ad33-a196-44a1-9985-2e4e6cd826ad", "sighting--1da2ebd3-7582-462d-b65b-d81c811f59e2", "sighting--a9c14616-268b-41e2-9759-dfc2e3a2b3ac", "sighting--2718c419-1d4b-46a5-abd6-18e59696481d", "sighting--5e199c43-424f-4bf8-95cd-ebb7ea24111f", "sighting--6b6113c0-4682-4fe3-92ab-0acc16a9405b", "sighting--144eec9e-cd48-4202-a8c8-f1037649f705", "sighting--32e0cb9c-0083-4b50-9ab3-ca807ba52575", "sighting--83d340c9-80c8-4785-8b71-3ae0c758ce8a", "sighting--e9dbd2f0-6189-46a4-a652-ad8aac399aca", "sighting--c478f076-2302-407e-ac6e-5a056195e6c9", "sighting--8d2efb0c-42d8-48c1-a21f-7137e5897817", "sighting--ff72ce30-a9c6-4719-b8e8-e6c5d0e6e192", "sighting--03369a60-53d2-4e67-9e56-b353bef5c436", "sighting--c9ceec61-4020-42f0-81ff-96bf9c6e8457", "sighting--684d6d31-6df9-4035-9c85-106eb3651671", "sighting--3950397c-ae26-4716-a6a4-f965a74916cd", "sighting--b7d0fa78-e5e0-4a15-96e6-9883dcd8de3a", "sighting--a96adca0-cc70-48b2-b72e-5214ba6988ae", "sighting--ef71f6ed-adba-46b0-aad9-85e991e21be0", "sighting--8ac9d8ee-29b3-4f5b-aaf1-538c4b8ca048", "sighting--0bc5466a-587f-41c1-841f-7102e14cc88b", "sighting--f182a003-45df-46ea-9996-89f1956be26e", "sighting--c3a22486-0e02-42b0-b36e-06b0e0a1193e", "sighting--d8e4022d-f733-466d-821e-1b6c17dc6363", "sighting--54d1dc98-965f-4f28-a7dc-874c396ac74f", "sighting--3f761e62-e2c8-4776-aaec-7c09c032eecf", "sighting--7d1cc171-39ac-4d8e-9b41-33ad9d3fb8d9", "sighting--e22e2661-963f-47bd-881d-646283598887", "sighting--3ecff070-2ed7-4920-b7e2-7c92386f612f", "sighting--ee44a736-d53f-4083-8f38-42e6af3a756a", "sighting--b4fd536f-1786-4ce4-9479-94f8492fa3b0", "sighting--3ab3ab84-3649-4f00-8aa5-b2632dc49438", "sighting--972ace24-abb1-4c1a-bdf0-42e87d1241e1", "sighting--818b3a6e-9e40-4522-a6e3-035d6f1ea46d", "sighting--faa12e67-c3c8-4c2c-a273-494955e97e6f", "sighting--4dd5bc8b-bb2b-4f58-ba90-7f7822510396", "sighting--316b7a32-f182-45d7-971e-546b821a128e", "sighting--fe4a0691-c55f-468f-ae71-dfe09d0516f1", "sighting--2aafa8ed-e8f8-407a-a411-ee4f3087447d", "sighting--1f34d4b3-89fb-425f-a395-1b1baaded302", "sighting--6dea5806-ad50-49b8-aecb-2bf481e4856b", "sighting--f8eb810a-ecef-46f7-9372-564c1ee07c4a", "sighting--2cd5e970-631c-4e4f-97ce-45e23863d5bd", "sighting--86567d92-d24a-44d8-86d2-d4eac1c2b392", "sighting--67087065-94c0-41b9-9798-70e91c538477", "sighting--6842dd48-9474-43c3-a049-c668fab534e0", "sighting--8aa1c7d8-4cdc-490d-bdfb-087c149150f9", "sighting--af8d616c-7eaf-4bd1-8228-89273f6d4153", "sighting--6d7d2c08-4aa0-472d-b51b-0c91c1fb23e0", "sighting--ae1c2c92-36d4-498f-af44-eb8e3754e36d", "sighting--5cb6a600-b7ca-488e-a3f7-4802f87c715a", "sighting--b621b9bf-1d68-428e-bf5e-29816f4034d4", "sighting--442f63a5-6011-4c6c-b7d1-2d0ded4a49e5", "sighting--1ae6e040-252c-4a82-852c-2ff91771be43", "sighting--27b8265f-e56c-4f76-b782-9fd750baf432", "sighting--0c586d2b-6794-4f01-89d7-be757f05cf2c", "sighting--5c7d2d7e-c9c4-47f5-baa4-1a5ecaf572b9", "sighting--eb59e8bb-2066-4a4e-ae1a-f22ccb9a455a", "sighting--838e5fc0-e218-4754-b1b5-5f28d7e3eaea", "sighting--854f8804-79c7-410b-a695-7a2996e1a1ae", "sighting--b21308f0-ec73-4837-b405-877cf6744824", "sighting--3807a9ff-9fb5-4d2a-a854-483b3800682f", "sighting--60bf6bff-11ef-49d2-bc29-ac6fb8cf0530", "sighting--7b0559c9-85c6-4132-9cd9-6ea52b6849ad", "sighting--6bfb3949-0808-4be6-8179-8ee311022dc3", "sighting--dab89b94-80c6-4665-81d6-12bfd6a123f2", "sighting--e6aa5639-3f43-4c1f-99a6-f02affef7617", "sighting--d208d05e-1cb6-49e8-8a65-47d3feed4970", "sighting--0bc3d694-272e-40f1-b0df-e5e5d4341542", "sighting--ac77ae7f-f770-450b-a7dc-2801624a7836", "sighting--e7ca4858-e623-4b4c-9abe-38c60a3df5de", "sighting--164f2f88-fca8-48a0-845c-a3cf47738110", "sighting--0149818c-9bf9-4a85-aeb2-037cc0e9bd82", "sighting--4b10d3db-a4ed-46ce-b587-2a7487d6f2fd", "sighting--c0f121f6-38ea-42ef-b4d7-2cb97dbac4f1", "sighting--c76fbff0-2d9f-4dae-bffd-7f55634197f3", "sighting--b7871445-0c8f-4e48-9ac1-2a5dca765e6e", "sighting--ac1ecc62-f2df-499d-b336-f8bbc095ee02", "sighting--dee63698-74fd-4f32-bb42-76583bc6d57e", "sighting--fef0e0a4-6350-4f67-beb6-ec2e4954c30e", "sighting--afb25377-0f73-4367-b9c4-40849e75b395", "sighting--86b1ec1f-d2b8-4618-81bc-5482b536683c", "sighting--a800e4e6-ab77-4404-89b6-f0151274227b", "sighting--693612ee-4c0e-4490-8fdd-59d6844b2bb1", "sighting--54d00215-9103-4275-a0ba-8c21a8697f61", "sighting--6766979a-52a2-4c3e-91d3-030b4cf14fb3", "sighting--11eb8a92-0cac-44b0-a3b3-d7fa40ccdb63", "sighting--39f6f6be-d815-4aaa-ac89-d5e6a4f13cd3", "sighting--d43ba754-afe5-4730-ad25-11e1075a0564", "sighting--06cc4ded-6298-4001-bc1d-9ff0a3170ae3", "sighting--807e1e61-6cb3-4b2f-806b-62694b2855e2", "sighting--45be3168-4966-4404-96bc-6e10df115528", "sighting--6744e868-e270-4a32-a776-2617ee677ab9", "sighting--696b07b9-675f-4d44-b69a-e997b03e7e82", "sighting--eb18b275-77d3-43c6-ae4b-0e66eaf300d8", "sighting--b1c106ed-612a-4534-b059-99900c51a211", "sighting--63570797-aa25-4655-bf92-edd3deca1796", "sighting--2724f3fe-0cdc-4431-a57b-fc0a582f61aa", "sighting--a5be0768-b556-4689-bf74-91e4376da924", "sighting--b27e33ce-f6e0-4d80-82f5-27d43ab8f8d9", "sighting--acba940e-0ad7-40da-8ab4-5dd3b0e3d773", "sighting--90fcf62f-4c5c-4642-84a5-e62746c23bf1", "sighting--7bebe315-062d-4417-9233-eb44c4182b51", "sighting--ad90f178-102a-47cd-9358-b32332543ae0", "sighting--01bbb611-6856-45b5-9e6e-340890108cc9", "sighting--2a4d5a6b-c62a-47f8-8c84-13fd70ff04ed", "sighting--23a72e0a-32a5-4c14-bb09-8dc9395da7ec", "sighting--c3dd7d81-4e25-4fd2-9b7e-bdf5f64151e8", "sighting--2833a487-e578-4598-a1d7-c80a66d2cc10", "sighting--af36d127-0e42-4bcc-a016-fa83a532ff7c", "sighting--009e51bc-c052-443f-9202-dee795835b36", "sighting--294a1c7b-acca-4fa6-9343-46cced32e15f", "sighting--7d5223b2-ac81-411f-b050-626fe252231a", "sighting--a7b1bc1e-5b0b-4d50-98c6-3eca46659436", "sighting--5558d84f-f983-46dc-b351-86f79b1e44e1", "sighting--ba8e7124-027a-487d-b566-c8ed7b0b300c", "sighting--086538c2-4ca0-486c-8eb3-1977ff365dd9", "sighting--f2c50215-6b53-4ed4-b27f-8736564d9732", "sighting--e903c015-78e3-4384-8f63-e8a7895157f7", "sighting--086c1f51-3794-42ae-9bea-07583f1ba60c", "sighting--c9bfc8ba-efca-4dbd-8515-8954c5f4c54c", "sighting--87913674-f9ca-4964-b385-acd77d0b4e10", "sighting--d0face3d-1cbd-4772-a99a-0caaa004fc93", "sighting--5e5dde83-2121-4512-9861-9a8a035e4ad7", "sighting--01188440-17ad-407f-b399-6d21b24d5ec8", "sighting--2adb0a5a-e755-442e-9d44-f33b713f9d25", "sighting--de2d857e-dd95-446c-bd27-4de1350e2472", "sighting--e938cff9-93d8-4d32-b617-b84e32059045", "sighting--1e71979f-adcf-4f7f-9d7e-be3435346d20", "sighting--07253310-53fb-47c5-b20a-e2a24c5b8996", "sighting--8211ba99-b339-40bc-a30d-6dbb40a3084f", "sighting--0bc1e7f6-b3a0-4fc7-9c91-f04e8e811b13", "sighting--9fbc4f24-66ba-4f22-ba61-aba842754fa3", "sighting--973a0aab-b36b-4c6d-816c-3228636ed44c", "sighting--160f1523-cab4-4175-967c-bcb751c9198b", "sighting--b3077079-794f-4e53-a44c-723b345681b8", "sighting--32ba4afa-907b-4bf4-8818-0bd0b01477ae", "sighting--be75380d-cfe3-4db1-8a5b-012518db0329", "sighting--7f93473b-933b-426f-af22-c920edbcdac1", "sighting--eaec7031-3f8b-40dd-a917-255c907083c8", "sighting--5f750f65-4f31-4c1e-bcbd-94dea9b3b39b", "sighting--d6b2fa18-5ebc-46fe-8205-e6ca10f0e00d", "sighting--47e4ed73-2ba9-4c79-8543-44181c9801b7", "sighting--db301aae-5081-47b3-b877-fd612bef344c", "sighting--c4dbca40-dff1-4948-91c6-c89926c87ffc", "sighting--d3488859-f2a5-4407-86d3-aec690bc5aa9", "sighting--745cc61f-9df9-42ae-a212-f314c0b723a4", "sighting--a4632a3b-32f9-4c14-8aae-cf52deb03a2a", "sighting--12531ffb-83b7-4008-8dbf-cb9c4cae7642", "sighting--f3618dc7-1218-4389-8d52-0a30546c1eb2", "sighting--2d55fc70-c440-443c-80d6-e099dd4a2031", "sighting--e1aa9e3d-f943-4c95-af27-44e77a13815d", "sighting--b5e6aa41-117a-4acd-b1b1-202daee3c25c", "sighting--ad7fe7c9-8f0c-49d0-a59a-640294856fad", "sighting--d0361a43-b045-400c-a236-27b2ca4b0286", "sighting--39736603-b087-4219-97e1-44e92aa87357", "sighting--0a3aa0c4-c278-4008-9c94-b9981bd1593d", "sighting--2c08e2f1-968f-4c67-b737-15a7f2d477a9", "sighting--d377c4b2-02ff-4b1f-b079-92182f66207d", "sighting--f709fb0e-7374-4899-8cef-7278361d600a", "sighting--1aeb2333-448f-4d2e-a6ef-8e05993a6396", "sighting--ad7e8380-a31b-44c9-bf5d-1c0aa25bf50c", "sighting--c94a2400-655b-41e9-88c6-9330c94c0fe6", "sighting--2344aab3-3c60-4748-8fd1-d028a64530ba", "sighting--8c1f0772-aa0b-409e-8b8f-e9b1d9aeda65", "sighting--879e617e-e07c-4b99-9e14-4c372ae21906", "sighting--9d2a5886-b103-47f1-8ba6-fa632edd1cd7", "sighting--303b1552-7b9f-4af2-9530-30db13dbf074", "sighting--294acbea-dd93-46a9-9c3d-9f8a35f585cc", "sighting--d94216d8-ae34-4629-91a6-b24b87460ea0", "sighting--d0b7f5f6-e173-48c8-8f92-d2df84bcf1a2", "sighting--fb0e602a-bd6d-4475-a7ad-85894f066606", "sighting--26d388c4-5058-494d-b206-c70a5043bfc5", "sighting--66552954-22a6-4714-971c-e61bc77b17e8", "sighting--2c0d6619-01bf-4dd0-8135-c157495d844b", "sighting--cae4d68b-e5b2-43ff-a6f5-d17a2752b75e", "sighting--c8f29220-6a40-4547-b33d-c18b412a6e05", "sighting--eeef6160-ec7c-465d-b3e8-63ca602b5c9f", "sighting--814e6a7b-2461-4eae-a084-f03cf5b18bbe", "sighting--80a65319-a76f-42d1-8649-c9dbe36af52e", "sighting--e2da0514-d19c-47c0-b66f-79a21615e38b", "sighting--a85a67b0-228b-4830-8299-1da36e4f4447", "sighting--0cdeed2a-c3a2-47fa-b145-cdb0f7e4d4a5", "sighting--b7100b0c-edc2-4963-ad46-8398a53ba0d7", "sighting--74133fe4-a86a-4ed0-bd6d-fc89bc0c12f1", "sighting--bc4ef121-ae38-4cfd-9fb6-96404bddb3db", "sighting--0dc8e7b7-389a-4036-bc2c-8289de2e8287", "sighting--1a88d608-0fad-4550-ac7b-fe1f4f9c78a2", "sighting--31b85fd1-5ac8-4041-9b05-126b2df5f8db", "sighting--ebd216eb-9fb7-4b20-ba75-049d218b0f7d", "sighting--236c2a1d-9e56-45bf-9356-c3fe6081627a", "sighting--15052be8-95f3-4554-8875-e984fa3b748a", "sighting--a9363bf7-1fcf-471f-94e3-8c66da5539b7", "sighting--b7e545de-bbdf-47ae-a460-2ce89b58582b", "sighting--0c1e5de9-d7f8-4065-90be-aadbe5176148", "sighting--893b680d-d856-4760-89eb-7267a99ff057", "sighting--508d8c92-470c-41ff-8cdc-a0c707ea3610", "sighting--2ad8eb72-0bd5-411a-9276-ca69a6e198e1", "sighting--7d3c42e8-99c8-4524-a012-ed22322116fe", "sighting--cc92f70c-8b8a-4c6c-899f-21677f5046f4", "sighting--dfe415c3-ccb4-42ba-b140-5f999fde15ef", "sighting--cf1a5d26-56e8-49b0-a971-f3f8d9af43bf", "sighting--261994c1-f5fc-431d-a877-e6158c2b9565", "sighting--6fd67a87-2892-4549-8e0a-1eaff77f72bc", "sighting--99d9ac4f-bbc4-4103-befd-ee298af688a7", "sighting--fbdba4ea-b11c-46a2-98a8-6ed0efb56022", "sighting--f271c2bb-a1fe-448d-9a06-c3de2353ef72", "sighting--e7e7a025-001c-46b6-90d3-5ea6ffd5fb18", "sighting--65984e49-75b9-44d0-8ec2-1a621f769f1b", "sighting--f28914c0-505e-4d87-91c3-72c6b88627c1", "sighting--289677d4-9f31-4b00-a749-73f357bd55b0", "sighting--a9ff96be-430a-424e-82be-9ffdbfae41b5", "sighting--de4981f5-4755-4777-847f-001961c7f870", "sighting--90a6953f-beb3-4919-adb8-d5f33bfc3c2f", "sighting--8207cd12-a249-4abb-a983-0ec592cbf6fe", "sighting--7e9e4cc7-426b-4d19-807f-272164e3cc8e", "sighting--64b8149b-daeb-44d1-bd32-08a82e6fec13", "sighting--584e7d21-c3fa-40df-b829-551f852c73ce", "sighting--51bf65fa-7883-409b-9f4f-e3331579c297", "sighting--598c7ee0-60f8-4225-b39f-088fd72ad9a3", "sighting--b6894f20-e252-44c2-ae88-97ed3e92ce87", "sighting--bb81362d-f389-49ca-a8c4-e4bb90c1c00d", "sighting--20ddbfcb-c445-42d6-aa65-b6b3d73f33fc", "sighting--2203f9ad-2159-4805-be05-e7d25ce6b07d", "sighting--053b549d-3935-443b-8700-ffd1dd21db43", "sighting--f3f6a3d5-1311-4fed-9754-f6e2ec18f5de", "sighting--272d9a83-6b17-424a-8454-e8feb65b2209", "sighting--6389246e-0282-4894-b46d-94e25c0a1d22", "sighting--39a0fe01-4c53-4366-b489-af53b9be3c41", "sighting--559cf4c3-dbca-4896-8895-b73c13de4f66", "sighting--8f800431-cb40-44bb-b2b9-4f34d45b7fe3", "sighting--b1dc12c7-b45c-4e2a-885d-120fd6000b5b", "sighting--edab840c-8e89-4fbe-b9a1-211bb75289e2", "sighting--8bbd63d8-8a94-43b6-99b8-d3a9c3bc97dd", "sighting--8f4d93e7-06ca-4208-8f96-e0c253161719", "sighting--1dee229a-76f8-46f4-8849-39b765525739", "sighting--40cf1595-2381-41a5-8093-700e388320f5", "sighting--4538d7b5-79a0-4d1d-aa7d-0f6cc5fe24a0", "sighting--19e9b904-2038-474b-9fa2-f7748ff57e01", "sighting--c1e35ca0-1c9c-4374-b006-bc35d3476933", "sighting--96dc93a7-e3ad-4aa2-b7c1-ec2bd7245faf", "sighting--567366a6-45e9-46ea-a7c2-ccfe42043edf", "sighting--890fe6f7-32e6-47a0-b79d-ec6eceff4e25", "sighting--3a6e8181-757f-49ad-89d9-ffd7a574ed37", "sighting--f1083e0f-9f20-4bfb-ba5d-1a240d09b92d", "sighting--efcc30a6-b653-4bbd-a626-f4528172bb74", "sighting--9c7f9565-49e4-4df9-a06e-697afc4c5ce8", "sighting--057dfca8-e889-4f99-8933-776659db07ca", "sighting--fe61c09a-ca04-403f-a6c8-9294e329cd14", "sighting--d48e7127-c870-4ad0-b112-e44ad400b7ab", "sighting--48269ac6-294f-48cb-bc27-48de468ed5ae", "sighting--d40f52ea-d072-4b83-b01f-0efd48b66a25", "sighting--bff8d89c-60c5-4e1b-9e1c-4abb939532db", "sighting--88581f1c-7dcf-4b5c-8b21-d34d4ee45526", "sighting--d93c725d-5c76-4b39-bd66-ee02fc6eaa30", "sighting--21526566-5c16-47c1-9669-813f079fe235", "sighting--9fee62d0-27ef-4b84-a5a1-2d1142b1b55b", "sighting--6ba2485f-7c0d-4912-b95d-a38498d29eeb", "sighting--473a82bd-236d-419a-9620-c3b9b9b60e2e", "sighting--3b1578d3-e161-453f-9c3d-98689db4b761", "sighting--c09f8965-1828-453c-a9b5-51074abed7d1", "sighting--ff933faa-0655-4e22-8a3e-0ad2ac499bda", "sighting--8587347d-a931-480d-927c-200b7c175ab3", "sighting--b5ea9dea-e0fa-4aaf-9e92-0c66af8e093e", "sighting--f32685e4-6127-4125-ba66-70d994f7495d", "sighting--8bec5dae-5427-4c1a-bbe5-4d27ac611bd5", "sighting--4772ef86-68bf-4934-a766-40542bb39179", "sighting--d010f03e-677f-47a6-b37c-26acf6e441bb", "sighting--a26d56f5-9401-4e80-91d5-f940d75db86a", "sighting--45815df8-22ff-4041-b492-642886e65955", "sighting--6d7cb3ea-8a1c-4746-bc8b-8f6cf4a37868", "sighting--c2417f3d-1888-441b-85ae-8b996ec31270", "sighting--e085d46e-7ded-4028-8278-ed68515ff1d1", "sighting--42c73ea0-7f8f-413e-bdd5-c789c79c2745", "sighting--b350e5d6-1f50-4101-b0df-2888cac85bd3", "sighting--5da92c41-7eba-4a8b-ba4d-e5598b9a806e", "sighting--bb6881de-c034-416a-af8d-b680c85f1ae9", "sighting--244c6748-3c60-459f-b5f7-633e1bdd7bc6", "sighting--6d5d051c-0127-45ff-ba81-251cf199ed50", "sighting--a501c282-5cd5-4be7-a267-ba789a4c4c23", "sighting--b78b5e20-60ee-411d-84af-ba3d283c5abe", "sighting--48dbd1cd-53f6-4ae0-b017-f4c47914be8d", "sighting--64f76555-fa4a-44eb-9328-f636e834bc37", "sighting--4355a9b6-7f6f-4ace-a808-d55e33ebff3b", "sighting--a9f303ea-a0bc-45c5-9e0b-f5ea1d75b1ab", "sighting--0d76618c-90f1-4398-92a2-b020b9dbd3be", "sighting--2039b6b8-8238-4976-b2ca-b1bfe2890882", "sighting--50c4bd51-767d-46ac-bb8c-348c052f8398", "sighting--d309f834-ff5b-4a13-a3e7-d153eae7a9fa", "sighting--64e15774-3b2e-434e-8b00-8a45237cb22e", "sighting--21e4f586-9d4f-4745-8f23-6541cb487abc", "sighting--144ccca4-1d65-4a62-a4bc-de4c771b5ae7", "sighting--86a784f9-358f-49aa-9f86-4e9ead0df22b", "sighting--ad51aa4b-b00b-4e72-8310-1c449cc48043", "sighting--71646a2f-9658-423b-bc1d-2795863796ff", "sighting--ffd9fffd-8813-4e83-9cee-e51524f0d2ac", "sighting--091a64da-667d-4904-bf58-820d122bee17", "sighting--34faf748-389d-409a-a8cc-c1ef51cf8c86", "sighting--19dace8a-b7d6-40e5-b479-b98f3146992f", "sighting--1d0bff1f-97d4-40da-949d-04bc2420f049", "sighting--b98ea61e-3822-462d-96ca-ee4ef1e461f4", "sighting--a2820354-2158-4387-8248-cada764fede1", "sighting--fee3dc90-1675-4fe9-83cc-22301e36756b", "sighting--aeb78f5e-8955-49ee-9db9-53dcc7b0e1c5", "sighting--b38bc22b-09f6-40cd-b91c-dcca2bf18813", "sighting--35898025-1920-46fc-ba68-a25500e5b72b", "sighting--07b79421-e35e-414d-ae32-5bb821ebb6f3", "sighting--b5b488c9-0f07-4e78-b141-53381bc7c545", "sighting--4e35128c-2f36-40fd-b891-a446c9600526", "sighting--f7ce1895-5e12-4915-b71f-dedce7371776", "sighting--23a2f720-fa44-4330-8e0e-d25973f1ffd6", "sighting--ed026a39-c189-4802-bf2a-8b7a203f7031", "sighting--faf10fe9-00fe-455c-b877-81a390ac4f7a", "sighting--82bb7af0-2fb0-498e-83f1-f4afad79e6d7", "sighting--073265e7-9ab5-4e2a-823d-b46a4e464f9b", "sighting--b675565b-9daa-499e-b09a-f362f6409c37", "sighting--7beacec2-18e5-4ea5-a427-5174513f2bde", "sighting--f63ee303-2915-4632-9b74-b6adb9ebc851", "sighting--ea3984a4-fd9f-4a17-86e3-c57e89ad2f87", "sighting--253633be-8052-476a-9d6f-b4b0ab41be20", "sighting--3cab0952-59f0-43c3-803c-5c92b36abbe0", "sighting--b7bb495e-3960-4dce-83ca-a54aaa10c83e", "sighting--6c1ca847-cd2b-49ff-903e-c638ab722ce6", "sighting--cca022d1-ef35-41b2-83fc-6b4827f9b75b", "sighting--b522294d-652e-452c-b5d3-07757cdf7f3c", "sighting--85829ae3-02b0-4e07-a63b-9ccc98c7d0b7", "sighting--06bd3004-e6fa-4495-950d-16b63ea15d6f", "sighting--d181e64d-0ba5-4213-9df7-5cae8cabaa61", "sighting--5c4e141b-4429-4e9e-8ec8-6aacd484be78", "sighting--194f806b-6a0f-4cdd-8bfd-f3860b1fbb15", "sighting--1e6f4e2c-7723-4d20-9605-024086e12d05", "sighting--ccc8d7cc-4b6d-4624-b53b-423daf2cd964", "sighting--78aa1850-cca2-4e7d-a3a8-5aee8d102b6e", "sighting--7785158d-93b9-49f3-bc4d-4daa586872fd", "sighting--505b8513-53ac-43cf-ab3c-0e490e023471", "sighting--c81748a6-6616-463a-b67e-1ec99cdbba94", "sighting--8770f94e-4e9b-4ddc-bbe8-11bfd2504946", "sighting--723a5d6d-49bf-4b39-9b48-89e5435bf7a2", "sighting--042868c6-1f43-4e24-afbd-1c8278e0e16d", "sighting--d2f44f61-843a-4392-b352-32a09b065b77", "sighting--6483325f-2d08-49a5-9f71-f221ddb85672", "sighting--0fac75bd-a290-4082-8a09-557b93595da3", "sighting--9853f4ef-5036-4ed3-839f-ba725dfa76d2", "sighting--61938b0c-a379-43e1-b20a-92287b982baf", "sighting--22182509-4002-42a7-97e0-f754fcb0b240", "sighting--20989c48-0ce7-4ccc-abfa-3bcebb1e4233", "sighting--ce023edd-9c1e-4494-95ec-cd5d3b39ad34", "sighting--71bc1851-5ed3-4fef-a477-4cbade409541", "sighting--05ea1b59-200e-43e2-82bc-2c07a193b6ed", "sighting--aa75ca43-91a4-4deb-afbc-1e7ae4cb9402", "sighting--420710c1-aef5-4b5a-85cd-f3c6ed8d3394", "sighting--894286d2-257d-4dab-a0bb-9590ae9767f6", "sighting--31fe5c60-69de-4f3a-bb3f-9811b4a620eb", "sighting--602a15a4-b542-41c6-b653-ee8db0dd9ef3", "sighting--850c106e-d57d-439c-b52d-c9cdab48126a", "sighting--3180f824-92ec-47af-9ef9-b78f6d08aac0", "sighting--e54ca6ed-78c1-477e-8a31-6b2f8324c8c5", "sighting--f0f4d2f2-60d5-437b-971f-19eed49bdf3b", "sighting--8b1b7408-4e8a-4e08-82b2-c233c6805548", "sighting--3ca0eaa5-69b7-41c9-8ac2-0c2098b2ec8b", "sighting--1ee40e4e-1051-49b8-8589-087314aa35bb", "sighting--fe25c49e-5384-4286-ac93-e211930060a3", "sighting--f31a24e0-a73d-46d8-911d-73448f6e1bc5", "sighting--8c5271b3-6db2-4fad-99da-8417589bc0e7", "sighting--9dd8db55-9c49-4aa6-b6ce-95d91142fc28", "sighting--cf8eacb5-923b-4adb-ad59-145f68b51fdf", "sighting--4d330b79-0030-4801-8d2b-3684503accf9", "sighting--408e27f5-3a7e-4e6a-a4ca-fed7e967a629", "sighting--627693bf-649b-445f-a37f-32bed8632e03", "sighting--f690a421-bd7f-4fce-82b8-62e18cc3fe34", "sighting--c81851fe-4222-4476-989d-1082de7d37ed", "sighting--54556c4a-8384-4264-814f-627f921211fd", "sighting--625dd88d-b56c-4d28-b200-e4f6b19ba470", "sighting--ba97a5f7-b3eb-4cf3-853e-b59e059c7ef8", "sighting--59717b83-476c-4e1f-a12f-a4f3df0034e1", "sighting--28655f4b-dd23-4e95-8381-18365989da12", "sighting--f596d303-88df-4bf5-9823-9ed919e352d7", "sighting--3a8e7a16-664b-4e21-ac65-9613a0a8def8", "sighting--80d2af84-13d8-448c-ac43-53200167a1f7", "sighting--3fb22321-bfe8-4814-b1c9-24de33a8a952", "sighting--947e284a-d7f9-48d1-b216-4da0cd7f5d62", "sighting--6946ee7e-8ab2-4b5f-a182-332fd68dc63a", "sighting--24d53546-5b86-4d4f-a4b5-e16b26769e7e", "sighting--73c275e9-78ed-4df3-b230-e5cc5150e22f", "sighting--d01d33dd-0f1f-4a8f-997a-b51621fff13d", "sighting--7c6e02d3-40c3-44ee-9b51-8ec46c3fdea2", "sighting--769c8f83-98fe-42b3-85d8-f7e29d485fdd", "sighting--74c4ea08-ae5f-42ee-b79f-f4b0e08e6da7", "sighting--91004338-398d-4371-9174-514b65b76aed", "sighting--33d29a85-7da7-421f-a8b5-8c1b54227037", "sighting--08c5dc80-7a16-4215-9758-9db587b4502e", "sighting--cdca2428-b385-4328-9928-451ac80a268a", "sighting--841b292c-07fb-40b8-8389-82aca13402c3", "sighting--39973075-2375-47a7-b500-4e0de814b2b3", "sighting--dd735e68-d7f9-4856-9492-92a4a3d1ad48", "sighting--dbb033e0-41b9-4e70-a0fd-edb10cd806a9", "sighting--225e32b6-0cf6-468d-a8af-64b656cc4036", "sighting--285ebd59-eedf-4f0b-8376-7d9d2a4b10c5", "sighting--f0ff7554-bbdb-4eac-8135-a729843a3e29", "sighting--bfe7f751-4252-498d-8d14-3a8ddde98e34", "sighting--d831f253-68b7-4532-8eae-02f2d71914f2", "sighting--fbfdae97-2865-4942-baf3-c87551cd9dcd", "sighting--917bfd4b-10ff-4701-858f-e1f3c9117b83", "sighting--e09b83fa-0a82-4a48-bf12-c7a86c9164dd", "sighting--45503986-2ac9-4f86-bffc-4ced7fbed0f1", "sighting--d389ca5c-7c8a-4775-bb71-5e287744f06a", "sighting--172bb7ca-949d-47c2-a1c5-4e63ad536a05", "sighting--f65159d6-30bd-4ec8-889a-b3e3d1630583", "sighting--bb80b358-3442-4aa2-a65c-726f62ccf3ef", "sighting--fc14afb4-4f9c-49de-b560-5f37488b905e", "sighting--897219d0-604c-480d-a8de-89ae2c20921c", "sighting--7c5eeb61-754e-4ab5-be90-9e101ce4cc1b", "sighting--097c3053-9ecc-45a2-8b5b-c05029c52824", "sighting--646cc8df-2404-402a-8170-6b70044da56d", "sighting--54a2189a-27d8-414f-9cc9-89891dc92791", "sighting--7c944848-ae43-45af-ac29-1ad03721131d", "sighting--a96d1e5e-2b0a-4443-80b1-54361342274a"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-14T11:00:02.008Z", "modified": "2026-06-14T11:00:02.008Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}